last executing test programs:

15m25.626304144s ago: executing program 2 (id=48):
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$COMEDI_INSNLIST(r1, 0x8010640b, &(0x7f0000000180)={0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10)
ioctl$SNDCTL_DSP_POST(r2, 0x5008, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, &(0x7f0000000200))
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000140)=0x7ef)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000024000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

15m24.494055169s ago: executing program 2 (id=52):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000000}, 0x48)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c000680050001000000000047000280050001000100000006000340000000"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000000))
prctl$PR_SET_SECCOMP(0x41, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)

15m12.472894933s ago: executing program 2 (id=70):
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x353}], 0x2}}], 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

15m12.206548233s ago: executing program 2 (id=72):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = dup3(r1, r0, 0x0)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x3c00, 0x2, 0xbfdffffc}, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0xe, 0x0, 0x6, 0x8200004400000000, 0x7, 0x344}, 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

15m10.921091914s ago: executing program 2 (id=79):
syz_usb_connect(0x4, 0x586, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0xef, 0x1b, 0xd0, 0x20, 0x6cd, 0x10b, 0xbf18, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x574, 0x3, 0xb, 0xe, 0xc0, 0x0, [{{0x9, 0x4, 0x88, 0x5, 0xc, 0x7a, 0x57, 0x8e, 0xa, [@uac_as={[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xfffb, 0x100, 0x7, "49891d96ca0180"}]}], [{{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x3, 0x0, 0x1}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x0, 0x7, 0x6, [@generic={0xea, 0x22, "0f16a1fbec2664822539222c915843319257fe1009de4c85a6ea8b2a0a52c3ef80c25e89d4a2bf8e7899663bdd171d8b3c10791b0633228cfff4353dbc26a3288343abe7df6d1e5162da53a0af9b353d3addafa726dab274b88189735edb7e2963b3cb9d27ef0f776d6b6674f44540797c6e6815d2c46929ae2bfaefa4ed8d561a94e5e94a2c739ac21f1b34a5bc822a1c554353f87218ad7075d21ec3067862aee1f71660747b48459efd3df27050532c8e0a540547dadb17dbf44741e7a675aefb1a224a3a231a1630e7f67dd97789f3f022f012afa0de4aee97974bfa6a61e15e38c28e397836"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x7}]}}, {{0x9, 0x5, 0xc, 0x3, 0x3ff, 0x4, 0x79, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x18}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x4}]}}, {{0x9, 0x5, 0x80, 0x2, 0x400, 0x3, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x8001}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x6}]}}, {{0x9, 0x5, 0x6, 0x3, 0x200, 0x10, 0x4, 0xc}}, {{0x9, 0x5, 0x8, 0x2, 0x3ff, 0x9, 0x40, 0xf7, [@generic={0x1c, 0x5, "02e7830d68f15aafc96629a04f59d7a84d3ee4a88ce414026254"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x7, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6e, 0x8}]}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0xf8, 0x6, 0x4}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x86, 0x5, 0x1d}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x3, 0x2, 0x1, [@generic={0x92, 0x30, "6fbb7a51dbbbf81657150f845e552861e22ea07f6d758eb3c7cac6742eeacd92ac3d679c6dbe12f9cebb4de9f88bef99d67ea677ff78bed61823651364df227e866780364bedaf1bbeefc0292ce8233d5ca9ba13e28b58f16347c780b87568ebccf9d77c2c04d850bceacdc777d79f726d1ddd21afecc5a0a245887daa99bc5d5d359bb4bd46c718057c9852213500bf"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x8, 0x9, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x3c}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xaa, 0x57b5}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x0, 0xf, 0xc6, [@generic={0x7e, 0x8, "94df64ff1706887cbe40e3aa4248c839d5f9aeffa20da460e8697b2da463b36497e2ba8b9fb304d2628af575c6b6ed1923da7da0b661f5952580316cfd7f7b604922cced8a7338233030c9e15ef790c4d12e9412ffe1b9b7ff1de829bef721c1155c588d95b738efab5ee96b444ab8244f72f781f6b633295bb1762c"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x1}]}}]}}, {{0x9, 0x4, 0xa5, 0xe, 0xe, 0xff, 0xff, 0xff, 0x3d, [], [{{0x9, 0x5, 0x9, 0xc, 0x10, 0x0, 0x7, 0x2}}, {{0x9, 0x5, 0xb, 0x2, 0x40, 0x6, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6b, 0x100}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0xd, 0x0, 0x81, [@generic={0xb5, 0x11, "811e76bbf52bf1e4738cec452c7a2fa15db73aacf1d4d3bbc8f3b5e22982ba5c0b93bb16fe81d306a6206b85ba6fc357b85c21ec9c330f112c523a408a2d331dd0961ac370fa2812dc652c2520113de4ddf26aea9280e67bba97d956413296188a53fba48caed4d4edabbb6ca2feb04648b72f1e50ea34796782b46417f3f74cabd39c9166015dd7f9009f9558d83e1b8b768e38c896ccbfe24333347edf4f8263d1554134e9878800250517bb9b1635ed3aab"}]}}, {{0x9, 0x5, 0x80, 0xe75ce1b4a7b7573b, 0x410, 0x66, 0x3, 0x4}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0xc8, 0x8, 0xc}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0x5, 0x4}}, {{0x9, 0x5, 0xf, 0x8, 0x20, 0x84, 0xb2, 0x3, [@generic={0x6, 0x21, "9813db83"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x5, 0x8, 0x6f}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x81, 0x37, 0x40}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x1, 0x5, 0x7}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x3, 0x5, 0x10}}, {{0x9, 0x5, 0xb, 0x1, 0x10, 0x0, 0x83, 0x7}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x9, 0x37, 0xa3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x8}]}}, {{0x9, 0x5, 0x5, 0x10, 0x0, 0x8, 0x4, 0x87, [@generic={0x4f, 0x0, "12625db747d36df9367bd322abca3592b0bf0c5d56287ac9ff188bf7a81c686b2dec7b00d6d08c5d2b32e2239001094ff764416bf515eef42d01ac4660bf13f834354ee2f9dc1be051e5aaceb6"}]}}]}}, {{0x9, 0x4, 0xd1, 0x3, 0x6, 0xff, 0x6, 0x3, 0x8, [@hid_hid={0x9, 0x21, 0x3, 0xe5, 0x1, {0x22, 0x40}}], [{{0x9, 0x5, 0x0, 0x3, 0x200, 0xb, 0x2, 0x2}}, {{0x9, 0x5, 0x4, 0x0, 0x230, 0x7, 0xa5, 0x6}}, {{0x9, 0x5, 0xa, 0xc, 0x20, 0xc7, 0xaa, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x80}, @generic={0x2c, 0xe, "a864c9346a764d18e4cfaf20bdfe38a36888ed2e417ca6263ef3b5d8f5b0af7420c753777f86a84b4813"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0xff, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0xea76}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0xa, 0x3, 0xec, [@generic={0x2, 0xa}]}}, {{0x9, 0x5, 0x8, 0xc, 0x40, 0x4, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2f, 0x80}, @generic={0x67, 0x11, "1dc2668e9772498a23d3507d7dc5b540af74f7c459727f8aaa5e2dde7fa9ad33e0ab6d55246a7f0a7576b510cacf431094656dbfcf1f616c38359061b2e5ceb8ea0a5a5f52f480f18b7d76132ab6408d60dacd21c8fe1e78f279d9e8efcfc165c2e1d8efcc"}]}}]}}]}}]}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

15m10.157159471s ago: executing program 2 (id=81):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000000}, 0x48)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c000680050001000000000047000280050001000100000006000340000000"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000000))
prctl$PR_SET_SECCOMP(0x41, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)

14m59.251033876s ago: executing program 32 (id=68):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000000}, 0x48)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c000680050001000000000047000280050001000100000006000340000000"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000000))
prctl$PR_SET_SECCOMP(0x41, 0x2, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)

14m54.047274624s ago: executing program 33 (id=81):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000000}, 0x48)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c000680050001000000000047000280050001000100000006000340000000"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000000))
prctl$PR_SET_SECCOMP(0x41, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)

12m14.752638145s ago: executing program 5 (id=500):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x110}}, 0x0)

12m14.75217783s ago: executing program 5 (id=501):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000000000101480000000c0a01060000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000"], 0xf8}}, 0x0)

12m14.733423275s ago: executing program 5 (id=502):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x20, 0x4, 0x0, 0x20, 0x80, 0xc}, {@in6=@mcast1, 0x0, 0x33}, @in=@multicast2, {0x3ff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x40}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x24040021}, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r9}, 0x18)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r6, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0)

12m12.880251398s ago: executing program 5 (id=508):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x80000, 0x3)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)

12m11.771731224s ago: executing program 5 (id=510):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, 0x0, 0x0)

12m11.680855834s ago: executing program 5 (id=511):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
inotify_init1(0x80000)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000014000180"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)

12m10.396035296s ago: executing program 0 (id=514):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x4060019}, 0x20000841)

12m10.215708901s ago: executing program 0 (id=515):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)

12m9.964972359s ago: executing program 0 (id=516):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', <r3=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24)
r4 = socket$netlink(0x10, 0x3, 0x400000000000004)
syz_io_uring_setup(0xd3, 0x0, 0x0, 0x0)
writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)}], 0x1)

12m9.378441571s ago: executing program 0 (id=517):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0xc, 0xc, 0x1, 0x0, [{@remote}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}}}}}, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="400063bc560289b3d15d8c96cd9c000400000000", @ANYRES32=0x0, @ANYBLOB="0003000001800000200012800800010067726500140002800500080003000000050009008f000000"], 0x40}, 0x1, 0x0, 0x0, 0x4044090}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtaction={0x70, 0x13, 0x53b, 0x1, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x12, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x73}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x989}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xff}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r4, 0x0, 0xa0028000}, 0x38)
ppoll(&(0x7f0000000600)=[{0xffffffffffffffff, 0x1400}], 0x1, 0x0, 0x0, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_DISALLOCATE(r5, 0x5608)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, &(0x7f0000008600)=0x1, 0x4)
recvmmsg(r6, &(0x7f000000a1c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8020, 0x0)

12m7.382693934s ago: executing program 0 (id=523):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0xc}}], 0xc, 0x4060019}, 0x20000841)

12m7.208708855s ago: executing program 0 (id=524):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
inotify_init1(0x80000)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000014000180"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)

12m5.072804056s ago: executing program 4 (id=529):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x3c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

12m4.993465603s ago: executing program 4 (id=530):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x20, 0x4, 0x0, 0x20, 0x80, 0xc}, {@in6=@mcast1, 0x0, 0x33}, @in=@multicast2, {0x3ff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x40}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x24040021}, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000180)={0x8c30, 0x1, [{0xb}]})
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r9}, 0x18)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r6, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0)

12m3.637704877s ago: executing program 4 (id=535):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$COMEDI_INSNLIST(r1, 0x8010640b, &(0x7f0000000180)={0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, &(0x7f0000000200))
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000140)=0x7ef)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000024000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

12m0.34451309s ago: executing program 4 (id=538):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket(0x10, 0x80002, 0x4)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="400063bc560289b3d15d8c96cd9c000400000000", @ANYRES32=0x0, @ANYBLOB="0003000001800000200012800800010067726500140002800500080003000000050009008f000000"], 0x40}, 0x1, 0x0, 0x0, 0x4044090}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtaction={0x70, 0x13, 0x53b, 0x1, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x12, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x73}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x989}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xff}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r5, 0x0, 0xa0028000}, 0x38)
ppoll(&(0x7f0000000600)=[{0xffffffffffffffff, 0x1400}], 0x1, 0x0, 0x0, 0x0)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_DISALLOCATE(r6, 0x5608)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTLQI(r7, 0x0, 0x3, &(0x7f0000008600)=0x1, 0x4)
recvmmsg(r7, &(0x7f000000a1c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8020, 0x0)

11m58.998295008s ago: executing program 4 (id=540):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)

11m58.836080613s ago: executing program 4 (id=541):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
inotify_init1(0x80000)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000014000180"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)

11m56.198724259s ago: executing program 34 (id=511):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
inotify_init1(0x80000)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000014000180"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)

11m51.505077175s ago: executing program 35 (id=524):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
inotify_init1(0x80000)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000014000180"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)

11m43.714402989s ago: executing program 36 (id=541):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
inotify_init1(0x80000)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000014000180"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)

11m27.699011932s ago: executing program 6 (id=575):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x20, 0x4, 0x0, 0x20, 0x80, 0xc}, {@in6=@mcast1, 0x0, 0x33}, @in=@multicast2, {0x3ff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x40}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x24040021}, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000180)={0x8c30, 0x1, [{0xb}]})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r9}, 0x18)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r6, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0)

11m25.972941087s ago: executing program 6 (id=577):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x20, 0x4, 0x0, 0x20, 0x80, 0xc}, {@in6=@mcast1, 0x0, 0x33}, @in=@multicast2, {0x3ff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x40}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x24040021}, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000180)={0x8c30, 0x1, [{0xb}]})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r9}, 0x18)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r6, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0)

11m25.569787293s ago: executing program 6 (id=578):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syslog(0x3, 0x0, 0x0)
capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x10000, 0xfffffffd})
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1e2e81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "e4a18560d99f00", 0x800000})
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0, 0x1}, 0x20)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xf4ffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = eventfd2(0x8, 0x0)
write$eventfd(r2, &(0x7f0000000140)=0xfffffffffffffffc, 0x8)
read(r2, &(0x7f0000000180)=""/78, 0xfffffeab)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e)

11m23.440383459s ago: executing program 6 (id=580):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x80, r1, 0x15, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x53, 0xe, {{{}, {}, @broadcast, @device_a, @random="13610680c4c9"}, 0x0, @default, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0x5}, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x800, 0x2, 0x3, 0x0, {0xe, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, 0x400, 0x908, 0xb}}, @void, @void, @val={0x76, 0x6, {0x0, 0x1, 0x2b, 0x4}}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xf5c}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x0)

11m23.010826906s ago: executing program 6 (id=581):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket(0x10, 0x80002, 0x4)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="400063bc560289b3d15d8c96cd9c000400000000", @ANYRES32=0x0, @ANYBLOB="0003000001800000200012800800010067726500140002800500080003000000050009008f000000"], 0x40}, 0x1, 0x0, 0x0, 0x4044090}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtaction={0x70, 0x13, 0x53b, 0x1, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x12, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x73}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x989}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xff}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r4, 0x0, 0xa0028000}, 0x38)
ppoll(&(0x7f0000000600)=[{0xffffffffffffffff, 0x1400}], 0x1, 0x0, 0x0, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_DISALLOCATE(r5, 0x5608)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, &(0x7f0000008600)=0x1, 0x4)
recvmmsg(r6, &(0x7f000000a1c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8020, 0x0)

11m20.701274397s ago: executing program 6 (id=586):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x20, 0x4, 0x0, 0x20, 0x80, 0xc}, {@in6=@mcast1, 0x0, 0x33}, @in=@multicast2, {0x3ff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x40}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x24040021}, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000180)={0x8c30, 0x1, [{0xb}]})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r9}, 0x18)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r6, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0)

11m5.151254184s ago: executing program 37 (id=586):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x20, 0x4, 0x0, 0x20, 0x80, 0xc}, {@in6=@mcast1, 0x0, 0x33}, @in=@multicast2, {0x3ff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x40}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x24040021}, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000180)={0x8c30, 0x1, [{0xb}]})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r9}, 0x18)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r6, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0)

38.838968002s ago: executing program 1 (id=2791):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)

38.83805325s ago: executing program 1 (id=2792):
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001180)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)

38.34752282s ago: executing program 1 (id=2793):
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xffffff7ffffffeb6}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x41101, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x80000001, 0x0, 0x1000001000, 0x80000000009}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x4, 0xf, 0xf4e0, 0x2}, 0x0, 0x0)

37.489741414s ago: executing program 1 (id=2800):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket(0x10, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1d9)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0)
recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x14)
socket$nl_netfilter(0x10, 0x3, 0xc)

36.806720417s ago: executing program 1 (id=2803):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18)
write$FUSE_CREATE_OPEN(r2, &(0x7f00000005c0)={0xa0, 0x0, 0x0, {{0x1, 0x3, 0x1, 0x845, 0xfffffffa, 0x2c, {0x0, 0x7fffffff, 0x5, 0xa, 0x3, 0x8000000000000001, 0x4, 0x7, 0x101, 0x2000, 0x8e5, 0x0, 0x0, 0x7f, 0xffff}}, {0x0, 0x13}}}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
read$FUSE(r3, 0x0, 0xeffd)

36.772639133s ago: executing program 1 (id=2804):
r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil)
r1 = shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x5000)
shmdt(r1)

21.44972531s ago: executing program 38 (id=2804):
r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil)
r1 = shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x5000)
shmdt(r1)

8.108346837s ago: executing program 8 (id=3011):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000540))
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/75, 0x0})
r3 = dup(r2)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r3})
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)

8.050001517s ago: executing program 8 (id=3013):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4)
recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/22, 0x16}, 0x6}], 0x1, 0x60, 0x0)

7.990634579s ago: executing program 8 (id=3014):
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240))
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001180)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)

5.758428496s ago: executing program 3 (id=3028):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5ce", 0x17)

5.758106066s ago: executing program 3 (id=3029):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x140, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x23, 0x28, 0x0, 0x20, 0xfd, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @timestamp_reply={0xe, 0x0, 0x0, 0x3, 0x6, 0x2, 0xd, 0x1}}}}}, 0x0)

4.609371968s ago: executing program 7 (id=3033):
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_print_times', 0x169a82, 0x0)
sendfile(r1, r1, 0x0, 0x7)
eventfd(0x0)
memfd_create(0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r3, 0x89e3, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f02b, 0x2})
r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}})
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}})

4.475076929s ago: executing program 3 (id=3034):
syz_emit_ethernet(0x52, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
sendmsg$key(0xffffffffffffffff, 0x0, 0x44040800)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000040), 0x4)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000400)={0x0, 0x0})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0xc8c1}, 0x4000094)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4})
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r4=>0x0], 0x0, 0x0, 0xfffffd52, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x3, r4, 0x1, 0xffff, 0xa, 0x1ff, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x800})
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3.609586861s ago: executing program 3 (id=3038):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.527598679s ago: executing program 3 (id=3039):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10)
sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4)
recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/22, 0x16}, 0x6}], 0x1, 0x60, 0x0)

3.039371969s ago: executing program 8 (id=3018):
openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0503000000000000f6ff0700000008000300", @ANYRES32=r5], 0x1c}}, 0x24044080)

2.913248423s ago: executing program 7 (id=3040):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
flistxattr(r0, &(0x7f0000000000)=""/102, 0x66)

2.860069687s ago: executing program 7 (id=3042):
unshare(0x28000600)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r0, 0x0, 0x0)

2.85964003s ago: executing program 7 (id=3044):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000017c00000400"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

2.800321115s ago: executing program 7 (id=3045):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4)
connect$inet(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

2.730303368s ago: executing program 9 (id=3048):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x619, r0}, 0x38)

2.730144796s ago: executing program 9 (id=3049):
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes256, 0x16, '\x00', @b})
r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0)
ioctl$EVIOCGLED(r0, 0x80284504, &(0x7f0000000000)=""/46)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100001d122610d118af1e7907010000010902120001000000"], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.625818185s ago: executing program 3 (id=3050):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000000000008711e0e170000000000010902240001000000000904000002030000000921040000012205000905810300"], 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, 0x0, 0x0)
writev(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$lan78xx(0x6, 0x0, 0x0, 0x0)
r2 = syz_open_dev$hiddev(0x0, 0x9, 0x0)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, ';JP\n'}]}}, 0x0}, 0x0)

2.178887779s ago: executing program 7 (id=3051):
pipe2(&(0x7f00000004c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x3ff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x4e1, &(0x7f0000000100)={0x0, 0x1ffffd, 0x10100, 0xfffffffe, 0x9}, &(0x7f0000000300)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r4, 0x468f, 0xc4bc, 0x2c, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x110003)

2.089887463s ago: executing program 8 (id=3052):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
unshare(0xc040400)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)

2.089677441s ago: executing program 8 (id=3053):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

1.483062707s ago: executing program 9 (id=3054):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4})
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c3, 0x80, 0x20203843, 0x3, [0x2], [0x810003], [0x5, 0x0, 0xffffffff, 0x46], [0x0, 0x0, 0x0, 0xfffffffffffffffe]})
creat(&(0x7f0000000280)='./file0\x00', 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)

529.834238ms ago: executing program 9 (id=3055):
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35)

305.71µs ago: executing program 9 (id=3056):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540))
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/75, 0x0})
r2 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2})
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)

0s ago: executing program 9 (id=3057):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18)
write$FUSE_CREATE_OPEN(r2, &(0x7f00000005c0)={0xa0, 0x0, 0x0, {{0x1, 0x3, 0x1, 0x845, 0xfffffffa, 0x2c, {0x0, 0x7fffffff, 0x5, 0xa, 0x3, 0x8000000000000001, 0x4, 0x7, 0x101, 0x2000, 0x8e5, 0x0, 0x0, 0x7f, 0xffff}}, {0x0, 0x13}}}, 0xa0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
read$FUSE(r3, 0x0, 0xeffd)

kernel console output (not intermixed with test programs):

vivid-000: Timestamp Source: End of Frame
[  878.104666][T15890] vivid-000: Colorspace: sRGB
[  878.106268][T15890] vivid-000: Transfer Function: Default
[  878.112528][T15890] vivid-000: Y'CbCr Encoding: Default
[  878.114851][T15890] vivid-000: HSV Encoding: Hue 0-179
[  878.117358][T15890] vivid-000: Quantization: Default
[  878.119996][T15890] vivid-000: Apply Alpha To Red Only: false
[  878.122636][T15890] vivid-000: Standard Aspect Ratio: 4x3
[  878.124960][T15890] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  878.128177][T15890] vivid-000: DV Timings: 640x480p59 inactive
[  878.130875][T15890] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  878.133920][T15890] vivid-000: Maximum EDID Blocks: 2
[  878.136204][T15890] vivid-000: Limited RGB Range (16-235): false
[  878.140492][T15890] vivid-000: Rx RGB Quantization Range: Automatic
[  878.144609][T15890] vivid-000: Power Present: 0x00000001
[  878.146887][T15890] tpg source WxH: 320x240 (Y'CbCr)
[  878.149198][T15890] tpg field: 1
[  878.152628][T15890] tpg crop: (0,0)/320x240
[  878.154484][T15890] tpg compose: (0,0)/320x240
[  878.156460][T15890] tpg colorspace: 8
[  878.158153][T15890] tpg transfer function: 0/2
[  878.160253][T15890] tpg Y'CbCr encoding: 0/1
[  878.162773][T15890] tpg quantization: 0/2
[  878.164849][T15890] tpg RGB range: 0/2
[  878.166638][T15890] vivid-000: ==================  END STATUS  ==================
[  878.249691][T15899] vivid-000: =================  START STATUS  =================
[  878.253033][T15899] vivid-000: Test Pattern: 75% Colorbar
[  878.254793][T15899] vivid-000: Fill Percentage of Frame: 100
[  878.256816][T15899] vivid-000: Horizontal Movement: Move Left
[  878.258685][T15899] vivid-000: Vertical Movement: No Movement
[  878.260591][T15899] vivid-000: OSD Text Mode: All
[  878.262268][T15899] vivid-000: Show Border: false
[  878.264034][T15899] vivid-000: Show Square: false
[  878.266219][T15899] vivid-000: Sensor Flipped Horizontally: false
[  878.268938][T15899] vivid-000: Sensor Flipped Vertically: false
[  878.271359][T15899] vivid-000: Insert SAV Code in Image: false
[  878.273260][T15899] vivid-000: Insert EAV Code in Image: false
[  878.275182][T15899] vivid-000: Insert Video Guard Band: false
[  878.277061][T15899] vivid-000: Reduced Framerate: false
[  878.278798][T15899] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  878.281332][T15899] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  878.283803][T15899] vivid-000: Enable Capture Cropping: true grabbed
[  878.285856][T15899] vivid-000: Enable Capture Composing: true grabbed
[  878.287949][T15899] vivid-000: Enable Capture Scaler: true grabbed
[  878.290034][T15899] vivid-000: Timestamp Source: End of Frame
[  878.291956][T15899] vivid-000: Colorspace: sRGB
[  878.293515][T15899] vivid-000: Transfer Function: Default
[  878.295309][T15899] vivid-000: Y'CbCr Encoding: Default
[  878.297050][T15899] vivid-000: HSV Encoding: Hue 0-179
[  878.298765][T15899] vivid-000: Quantization: Default
[  878.300515][T15899] vivid-000: Apply Alpha To Red Only: false
[  878.302554][T15899] vivid-000: Standard Aspect Ratio: 4x3
[  878.304310][T15899] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  878.306789][T15899] vivid-000: DV Timings: 640x480p59 inactive
[  878.308809][T15899] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  878.311269][T15899] vivid-000: Maximum EDID Blocks: 2
[  878.313610][T15899] vivid-000: Limited RGB Range (16-235): false
[  878.316401][T15899] vivid-000: Rx RGB Quantization Range: Automatic
[  878.319273][T15899] vivid-000: Power Present: 0x00000001
[  878.322095][T15899] tpg source WxH: 320x240 (Y'CbCr)
[  878.324695][T15899] tpg field: 1
[  878.326287][T15899] tpg crop: (0,0)/320x240
[  878.328104][T15899] tpg compose: (0,0)/320x240
[  878.329758][T15899] tpg colorspace: 8
[  878.331197][T15899] tpg transfer function: 0/2
[  878.332776][T15899] tpg Y'CbCr encoding: 0/1
[  878.334310][T15899] tpg quantization: 0/2
[  878.335729][T15899] tpg RGB range: 0/2
[  878.337216][T15899] vivid-000: ==================  END STATUS  ==================
[  879.253387][T15907] vivid-000: =================  START STATUS  =================
[  879.255977][T15907] vivid-000: Test Pattern: 75% Colorbar
[  879.257796][T15907] vivid-000: Fill Percentage of Frame: 100
[  879.260065][T15907] vivid-000: Horizontal Movement: Move Left
[  879.261941][T15907] vivid-000: Vertical Movement: No Movement
[  879.263797][T15907] vivid-000: OSD Text Mode: All
[  879.265504][T15907] vivid-000: Show Border: false
[  879.267651][T15907] vivid-000: Show Square: false
[  879.269824][T15907] vivid-000: Sensor Flipped Horizontally: false
[  879.272453][T15907] vivid-000: Sensor Flipped Vertically: false
[  879.274852][T15907] vivid-000: Insert SAV Code in Image: false
[  879.277348][T15907] vivid-000: Insert EAV Code in Image: false
[  879.282920][T15907] vivid-000: Insert Video Guard Band: false
[  879.285832][T15907] vivid-000: Reduced Framerate: false
[  879.290168][T15907] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  879.298939][T15907] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  879.303021][T15907] vivid-000: Enable Capture Cropping: true grabbed
[  879.306481][T15907] vivid-000: Enable Capture Composing: true grabbed
[  879.311462][T15907] vivid-000: Enable Capture Scaler: true grabbed
[  879.327177][T15907] vivid-000: Timestamp Source: End of Frame
[  879.335688][T15907] vivid-000: Colorspace: sRGB
[  879.337595][T15907] vivid-000: Transfer Function: Default
[  879.340450][T15907] vivid-000: Y'CbCr Encoding: Default
[  879.342703][T15907] vivid-000: HSV Encoding: Hue 0-179
[  879.344877][T15907] vivid-000: Quantization: Default
[  879.347349][T15907] vivid-000: Apply Alpha To Red Only: false
[  879.349527][T15907] vivid-000: Standard Aspect Ratio: 4x3
[  879.353687][T15907] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  879.356523][T15907] vivid-000: DV Timings: 640x480p59 inactive
[  879.359343][T15907] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  879.362535][T15907] vivid-000: Maximum EDID Blocks: 2
[  879.364334][T15907] vivid-000: Limited RGB Range (16-235): false
[  879.371705][T15907] vivid-000: Rx RGB Quantization Range: Automatic
[  879.378029][T15907] vivid-000: Power Present: 0x00000001
[  879.380422][T15907] tpg source WxH: 320x240 (Y'CbCr)
[  879.382223][T15907] tpg field: 1
[  879.383533][T15907] tpg crop: (0,0)/320x240
[  879.385053][T15907] tpg compose: (0,0)/320x240
[  879.386620][T15907] tpg colorspace: 8
[  879.388277][T15907] tpg transfer function: 0/2
[  879.389997][T15907] tpg Y'CbCr encoding: 0/1
[  879.394217][T15907] tpg quantization: 0/2
[  879.403347][T15907] tpg RGB range: 0/2
[  879.405216][T15907] vivid-000: ==================  END STATUS  ==================
[  880.913804][T15916] vivid-000: =================  START STATUS  =================
[  880.916850][T15916] vivid-000: Test Pattern: 75% Colorbar
[  880.919128][T15916] vivid-000: Fill Percentage of Frame: 100
[  880.921314][T15916] vivid-000: Horizontal Movement: Move Left
[  880.923416][T15916] vivid-000: Vertical Movement: No Movement
[  880.925452][T15916] vivid-000: OSD Text Mode: All
[  880.927189][T15916] vivid-000: Show Border: false
[  880.928939][T15916] vivid-000: Show Square: false
[  880.930564][T15916] vivid-000: Sensor Flipped Horizontally: false
[  880.932892][T15916] vivid-000: Sensor Flipped Vertically: false
[  880.934797][T15916] vivid-000: Insert SAV Code in Image: false
[  880.936706][T15916] vivid-000: Insert EAV Code in Image: false
[  880.938680][T15916] vivid-000: Insert Video Guard Band: false
[  880.940599][T15916] vivid-000: Reduced Framerate: false
[  880.943873][T15916] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  880.946235][T15916] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  880.948699][T15916] vivid-000: Enable Capture Cropping: true grabbed
[  880.952512][T15916] vivid-000: Enable Capture Composing: true grabbed
[  880.954633][T15916] vivid-000: Enable Capture Scaler: true grabbed
[  880.956748][T15916] vivid-000: Timestamp Source: End of Frame
[  880.958653][T15916] vivid-000: Colorspace: sRGB
[  880.960217][T15916] vivid-000: Transfer Function: Default
[  880.963591][T15916] vivid-000: Y'CbCr Encoding: Default
[  880.965392][T15916] vivid-000: HSV Encoding: Hue 0-179
[  880.967132][T15916] vivid-000: Quantization: Default
[  880.968907][T15916] vivid-000: Apply Alpha To Red Only: false
[  880.972212][T15916] vivid-000: Standard Aspect Ratio: 4x3
[  880.973944][T15916] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  880.976401][T15916] vivid-000: DV Timings: 640x480p59 inactive
[  880.978394][T15916] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  880.980805][T15916] vivid-000: Maximum EDID Blocks: 2
[  880.983374][T15916] vivid-000: Limited RGB Range (16-235): false
[  880.986923][T15916] vivid-000: Rx RGB Quantization Range: Automatic
[  880.990542][T15916] vivid-000: Power Present: 0x00000001
[  880.993698][T15916] tpg source WxH: 320x240 (Y'CbCr)
[  880.996207][T15916] tpg field: 1
[  880.998220][T15916] tpg crop: (0,0)/320x240
[  881.000504][T15916] tpg compose: (0,0)/320x240
[  881.002088][T15916] tpg colorspace: 8
[  881.003781][T15916] tpg transfer function: 0/2
[  881.005296][T15916] tpg Y'CbCr encoding: 0/1
[  881.006844][T15916] tpg quantization: 0/2
[  881.008311][T15916] tpg RGB range: 0/2
[  881.009972][T15916] vivid-000: ==================  END STATUS  ==================
[  881.329806][T15925] vivid-000: =================  START STATUS  =================
[  881.332655][T15925] vivid-000: Test Pattern: 75% Colorbar
[  881.334981][T15925] vivid-000: Fill Percentage of Frame: 100
[  881.337630][T15925] vivid-000: Horizontal Movement: Move Left
[  881.339929][T15925] vivid-000: Vertical Movement: No Movement
[  881.342036][T15925] vivid-000: OSD Text Mode: All
[  881.343629][T15925] vivid-000: Show Border: false
[  881.345299][T15925] vivid-000: Show Square: false
[  881.346986][T15925] vivid-000: Sensor Flipped Horizontally: false
[  881.349537][T15925] vivid-000: Sensor Flipped Vertically: false
[  881.352409][T15925] vivid-000: Insert SAV Code in Image: false
[  881.355031][T15925] vivid-000: Insert EAV Code in Image: false
[  881.357127][T15925] vivid-000: Insert Video Guard Band: false
[  881.359249][T15925] vivid-000: Reduced Framerate: false
[  881.361157][T15925] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  881.363689][T15925] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  881.367136][T15925] vivid-000: Enable Capture Cropping: true grabbed
[  881.370414][T15925] vivid-000: Enable Capture Composing: true grabbed
[  881.373401][T15925] vivid-000: Enable Capture Scaler: true grabbed
[  881.376171][T15925] vivid-000: Timestamp Source: End of Frame
[  881.378466][T15925] vivid-000: Colorspace: sRGB
[  881.380774][T15925] vivid-000: Transfer Function: Default
[  881.384587][T15925] vivid-000: Y'CbCr Encoding: Default
[  881.386653][T15925] vivid-000: HSV Encoding: Hue 0-179
[  881.388957][T15925] vivid-000: Quantization: Default
[  881.391651][T15925] vivid-000: Apply Alpha To Red Only: false
[  881.394744][T15925] vivid-000: Standard Aspect Ratio: 4x3
[  881.396853][T15925] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  881.399907][T15925] vivid-000: DV Timings: 640x480p59 inactive
[  881.402560][T15925] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  881.406204][T15925] vivid-000: Maximum EDID Blocks: 2
[  881.408519][T15925] vivid-000: Limited RGB Range (16-235): false
[  881.411962][T15925] vivid-000: Rx RGB Quantization Range: Automatic
[  881.414618][T15925] vivid-000: Power Present: 0x00000001
[  881.416733][T15925] tpg source WxH: 320x240 (Y'CbCr)
[  881.418938][T15925] tpg field: 1
[  881.420306][T15925] tpg crop: (0,0)/320x240
[  881.423381][T15925] tpg compose: (0,0)/320x240
[  881.424980][T15925] tpg colorspace: 8
[  881.426284][T15925] tpg transfer function: 0/2
[  881.427784][T15925] tpg Y'CbCr encoding: 0/1
[  881.429268][T15925] tpg quantization: 0/2
[  881.430766][T15925] tpg RGB range: 0/2
[  881.432045][T15925] vivid-000: ==================  END STATUS  ==================
[  882.429504][T15933] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2404'.
[  882.599779][T15934] vivid-000: =================  START STATUS  =================
[  882.603123][T15934] vivid-000: Test Pattern: 75% Colorbar
[  882.605472][T15934] vivid-000: Fill Percentage of Frame: 100
[  882.607897][T15934] vivid-000: Horizontal Movement: Move Left
[  882.610461][T15934] vivid-000: Vertical Movement: No Movement
[  882.612815][T15934] vivid-000: OSD Text Mode: All
[  882.614572][T15934] vivid-000: Show Border: false
[  882.616684][T15934] vivid-000: Show Square: false
[  882.618822][T15934] vivid-000: Sensor Flipped Horizontally: false
[  882.623249][T15934] vivid-000: Sensor Flipped Vertically: false
[  882.625322][T15934] vivid-000: Insert SAV Code in Image: false
[  882.627732][T15934] vivid-000: Insert EAV Code in Image: false
[  882.629791][T15934] vivid-000: Insert Video Guard Band: false
[  882.632808][T15934] vivid-000: Reduced Framerate: false
[  882.634585][T15934] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  882.637145][T15934] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  882.640445][T15934] vivid-000: Enable Capture Cropping: true grabbed
[  882.644549][T15934] vivid-000: Enable Capture Composing: true grabbed
[  882.647260][T15934] vivid-000: Enable Capture Scaler: true grabbed
[  882.649966][T15934] vivid-000: Timestamp Source: End of Frame
[  882.652465][T15934] vivid-000: Colorspace: sRGB
[  882.654322][T15934] vivid-000: Transfer Function: Default
[  882.656551][T15934] vivid-000: Y'CbCr Encoding: Default
[  882.658659][T15934] vivid-000: HSV Encoding: Hue 0-179
[  882.660718][T15934] vivid-000: Quantization: Default
[  882.662487][T15934] vivid-000: Apply Alpha To Red Only: false
[  882.664438][T15934] vivid-000: Standard Aspect Ratio: 4x3
[  882.666335][T15934] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  882.668971][T15934] vivid-000: DV Timings: 640x480p59 inactive
[  882.671833][T15934] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  882.674183][T15934] vivid-000: Maximum EDID Blocks: 2
[  882.675872][T15934] vivid-000: Limited RGB Range (16-235): false
[  882.678262][T15934] vivid-000: Rx RGB Quantization Range: Automatic
[  882.680958][T15934] vivid-000: Power Present: 0x00000001
[  882.683253][T15934] tpg source WxH: 320x240 (Y'CbCr)
[  882.685480][T15934] tpg field: 1
[  882.687002][T15934] tpg crop: (0,0)/320x240
[  882.688965][T15934] tpg compose: (0,0)/320x240
[  882.692820][T15934] tpg colorspace: 8
[  882.694597][T15934] tpg transfer function: 0/2
[  882.696714][T15934] tpg Y'CbCr encoding: 0/1
[  882.699107][T15934] tpg quantization: 0/2
[  882.701430][T15934] tpg RGB range: 0/2
[  882.703143][T15934] vivid-000: ==================  END STATUS  ==================
[  883.290403][T15940] vivid-000: =================  START STATUS  =================
[  883.296703][T15940] vivid-000: Test Pattern: 75% Colorbar
[  883.316224][T15940] vivid-000: Fill Percentage of Frame: 100
[  883.328057][T15940] vivid-000: Horizontal Movement: Move Left
[  883.332850][T15940] vivid-000: Vertical Movement: No Movement
[  883.340914][T15940] vivid-000: OSD Text Mode: All
[  883.348989][T15940] vivid-000: Show Border: false
[  883.350978][T15940] vivid-000: Show Square: false
[  883.352974][T15940] vivid-000: Sensor Flipped Horizontally: false
[  883.362284][T15940] vivid-000: Sensor Flipped Vertically: false
[  883.370880][T15940] vivid-000: Insert SAV Code in Image: false
[  883.373494][T15940] vivid-000: Insert EAV Code in Image: false
[  883.375435][T15940] vivid-000: Insert Video Guard Band: false
[  883.377944][T15940] vivid-000: Reduced Framerate: false
[  883.382581][T15940] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  883.388189][T15940] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  883.397216][T15940] vivid-000: Enable Capture Cropping: true grabbed
[  883.400287][T15940] vivid-000: Enable Capture Composing: true grabbed
[  883.406227][T15940] vivid-000: Enable Capture Scaler: true grabbed
[  883.409591][T15940] vivid-000: Timestamp Source: End of Frame
[  883.426783][T15940] vivid-000: Colorspace: sRGB
[  883.428525][T15940] vivid-000: Transfer Function: Default
[  883.430540][T15940] vivid-000: Y'CbCr Encoding: Default
[  883.433210][T15940] vivid-000: HSV Encoding: Hue 0-179
[  883.435574][T15940] vivid-000: Quantization: Default
[  883.437559][T15940] vivid-000: Apply Alpha To Red Only: false
[  883.439622][T15940] vivid-000: Standard Aspect Ratio: 4x3
[  883.442644][T15940] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  883.449040][T15940] vivid-000: DV Timings: 640x480p59 inactive
[  883.452984][T15940] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  883.456385][T15940] vivid-000: Maximum EDID Blocks: 2
[  883.459230][T15940] vivid-000: Limited RGB Range (16-235): false
[  883.462694][T15940] vivid-000: Rx RGB Quantization Range: Automatic
[  883.465751][T15940] vivid-000: Power Present: 0x00000001
[  883.468562][T15940] tpg source WxH: 320x240 (Y'CbCr)
[  883.470995][T15940] tpg field: 1
[  883.472976][T15940] tpg crop: (0,0)/320x240
[  883.475856][T15940] tpg compose: (0,0)/320x240
[  883.478420][T15940] tpg colorspace: 8
[  883.480130][T15940] tpg transfer function: 0/2
[  883.481986][T15940] tpg Y'CbCr encoding: 0/1
[  883.483941][T15940] tpg quantization: 0/2
[  883.485551][T15940] tpg RGB range: 0/2
[  883.486826][T15940] vivid-000: ==================  END STATUS  ==================
[  883.814709][T15943] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2406'.
[  884.532271][T15950] vivid-000: =================  START STATUS  =================
[  884.536258][T15950] vivid-000: Test Pattern: 75% Colorbar
[  884.539130][T15950] vivid-000: Fill Percentage of Frame: 100
[  884.542054][T15950] vivid-000: Horizontal Movement: Move Left
[  884.543942][T15950] vivid-000: Vertical Movement: No Movement
[  884.547487][T15950] vivid-000: OSD Text Mode: All
[  884.550161][T15950] vivid-000: Show Border: false
[  884.552306][T15950] vivid-000: Show Square: false
[  884.554680][T15950] vivid-000: Sensor Flipped Horizontally: false
[  884.557938][T15950] vivid-000: Sensor Flipped Vertically: false
[  884.560723][T15950] vivid-000: Insert SAV Code in Image: false
[  884.562697][T15950] vivid-000: Insert EAV Code in Image: false
[  884.564729][T15950] vivid-000: Insert Video Guard Band: false
[  884.567783][T15950] vivid-000: Reduced Framerate: false
[  884.570438][T15950] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  884.572945][T15950] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  884.575495][T15950] vivid-000: Enable Capture Cropping: true grabbed
[  884.577669][T15950] vivid-000: Enable Capture Composing: true grabbed
[  884.581313][T15950] vivid-000: Enable Capture Scaler: true grabbed
[  884.583491][T15950] vivid-000: Timestamp Source: End of Frame
[  884.587419][T15950] vivid-000: Colorspace: sRGB
[  884.589114][T15950] vivid-000: Transfer Function: Default
[  884.591135][T15950] vivid-000: Y'CbCr Encoding: Default
[  884.593129][T15950] vivid-000: HSV Encoding: Hue 0-179
[  884.595211][T15950] vivid-000: Quantization: Default
[  884.597280][T15950] vivid-000: Apply Alpha To Red Only: false
[  884.599311][T15950] vivid-000: Standard Aspect Ratio: 4x3
[  884.601214][T15950] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  884.603807][T15950] vivid-000: DV Timings: 640x480p59 inactive
[  884.605822][T15950] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  884.608399][T15950] vivid-000: Maximum EDID Blocks: 2
[  884.610170][T15950] vivid-000: Limited RGB Range (16-235): false
[  884.612326][T15950] vivid-000: Rx RGB Quantization Range: Automatic
[  884.614559][T15950] vivid-000: Power Present: 0x00000001
[  884.616447][T15950] tpg source WxH: 320x240 (Y'CbCr)
[  884.618198][T15950] tpg field: 1
[  884.619418][T15950] tpg crop: (0,0)/320x240
[  884.620947][T15950] tpg compose: (0,0)/320x240
[  884.622566][T15950] tpg colorspace: 8
[  884.623906][T15950] tpg transfer function: 0/2
[  884.625531][T15950] tpg Y'CbCr encoding: 0/1
[  884.627038][T15950] tpg quantization: 0/2
[  884.628482][T15950] tpg RGB range: 0/2
[  884.629828][T15950] vivid-000: ==================  END STATUS  ==================
[  885.471860][T15956] vivid-000: =================  START STATUS  =================
[  885.474345][T15956] vivid-000: Test Pattern: 75% Colorbar
[  885.476162][T15956] vivid-000: Fill Percentage of Frame: 100
[  885.478173][T15956] vivid-000: Horizontal Movement: Move Left
[  885.480567][T15956] vivid-000: Vertical Movement: No Movement
[  885.482858][T15956] vivid-000: OSD Text Mode: All
[  885.484577][T15956] vivid-000: Show Border: false
[  885.486262][T15956] vivid-000: Show Square: false
[  885.488023][T15956] vivid-000: Sensor Flipped Horizontally: false
[  885.490740][T15956] vivid-000: Sensor Flipped Vertically: false
[  885.493567][T15956] vivid-000: Insert SAV Code in Image: false
[  885.495675][T15956] vivid-000: Insert EAV Code in Image: false
[  885.498383][T15956] vivid-000: Insert Video Guard Band: false
[  885.501791][T15956] vivid-000: Reduced Framerate: false
[  885.503535][T15956] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  885.505987][T15956] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  885.508621][T15956] vivid-000: Enable Capture Cropping: true grabbed
[  885.511182][T15956] vivid-000: Enable Capture Composing: true grabbed
[  885.513448][T15956] vivid-000: Enable Capture Scaler: true grabbed
[  885.515554][T15956] vivid-000: Timestamp Source: End of Frame
[  885.519593][T15956] vivid-000: Colorspace: sRGB
[  885.522893][T15956] vivid-000: Transfer Function: Default
[  885.525908][T15956] vivid-000: Y'CbCr Encoding: Default
[  885.529135][T15956] vivid-000: HSV Encoding: Hue 0-179
[  885.531481][T15956] vivid-000: Quantization: Default
[  885.535007][T15956] vivid-000: Apply Alpha To Red Only: false
[  885.538923][T15956] vivid-000: Standard Aspect Ratio: 4x3
[  885.543310][T15956] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  885.546589][T15956] vivid-000: DV Timings: 640x480p59 inactive
[  885.549792][T15956] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  885.552839][T15956] vivid-000: Maximum EDID Blocks: 2
[  885.555057][T15956] vivid-000: Limited RGB Range (16-235): false
[  885.557298][T15956] vivid-000: Rx RGB Quantization Range: Automatic
[  885.559539][T15956] vivid-000: Power Present: 0x00000001
[  885.561797][T15956] tpg source WxH: 320x240 (Y'CbCr)
[  885.563579][T15956] tpg field: 1
[  885.564821][T15956] tpg crop: (0,0)/320x240
[  885.566894][T15956] tpg compose: (0,0)/320x240
[  885.568907][T15956] tpg colorspace: 8
[  885.570283][T15956] tpg transfer function: 0/2
[  885.572048][T15956] tpg Y'CbCr encoding: 0/1
[  885.573677][T15956] tpg quantization: 0/2
[  885.575201][T15956] tpg RGB range: 0/2
[  885.576881][T15956] vivid-000: ==================  END STATUS  ==================
[  887.599909][T15978] vivid-000: =================  START STATUS  =================
[  887.602541][T15978] vivid-000: Test Pattern: 75% Colorbar
[  887.604418][T15978] vivid-000: Fill Percentage of Frame: 100
[  887.606302][T15978] vivid-000: Horizontal Movement: Move Left
[  887.608252][T15978] vivid-000: Vertical Movement: No Movement
[  887.610183][T15978] vivid-000: OSD Text Mode: All
[  887.611866][T15978] vivid-000: Show Border: false
[  887.613993][T15978] vivid-000: Show Square: false
[  887.615620][T15978] vivid-000: Sensor Flipped Horizontally: false
[  887.617667][T15978] vivid-000: Sensor Flipped Vertically: false
[  887.619625][T15978] vivid-000: Insert SAV Code in Image: false
[  887.621740][T15978] vivid-000: Insert EAV Code in Image: false
[  887.623756][T15978] vivid-000: Insert Video Guard Band: false
[  887.626007][T15978] vivid-000: Reduced Framerate: false
[  887.627728][T15978] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  887.630190][T15978] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  887.632785][T15978] vivid-000: Enable Capture Cropping: true grabbed
[  887.634960][T15978] vivid-000: Enable Capture Composing: true grabbed
[  887.637226][T15978] vivid-000: Enable Capture Scaler: true grabbed
[  887.639372][T15978] vivid-000: Timestamp Source: End of Frame
[  887.641672][T15978] vivid-000: Colorspace: sRGB
[  887.643290][T15978] vivid-000: Transfer Function: Default
[  887.647080][T15978] vivid-000: Y'CbCr Encoding: Default
[  887.649583][T15978] vivid-000: HSV Encoding: Hue 0-179
[  887.652623][T15978] vivid-000: Quantization: Default
[  887.654414][T15978] vivid-000: Apply Alpha To Red Only: false
[  887.656462][T15978] vivid-000: Standard Aspect Ratio: 4x3
[  887.659504][T15978] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  887.662712][T15978] vivid-000: DV Timings: 640x480p59 inactive
[  887.664904][T15978] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  887.668469][T15978] vivid-000: Maximum EDID Blocks: 2
[  887.670722][T15978] vivid-000: Limited RGB Range (16-235): false
[  887.673180][T15978] vivid-000: Rx RGB Quantization Range: Automatic
[  887.676178][T15978] vivid-000: Power Present: 0x00000001
[  887.678874][T15978] tpg source WxH: 320x240 (Y'CbCr)
[  887.680725][T15978] tpg field: 1
[  887.682314][T15978] tpg crop: (0,0)/320x240
[  887.683901][T15978] tpg compose: (0,0)/320x240
[  887.685818][T15978] tpg colorspace: 8
[  887.688021][T15978] tpg transfer function: 0/2
[  887.690053][T15978] tpg Y'CbCr encoding: 0/1
[  887.691883][T15978] tpg quantization: 0/2
[  887.694175][T15978] tpg RGB range: 0/2
[  887.696285][T15978] vivid-000: ==================  END STATUS  ==================
[  890.660281][T15998] vivid-000: =================  START STATUS  =================
[  890.662831][T15998] vivid-000: Test Pattern: 75% Colorbar
[  890.664612][T15998] vivid-000: Fill Percentage of Frame: 100
[  890.666444][T15998] vivid-000: Horizontal Movement: Move Left
[  890.668304][T15998] vivid-000: Vertical Movement: No Movement
[  890.670166][T15998] vivid-000: OSD Text Mode: All
[  890.672628][T15998] vivid-000: Show Border: false
[  890.674203][T15998] vivid-000: Show Square: false
[  890.675811][T15998] vivid-000: Sensor Flipped Horizontally: false
[  890.677870][T15998] vivid-000: Sensor Flipped Vertically: false
[  890.679826][T15998] vivid-000: Insert SAV Code in Image: false
[  890.681838][T15998] vivid-000: Insert EAV Code in Image: false
[  890.686535][T15998] vivid-000: Insert Video Guard Band: false
[  890.688495][T15998] vivid-000: Reduced Framerate: false
[  890.690265][T15998] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  890.693294][T15998] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  890.696709][T15998] vivid-000: Enable Capture Cropping: true grabbed
[  890.699745][T15998] vivid-000: Enable Capture Composing: true grabbed
[  890.703358][T15998] vivid-000: Enable Capture Scaler: true grabbed
[  890.706675][T15998] vivid-000: Timestamp Source: End of Frame
[  890.709410][T15998] vivid-000: Colorspace: sRGB
[  890.711781][T15998] vivid-000: Transfer Function: Default
[  890.714565][T15998] vivid-000: Y'CbCr Encoding: Default
[  890.716963][T15998] vivid-000: HSV Encoding: Hue 0-179
[  890.719426][T15998] vivid-000: Quantization: Default
[  890.722862][T15998] vivid-000: Apply Alpha To Red Only: false
[  890.725596][T15998] vivid-000: Standard Aspect Ratio: 4x3
[  890.728162][T15998] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  890.732215][T15998] vivid-000: DV Timings: 640x480p59 inactive
[  890.735229][T15998] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  890.739263][T15998] vivid-000: Maximum EDID Blocks: 2
[  890.743286][T15998] vivid-000: Limited RGB Range (16-235): false
[  890.746204][T15998] vivid-000: Rx RGB Quantization Range: Automatic
[  890.748392][T15998] vivid-000: Power Present: 0x00000001
[  890.750148][T15998] tpg source WxH: 320x240 (Y'CbCr)
[  890.751884][T15998] tpg field: 1
[  890.753141][T15998] tpg crop: (0,0)/320x240
[  890.754647][T15998] tpg compose: (0,0)/320x240
[  890.756249][T15998] tpg colorspace: 8
[  890.757623][T15998] tpg transfer function: 0/2
[  890.759241][T15998] tpg Y'CbCr encoding: 0/1
[  890.760815][T15998] tpg quantization: 0/2
[  890.762275][T15998] tpg RGB range: 0/2
[  890.763639][T15998] vivid-000: ==================  END STATUS  ==================
[  890.988529][T16008] vivid-000: =================  START STATUS  =================
[  890.991620][T16008] vivid-000: Test Pattern: 75% Colorbar
[  890.993848][T16008] vivid-000: Fill Percentage of Frame: 100
[  890.996078][T16008] vivid-000: Horizontal Movement: Move Left
[  890.998265][T16008] vivid-000: Vertical Movement: No Movement
[  891.000644][T16008] vivid-000: OSD Text Mode: All
[  891.002958][T16008] vivid-000: Show Border: false
[  891.004591][T16008] vivid-000: Show Square: false
[  891.006203][T16008] vivid-000: Sensor Flipped Horizontally: false
[  891.008228][T16008] vivid-000: Sensor Flipped Vertically: false
[  891.010145][T16008] vivid-000: Insert SAV Code in Image: false
[  891.012862][T16008] vivid-000: Insert EAV Code in Image: false
[  891.014949][T16008] vivid-000: Insert Video Guard Band: false
[  891.017506][T16008] vivid-000: Reduced Framerate: false
[  891.019839][T16008] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  891.022648][T16008] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  891.025354][T16008] vivid-000: Enable Capture Cropping: true grabbed
[  891.028309][T16008] vivid-000: Enable Capture Composing: true grabbed
[  891.032926][T16008] vivid-000: Enable Capture Scaler: true grabbed
[  891.035618][T16008] vivid-000: Timestamp Source: End of Frame
[  891.038420][T16008] vivid-000: Colorspace: sRGB
[  891.040816][T16008] vivid-000: Transfer Function: Default
[  891.043234][T16008] vivid-000: Y'CbCr Encoding: Default
[  891.045605][T16008] vivid-000: HSV Encoding: Hue 0-179
[  891.047984][T16008] vivid-000: Quantization: Default
[  891.052757][T16008] vivid-000: Apply Alpha To Red Only: false
[  891.055246][T16008] vivid-000: Standard Aspect Ratio: 4x3
[  891.057378][T16008] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  891.059788][T16008] vivid-000: DV Timings: 640x480p59 inactive
[  891.061847][T16008] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  891.066155][T16008] vivid-000: Maximum EDID Blocks: 2
[  891.067869][T16008] vivid-000: Limited RGB Range (16-235): false
[  891.069892][T16008] vivid-000: Rx RGB Quantization Range: Automatic
[  891.074327][T16008] vivid-000: Power Present: 0x00000001
[  891.076065][T16008] tpg source WxH: 320x240 (Y'CbCr)
[  891.077642][T16008] tpg field: 1
[  891.078731][T16008] tpg crop: (0,0)/320x240
[  891.080119][T16008] tpg compose: (0,0)/320x240
[  891.083966][T16008] tpg colorspace: 8
[  891.085979][T16008] tpg transfer function: 0/2
[  891.088898][T16008] tpg Y'CbCr encoding: 0/1
[  891.130481][T16008] tpg quantization: 0/2
[  891.210853][T16008] tpg RGB range: 0/2
[  891.213507][T16008] vivid-000: ==================  END STATUS  ==================
[  891.872675][T16014] fuse: Unknown parameter 'group_i00000000000000000000'
[  892.145292][T16021] vivid-000: =================  START STATUS  =================
[  892.148656][T16021] vivid-000: Test Pattern: 75% Colorbar
[  892.150604][T16021] vivid-000: Fill Percentage of Frame: 100
[  892.152781][T16021] vivid-000: Horizontal Movement: Move Left
[  892.154785][T16021] vivid-000: Vertical Movement: No Movement
[  892.156844][T16021] vivid-000: OSD Text Mode: All
[  892.158553][T16021] vivid-000: Show Border: false
[  892.160217][T16021] vivid-000: Show Square: false
[  892.161965][T16021] vivid-000: Sensor Flipped Horizontally: false
[  892.164033][T16021] vivid-000: Sensor Flipped Vertically: false
[  892.166068][T16021] vivid-000: Insert SAV Code in Image: false
[  892.168128][T16021] vivid-000: Insert EAV Code in Image: false
[  892.170113][T16021] vivid-000: Insert Video Guard Band: false
[  892.172185][T16021] vivid-000: Reduced Framerate: false
[  892.174018][T16021] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  892.176563][T16021] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  892.179167][T16021] vivid-000: Enable Capture Cropping: true grabbed
[  892.181424][T16021] vivid-000: Enable Capture Composing: true grabbed
[  892.183619][T16021] vivid-000: Enable Capture Scaler: true grabbed
[  892.186876][T16021] vivid-000: Timestamp Source: End of Frame
[  892.190265][T16021] vivid-000: Colorspace: sRGB
[  892.193568][T16021] vivid-000: Transfer Function: Default
[  892.198102][T16021] vivid-000: Y'CbCr Encoding: Default
[  892.200413][T16021] vivid-000: HSV Encoding: Hue 0-179
[  892.203568][T16021] vivid-000: Quantization: Default
[  892.206215][T16021] vivid-000: Apply Alpha To Red Only: false
[  892.209440][T16021] vivid-000: Standard Aspect Ratio: 4x3
[  892.217456][T16021] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  892.224933][T16021] vivid-000: DV Timings: 640x480p59 inactive
[  892.226960][T16021] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  892.229842][T16021] vivid-000: Maximum EDID Blocks: 2
[  892.232549][T16021] vivid-000: Limited RGB Range (16-235): false
[  892.234885][T16021] vivid-000: Rx RGB Quantization Range: Automatic
[  892.237039][T16021] vivid-000: Power Present: 0x00000001
[  892.238855][T16021] tpg source WxH: 320x240 (Y'CbCr)
[  892.240637][T16021] tpg field: 1
[  892.241936][T16021] tpg crop: (0,0)/320x240
[  892.243465][T16021] tpg compose: (0,0)/320x240
[  892.245080][T16021] tpg colorspace: 8
[  892.246465][T16021] tpg transfer function: 0/2
[  892.249077][T16021] tpg Y'CbCr encoding: 0/1
[  892.250604][T16021] tpg quantization: 0/2
[  892.252913][T16021] tpg RGB range: 0/2
[  892.254450][T16021] vivid-000: ==================  END STATUS  ==================
[  894.265200][T16045] vivid-000: =================  START STATUS  =================
[  894.267618][T16045] vivid-000: Test Pattern: 75% Colorbar
[  894.269472][T16045] vivid-000: Fill Percentage of Frame: 100
[  894.271505][T16045] vivid-000: Horizontal Movement: Move Left
[  894.273496][T16045] vivid-000: Vertical Movement: No Movement
[  894.275452][T16045] vivid-000: OSD Text Mode: All
[  894.277117][T16045] vivid-000: Show Border: false
[  894.278754][T16045] vivid-000: Show Square: false
[  894.280368][T16045] vivid-000: Sensor Flipped Horizontally: false
[  894.282444][T16045] vivid-000: Sensor Flipped Vertically: false
[  894.284463][T16045] vivid-000: Insert SAV Code in Image: false
[  894.286445][T16045] vivid-000: Insert EAV Code in Image: false
[  894.288459][T16045] vivid-000: Insert Video Guard Band: false
[  894.290419][T16045] vivid-000: Reduced Framerate: false
[  894.293811][T16045] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  894.296889][T16045] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  894.299543][T16045] vivid-000: Enable Capture Cropping: true grabbed
[  894.302806][T16045] vivid-000: Enable Capture Composing: true grabbed
[  894.305137][T16045] vivid-000: Enable Capture Scaler: true grabbed
[  894.309340][T16045] vivid-000: Timestamp Source: End of Frame
[  894.312451][T16045] vivid-000: Colorspace: sRGB
[  894.315001][T16045] vivid-000: Transfer Function: Default
[  894.317367][T16045] vivid-000: Y'CbCr Encoding: Default
[  894.319584][T16045] vivid-000: HSV Encoding: Hue 0-179
[  894.324280][T16045] vivid-000: Quantization: Default
[  894.327005][T16045] vivid-000: Apply Alpha To Red Only: false
[  894.329860][T16045] vivid-000: Standard Aspect Ratio: 4x3
[  894.332765][T16045] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  894.336096][T16045] vivid-000: DV Timings: 640x480p59 inactive
[  894.338868][T16045] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  894.341907][T16045] vivid-000: Maximum EDID Blocks: 2
[  894.344852][T16045] vivid-000: Limited RGB Range (16-235): false
[  894.347907][T16045] vivid-000: Rx RGB Quantization Range: Automatic
[  894.351907][T16045] vivid-000: Power Present: 0x00000001
[  894.355855][T16045] tpg source WxH: 320x240 (Y'CbCr)
[  894.358611][T16045] tpg field: 1
[  894.360981][T16045] tpg crop: (0,0)/320x240
[  894.362509][T16045] tpg compose: (0,0)/320x240
[  894.365608][T16045] tpg colorspace: 8
[  894.367651][T16045] tpg transfer function: 0/2
[  894.370111][T16045] tpg Y'CbCr encoding: 0/1
[  894.372440][T16045] tpg quantization: 0/2
[  894.374667][T16045] tpg RGB range: 0/2
[  894.376841][T16045] vivid-000: ==================  END STATUS  ==================
[  896.204774][T16065] vivid-000: =================  START STATUS  =================
[  896.207163][T16065] vivid-000: Test Pattern: 75% Colorbar
[  896.209429][T16065] vivid-000: Fill Percentage of Frame: 100
[  896.211376][T16065] vivid-000: Horizontal Movement: Move Left
[  896.213361][T16065] vivid-000: Vertical Movement: No Movement
[  896.215260][T16065] vivid-000: OSD Text Mode: All
[  896.217568][T16065] vivid-000: Show Border: false
[  896.219116][T16065] vivid-000: Show Square: false
[  896.221195][T16065] vivid-000: Sensor Flipped Horizontally: false
[  896.223200][T16065] vivid-000: Sensor Flipped Vertically: false
[  896.225258][T16065] vivid-000: Insert SAV Code in Image: false
[  896.227126][T16065] vivid-000: Insert EAV Code in Image: false
[  896.229081][T16065] vivid-000: Insert Video Guard Band: false
[  896.231320][T16065] vivid-000: Reduced Framerate: false
[  896.232968][T16065] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  896.235489][T16065] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  896.237943][T16065] vivid-000: Enable Capture Cropping: true grabbed
[  896.240028][T16065] vivid-000: Enable Capture Composing: true grabbed
[  896.242636][T16065] vivid-000: Enable Capture Scaler: true grabbed
[  896.244605][T16065] vivid-000: Timestamp Source: End of Frame
[  896.246568][T16065] vivid-000: Colorspace: sRGB
[  896.248114][T16065] vivid-000: Transfer Function: Default
[  896.249888][T16065] vivid-000: Y'CbCr Encoding: Default
[  896.251754][T16065] vivid-000: HSV Encoding: Hue 0-179
[  896.254025][T16065] vivid-000: Quantization: Default
[  896.255689][T16065] vivid-000: Apply Alpha To Red Only: false
[  896.257791][T16065] vivid-000: Standard Aspect Ratio: 4x3
[  896.259592][T16065] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  896.262297][T16065] vivid-000: DV Timings: 640x480p59 inactive
[  896.264344][T16065] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  896.266786][T16065] vivid-000: Maximum EDID Blocks: 2
[  896.268599][T16065] vivid-000: Limited RGB Range (16-235): false
[  896.270922][T16065] vivid-000: Rx RGB Quantization Range: Automatic
[  896.273105][T16065] vivid-000: Power Present: 0x00000001
[  896.275216][T16065] tpg source WxH: 320x240 (Y'CbCr)
[  896.277122][T16065] tpg field: 1
[  896.278354][T16065] tpg crop: (0,0)/320x240
[  896.279876][T16065] tpg compose: (0,0)/320x240
[  896.281944][T16065] tpg colorspace: 8
[  896.283272][T16065] tpg transfer function: 0/2
[  896.284892][T16065] tpg Y'CbCr encoding: 0/1
[  896.286451][T16065] tpg quantization: 0/2
[  896.287955][T16065] tpg RGB range: 0/2
[  896.289405][T16065] vivid-000: ==================  END STATUS  ==================
[  896.668750][T16073] vivid-000: =================  START STATUS  =================
[  896.671381][T16073] vivid-000: Test Pattern: 75% Colorbar
[  896.673435][T16073] vivid-000: Fill Percentage of Frame: 100
[  896.675558][T16073] vivid-000: Horizontal Movement: Move Left
[  896.677628][T16073] vivid-000: Vertical Movement: No Movement
[  896.679662][T16073] vivid-000: OSD Text Mode: All
[  896.681475][T16073] vivid-000: Show Border: false
[  896.683086][T16073] vivid-000: Show Square: false
[  896.684972][T16073] vivid-000: Sensor Flipped Horizontally: false
[  896.687168][T16073] vivid-000: Sensor Flipped Vertically: false
[  896.689391][T16073] vivid-000: Insert SAV Code in Image: false
[  896.691669][T16073] vivid-000: Insert EAV Code in Image: false
[  896.693770][T16073] vivid-000: Insert Video Guard Band: false
[  896.695883][T16073] vivid-000: Reduced Framerate: false
[  896.697802][T16073] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  896.700444][T16073] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  896.703110][T16073] vivid-000: Enable Capture Cropping: true grabbed
[  896.705390][T16073] vivid-000: Enable Capture Composing: true grabbed
[  896.707697][T16073] vivid-000: Enable Capture Scaler: true grabbed
[  896.709882][T16073] vivid-000: Timestamp Source: End of Frame
[  896.712728][T16073] vivid-000: Colorspace: sRGB
[  896.714922][T16073] vivid-000: Transfer Function: Default
[  896.717138][T16073] vivid-000: Y'CbCr Encoding: Default
[  896.719142][T16073] vivid-000: HSV Encoding: Hue 0-179
[  896.722084][T16073] vivid-000: Quantization: Default
[  896.724315][T16073] vivid-000: Apply Alpha To Red Only: false
[  896.726858][T16073] vivid-000: Standard Aspect Ratio: 4x3
[  896.729022][T16073] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  896.732451][T16073] vivid-000: DV Timings: 640x480p59 inactive
[  896.734814][T16073] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  896.737540][T16073] vivid-000: Maximum EDID Blocks: 2
[  896.739916][T16073] vivid-000: Limited RGB Range (16-235): false
[  896.744875][T16073] vivid-000: Rx RGB Quantization Range: Automatic
[  896.747360][T16073] vivid-000: Power Present: 0x00000001
[  896.749643][T16073] tpg source WxH: 320x240 (Y'CbCr)
[  896.752879][T16073] tpg field: 1
[  896.755456][T16073] tpg crop: (0,0)/320x240
[  896.757988][T16073] tpg compose: (0,0)/320x240
[  896.759770][T16073] tpg colorspace: 8
[  896.763036][T16073] tpg transfer function: 0/2
[  896.764904][T16073] tpg Y'CbCr encoding: 0/1
[  896.766751][T16073] tpg quantization: 0/2
[  896.768419][T16073] tpg RGB range: 0/2
[  896.769861][T16073] vivid-000: ==================  END STATUS  ==================
[  896.790816][   T67] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  896.940797][   T67] usb 6-1: Using ep0 maxpacket: 8
[  896.946046][   T67] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  896.950901][   T67] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  896.957385][   T67] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  896.962315][   T67] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  896.967998][   T67] usb 6-1: config 0 descriptor??
[  896.976478][   T67] iowarrior 6-1:0.0: no interrupt-in endpoint found
[  899.571115][ T1455] usb 6-1: USB disconnect, device number 8
[  900.208323][T16095] vivid-000: =================  START STATUS  =================
[  900.260239][T16095] vivid-000: Test Pattern: 75% Colorbar
[  900.273331][T16095] vivid-000: Fill Percentage of Frame: 100
[  900.303831][T16095] vivid-000: Horizontal Movement: Move Left
[  900.320038][T16095] vivid-000: Vertical Movement: No Movement
[  900.348310][T16095] vivid-000: OSD Text Mode: All
[  900.358791][T16095] vivid-000: Show Border: false
[  900.367344][T16095] vivid-000: Show Square: false
[  900.376245][T16095] vivid-000: Sensor Flipped Horizontally: false
[  900.386585][T16095] vivid-000: Sensor Flipped Vertically: false
[  900.399049][T16095] vivid-000: Insert SAV Code in Image: false
[  900.407776][T16095] vivid-000: Insert EAV Code in Image: false
[  900.418264][T16095] vivid-000: Insert Video Guard Band: false
[  900.429129][T16095] vivid-000: Reduced Framerate: false
[  900.437490][T16095] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  900.451001][T16095] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  900.461219][T16095] vivid-000: Enable Capture Cropping: true
[  900.472778][T16095] vivid-000: Enable Capture Composing: true
[  900.483034][T16095] vivid-000: Enable Capture Scaler: true
[  900.493892][T16095] vivid-000: Timestamp Source: End of Frame
[  900.503355][T16095] vivid-000: Colorspace: sRGB
[  900.513399][T16095] vivid-000: Transfer Function: Default
[  900.522538][T16095] vivid-000: Y'CbCr Encoding: Default
[  900.532763][T16095] vivid-000: HSV Encoding: Hue 0-179
[  900.541982][T16095] vivid-000: Quantization: Default
[  900.549317][T16095] vivid-000: Apply Alpha To Red Only: false
[  900.558987][T16095] vivid-000: Standard Aspect Ratio: 4x3
[  900.569242][T16095] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  900.583827][T16095] vivid-000: DV Timings: 640x480p59 inactive
[  900.600193][T16095] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  900.605389][T16095] vivid-000: Maximum EDID Blocks: 2
[  900.607633][T16095] vivid-000: Limited RGB Range (16-235): false
[  900.609893][T16095] vivid-000: Rx RGB Quantization Range: Automatic
[  900.612157][T16095] vivid-000: Power Present: 0x00000001
[  900.614098][T16095] tpg source WxH: 320x240 (Y'CbCr)
[  900.615883][T16095] tpg field: 1
[  900.617128][T16095] tpg crop: (0,0)/320x240
[  900.618662][T16095] tpg compose: (0,0)/320x240
[  900.620292][T16095] tpg colorspace: 8
[  900.621704][T16095] tpg transfer function: 0/2
[  900.623383][T16095] tpg Y'CbCr encoding: 0/1
[  900.625750][T16095] tpg quantization: 0/2
[  900.627860][T16095] tpg RGB range: 0/2
[  900.630631][T16095] vivid-000: ==================  END STATUS  ==================
[  902.920821][   T67] usb 12-1: new high-speed USB device number 5 using dummy_hcd
[  904.180829][   T67] usb 12-1: Using ep0 maxpacket: 8
[  905.440423][   T67] usb 12-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  905.485357][   T67] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  905.490918][   T67] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  905.501219][   T67] usb 12-1: config 0 descriptor??
[  905.522475][   T67] iowarrior 12-1:0.0: no interrupt-in endpoint found
[  905.530587][T16133] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2456'.
[  905.692166][ T6053] usb 12-1: USB disconnect, device number 5
[  909.072333][T16182] vivid-000: =================  START STATUS  =================
[  909.076565][T16182] vivid-000: Test Pattern: 75% Colorbar
[  909.079873][T16182] vivid-000: Fill Percentage of Frame: 100
[  909.083947][T16182] vivid-000: Horizontal Movement: Move Left
[  909.090597][T16182] vivid-000: Vertical Movement: No Movement
[  909.096401][T16182] vivid-000: OSD Text Mode: All
[  909.098613][T16182] vivid-000: Show Border: false
[  909.101074][T16182] vivid-000: Show Square: false
[  909.103741][T16182] vivid-000: Sensor Flipped Horizontally: false
[  909.106401][T16182] vivid-000: Sensor Flipped Vertically: false
[  909.110140][T16182] vivid-000: Insert SAV Code in Image: false
[  909.114257][T16182] vivid-000: Insert EAV Code in Image: false
[  909.121481][T16182] vivid-000: Insert Video Guard Band: false
[  909.124357][T16182] vivid-000: Reduced Framerate: false
[  909.129727][T16182] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  909.133526][T16182] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  909.136728][T16182] vivid-000: Enable Capture Cropping: true
[  909.138859][T16182] vivid-000: Enable Capture Composing: true
[  909.141054][T16182] vivid-000: Enable Capture Scaler: true
[  909.143069][T16182] vivid-000: Timestamp Source: End of Frame
[  909.145211][T16182] vivid-000: Colorspace: sRGB
[  909.147161][T16182] vivid-000: Transfer Function: Default
[  909.149186][T16182] vivid-000: Y'CbCr Encoding: Default
[  909.151042][T16182] vivid-000: HSV Encoding: Hue 0-179
[  909.152890][T16182] vivid-000: Quantization: Default
[  909.155263][T16182] vivid-000: Apply Alpha To Red Only: false
[  909.158347][T16182] vivid-000: Standard Aspect Ratio: 4x3
[  909.161660][T16182] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  909.169231][T16182] vivid-000: DV Timings: 640x480p59 inactive
[  909.172221][T16182] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  909.176961][T16182] vivid-000: Maximum EDID Blocks: 2
[  909.179412][T16182] vivid-000: Limited RGB Range (16-235): false
[  909.182291][T16182] vivid-000: Rx RGB Quantization Range: Automatic
[  909.185072][T16182] vivid-000: Power Present: 0x00000001
[  909.187572][T16182] tpg source WxH: 320x240 (Y'CbCr)
[  909.189859][T16182] tpg field: 1
[  909.191459][T16182] tpg crop: (0,0)/320x240
[  909.193456][T16182] tpg compose: (0,0)/320x240
[  909.195527][T16182] tpg colorspace: 8
[  909.197016][T16182] tpg transfer function: 0/2
[  909.198653][T16182] tpg Y'CbCr encoding: 0/1
[  909.200402][T16182] tpg quantization: 0/2
[  909.202327][T16182] tpg RGB range: 0/2
[  909.204182][T16182] vivid-000: ==================  END STATUS  ==================
[  916.409734][T16253] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2491'.
[  930.425959][T16428] fuse: Bad value for 'fd'
[  931.036460][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  931.038478][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  933.102291][ T5986] Bluetooth: hci0: command 0x0406 tx timeout
[  935.038425][T16522] fuse: Bad value for 'fd'
[  937.375976][T16572] fuse: Unknown parameter '0x0000000000000004'
[  941.943848][T16671] fuse: Bad value for 'rootmode'
[  944.570899][   T24] usb 13-1: new high-speed USB device number 6 using dummy_hcd
[  944.720858][   T24] usb 13-1: Using ep0 maxpacket: 8
[  944.726794][   T24] usb 13-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  944.731130][   T24] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  944.734804][   T24] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  944.739854][   T24] usb 13-1: config 0 descriptor??
[  944.742877][   T24] iowarrior 13-1:0.0: no interrupt-in endpoint found
[  945.331135][T16746] fuse: Unknown parameter '0x0000000000000004'
[  946.500809][   T54] usb 14-1: new high-speed USB device number 6 using dummy_hcd
[  946.690777][   T54] usb 14-1: Using ep0 maxpacket: 8
[  946.694358][   T54] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  946.697426][   T54] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  946.700224][   T54] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  946.713686][   T54] usb 14-1: config 0 descriptor??
[  946.717853][   T54] iowarrior 14-1:0.0: no interrupt-in endpoint found
[  947.352604][   T24] usb 13-1: USB disconnect, device number 6
[  949.270494][ T6053] usb 14-1: USB disconnect, device number 6
[  952.576631][T16882] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2639'.
[  952.580504][T16882] bond0: Unable to set up delay as MII monitoring is disabled
[  952.655434][T16884] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2640'.
[  954.139316][T16923] ubi31: attaching mtd0
[  954.151195][T16923] ubi31: scanning is finished
[  954.153458][T16923] ubi31: empty MTD device detected
[  954.241160][T16923] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  954.244718][T16923] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  954.247875][T16923] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  954.250368][T16923] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  954.253289][T16923] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  954.255802][T16923] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  954.258800][T16923] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2017296558
[  954.263748][T16923] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  954.268663][T16924] ubi31: background thread "ubi_bgt31d" started, PID 16924
[  954.520875][   T24] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  954.675031][   T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  954.679107][   T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  954.686615][   T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  954.690310][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  954.693170][   T24] usb 6-1: Product: syz
[  954.694541][   T24] usb 6-1: Manufacturer: syz
[  954.696154][   T24] usb 6-1: SerialNumber: syz
[  954.700579][T16926] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  955.717394][   T24] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42
[  955.719459][   T24] cdc_ncm 6-1:1.0: dwNtbInMaxSize=2 is too small. Using 2048
[  955.722189][   T24] cdc_ncm 6-1:1.0: setting rx_max = 2048
[  955.918182][   T24] cdc_ncm 6-1:1.0: setting tx_max = 28
[  955.946756][   T24] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  955.964111][   T24] usb 6-1: USB disconnect, device number 9
[  955.967588][   T24] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP)
[  956.148743][T16956] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2663'.
[  956.780746][   T54] usb 13-1: new high-speed USB device number 7 using dummy_hcd
[  956.943466][   T54] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  956.946721][   T54] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 2
[  956.949504][   T54] usb 13-1: config 1 has no interface number 0
[  956.951680][   T54] usb 13-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  956.958893][   T54] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  956.961816][   T54] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  956.964357][   T54] usb 13-1: Product: syz
[  956.965917][   T54] usb 13-1: Manufacturer: syz
[  956.967488][   T54] usb 13-1: SerialNumber: syz
[  956.973372][   T54] usb 13-1: selecting invalid altsetting 1
[  957.175846][   T54] cdc_ncm 13-1:1.1: bind() failure
[  957.188249][   T54] usb 13-1: USB disconnect, device number 7
[  957.760728][T16981] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2672'.
[  958.252386][T16994] capability: warning: `syz.8.2676' uses 32-bit capabilities (legacy support in use)
[  958.258030][T16994] GUP no longer grows the stack in syz.8.2676 (16994): 80004000-8000a000 (80002000)
[  958.262269][T16994] CPU: 0 UID: 0 PID: 16994 Comm: syz.8.2676 Not tainted syzkaller #0 PREEMPT(full) 
[  958.262304][T16994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  958.262315][T16994] Call Trace:
[  958.262321][T16994]  <TASK>
[  958.262328][T16994]  dump_stack_lvl+0x16c/0x1f0
[  958.262376][T16994]  gup_vma_lookup+0x1d2/0x220
[  958.262418][T16994]  __get_user_pages+0x243/0x34a0
[  958.262450][T16994]  ? find_held_lock+0x2b/0x80
[  958.262468][T16994]  ? __pfx___get_user_pages+0x10/0x10
[  958.262497][T16994]  get_user_pages_remote+0x243/0xab0
[  958.262520][T16994]  ? mas_parent_gap+0x6f0/0x7b0
[  958.262543][T16994]  ? __pfx_get_user_pages_remote+0x10/0x10
[  958.262576][T16994]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  958.262606][T16994]  __access_remote_vm+0x24d/0x850
[  958.262631][T16994]  ? do_raw_spin_lock+0x12c/0x2b0
[  958.262653][T16994]  ? __pfx___access_remote_vm+0x10/0x10
[  958.262680][T16994]  proc_pid_cmdline_read+0x4de/0x8e0
[  958.262699][T16994]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  958.262717][T16994]  ? rw_verify_area+0xcf/0x6c0
[  958.262734][T16994]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  958.262748][T16994]  vfs_readv+0x5be/0x8b0
[  958.262769][T16994]  ? __pfx_vfs_readv+0x10/0x10
[  958.262798][T16994]  ? __fget_files+0x20e/0x3c0
[  958.262821][T16994]  ? do_preadv+0x1a6/0x270
[  958.262835][T16994]  do_preadv+0x1a6/0x270
[  958.262852][T16994]  ? __pfx_do_preadv+0x10/0x10
[  958.262869][T16994]  ? rcu_is_watching+0x12/0xc0
[  958.262887][T16994]  __do_fast_syscall_32+0x7c/0x300
[  958.262903][T16994]  do_fast_syscall_32+0x32/0x80
[  958.262917][T16994]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  958.262936][T16994] RIP: 0023:0xf70be579
[  958.262948][T16994] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  958.262962][T16994] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 000000000000014d
[  958.262978][T16994] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000040
[  958.262988][T16994] RDX: 0000000000000001 RSI: 0000000000000300 RDI: 0000000000000000
[  958.262997][T16994] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  958.263006][T16994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  958.263015][T16994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  958.263034][T16994]  </TASK>
[  958.918377][T17014] random: crng reseeded on system resumption
[  958.935320][T17014] Restarting kernel threads ...
[  958.937711][T17014] Done restarting kernel threads.
[  959.092475][T17024] syz_tun: entered allmulticast mode
[  959.123246][    C2] mroute: pending queue full, dropping entries
[  959.146144][T17024] mroute: pending queue full, dropping entries
[  959.149784][T17024] mroute: pending queue full, dropping entries
[  959.154220][T17024] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2687'.
[  959.159164][T17024] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2687'.
[  959.165851][T17023] syz_tun: left allmulticast mode
[  959.250817][   T24] usb 14-1: new high-speed USB device number 7 using dummy_hcd
[  959.420878][   T24] usb 14-1: Using ep0 maxpacket: 8
[  959.424435][   T24] usb 14-1: config 0 has an invalid interface number: 1 but max is 0
[  959.427015][   T24] usb 14-1: config 0 has no interface number 0
[  959.429066][   T24] usb 14-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  959.433111][   T24] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  959.436097][   T24] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  959.439989][   T24] usb 14-1: config 0 descriptor??
[  959.448518][   T24] iowarrior 14-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  959.580738][ T5986] Bluetooth: hci0: command 0x0406 tx timeout
[  959.930766][   T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  960.100770][   T24] usb 6-1: Using ep0 maxpacket: 32
[  960.104243][   T24] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  960.106953][   T24] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  960.109717][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  960.112634][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  960.115701][   T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  960.118784][   T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  960.122889][   T24] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  960.125784][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  960.129894][   T24] usb 6-1: config 0 descriptor??
[  960.338359][   T24] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  960.353615][   T24] usb 6-1: USB disconnect, device number 10
[  960.361223][   T24] usblp1: removed
[  960.714077][ T1455] usb 14-1: USB disconnect, device number 7
[  960.870751][   T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  961.021861][   T24] usb 6-1: Using ep0 maxpacket: 32
[  961.025105][   T24] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  961.029613][   T24] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  961.033291][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  961.036273][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  961.039523][   T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  961.043128][   T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  961.047354][   T24] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  961.050425][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  961.054635][   T24] usb 6-1: config 0 descriptor??
[  961.260511][T17035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  961.264682][T17035] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  961.268408][T17035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  961.271320][T17035] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  961.275977][   T24] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  961.282705][   T24] usb 6-1: USB disconnect, device number 11
[  961.286795][   T24] usblp0: removed
[  961.780775][   T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  961.940759][   T24] usb 6-1: Using ep0 maxpacket: 8
[  961.943751][   T24] usb 6-1: config 0 has an invalid interface number: 54 but max is 0
[  961.946871][   T24] usb 6-1: config 0 has no interface number 0
[  961.948838][   T24] usb 6-1: config 0 interface 54 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  961.952184][   T24] usb 6-1: config 0 interface 54 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  961.955284][   T24] usb 6-1: config 0 interface 54 has no altsetting 0
[  961.959338][   T24] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  961.962271][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  961.964776][   T24] usb 6-1: Product: syz
[  961.966155][   T24] usb 6-1: Manufacturer: syz
[  961.967666][   T24] usb 6-1: SerialNumber: syz
[  961.972531][   T24] usb 6-1: config 0 descriptor??
[  962.179446][T17035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  962.183402][T17035] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  962.191356][   T24] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  962.193550][   T24] gspca_sonixj: reg_w1 err -71
[  962.195088][   T24] sonixj 6-1:0.54: probe with driver sonixj failed with error -71
[  962.200273][   T24] usb 6-1: USB disconnect, device number 12
[  962.291585][   T67] usb 12-1: new high-speed USB device number 6 using dummy_hcd
[  962.450743][   T67] usb 12-1: Using ep0 maxpacket: 8
[  962.453918][   T67] usb 12-1: unable to get BOS descriptor or descriptor too short
[  962.461467][   T67] usb 12-1: config 4 has an invalid interface number: 147 but max is 0
[  962.470713][   T67] usb 12-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  962.477215][   T67] usb 12-1: config 4 has no interface number 0
[  962.481559][   T67] usb 12-1: string descriptor 0 read error: -22
[  962.483500][   T67] usb 12-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  962.486222][   T67] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  962.502666][   T67] usb 12-1: Found UVC 0.02 device <unnamed> (04f2:b746)
[  962.505446][   T67] usb 12-1: No streaming interface found for terminal 6.
[  962.700075][   T67] usb 12-1: USB disconnect, device number 6
[  963.010056][T17081] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2704'.
[  963.297509][T17086] input: syz1 as /devices/virtual/input/input19
[  963.673970][T17088] Illegal XDP return value 4294967274 on prog  (id 325) dev syz_tun, expect packet loss!
[  963.700743][T17090] syz_tun: entered allmulticast mode
[  963.757170][T17095] mroute: pending queue full, dropping entries
[  963.760467][T17095] mroute: pending queue full, dropping entries
[  963.764729][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2706'.
[  963.769209][T17095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2706'.
[  963.781816][    C3] mroute: pending queue full, dropping entries
[  963.970791][T15092] usb 13-1: new high-speed USB device number 8 using dummy_hcd
[  964.120776][T15092] usb 13-1: Using ep0 maxpacket: 16
[  964.127300][T15092] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  964.137621][T15092] usb 13-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  964.148484][T15092] usb 13-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  964.162486][T15092] usb 13-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  964.173429][T17089] syz_tun: left allmulticast mode
[  964.175091][T15092] usb 13-1: Manufacturer: syz
[  964.185015][T15092] usb 13-1: config 0 descriptor??
[  964.423715][T17094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  964.434216][T17094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  964.630920][ T1455] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  964.783054][ T1455] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  964.785830][ T1455] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  964.788993][ T1455] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  964.791993][ T1455] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  964.796671][ T1455] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  964.800260][ T1455] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  964.811639][ T1455] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  964.814783][ T1455] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  964.817780][ T1455] usb 6-1: Product: syz
[  964.819117][ T1455] usb 6-1: Manufacturer: syz
[  964.828516][T17099] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  964.838644][ T1455] cdc_wdm 6-1:1.0: skipping garbage
[  964.840381][ T1455] cdc_wdm 6-1:1.0: skipping garbage
[  964.844562][ T1455] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  964.846421][ T1455] cdc_wdm 6-1:1.0: Unknown control protocol
[  964.863519][T17101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  964.866436][T17101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  965.037745][    C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  965.040627][    C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  965.043412][    C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  965.046162][    C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  965.049003][    C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  965.051855][    C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  965.055101][    C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  965.057850][    C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  965.060758][    C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  965.063484][    C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  965.066224][    C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  965.068988][    C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  965.071805][    C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  965.074535][    C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  965.077355][    C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  965.080265][    C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  965.083212][    C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  965.085976][    C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  965.088794][    C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  965.091532][    C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  965.099200][T15092] usb 6-1: USB disconnect, device number 13
[  965.102079][    C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  966.897143][T17125] syz_tun: entered allmulticast mode
[  966.925016][T17125] mroute: pending queue full, dropping entries
[  966.929539][T17124] syz_tun: left allmulticast mode
[  966.979155][T17127] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2721'.
[  967.094499][ T1455] usb 13-1: USB disconnect, device number 8
[  968.763111][T17161] tmpfs: Bad value for 'mpol'
[  969.202872][T17176] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  970.708101][T17209] tmpfs: Bad value for 'mpol'
[  970.786315][T17211] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  971.220793][ T6079] usb 14-1: new high-speed USB device number 8 using dummy_hcd
[  971.370830][ T6079] usb 14-1: Using ep0 maxpacket: 32
[  971.374662][ T6079] usb 14-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  971.377668][ T6079] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  971.382689][ T6079] usb 14-1: config 0 descriptor??
[  971.530915][ T1455] usb 12-1: new high-speed USB device number 7 using dummy_hcd
[  971.589748][ T6079] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  971.595843][ T6079] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  971.599528][ T6079] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  971.602433][ T6079] usb 14-1: media controller created
[  971.624305][ T6079] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  971.700758][ T1455] usb 12-1: Using ep0 maxpacket: 32
[  971.704652][ T1455] usb 12-1: config 1 has an invalid interface number: 232 but max is 0
[  971.707341][ T1455] usb 12-1: config 1 has no interface number 0
[  971.709343][ T1455] usb 12-1: config 1 interface 232 has no altsetting 0
[  971.713606][ T1455] usb 12-1: New USB device found, idVendor=174f, idProduct=8a34, bcdDevice=fd.d5
[  971.716453][ T1455] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  971.722144][ T1455] usb 12-1: Product: syz
[  971.723717][ T1455] usb 12-1: Manufacturer: syz
[  971.725333][ T1455] usb 12-1: SerialNumber: syz
[  971.833956][T17230] syz_tun: entered allmulticast mode
[  971.854768][T17230] mroute: pending queue full, dropping entries
[  971.858626][T17229] syz_tun: left allmulticast mode
[  972.135164][ T1455] usb 12-1: Found UVC 0.00 device syz (174f:8a34)
[  972.137211][ T1455] usb 12-1: No valid video chain found.
[  972.143657][ T1455] usb 12-1: USB disconnect, device number 7
[  972.412383][ T6079] az6027: usb out operation failed. (-71)
[  972.414445][ T6079] stb0899_attach: Driver disabled by Kconfig
[  972.416398][ T6079] az6027: no front-end attached
[  972.416398][ T6079] 
[  972.419503][ T6079] az6027: usb out operation failed. (-71)
[  972.421997][ T6079] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  972.428112][ T6079] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb14/14-1/input/input20
[  972.435192][ T6079] dvb-usb: schedule remote query interval to 400 msecs.
[  972.437552][ T6079] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  972.443875][ T6079] usb 14-1: USB disconnect, device number 8
[  972.466415][ T6079] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  973.140779][ T6079] usb 13-1: new high-speed USB device number 9 using dummy_hcd
[  973.290729][ T6079] usb 13-1: Using ep0 maxpacket: 16
[  973.298452][ T6079] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  973.302197][ T6079] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  973.317016][ T6079] usb 13-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  973.319939][ T6079] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  973.323257][ T6079] usb 13-1: Product: syz
[  973.324693][ T6079] usb 13-1: Manufacturer: syz
[  973.328258][ T6079] usb 13-1: SerialNumber: syz
[  973.337437][ T6079] usb 13-1: config 0 descriptor??
[  973.345208][ T6079] em28xx 13-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  973.349460][ T6079] em28xx 13-1:0.0: Audio interface 0 found (Vendor Class)
[  973.910902][ T1455] usb 12-1: new high-speed USB device number 8 using dummy_hcd
[  973.947965][ T6079] em28xx 13-1:0.0: unknown em28xx chip ID (0)
[  973.950785][ T6079] em28xx 13-1:0.0: Config register raw data: 0xfffffffb
[  974.074449][ T1455] usb 12-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  974.078272][ T1455] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  974.082473][ T1455] usb 12-1: Product: syz
[  974.084253][ T1455] usb 12-1: Manufacturer: syz
[  974.086226][ T1455] usb 12-1: SerialNumber: syz
[  974.093322][ T1455] usb 12-1: config 0 descriptor??
[  974.155195][T17266] syz_tun: entered allmulticast mode
[  974.179958][T17265] syz_tun: left allmulticast mode
[  974.299065][ T1455] hso 12-1:0.0: Failed to find BULK IN ep
[  974.302328][ T1455] usb-storage 12-1:0.0: USB Mass Storage device detected
[  974.411124][   T54] usb 14-1: new high-speed USB device number 9 using dummy_hcd
[  974.499568][ T1455] usb 12-1: USB disconnect, device number 8
[  974.558434][ T6079] em28xx 13-1:0.0: Unknown AC97 audio processor detected!
[  974.562447][ T6079] em28xx 13-1:0.0: couldn't setup AC97 register 2
[  974.564866][ T6079] em28xx 13-1:0.0: couldn't setup AC97 register 4
[  974.570750][   T54] usb 14-1: Using ep0 maxpacket: 8
[  974.573686][   T54] usb 14-1: config 0 has an invalid interface number: 1 but max is 0
[  974.576294][   T54] usb 14-1: config 0 has no interface number 0
[  974.578496][   T54] usb 14-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  974.581974][   T54] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  974.584857][   T54] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  974.588514][   T54] usb 14-1: config 0 descriptor??
[  974.594061][   T54] iowarrior 14-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  974.969338][ T6079] em28xx 13-1:0.0: couldn't setup AC97 register 6
[  974.972905][ T6079] em28xx 13-1:0.0: couldn't setup AC97 register 54
[  974.975218][ T6079] em28xx 13-1:0.0: couldn't setup AC97 register 56
[  974.979299][ T6079] usb 13-1: USB disconnect, device number 9
[  975.760833][T12964] usb 13-1: new high-speed USB device number 10 using dummy_hcd
[  975.822389][T14841] usb 14-1: USB disconnect, device number 9
[  975.914050][T12964] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  975.918468][T12964] usb 13-1: config 0 has no interfaces?
[  975.920935][T12964] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  975.924595][T12964] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  975.928808][T12964] usb 13-1: config 0 descriptor??
[  976.115278][T17300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2781'.
[  976.145556][T17292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  976.149904][T17292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  976.154854][ T5992] Bluetooth: hci3: adv larger than maximum supported
[  976.154893][ T5992] Bluetooth: hci3: Malformed LE Event: 0x0d
[  976.155089][   T54] usb 13-1: USB disconnect, device number 10
[  976.417261][T17314] _ÐZ`Ô€@ÿÃ: entered promiscuous mode
[  976.560799][T15092] usb 12-1: new low-speed USB device number 9 using dummy_hcd
[  976.712759][T15092] usb 12-1: unable to get BOS descriptor or descriptor too short
[  976.716526][T15092] usb 12-1: config 7 has an invalid interface number: 199 but max is 0
[  976.719007][T15092] usb 12-1: config 7 has no interface number 0
[  976.721170][T15092] usb 12-1: config 7 interface 199 has no altsetting 0
[  976.730868][T15092] usb 12-1: string descriptor 0 read error: -22
[  976.733055][T15092] usb 12-1: New USB device found, idVendor=0c45, idProduct=6282, bcdDevice=cb.15
[  976.735887][T15092] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  976.752795][T15092] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6282
[  976.947486][T15092] gspca_sn9c20x: Write register 1000 failed -71
[  976.949523][T15092] gspca_sn9c20x: Device initialization failed
[  976.952482][T15092] gspca_sn9c20x 12-1:7.199: probe with driver gspca_sn9c20x failed with error -71
[  976.960924][T15092] usb 12-1: USB disconnect, device number 9
[  977.458442][T17331] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2794'.
[  977.730736][T15092] usb 14-1: new high-speed USB device number 10 using dummy_hcd
[  977.801572][   T10] usb 13-1: new high-speed USB device number 11 using dummy_hcd
[  977.880823][T15092] usb 14-1: Using ep0 maxpacket: 8
[  977.883799][T15092] usb 14-1: config 0 has an invalid interface number: 1 but max is 0
[  977.886382][T15092] usb 14-1: config 0 has no interface number 0
[  977.888364][T15092] usb 14-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  977.893540][T15092] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  977.896476][T15092] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  977.900362][T15092] usb 14-1: config 0 descriptor??
[  977.905902][T15092] iowarrior 14-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  977.950827][   T10] usb 13-1: Using ep0 maxpacket: 16
[  977.955834][   T10] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  977.959609][   T10] usb 13-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  977.964959][   T10] usb 13-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  977.967953][   T10] usb 13-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  977.971155][   T10] usb 13-1: Manufacturer: syz
[  977.975950][   T10] usb 13-1: config 0 descriptor??
[  978.183572][T17341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  978.186269][T17341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  978.338545][T17349] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2802'.
[  978.377392][T17347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2800'.
[  978.388099][T17347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2800'.
[  978.391118][T17347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2800'.
[  978.394269][T17347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2800'.
[  978.865830][T17368] netfs: Couldn't get user pages (rc=-14)
[  978.868371][T17368] netfs: Zero-sized read [R=1]
[  979.185379][   T10] usb 14-1: USB disconnect, device number 10
[  979.760499][T17396] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2814'.
[  980.577871][T15092] usb 13-1: USB disconnect, device number 11
[  980.692053][T17411] syz_tun: entered allmulticast mode
[  980.703798][T17410] syz_tun: left allmulticast mode
[  980.744348][T17413] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2821'.
[  981.380901][T15092] usb 12-1: new high-speed USB device number 10 using dummy_hcd
[  981.471294][T17426] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2826'.
[  981.530734][T15092] usb 12-1: Using ep0 maxpacket: 16
[  981.533814][T15092] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  981.538114][T15092] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  981.548156][T15092] usb 12-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  981.552274][T15092] usb 12-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  981.555971][T15092] usb 12-1: Manufacturer: syz
[  981.560048][T15092] usb 12-1: config 0 descriptor??
[  981.767776][T17423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  981.771225][T17423] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  982.376582][T17437] syz_tun: entered allmulticast mode
[  982.400275][T17436] syz_tun: left allmulticast mode
[  983.570807][ T1455] usb 14-1: new full-speed USB device number 11 using dummy_hcd
[  983.725114][ T1455] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  983.729990][ T1455] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  983.735069][ T1455] usb 14-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  983.741861][ T1455] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  983.745939][ T1455] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  983.749474][ T1455] usb 14-1: Product: syz
[  983.751544][ T1455] usb 14-1: Manufacturer: syz
[  983.753673][ T1455] usb 14-1: SerialNumber: syz
[  983.758799][T17443] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[  984.148529][ T8714] usb 12-1: USB disconnect, device number 10
[  984.774740][ T1455] cdc_ncm 14-1:1.0: bind() failure
[  984.784926][ T1455] cdc_ncm 14-1:1.1: probe with driver cdc_ncm failed with error -71
[  984.788297][ T1455] cdc_mbim 14-1:1.1: probe with driver cdc_mbim failed with error -71
[  984.792716][ T1455] usbtest 14-1:1.1: probe with driver usbtest failed with error -71
[  984.796851][ T1455] usb 14-1: USB disconnect, device number 11
[  985.500819][   T10] usb 12-1: new high-speed USB device number 11 using dummy_hcd
[  985.660772][   T10] usb 12-1: Using ep0 maxpacket: 16
[  985.670597][   T10] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  985.674308][   T10] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  985.683271][   T10] usb 12-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  985.686137][   T10] usb 12-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  985.688683][   T10] usb 12-1: Manufacturer: syz
[  985.699320][   T10] usb 12-1: config 0 descriptor??
[  985.830784][ T5986] Bluetooth: hci4: command 0x0406 tx timeout
[  985.904268][T17476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  985.907352][T17476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  986.150871][   T10] usb 13-1: new high-speed USB device number 12 using dummy_hcd
[  986.322049][   T10] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  986.325259][   T10] usb 13-1: config 0 has no interfaces?
[  986.327092][   T10] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  986.329953][   T10] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  986.334462][   T10] usb 13-1: config 0 descriptor??
[  986.543228][T17496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  986.546071][T17496] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  986.550500][T14841] usb 13-1: USB disconnect, device number 12
[  987.578323][T17527] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2865'.
[  987.583275][T17527] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2865'.
[  987.891110][ T8714] usb 13-1: new full-speed USB device number 13 using dummy_hcd
[  988.042552][ T8714] usb 13-1: config 5 has an invalid interface number: 3 but max is 0
[  988.046010][ T8714] usb 13-1: config 5 has no interface number 0
[  988.050651][ T8714] usb 13-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36
[  988.054758][ T8714] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  988.058128][ T8714] usb 13-1: Product: syz
[  988.060005][ T8714] usb 13-1: Manufacturer: syz
[  988.062120][ T8714] usb 13-1: SerialNumber: syz
[  988.069237][ T8714] ftdi_sio 13-1:5.3: FTDI USB Serial Device converter detected
[  988.073984][ T8714] ftdi_sio ttyUSB0: unknown device type: 0xfd36
[  988.274371][T17531] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2867'.
[  988.276934][ T1455] usb 12-1: USB disconnect, device number 11
[  988.288407][ T8714] usb 13-1: USB disconnect, device number 13
[  988.293478][ T8714] ftdi_sio 13-1:5.3: device disconnected
[  988.430819][T14841] usb 14-1: new high-speed USB device number 12 using dummy_hcd
[  988.582134][T14841] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  988.585559][T14841] usb 14-1: config 0 has no interfaces?
[  988.587624][T14841] usb 14-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  988.590602][T14841] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  988.595300][T14841] usb 14-1: config 0 descriptor??
[  988.804782][T17533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  988.808514][T17533] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  988.812430][T15092] usb 14-1: USB disconnect, device number 12
[  989.134176][   T40] kauditd_printk_skb: 6 callbacks suppressed
[  989.134188][   T40] audit: type=1326 audit(1758250646.840:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17534 comm="syz.7.2869" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7fc00000
[  989.301851][T13119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  989.308987][T13119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  989.314191][T13119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  989.328158][T13119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  989.333766][T13119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  989.355160][T17543] lo speed is unknown, defaulting to 1000
[  989.450178][T17543] chnl_net:caif_netlink_parms(): no params data found
[  989.532339][   T71] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  989.537940][   T71] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  989.598591][T17543] bridge0: port 1(bridge_slave_0) entered blocking state
[  989.605434][T17543] bridge0: port 1(bridge_slave_0) entered disabled state
[  989.607833][T17543] bridge_slave_0: entered allmulticast mode
[  989.610565][T17543] bridge_slave_0: entered promiscuous mode
[  989.628621][   T71] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  989.633072][   T71] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  989.644417][T17543] bridge0: port 2(bridge_slave_1) entered blocking state
[  989.646800][T17543] bridge0: port 2(bridge_slave_1) entered disabled state
[  989.649210][T17543] bridge_slave_1: entered allmulticast mode
[  989.652363][T17543] bridge_slave_1: entered promiscuous mode
[  989.704607][   T71] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  989.709093][   T71] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  989.726287][T17543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  989.734387][T17543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  989.796366][   T71] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  989.800248][   T71] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  989.840513][T17543] team0: Port device team_slave_0 added
[  989.846127][T17543] team0: Port device team_slave_1 added
[  989.904109][T17543] batman_adv: batadv0: Adding interface: batadv_slave_0
[  989.906401][T17543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  989.914622][T17543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  989.918824][T17543] batman_adv: batadv0: Adding interface: batadv_slave_1
[  989.921228][T17543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  989.929257][T17543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  989.988073][T17543] hsr_slave_0: entered promiscuous mode
[  989.990294][T17543] hsr_slave_1: entered promiscuous mode
[  989.992854][T17543] debugfs: 'hsr0' already exists in 'hsr'
[  989.994647][T17543] Cannot create hsr debugfs directory
[  990.099510][   T71] bridge_slave_1: left allmulticast mode
[  990.102313][   T71] bridge_slave_1: left promiscuous mode
[  990.104892][   T71] bridge0: port 2(bridge_slave_1) entered disabled state
[  990.110615][   T71] bridge_slave_0: left allmulticast mode
[  990.114586][   T71] bridge_slave_0: left promiscuous mode
[  990.117158][   T71] bridge0: port 1(bridge_slave_0) entered disabled state
[  990.273491][   T71] bond0 (unregistering): (slave vxlan0): Releasing backup interface
[  990.409610][   T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  990.414789][   T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  990.420221][   T71] bond0 (unregistering): Released all slaves
[  990.497273][   T71] bond1 (unregistering): Released all slaves
[  990.587143][   T71] tipc: Left network mode
[  990.820937][T17046] usb 13-1: new high-speed USB device number 14 using dummy_hcd
[  990.847052][   T71] hsr_slave_0: left promiscuous mode
[  990.849517][   T71] hsr_slave_1: left promiscuous mode
[  990.851718][   T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  990.854256][   T71] batman_adv: batadv0: Removing interface: batadv_slave_0
[  990.857124][   T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  990.859397][   T71] batman_adv: batadv0: Removing interface: batadv_slave_1
[  990.887193][   T71] veth1_macvtap: left promiscuous mode
[  990.889307][   T71] veth0_macvtap: left promiscuous mode
[  990.891528][   T71] veth1_vlan: left promiscuous mode
[  990.893522][   T71] veth0_vlan: left promiscuous mode
[  990.991430][T17046] usb 13-1: Using ep0 maxpacket: 16
[  991.000078][T17046] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  991.004852][T17046] usb 13-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  991.017829][T17046] usb 13-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  991.022627][T17046] usb 13-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  991.025638][T17046] usb 13-1: Manufacturer: syz
[  991.029315][T17046] usb 13-1: config 0 descriptor??
[  991.235751][T17563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  991.239183][T17563] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  991.322548][   T24] usb 14-1: new full-speed USB device number 13 using dummy_hcd
[  991.432080][T13119] Bluetooth: hci2: command tx timeout
[  991.493220][   T24] usb 14-1: config 5 has an invalid interface number: 3 but max is 0
[  991.496089][   T24] usb 14-1: config 5 has no interface number 0
[  991.500617][   T24] usb 14-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36
[  991.505183][   T24] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  991.508647][   T24] usb 14-1: Product: syz
[  991.510443][   T24] usb 14-1: Manufacturer: syz
[  991.512805][   T24] usb 14-1: SerialNumber: syz
[  991.519978][   T24] ftdi_sio 14-1:5.3: FTDI USB Serial Device converter detected
[  991.523684][   T24] ftdi_sio ttyUSB0: unknown device type: 0xfd36
[  991.567337][   T71] team0 (unregistering): Port device team_slave_1 removed
[  991.633332][   T71] team0 (unregistering): Port device team_slave_0 removed
[  991.724765][T17571] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2878'.
[  991.980838][T13119] Bluetooth: hci3: command 0x0406 tx timeout
[  992.154354][T17047] lo speed is unknown, defaulting to 1000
[  992.156353][T17047] syz: Port: 1 Link DOWN
[  992.165445][T17571] batadv0: entered promiscuous mode
[  992.168061][T17571] macvtap0: entered promiscuous mode
[  992.170496][T17571] macvtap0: entered allmulticast mode
[  992.173184][T17571] batadv0: entered allmulticast mode
[  992.175718][T17571] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  992.182412][T17573] batadv0: left allmulticast mode
[  992.184153][T17573] batadv0: left promiscuous mode
[  992.195541][T17047] usb 14-1: USB disconnect, device number 13
[  992.198081][T17047] ftdi_sio 14-1:5.3: device disconnected
[  992.337999][T17543] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  992.344063][T17543] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  992.348133][T17543] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  992.353358][T17543] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  992.423114][T17543] 8021q: adding VLAN 0 to HW filter on device bond0
[  992.437176][T17543] 8021q: adding VLAN 0 to HW filter on device team0
[  992.444906][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  992.448016][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  992.455542][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state
[  992.457869][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state
[  992.466157][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  992.468297][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  992.610560][T17543] 8021q: adding VLAN 0 to HW filter on device batadv0
[  992.743140][T17543] veth0_vlan: entered promiscuous mode
[  992.747938][T17543] veth1_vlan: entered promiscuous mode
[  992.762267][T17543] veth0_macvtap: entered promiscuous mode
[  992.766739][T17543] veth1_macvtap: entered promiscuous mode
[  992.777271][T17543] batman_adv: batadv0: Interface activated: batadv_slave_0
[  992.785421][T17543] batman_adv: batadv0: Interface activated: batadv_slave_1
[  992.793959][ T1148] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  992.798413][ T1148] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  992.802043][ T1148] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  992.807155][ T1148] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  992.846297][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  992.848891][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  992.860700][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  992.863930][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  993.510827][ T5992] Bluetooth: hci2: command tx timeout
[  993.573078][T15092] usb 13-1: USB disconnect, device number 14
[  993.691044][T17576] usb 12-1: new high-speed USB device number 12 using dummy_hcd
[  993.862589][T17576] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  993.866586][T17576] usb 12-1: config 0 has no interfaces?
[  993.869711][T17576] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  993.872707][T17576] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  993.878181][T17576] usb 12-1: config 0 descriptor??
[  994.085465][T17607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  994.088764][T17607] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  994.093332][T15092] usb 12-1: USB disconnect, device number 12
[  994.347342][T13119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  994.352641][T13119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  994.356309][T13119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  994.363213][T13119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  994.367937][T13119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  994.540497][T17626] chnl_net:caif_netlink_parms(): no params data found
[  994.655827][T17626] bridge0: port 1(bridge_slave_0) entered blocking state
[  994.658131][T17626] bridge0: port 1(bridge_slave_0) entered disabled state
[  994.662873][T17626] bridge_slave_0: entered allmulticast mode
[  994.666259][T17626] bridge_slave_0: entered promiscuous mode
[  994.670157][T17626] bridge0: port 2(bridge_slave_1) entered blocking state
[  994.672803][T17626] bridge0: port 2(bridge_slave_1) entered disabled state
[  994.675842][T17626] bridge_slave_1: entered allmulticast mode
[  994.679597][T17626] bridge_slave_1: entered promiscuous mode
[  994.731804][T17626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  994.744079][T17626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  994.794205][T17626] team0: Port device team_slave_0 added
[  994.797485][T17626] team0: Port device team_slave_1 added
[  994.846870][T17626] batman_adv: batadv0: Adding interface: batadv_slave_0
[  994.849852][T17626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  994.871039][T17626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  994.883325][T17626] batman_adv: batadv0: Adding interface: batadv_slave_1
[  994.886186][T17626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  994.897224][T17626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  994.983759][T17626] hsr_slave_0: entered promiscuous mode
[  994.988185][T17626] hsr_slave_1: entered promiscuous mode
[  994.992300][T17626] debugfs: 'hsr0' already exists in 'hsr'
[  994.994813][T17626] Cannot create hsr debugfs directory
[  995.451027][T17575] usb 14-1: new high-speed USB device number 14 using dummy_hcd
[  995.480939][T17047] usb 13-1: new high-speed USB device number 15 using dummy_hcd
[  995.544341][T17626] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  995.550623][T17626] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  995.557335][T17626] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  995.563144][T17626] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  995.581593][ T5992] Bluetooth: hci2: command tx timeout
[  995.620795][T17575] usb 14-1: Using ep0 maxpacket: 32
[  995.623852][T17626] 8021q: adding VLAN 0 to HW filter on device bond0
[  995.631566][T17575] usb 14-1: config 0 has an invalid interface number: 183 but max is 0
[  995.637071][T17626] 8021q: adding VLAN 0 to HW filter on device team0
[  995.637285][T17575] usb 14-1: config 0 has no interface number 0
[  995.643001][T17047] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  995.646340][T17575] usb 14-1: config 0 interface 183 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  995.647998][T17047] usb 13-1: config 0 has no interfaces?
[  995.652093][T17047] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  995.654452][   T71] bridge0: port 1(bridge_slave_0) entered blocking state
[  995.655068][T17047] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  995.657282][   T71] bridge0: port 1(bridge_slave_0) entered forwarding state
[  995.671395][T17047] usb 13-1: config 0 descriptor??
[  995.679145][T17575] usb 14-1: New USB device found, idVendor=eb1a, idProduct=e305, bcdDevice=92.53
[  995.682208][T17575] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  995.685841][T17575] usb 14-1: Product: syz
[  995.689416][T10556] bridge0: port 2(bridge_slave_1) entered blocking state
[  995.691718][T10556] bridge0: port 2(bridge_slave_1) entered forwarding state
[  995.694628][T17575] usb 14-1: Manufacturer: syz
[  995.696235][T17575] usb 14-1: SerialNumber: syz
[  995.702215][T17575] usb 14-1: config 0 descriptor??
[  995.820466][T17626] 8021q: adding VLAN 0 to HW filter on device batadv0
[  995.853508][T17626] veth0_vlan: entered promiscuous mode
[  995.860170][T17626] veth1_vlan: entered promiscuous mode
[  995.881616][ T5992] Bluetooth: hci3: adv larger than maximum supported
[  995.881632][ T5992] Bluetooth: hci3: Malformed LE Event: 0x0d
[  995.881952][T17047] usb 13-1: USB disconnect, device number 15
[  995.884085][T17626] veth0_macvtap: entered promiscuous mode
[  995.893269][T17626] veth1_macvtap: entered promiscuous mode
[  995.903212][T17626] batman_adv: batadv0: Interface activated: batadv_slave_0
[  995.910506][T17626] batman_adv: batadv0: Interface activated: batadv_slave_1
[  995.929235][ T1143] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  995.939439][   T24] usb 14-1: USB disconnect, device number 14
[  995.943983][   T71] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  995.947387][   T71] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  995.952401][   T71] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  995.999281][   T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  996.006044][   T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  996.022226][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  996.024647][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  996.423730][T17728] syz_tun: entered allmulticast mode
[  996.450996][    C2] mroute: pending queue full, dropping entries
[  996.470814][ T5992] Bluetooth: hci1: command tx timeout
[  996.479711][T17734] mroute: pending queue full, dropping entries
[  996.506289][T17727] syz_tun: left allmulticast mode
[  996.820737][   T24] usb 13-1: new high-speed USB device number 16 using dummy_hcd
[  996.840740][ T1455] usb 14-1: new high-speed USB device number 15 using dummy_hcd
[  996.970868][   T24] usb 13-1: Using ep0 maxpacket: 8
[  996.974025][   T24] usb 13-1: config 0 has an invalid interface number: 1 but max is 0
[  996.976528][   T24] usb 13-1: config 0 has no interface number 0
[  996.978444][   T24] usb 13-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  996.982056][   T24] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  996.984873][   T24] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  996.988498][   T24] usb 13-1: config 0 descriptor??
[  996.994154][   T24] iowarrior 13-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  996.997820][ T1455] usb 14-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  997.001825][ T1455] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  997.006180][ T1455] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  997.009193][ T1455] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  997.014352][ T1455] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  997.017158][ T1455] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  997.020952][ T1455] usb 14-1: config 0 descriptor??
[  997.200784][ T8714] usb 12-1: new high-speed USB device number 13 using dummy_hcd
[  997.250618][T17763] process 'syz.3.2907' launched '/dev/fd/4' with NULL argv: empty string added
[  997.352287][ T8714] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  997.355529][ T8714] usb 12-1: config 0 has no interfaces?
[  997.357277][ T8714] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  997.360102][ T8714] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  997.364512][ T8714] usb 12-1: config 0 descriptor??
[  997.599187][ T5992] Bluetooth: hci2: adv larger than maximum supported
[  997.599248][ T5992] Bluetooth: hci2: Malformed LE Event: 0x0d
[  997.604541][T17575] usb 12-1: USB disconnect, device number 13
[  997.670764][T13119] Bluetooth: hci2: command tx timeout
[  997.775869][ T1455] usbhid 14-1:0.0: can't add hid device: -71
[  997.777796][ T1455] usbhid 14-1:0.0: probe with driver usbhid failed with error -71
[  997.781857][ T1455] usb 14-1: USB disconnect, device number 15
[  998.171350][T17773] syz_tun: entered allmulticast mode
[  998.193774][T17772] syz_tun: left allmulticast mode
[  998.221532][ T8650] usb 13-1: USB disconnect, device number 16
[  998.254087][T17777] =======================================================
[  998.254087][T17777] WARNING: The mand mount option has been deprecated and
[  998.254087][T17777]          and is ignored by this kernel. Remove the mand
[  998.254087][T17777]          option from the mount to silence this warning.
[  998.254087][T17777] =======================================================
[  998.271232][T17777] overlay: Unknown parameter '/'
[  998.424232][T17786] validate_nla: 36 callbacks suppressed
[  998.424250][T17786] netlink: 'syz.9.2916': attribute type 1 has an invalid length.
[  998.462079][T17786] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  998.467465][T17786] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  998.510573][T17788] gretap1: entered promiscuous mode
[  998.516667][T17788] bond1: (slave gretap1): making interface the new active one
[  998.520347][T17788] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  998.534032][T17786] macvlan2: entered promiscuous mode
[  998.535745][T17786] macvlan2: entered allmulticast mode
[  998.537791][T17786] bond1: entered promiscuous mode
[  998.541192][T17786] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  998.545209][T17786] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  998.549477][T17786] bond1: left promiscuous mode
[  998.550812][T13119] Bluetooth: hci1: command tx timeout
[  999.000787][T17575] usb 13-1: new high-speed USB device number 17 using dummy_hcd
[  999.131272][T17795] syz_tun: entered allmulticast mode
[  999.144477][T17794] syz_tun: left allmulticast mode
[  999.190522][T17575] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  999.194437][T17575] usb 13-1: config 0 has no interfaces?
[  999.196222][T17575] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  999.199103][T17575] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  999.205325][T17575] usb 13-1: config 0 descriptor??
[  999.410302][T13119] Bluetooth: hci3: adv larger than maximum supported
[  999.410325][T13119] Bluetooth: hci3: Malformed LE Event: 0x0d
[  999.418072][ T1455] usb 13-1: USB disconnect, device number 17
[  999.609608][T17810] netlink: 'syz.9.2925': attribute type 11 has an invalid length.
[  999.613225][T17810] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2925'.
[  999.616692][T17809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  999.659451][T17818] syz_tun: entered allmulticast mode
[  999.678162][T17817] syz_tun: left allmulticast mode
[ 1000.291366][T17856] lo speed is unknown, defaulting to 1000
[ 1000.297626][T17856] lo speed is unknown, defaulting to 1000
[ 1000.300012][T17856] lo speed is unknown, defaulting to 1000
[ 1000.310310][T17856] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1000.323539][T17856] lo speed is unknown, defaulting to 1000
[ 1000.328012][T17856] lo speed is unknown, defaulting to 1000
[ 1000.330557][T17856] lo speed is unknown, defaulting to 1000
[ 1000.335342][T17856] lo speed is unknown, defaulting to 1000
[ 1000.337909][T17856] lo speed is unknown, defaulting to 1000
[ 1000.620811][T13119] Bluetooth: hci1: command tx timeout
[ 1000.870763][ T1455] usb 14-1: new high-speed USB device number 16 using dummy_hcd
[ 1001.011588][ T1455] usb 14-1: device descriptor read/64, error -71
[ 1001.250798][ T1455] usb 14-1: new high-speed USB device number 17 using dummy_hcd
[ 1001.270751][T17575] usb 13-1: new high-speed USB device number 18 using dummy_hcd
[ 1001.380802][ T1455] usb 14-1: device descriptor read/64, error -71
[ 1001.440847][T17575] usb 13-1: Using ep0 maxpacket: 8
[ 1001.448217][T17575] usb 13-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1001.451458][T17575] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1001.454051][T17575] usb 13-1: Product: syz
[ 1001.455474][T17575] usb 13-1: Manufacturer: syz
[ 1001.457262][T17575] usb 13-1: SerialNumber: syz
[ 1001.460398][T17575] usb 13-1: config 0 descriptor??
[ 1001.474525][T17882] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2953'.
[ 1001.501497][ T1455] usb usb14-port1: attempt power cycle
[ 1001.667281][T17575] usb 13-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1001.840754][ T1455] usb 14-1: new high-speed USB device number 18 using dummy_hcd
[ 1001.861180][ T1455] usb 14-1: device descriptor read/8, error -71
[ 1002.110920][ T1455] usb 14-1: new high-speed USB device number 19 using dummy_hcd
[ 1002.141379][ T1455] usb 14-1: device descriptor read/8, error -71
[ 1002.252262][ T1455] usb usb14-port1: unable to enumerate USB device
[ 1002.700906][T13119] Bluetooth: hci1: command tx timeout
[ 1003.102964][T17575] dvb_usb_rtl28xxu 13-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1003.116155][T17575] usb 13-1: USB disconnect, device number 18
[ 1003.815770][ T5992] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1003.826543][ T5992] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1003.829242][ T5992] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1003.832900][ T5992] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1003.835584][ T5992] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1003.873140][T17936] lo speed is unknown, defaulting to 1000
[ 1003.983820][T17936] chnl_net:caif_netlink_parms(): no params data found
[ 1004.033083][   T46] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1004.093980][T17936] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1004.096708][T17936] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1004.099612][T17936] bridge_slave_0: entered allmulticast mode
[ 1004.103194][T17936] bridge_slave_0: entered promiscuous mode
[ 1004.118405][   T46] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1004.132350][T17936] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1004.134646][T17936] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1004.136998][T17936] bridge_slave_1: entered allmulticast mode
[ 1004.139643][T17936] bridge_slave_1: entered promiscuous mode
[ 1004.174397][T17936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1004.178740][T17936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1004.211746][   T46] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1004.240966][T17936] team0: Port device team_slave_0 added
[ 1004.245002][T17936] team0: Port device team_slave_1 added
[ 1004.280408][T17936] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1004.283719][T17936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1004.291474][T17936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1004.312257][   T46] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1004.318921][T17936] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1004.321391][T17936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1004.329750][T17936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1004.368267][T17936] hsr_slave_0: entered promiscuous mode
[ 1004.370548][T17936] hsr_slave_1: entered promiscuous mode
[ 1004.372920][T17936] debugfs: 'hsr0' already exists in 'hsr'
[ 1004.374797][T17936] Cannot create hsr debugfs directory
[ 1004.520771][   T67] usb 13-1: new high-speed USB device number 19 using dummy_hcd
[ 1004.553512][   T46] bond1 (unregistering): (slave gretap1): Releasing active interface
[ 1004.690886][   T67] usb 13-1: Using ep0 maxpacket: 32
[ 1004.694145][   T67] usb 13-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1004.697089][   T67] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1004.702412][   T67] usb 13-1: config 0 descriptor??
[ 1004.721430][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1004.726843][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1004.732205][   T46] bond0 (unregistering): Released all slaves
[ 1004.742724][   T46] bond1 (unregistering): Released all slaves
[ 1004.827466][   T46] _ÐZ`Ô€@ÿÃ: left promiscuous mode
[ 1004.908063][   T67] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1004.912226][   T67] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1004.915613][   T67] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1004.917824][   T67] usb 13-1: media controller created
[ 1004.939674][   T67] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1004.941709][   T46] tipc: Left network mode
[ 1005.194956][   T46] hsr_slave_1: left promiscuous mode
[ 1005.197944][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1005.200370][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1005.203799][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1005.206158][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1005.226001][   T46] veth1_vlan: left promiscuous mode
[ 1005.227780][   T46] veth0_vlan: left promiscuous mode
[ 1005.309986][   T67] az6027: usb out operation failed. (-71)
[ 1005.312574][   T67] stb0899_attach: Driver disabled by Kconfig
[ 1005.314898][   T67] az6027: no front-end attached
[ 1005.314898][   T67] 
[ 1005.317494][   T67] az6027: usb out operation failed. (-71)
[ 1005.319589][   T67] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1005.323100][   T67] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb13/13-1/input/input21
[ 1005.335599][   T67] dvb-usb: schedule remote query interval to 400 msecs.
[ 1005.337895][   T67] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1005.341873][T17047] usb 12-1: new high-speed USB device number 14 using dummy_hcd
[ 1005.347925][   T67] usb 13-1: USB disconnect, device number 19
[ 1005.387934][   T67] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1005.530839][T17047] usb 12-1: Using ep0 maxpacket: 8
[ 1005.534739][T17047] usb 12-1: config 0 has an invalid interface number: 1 but max is 0
[ 1005.538064][T17047] usb 12-1: config 0 has no interface number 0
[ 1005.540473][T17047] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1005.544381][T17047] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1005.547567][T17047] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1005.551782][T17047] usb 12-1: config 0 descriptor??
[ 1005.554785][T17047] iowarrior 12-1:0.1: no interrupt-in endpoint found
[ 1005.713307][   T46] team0 (unregistering): Port device team_slave_1 removed
[ 1005.757541][T17047] usb 12-1: USB disconnect, device number 14
[ 1005.779401][   T46] team0 (unregistering): Port device team_slave_0 removed
[ 1005.903586][ T5992] Bluetooth: hci4: command tx timeout
[ 1006.484996][T17936] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1006.489196][T17936] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1006.495502][T17936] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1006.505025][T17936] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1006.552972][T17936] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1006.564446][T17936] 8021q: adding VLAN 0 to HW filter on device team0
[ 1006.570570][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1006.573017][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1006.604748][T17575] IPVS: starting estimator thread 0...
[ 1006.668251][T18018] team0: Port device bridge1 added
[ 1006.681356][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1006.684400][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1006.724543][T18019] IPVS: using max 45 ests per chain, 108000 per kthread
[ 1006.825208][T17936] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1006.962205][T17936] veth0_vlan: entered promiscuous mode
[ 1006.966924][T17936] veth1_vlan: entered promiscuous mode
[ 1006.982457][T17936] veth0_macvtap: entered promiscuous mode
[ 1006.986498][T17936] veth1_macvtap: entered promiscuous mode
[ 1006.998274][T17936] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1007.006113][T17936] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1007.013273][   T46] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1007.016091][   T46] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1007.019727][   T46] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1007.023250][   T46] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1007.050558][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1007.054419][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1007.066009][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1007.068830][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1007.370917][T18063] sp0: Synchronizing with TNC
[ 1007.539892][T18085] syz_tun: entered allmulticast mode
[ 1007.980986][ T5992] Bluetooth: hci4: command tx timeout
[ 1008.442509][T18113] syz_tun: entered allmulticast mode
[ 1008.487328][T13119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1008.491556][T13119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1008.495895][T13119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1008.499100][T13119] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1008.502587][T13119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1008.535584][T18114] lo speed is unknown, defaulting to 1000
[ 1008.651989][T18114] chnl_net:caif_netlink_parms(): no params data found
[ 1008.743517][ T1143] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1008.803847][T18114] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1008.806533][T18114] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1008.809436][T18114] bridge_slave_0: entered allmulticast mode
[ 1008.812576][T18114] bridge_slave_0: entered promiscuous mode
[ 1008.825056][ T1143] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1008.833011][T18114] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1008.836093][T18114] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1008.838660][T18114] bridge_slave_1: entered allmulticast mode
[ 1008.841524][T18114] bridge_slave_1: entered promiscuous mode
[ 1008.885599][T18114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1008.890404][T18114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1008.955029][ T1143] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1008.964324][T18114] team0: Port device team_slave_0 added
[ 1008.969376][T18114] team0: Port device team_slave_1 added
[ 1009.002744][T18114] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1009.005398][T18114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1009.014136][T18114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1009.018814][T18114] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1009.021405][T18114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1009.032357][T18114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1009.034769][T18101] [U] 
[ 1009.084505][ T1143] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1009.134871][T18114] hsr_slave_0: entered promiscuous mode
[ 1009.137257][T18114] hsr_slave_1: entered promiscuous mode
[ 1009.139520][T18114] debugfs: 'hsr0' already exists in 'hsr'
[ 1009.144288][T18114] Cannot create hsr debugfs directory
[ 1009.277016][ T1143] bridge_slave_1: left allmulticast mode
[ 1009.279102][ T1143] bridge_slave_1: left promiscuous mode
[ 1009.281292][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1009.286155][ T1143] bridge_slave_0: left allmulticast mode
[ 1009.290167][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1009.480316][ T1143] team0: Port device bridge1 removed
[ 1009.618071][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1009.623172][ T1143] bond0 (unregistering): Released all slaves
[ 1009.693395][ T1143] tipc: Left network mode
[ 1009.935948][ T1143] hsr_slave_0: left promiscuous mode
[ 1009.938542][ T1143] hsr_slave_1: left promiscuous mode
[ 1009.962074][ T1143] veth1_macvtap: left promiscuous mode
[ 1009.963921][ T1143] veth0_macvtap: left promiscuous mode
[ 1009.965819][ T1143] veth1_vlan: left promiscuous mode
[ 1009.967540][ T1143] veth0_vlan: left promiscuous mode
[ 1010.070780][T13119] Bluetooth: hci4: command tx timeout
[ 1010.109205][T18161] mmap: syz.9.3030 (18161) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 1010.553420][T13119] Bluetooth: hci5: command tx timeout
[ 1010.606803][ T1143] team0 (unregistering): Port device team_slave_1 removed
[ 1010.676029][ T1143] team0 (unregistering): Port device team_slave_0 removed
[ 1011.131360][   T54] lo speed is unknown, defaulting to 1000
[ 1011.133188][   T54] infiniband syz0: ib_query_port failed (-19)
[ 1011.537156][T18114] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1011.571865][T18114] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1011.640824][T12964] usb 14-1: new high-speed USB device number 20 using dummy_hcd
[ 1011.691726][T18114] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1011.755693][T18114] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1011.821056][T12964] usb 14-1: Using ep0 maxpacket: 16
[ 1011.828334][T12964] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1011.836532][T12964] usb 14-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1011.841992][T12964] usb 14-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[ 1011.847377][T12964] usb 14-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[ 1011.851537][T12964] usb 14-1: Manufacturer: syz
[ 1011.872272][T12964] usb 14-1: config 0 descriptor??
[ 1012.052671][T18114] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1012.071012][T18114] 8021q: adding VLAN 0 to HW filter on device team0
[ 1012.081504][T18186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1012.087374][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1012.089937][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1012.090014][T18186] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1012.115307][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1012.118444][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1012.141811][T13119] Bluetooth: hci4: command tx timeout
[ 1012.234192][T12964] usb 14-1: USB disconnect, device number 20
[ 1012.284476][T18114] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1012.468793][T18114] veth0_vlan: entered promiscuous mode
[ 1012.475791][T18114] veth1_vlan: entered promiscuous mode
[ 1012.492587][T18114] veth0_macvtap: entered promiscuous mode
[ 1012.498056][T18114] veth1_macvtap: entered promiscuous mode
[ 1012.507814][T18114] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1012.523412][T18114] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1012.532939][ T1141] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1012.536519][ T1141] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1012.539852][ T1141] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1012.546433][ T1141] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1012.588559][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1012.592655][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1012.609381][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1012.612213][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1012.620929][T13119] Bluetooth: hci5: command tx timeout
[ 1012.816260][T18230] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3044'.
[ 1013.210746][   T54] usb 14-1: new high-speed USB device number 21 using dummy_hcd
[ 1013.360724][   T54] usb 14-1: Using ep0 maxpacket: 16
[ 1013.364616][   T54] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1013.367861][   T54] usb 14-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1013.373330][   T54] usb 14-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[ 1013.376250][   T54] usb 14-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[ 1013.378783][   T54] usb 14-1: Manufacturer: syz
[ 1013.384968][   T54] usb 14-1: config 0 descriptor??
[ 1013.590644][T18243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1013.595728][T18243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1013.652347][T17576] usb 14-1: USB disconnect, device number 21
[ 1014.700818][T13119] Bluetooth: hci5: command tx timeout
[ 1015.101598][T18290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1015.664368][T18254] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[ 1015.667231][T18254] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[ 1015.670690][    C2] ------------[ cut here ]------------
[ 1015.673279][    C2] workqueue: cannot queue hci_cmd_timeout on wq hci0
[ 1015.675678][    C2] WARNING: CPU: 2 PID: 18295 at kernel/workqueue.c:2255 __queue_work+0xd03/0x1160
[ 1015.679498][    C2] Modules linked in:
[ 1015.681383][    C2] CPU: 2 UID: 0 PID: 18295 Comm: syz.9.3057 Not tainted syzkaller #0 PREEMPT(full) 
[ 1015.686462][    C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 1015.690104][    C2] RIP: 0010:__queue_work+0xd03/0x1160
[ 1015.691811][    C2] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 e0 01 ac 8b e8 de 4b f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 8f 54 38 00 90 0f 0b 90 e9 b4 f5 ff
[ 1015.699269][    C2] RSP: 0018:ffffc90000538be8 EFLAGS: 00010082
[ 1015.701233][    C2] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a02f8
[ 1015.704301][    C2] RDX: ffff888012dfa440 RSI: ffffffff817a0305 RDI: 0000000000000001
[ 1015.707550][    C2] RBP: ffff888023f50970 R08: 0000000000000001 R09: 0000000000000000
[ 1015.710627][    C2] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff920000a718f
[ 1015.713582][    C2] R13: 0000000080000101 R14: ffffffff8182c6e0 R15: ffff888051059978
[ 1015.716182][    C2] FS:  0000000000000000(0000) GS:ffff8880976ba000(0063) knlGS:00000000f543eb40
[ 1015.719120][    C2] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 1015.721341][    C2] CR2: 0000000080001000 CR3: 000000006eef8000 CR4: 0000000000352ef0
[ 1015.724302][    C2] Call Trace:
[ 1015.725554][    C2]  <IRQ>
[ 1015.726509][    C2]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[ 1015.728440][    C2]  call_timer_fn+0x197/0x620
[ 1015.729936][    C2]  ? __pfx_call_timer_fn+0x10/0x10
[ 1015.731834][    C2]  ? __run_timers+0x559/0x960
[ 1015.733785][    C2]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[ 1015.736152][    C2]  __run_timers+0x569/0x960
[ 1015.737636][    C2]  ? __pfx___run_timers+0x10/0x10
[ 1015.739332][    C2]  run_timer_base+0x114/0x190
[ 1015.740839][    C2]  ? __pfx_run_timer_base+0x10/0x10
[ 1015.742770][    C2]  run_timer_softirq+0x1a/0x40
[ 1015.744802][    C2]  handle_softirqs+0x216/0x8e0
[ 1015.746768][    C2]  ? __pfx_handle_softirqs+0x10/0x10
[ 1015.748486][    C2]  __irq_exit_rcu+0x109/0x170
[ 1015.749997][    C2]  irq_exit_rcu+0x9/0x30
[ 1015.751364][    C2]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1015.753498][    C2]  </IRQ>
[ 1015.754443][    C2]  <TASK>
[ 1015.755418][    C2]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1015.757316][    C2] RIP: 0010:smp_call_function_single+0x1f4/0x6b0
[ 1015.759342][    C2] Code: 00 00 00 66 44 89 ac 24 ce 00 00 00 48 89 de e8 82 fa ff ff 41 89 c5 0f 1f 44 00 00 e8 35 e2 0b 00 eb 07 e8 2e e2 0b 00 f3 90 <8b> 9c 24 c8 00 00 00 31 ff 83 e3 01 89 de e8 59 dd 0b 00 85 db 75
[ 1015.766453][    C2] RSP: 0018:ffffc90002b6f8a0 EFLAGS: 00000287
[ 1015.768954][    C2] RAX: 000000000001f363 RBX: 0000000000000001 RCX: ffffc9002d2be000
[ 1015.772256][    C2] RDX: 0000000000080000 RSI: ffffffff81af27f2 RDI: 0000000000000005
[ 1015.774757][    C2] RBP: ffffc90002b6fa00 R08: 0000000000000005 R09: 0000000000000000
[ 1015.777265][    C2] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff9200056df1c
[ 1015.780349][    C2] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000
[ 1015.783567][    C2]  ? smp_call_function_single+0x1f2/0x6b0
[ 1015.785885][    C2]  ? __lock_acquire+0xb97/0x1ce0
[ 1015.787961][    C2]  ? __pfx_rcu_barrier_handler+0x10/0x10
[ 1015.790245][    C2]  ? __pfx_smp_call_function_single+0x10/0x10
[ 1015.792724][    C2]  ? __pfx___mutex_lock+0x10/0x10
[ 1015.794818][    C2]  ? do_raw_spin_lock+0x12c/0x2b0
[ 1015.796921][    C2]  ? __pfx_rcu_barrier_handler+0x10/0x10
[ 1015.799218][    C2]  ? mark_held_locks+0x49/0x80
[ 1015.801215][    C2]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1015.803582][    C2]  rcu_barrier+0x28d/0x6e0
[ 1015.805585][    C2]  flush_rcu_work+0x54/0xd0
[ 1015.807507][    C2]  kvfree_rcu_barrier+0x102/0x1d0
[ 1015.809581][    C2]  kmem_cache_destroy+0x2c/0x170
[ 1015.811446][    C2]  p9_client_destroy+0x2dd/0x480
[ 1015.813164][    C2]  ? __pfx_p9_client_destroy+0x10/0x10
[ 1015.815189][    C2]  ? __pfx_ida_free+0x10/0x10
[ 1015.817197][    C2]  v9fs_session_close+0x49/0x2d0
[ 1015.819322][    C2]  v9fs_kill_super+0x4d/0xa0
[ 1015.821276][    C2]  deactivate_locked_super+0xc1/0x1a0
[ 1015.823602][    C2]  v9fs_mount+0x62b/0xa90
[ 1015.825408][    C2]  ? rcu_is_watching+0x12/0xc0
[ 1015.827429][    C2]  ? __pfx_v9fs_mount+0x10/0x10
[ 1015.829401][    C2]  ? aa_get_newest_label+0xd2/0x250
[ 1015.831099][    C2]  ? apparmor_capable+0x114/0x1d0
[ 1015.832747][    C2]  ? __pfx_v9fs_mount+0x10/0x10
[ 1015.834384][    C2]  legacy_get_tree+0x10c/0x220
[ 1015.835926][    C2]  vfs_get_tree+0x8e/0x340
[ 1015.837363][    C2]  path_mount+0x1513/0x2000
[ 1015.838793][    C2]  ? __pfx_path_mount+0x10/0x10
[ 1015.840491][    C2]  ? kmem_cache_free+0x2d1/0x4d0
[ 1015.842148][    C2]  ? putname+0x154/0x1a0
[ 1015.843539][    C2]  ? getname_flags.part.0+0x1c5/0x550
[ 1015.845242][    C2]  ? __ia32_sys_mount+0x28b/0x310
[ 1015.846852][    C2]  __ia32_sys_mount+0x28b/0x310
[ 1015.848699][    C2]  ? __pfx___ia32_sys_mount+0x10/0x10
[ 1015.850984][    C2]  ? rcu_is_watching+0x12/0xc0
[ 1015.853033][    C2]  __do_fast_syscall_32+0x7c/0x300
[ 1015.854875][    C2]  do_fast_syscall_32+0x32/0x80
[ 1015.856497][    C2]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1015.858572][    C2] RIP: 0023:0xf704e579
[ 1015.859910][    C2] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 1015.867318][    C2] RSP: 002b:00000000f543e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[ 1015.870064][    C2] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800002c0
[ 1015.872682][    C2] RDX: 0000000080000080 RSI: 0000000000004000 RDI: 0000000080000400
[ 1015.875239][    C2] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1015.877813][    C2] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[ 1015.880360][    C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1015.883648][    C2]  </TASK>
[ 1015.884966][    C2] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1015.887941][    C2] CPU: 2 UID: 0 PID: 18295 Comm: syz.9.3057 Not tainted syzkaller #0 PREEMPT(full) 
[ 1015.891311][    C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 1015.894689][    C2] Call Trace:
[ 1015.895762][    C2]  <IRQ>
[ 1015.896696][    C2]  dump_stack_lvl+0x3d/0x1f0
[ 1015.898162][    C2]  vpanic+0x6e8/0x7a0
[ 1015.899486][    C2]  ? __pfx_vpanic+0x10/0x10
[ 1015.901137][    C2]  ? __queue_work+0xd03/0x1160
[ 1015.903166][    C2]  panic+0xca/0xd0
[ 1015.904777][    C2]  ? __pfx_panic+0x10/0x10
[ 1015.906704][    C2]  ? check_panic_on_warn+0x1f/0xb0
[ 1015.908866][    C2]  check_panic_on_warn+0xab/0xb0
[ 1015.910920][    C2]  __warn+0xf6/0x3c0
[ 1015.912604][    C2]  ? __queue_work+0xd03/0x1160
[ 1015.914616][    C2]  report_bug+0x3c3/0x580
[ 1015.916471][    C2]  ? __queue_work+0xd03/0x1160
[ 1015.918451][    C2]  handle_bug+0x184/0x210
[ 1015.920185][    C2]  exc_invalid_op+0x17/0x50
[ 1015.922114][    C2]  asm_exc_invalid_op+0x1a/0x20
[ 1015.924178][    C2] RIP: 0010:__queue_work+0xd03/0x1160
[ 1015.926420][    C2] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 e0 01 ac 8b e8 de 4b f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 8f 54 38 00 90 0f 0b 90 e9 b4 f5 ff
[ 1015.934257][    C2] RSP: 0018:ffffc90000538be8 EFLAGS: 00010082
[ 1015.936767][    C2] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a02f8
[ 1015.940092][    C2] RDX: ffff888012dfa440 RSI: ffffffff817a0305 RDI: 0000000000000001
[ 1015.943100][    C2] RBP: ffff888023f50970 R08: 0000000000000001 R09: 0000000000000000
[ 1015.945672][    C2] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff920000a718f
[ 1015.948253][    C2] R13: 0000000080000101 R14: ffffffff8182c6e0 R15: ffff888051059978
[ 1015.951227][    C2]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[ 1015.953686][    C2]  ? __warn_printk+0x198/0x350
[ 1015.955759][    C2]  ? __warn_printk+0x1a5/0x350
[ 1015.957808][    C2]  ? __queue_work+0xd02/0x1160
[ 1015.959841][    C2]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[ 1015.962262][    C2]  call_timer_fn+0x197/0x620
[ 1015.964239][    C2]  ? __pfx_call_timer_fn+0x10/0x10
[ 1015.966353][    C2]  ? __run_timers+0x559/0x960
[ 1015.968113][    C2]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[ 1015.969946][    C2]  __run_timers+0x569/0x960
[ 1015.971626][    C2]  ? __pfx___run_timers+0x10/0x10
[ 1015.973690][    C2]  run_timer_base+0x114/0x190
[ 1015.975652][    C2]  ? __pfx_run_timer_base+0x10/0x10
[ 1015.977793][    C2]  run_timer_softirq+0x1a/0x40
[ 1015.979779][    C2]  handle_softirqs+0x216/0x8e0
[ 1015.981792][    C2]  ? __pfx_handle_softirqs+0x10/0x10
[ 1015.984023][    C2]  __irq_exit_rcu+0x109/0x170
[ 1015.986043][    C2]  irq_exit_rcu+0x9/0x30
[ 1015.987856][    C2]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1015.990157][    C2]  </IRQ>
[ 1015.991433][    C2]  <TASK>
[ 1015.992679][    C2]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1015.994744][    C2] RIP: 0010:smp_call_function_single+0x1f4/0x6b0
[ 1015.996758][    C2] Code: 00 00 00 66 44 89 ac 24 ce 00 00 00 48 89 de e8 82 fa ff ff 41 89 c5 0f 1f 44 00 00 e8 35 e2 0b 00 eb 07 e8 2e e2 0b 00 f3 90 <8b> 9c 24 c8 00 00 00 31 ff 83 e3 01 89 de e8 59 dd 0b 00 85 db 75
[ 1016.002998][    C2] RSP: 0018:ffffc90002b6f8a0 EFLAGS: 00000287
[ 1016.005575][    C2] RAX: 000000000001f363 RBX: 0000000000000001 RCX: ffffc9002d2be000
[ 1016.008681][    C2] RDX: 0000000000080000 RSI: ffffffff81af27f2 RDI: 0000000000000005
[ 1016.011485][    C2] RBP: ffffc90002b6fa00 R08: 0000000000000005 R09: 0000000000000000
[ 1016.014779][    C2] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff9200056df1c
[ 1016.018096][    C2] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000
[ 1016.021338][    C2]  ? smp_call_function_single+0x1f2/0x6b0
[ 1016.023765][    C2]  ? __lock_acquire+0xb97/0x1ce0
[ 1016.025847][    C2]  ? __pfx_rcu_barrier_handler+0x10/0x10
[ 1016.027772][    C2]  ? __pfx_smp_call_function_single+0x10/0x10
[ 1016.029683][    C2]  ? __pfx___mutex_lock+0x10/0x10
[ 1016.031327][    C2]  ? do_raw_spin_lock+0x12c/0x2b0
[ 1016.033309][    C2]  ? __pfx_rcu_barrier_handler+0x10/0x10
[ 1016.035118][    C2]  ? mark_held_locks+0x49/0x80
[ 1016.036712][    C2]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1016.038577][    C2]  rcu_barrier+0x28d/0x6e0
[ 1016.040087][    C2]  flush_rcu_work+0x54/0xd0
[ 1016.041867][    C2]  kvfree_rcu_barrier+0x102/0x1d0
[ 1016.043976][    C2]  kmem_cache_destroy+0x2c/0x170
[ 1016.046105][    C2]  p9_client_destroy+0x2dd/0x480
[ 1016.048230][    C2]  ? __pfx_p9_client_destroy+0x10/0x10
[ 1016.050516][    C2]  ? __pfx_ida_free+0x10/0x10
[ 1016.052520][    C2]  v9fs_session_close+0x49/0x2d0
[ 1016.054622][    C2]  v9fs_kill_super+0x4d/0xa0
[ 1016.056531][    C2]  deactivate_locked_super+0xc1/0x1a0
[ 1016.058313][    C2]  v9fs_mount+0x62b/0xa90
[ 1016.059871][    C2]  ? rcu_is_watching+0x12/0xc0
[ 1016.061625][    C2]  ? __pfx_v9fs_mount+0x10/0x10
[ 1016.063679][    C2]  ? aa_get_newest_label+0xd2/0x250
[ 1016.065850][    C2]  ? apparmor_capable+0x114/0x1d0
[ 1016.068024][    C2]  ? __pfx_v9fs_mount+0x10/0x10
[ 1016.070043][    C2]  legacy_get_tree+0x10c/0x220
[ 1016.072109][    C2]  vfs_get_tree+0x8e/0x340
[ 1016.073992][    C2]  path_mount+0x1513/0x2000
[ 1016.075950][    C2]  ? __pfx_path_mount+0x10/0x10
[ 1016.078003][    C2]  ? kmem_cache_free+0x2d1/0x4d0
[ 1016.080051][    C2]  ? putname+0x154/0x1a0
[ 1016.081798][    C2]  ? getname_flags.part.0+0x1c5/0x550
[ 1016.084051][    C2]  ? __ia32_sys_mount+0x28b/0x310
[ 1016.086122][    C2]  __ia32_sys_mount+0x28b/0x310
[ 1016.087784][    C2]  ? __pfx___ia32_sys_mount+0x10/0x10
[ 1016.089946][    C2]  ? rcu_is_watching+0x12/0xc0
[ 1016.091485][    C2]  __do_fast_syscall_32+0x7c/0x300
[ 1016.093375][    C2]  do_fast_syscall_32+0x32/0x80
[ 1016.095124][    C2]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1016.097284][    C2] RIP: 0023:0xf704e579
[ 1016.099327][    C2] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 1016.107303][    C2] RSP: 002b:00000000f543e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[ 1016.110764][    C2] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800002c0
[ 1016.113963][    C2] RDX: 0000000080000080 RSI: 0000000000004000 RDI: 0000000080000400
[ 1016.117221][    C2] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1016.120030][    C2] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[ 1016.122554][    C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1016.125132][    C2]  </TASK>
[ 1016.126827][    C2] Kernel Offset: disabled
[ 1016.128205][    C2] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:57:53  Registers:
info registers vcpu 0

CPU#0
RAX=00000000013e3745 RBX=0000000000000000 RCX=ffffffff8b91ab29 RDX=0000000000000000
RSI=ffffffff8de4f5aa RDI=ffffffff8c163780 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08
R8 =0000000000000001 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000000
R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90abaa90 R15=0000000000000000
RIP=ffffffff8b91966f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880974ba000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000002dd22ff8 CR3=0000000027c45000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562fe1140c50 0000562fe1140c50
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5ef2ae90 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d2d2d2d205d3243 202020205b5d3039 363037362e353130 31205b203a6c656e
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e7473722e736567 61705f656c69665f 70616d65722f6d6d 2f6e6f697461746e
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656d75636f442065 6553202e6c6c6163 7379732029287365 6761705f656c6966
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f70616d65722064 6574616365727065 6420736573752029 3136313831282030
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3330332e392e7a79 73203a70616d6d20 5d3136313831545b 5d3530323930312e
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000009 RCX=ffffffff95e35448 RDX=0000000000000008
RSI=ffff8880272a0b40 RDI=ffff8880272a0000 RBP=ffffc90006bff9d0 RSP=ffffc90006bff930
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000050 R11=0000000000000001
R12=ffff8880272a0b40 R13=0000000000000200 R14=0000000000000002 R15=ffff8880272a0000
RIP=ffffffff819734b8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880975ba000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000000c32a4d9 CR3=000000006eef8000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8561e555 RDI=ffffffff9b1027c0 RBP=ffffffff9b102780 RSP=ffffc90000538550
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b102780 R15=ffffffff8561e4f0
RIP=ffffffff8561e57f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff8880976ba000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000080001000 CR3=000000006eef8000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000104080 Opmask01=0000000000000001 Opmask02=00000000ffff7fdf Opmask03=0000000000000000
Opmask04=00000000ffff7fff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 392d70392f696462 2f6c617574726976
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055dbed06b510
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055dbed07b8d0
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdda4952c80
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055dbed07b8d0 000055dbed06b510 000055dbed06f3f0 000055dbed07b850
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7377685f31313230 3863616d2f6c6175 747269762f736563 697665642f737973
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003a756b733a302e 30312d3533712d63 707276633a317463 3a554d45516e7663
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a302e30312d3533 712d63707276703a 29393030322c3948 43492b3533512843
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50647261646e6174 536e703a554d4551 6e76733a302e3072 623a343130322f31
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302f343064623a31 2b32316f70627e32 2d332e36312e312d 6e61696265642d33
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000ff4f17 RBX=0000000000000003 RCX=ffffffff8b91ab29 RDX=0000000000000000
RSI=ffffffff8de4f5aa RDI=ffffffff8c163780 RBP=ffffed1003867000 RSP=ffffc9000048fdf8
R8 =0000000000000001 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000000
R12=0000000000000003 R13=ffff88801c338000 R14=ffffffff90abaa90 R15=0000000000000000
RIP=ffffffff8b91966f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880977ba000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000571d74c0 CR3=00000000276e2000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000