last executing test programs:

6.377295471s ago: executing program 2 (id=291):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @random="c8ed6cecf1bd"}, 0x2, {0x2, 0x0, @loopback}, 'veth0_to_bond\x00'})
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x1028}}, 0x0)
mkdir(&(0x7f0000000040)='./bus\x00', 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x24000094}, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x5)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000340)={[{@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x3a})
openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r4, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r6}, 0x10)
sync_file_range(r7, 0x1, 0x5fb7, 0x0)
ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000000))
ioctl$TIOCL_UNBLANKSCREEN(r5, 0x541c, &(0x7f00000000c0))

4.986676204s ago: executing program 2 (id=313):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x3)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000000000000000900020000797a300000000009000100e462ae41137e601c08000540000000140800034000000040140000001100010000000000000000000084000a49f4130855b9fba29fd89ff7703b5da09819e2b198e2d0ce69ae84aaafc644d74c29c1a4630aaa3e9b3808475c2c8ae5fb6b7ce272b1d348d7508229cc5a1c5d17c7225a5bbd6f636e4ca7cb18c0931125"], 0x6c}}, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd)
keyctl$setperm(0x5, r3, 0x0)
keyctl$revoke(0x6, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x8)
unshare(0x26020280)
r4 = creat(&(0x7f0000000280)='./file0\x00', 0xc1)
close(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x400303)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f00000000c0)={r6, 0x0, 0x9, 0x5})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
bind$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10)
socket$pptp(0x18, 0x1, 0x2)
r7 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0)
bind$pptp(r4, &(0x7f0000000240)={0x18, 0x2, {0x0, @remote}}, 0x1e)
bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x2, @local}}, 0x1e)
syz_clone(0xa0320080, 0x0, 0x0, 0x0, 0x0, 0x0)

4.320299736s ago: executing program 2 (id=317):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r0}, 0x18)
getpid() (async)
getpid()
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000021c0), 0x101002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000000000008000700", @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000000080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003)
r4 = dup2(r1, r1)
read$FUSE(r4, &(0x7f0000000180)={0x2020}, 0x2020)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x0, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000028c0)={0x110, r6, 0xb19, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x3c, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @device_b, @broadcast}}, @gcr_ga={0xbd, 0x6, @device_b}, @ht={0x2d, 0x1a, {0x2, 0x3, 0x4, 0x0, {0x7, 0x8, 0x0, 0x3b8, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x9, 0x5, 0x1}}]}, @NL80211_ATTR_IE={0xbd, 0x2a, [@ht={0x2d, 0x1a, {0x10, 0x0, 0x1, 0x0, {0xffffffff, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, 0x8, 0x1ff, 0x6}}, @ibss={0x6, 0x2, 0x2}, @gcr_ga={0xbd, 0x6, @broadcast}, @measure_req={0x26, 0x74, {0x2, 0xff, 0x6, "6a5e47ef674e7788a354396730ee5e496bcdf80073b692cb6720272b264020fb9f0120980e5cfa83df972533a9c2ea8b53451e0f48ef9f6c73aa5a36569d14207d46d9a527c431690ac72da757cd6574e94b19528137611ad0269fefbca3a380d03f517e00d92976b900bf93a2140ddfd6"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @mesh_chsw={0x76, 0x6, {0xe2, 0x6, 0x19, 0x3}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @mesh_id={0x72, 0x6}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40420d5}, 0x80)
sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000002700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000000100)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x1a}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040084}, 0x20000000)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
socket$inet_smc(0x2b, 0x1, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-pclmul\x00'}, 0x58) (async)
bind$alg(r8, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-pclmul\x00'}, 0x58)
accept4(r8, 0x0, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair(0x0, 0x3, 0x0, &(0x7f0000002740)) (async)
socketpair(0x0, 0x3, 0x0, &(0x7f0000002740))
r9 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_mreqsrc(r9, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x44)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='mpol=bind:0-0\v'])
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000002200)=@filter={'filter\x00', 0xe, 0x4, 0x45c, 0xffffffff, 0x334, 0x24c, 0x0, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x1ec, 0x24c, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'pimreg1\x00', {0x9, 0xe, 0x8, 0x2, 0xfffffa2b, 0x3, 0x3e, 0x1, 0x20, 0x80}, {0x7}}}, @common=@ttl={{0x24}, {0x2, 0x6f}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x4, 0x4, 0x0, 0x5, 0x4, 0x3], 0x6, 0x2}, {0x0, [0x5, 0x5, 0x4, 0x4, 0x4, 0x2], 0x1, 0x1}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x0, 0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x30000000, 0x609a}}}, {{@uncond, 0x0, 0x70, 0x94}, @REJECT={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x4b8)

4.08056944s ago: executing program 2 (id=319):
socket$can_raw(0x1d, 0x3, 0x1)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x1d, 0x2, 0x6)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000040)='./bus\x00', 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000000))
ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f00000000c0))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="71e67a15", 0x4)
io_setup(0xff, &(0x7f0000000380))
sendmsg$alg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002dc0)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)="4c2aa68e9f983c238da872e02b984b3b82b86b132c0f3eb54be93e20de414e98334b882babd05e7fdc42346581f291d7468652cd6d0bda672cbf00f3621b7a3f529e01ed2b3c07ca262b8753ddb1d8d94a098aef8f5368fce7bf91d3e36cbe0c0f119a3e30349ba7b75d8664eeea79a658", 0x71}, {&(0x7f0000000580)="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", 0xfe}, {&(0x7f0000000680)="30386607f22645fd0b4102295249f832cb6c55d8360f18f0d4b8eaa6bb8a733c1eb3d50b08eabd6a49a890525248af4556e7c49088ac1af1992ee922596a0c54e07eef22f4f68c95", 0x48}, {&(0x7f0000000940)="6429f13c31a9e45ec025c4311dea618f44d47687fe0f48dfc6b70007ca86642ca34d7d96eb8bb5da6d2e7c3eb60f68b8462827502b3d47ee2b8b99a576e6b4a6577ec7d23fa71d7de763dd24515f673fa829bf", 0x53}, {&(0x7f0000001480)="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", 0xabf}], 0x5}], 0x1, 0x0)

3.464560051s ago: executing program 1 (id=331):
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={<r0=>0x0}, &(0x7f0000000380)=0xc)
prlimit64(r0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00')
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000140))
r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0684113, &(0x7f0000000380)={0x1, 0xa, 0x0, 0x1001, 0x8000, 0x0, 0xffffffed, 0xb, 0x0, 0x0, 0xfffffff9, 0x1})
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r4, 0xc06c4124, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5})
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
vmsplice(r5, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
unshare(0x40000000)

3.180378727s ago: executing program 3 (id=335):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1})
syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)={0x24, r3, 0xb97534d5fe9704cf, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8002}, 0x4)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000a900"/20, @ANYRES32=0x0, @ANYBLOB="ed00000000000000"], 0x20}}, 0x0)
r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x2000, 0xf, 0x2, 0x0, 0x0, 0x1}, {0x4}, {0x0, 0x5000}, {}, {}, {}, {0x0, 0xd000, 0xe}, {0x0, 0x0, 0x3}, {0x0, 0x8000}, {}, 0xddf8ffdb, 0x0, 0x0, 0x140030, 0x0, 0xd01, 0x0, [0x0, 0x0, 0x8]})
syz_open_dev$tty1(0xc, 0x4, 0x3) (async)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r11 = dup(r10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000400)={'syztnl0\x00', <r12=>0x0, 0x4, 0x6, 0xe, 0x7, 0x10, @empty, @mcast2, 0x700, 0x7, 0x9, 0x400}})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r11, 0x20, &(0x7f0000000500)={&(0x7f0000000480)=""/101, 0x65, <r13=>0x0, &(0x7f0000000380)=""/28, 0x1c}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@alu={0x4, 0x0, 0x5, 0x4, 0x3, 0x40, 0x9cb2ed05e89b07e}, @jmp={0x5, 0x1, 0x4, 0x5, 0x8, 0x4, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x42, '\x00', r12, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, r13, 0xffffffffffffffff, 0x2, &(0x7f0000000580)=[r11, r11, r11], &(0x7f00000005c0)=[{0x1, 0x5, 0x4, 0xa}, {0x5, 0x5, 0xf, 0x7}], 0x10, 0x1, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@alu={0x4, 0x0, 0x5, 0x4, 0x3, 0x40, 0x9cb2ed05e89b07e}, @jmp={0x5, 0x1, 0x4, 0x5, 0x8, 0x4, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x42, '\x00', r12, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, r13, 0xffffffffffffffff, 0x2, &(0x7f0000000580)=[r11, r11, r11], &(0x7f00000005c0)=[{0x1, 0x5, 0x4, 0xa}, {0x5, 0x5, 0xf, 0x7}], 0x10, 0x1, @void, @value}, 0x94)
write$UHID_INPUT(r11, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006)
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async)
r14 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r14, 0x0)
r15 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r15, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @default]}, 0x40) (async)
connect$rose(r15, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @default]}, 0x40)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)

3.010378214s ago: executing program 3 (id=336):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0x1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, 0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x44)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
r6 = socket$inet(0x2, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x4, 0x2, @TCA_HFSC_USC={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_RATE={0x6}]}, 0x70}}, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f00000029c0)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000080)={<r9=>0x0, 0x0, r4})
ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000180)={r9})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=r8], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000fa33000000340000000000000000000001050000000000080000000000010000002ef6000000da00a05c1d98dd78d18f03e107609999dc25094d0207b1096ec56cdae6000000000000a700"/106], 0x0, 0x52, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20)
bind$alg(r10, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58)
syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00')

2.488885963s ago: executing program 0 (id=337):
r0 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
pipe2$watch_queue(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6_dccp(0xa, 0x6, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) (async)
pipe(&(0x7f0000000040))
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000000000000000000000000400001800007cc4c78227dbdfc2bba43bc106aeb8e62316bddb30a6e0a6c3f02a78047eb1a1cd5532127425cb21f35a0f7b6fea18be3602da6661c947a71f68646ec1f6d2b806b79fac49fe38266b8cf00128b1cbf72a40e9f6f5ddc87e64", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
dup(0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) (async)
sendmsg$BATADV_CMD_TP_METER(r3, 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r7}, 0x10)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4c4, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x520) (async)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xdf)
io_uring_enter(r2, 0x6837, 0xfaac, 0x8, &(0x7f0000000000)={[0x4, 0x5]}, 0x8) (async)
creat(&(0x7f0000000040)='./file0\x00', 0x0) (async)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r9])
statx(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0)

2.47490995s ago: executing program 2 (id=338):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
open(&(0x7f00000001c0)='./bus\x00', 0x141b42, 0x0) (async)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141b42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x223216, 0x0)
sendfile(r3, r2, 0x0, 0x100800001)

2.280462318s ago: executing program 2 (id=339):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000))
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000040)=""/135, 0x2000, 0x1800, 0x0, 0x2}, 0x1c)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x4, 0x9, 0xffffc2db, @vifc_lcl_addr=@loopback, @multicast1}, 0x10)
r3 = openat$uinput(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x18)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f00000001c0)=0x1)
r4 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getstats={0x1c, 0x5e, 0x20, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000001)
r5 = openat$tun(0xffffff9c, &(0x7f0000000340), 0x208040, 0x0)
ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000380)={'erspan0\x00', 0x200})
r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_disconnect(r6)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, <r7=>0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f00000004c0)={r7})
splice(r1, &(0x7f0000000500)=0x91d, r3, &(0x7f0000000540)=0x6, 0x4b2e, 0x1)
socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r4, r3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000640)={'tunl0\x00', &(0x7f00000005c0)={'ip_vti0\x00', <r8=>0x0, 0x0, 0x10, 0x1, 0x8001, {{0x11, 0x4, 0x0, 0x6, 0x44, 0x68, 0x0, 0x0, 0x4, 0x0, @multicast1, @broadcast, {[@generic={0x82, 0xc, "3c597fb366793c3c6bb2"}, @timestamp_prespec={0x44, 0x24, 0xb3, 0x3, 0x8, [{@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x17}, {@remote, 0xc}, {@private=0xa010100, 0x1ff}]}]}}}}})
sendmsg$nl_route(r4, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x81e10001}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=@bridge_setlink={0x68, 0x13, 0x0, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x0, r8, 0x4, 0x10000}, [@IFLA_PHYS_SWITCH_ID={0x15, 0x24, "04d5bb23524ad921344ded5cb71582cae0"}, @IFLA_MAP={0x20, 0xe, {0x7ff, 0x7ff, 0xfffffffffffffffd, 0x8, 0x6, 0x90}}, @IFLA_PHYS_PORT_ID={0x6, 0x22, '9\b'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x68}}, 0x80)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
getsockname(r2, &(0x7f0000000880)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f0000000900)=0x80)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000940)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r4)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, r9, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8}}, [""]}, 0x24}}, 0x400)
setsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000b00)={@dev={0xfe, 0x80, '\x00', 0x1e}, r8}, 0x14)
socket$inet_icmp(0x2, 0x2, 0x1)

2.060299959s ago: executing program 3 (id=340):
syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0)
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x68a00)
syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200"], 0x48)
r1 = io_uring_setup(0x7932, &(0x7f0000000580)={0x0, 0x9a15, 0x4, 0x0, 0x17b})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x71, &(0x7f0000000080)={r3}, &(0x7f00000000c0)=0x18)
r4 = syz_io_uring_setup(0x4672, &(0x7f0000000480)={0x0, 0x0, 0x4, 0x1, 0x199, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000140))
io_uring_enter(r4, 0x567, 0x0, 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0xa}], 0x10, 0x37, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, r4}, &(0x7f0000000240)=<r7=>0x0, &(0x7f0000000200)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r6, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}})
io_uring_enter(r6, 0x8aa, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
timer_create(0x3, 0x0, &(0x7f00000000c0))
connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e)

1.838468923s ago: executing program 0 (id=341):
socket$can_raw(0x1d, 0x3, 0x1)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x1d, 0x2, 0x6)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"})
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r1, r2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESDEC=r0]) (fail_nth: 15)

1.825792959s ago: executing program 1 (id=342):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x3000002, 0x6031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="aa3908004500000c00000000002f9078ac1414bbe000"/46], 0x2e)
syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000f00800450000780000000000119078000000000000000000001b59006490780200000000000000000000000000000108653904030405ffffff09c56a3000000000000000000000000000009384bbeb3018ad591b661fe808b21b77694c875dfb1be5d2a0057a62022a1564a329d3a13bd5b6cc6a9471314a1d8c69"], 0x0)
r3 = openat$vicodec1(0xffffff9c, &(0x7f00000008c0), 0x2, 0x0)
ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f0000000900)={0xfffff2a3, 0x0, "c0580c89d9f30d4750b270d22f10f0d40272c181c71aea99eeeddba25eb807d6"})
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_DONE(r4, 0x29, 0xc9, 0x0, 0x0)
acct(&(0x7f0000000380)='./file0\x00')
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x21)
r6 = syz_clone(0xa00200, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendfile(r3, r5, &(0x7f0000000200)=0x8c2, 0xfce7)
ioctl$SIOCX25SFACILITIES(r7, 0x89e3, &(0x7f00000001c0)={0x20, 0xb, 0x8, 0x9, 0x101})
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000005c0)={0x0, 0x7, 0x9bf5}, 0x8)
syz_open_procfs(r6, &(0x7f0000000040)='stat\x00')

1.742927702s ago: executing program 3 (id=343):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, 0x0, 0x21, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x40020)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp6\x00')
copy_file_range(r4, &(0x7f0000000240)=0xffffffffffffffff, r4, 0x0, 0x80000001, 0x0)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}}, 0x50)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r1, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(r5, &(0x7f0000006380)=""/1024, 0x400)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r9, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000006880)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f0000006980)={&(0x7f0000006840), 0xc, &(0x7f0000006940)={&(0x7f00000068c0)={0x70, r9, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xf3c0, 0x35}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4010)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0245628, &(0x7f0000006800)={0x0, 0x9, 0x49e, '\x00', &(0x7f0000006300)=0x5})
renameat2(r5, &(0x7f0000006780)='./file0\x00', r5, &(0x7f00000067c0)='./file0/file0\x00', 0x1)
syz_fuse_handle_req(r1, &(0x7f0000000000), 0x2000, &(0x7f0000008780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)={0x10}, 0x0, 0x0, 0x0})
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r12, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)={0x20, 0x1, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0)

1.670520871s ago: executing program 0 (id=344):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@dellink={0x4c, 0x10, 0xc03, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}]}, 0x4c}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_80211_inject_frame(0x0, 0x0, 0x0) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x2, 0x300) (async)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 32)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) (async)
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
writev(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @remote}, 0xc) (async)
dup(r5) (async)
r7 = msgget$private(0x0, 0x0)
msgsnd(r7, &(0x7f00000005c0)=ANY=[@ANYBLOB="02"], 0x8, 0x0) (async, rerun: 64)
msgrcv(r7, &(0x7f0000002540)={0x0, ""/4096}, 0x1004, 0x0, 0x3c00) (async, rerun: 64)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x8c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7a}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffff8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x80}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x29}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40094)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00')

989.980829ms ago: executing program 1 (id=345):
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r2}, 0x10)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'})
flistxattr(r0, &(0x7f0000000000)=""/12, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000200)={r7, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000400)={0x0, 0x2, r9, r8, 0x500, 0x0, 0x0, 0x800, {0x4, 0x2, 0x3, 0x69, 0x200, 0x0, 0x2, 0x5, 0x4cab, 0xe156, 0x0, 0x0, 0x0, 0x0, "fe1d00003413000000000000000caa000000090000020000000004b427180010"}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r11, r10, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x8000}}, 0x40)
r12 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r12, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r12, &(0x7f0000005240), 0x4000095, 0x0)

840.792425ms ago: executing program 3 (id=346):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
unshare(0x64000600)
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r1 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0)
sendfile(r1, r1, 0x0, 0x1000200201008)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002000010000000000000000000200"], 0x2c}}, 0x0)

720.597696ms ago: executing program 3 (id=347):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bind$inet6(r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x801000}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x2, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r5, 0x0)
accept4$x25(r5, 0x0, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r7=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x25f, 0x7, 0x40, 0x1, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000100))
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
read$FUSE(r8, &(0x7f00000023c0)={0x2020}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
listen(0xffffffffffffffff, 0x4)
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12014101000000202505a8030109021b39e301083004090400fc01070102040905010200"/45], &(0x7f0000000440)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0xb4, 0x7, 0x0, 0xff}, 0x47, &(0x7f0000000280)={0x5, 0xf, 0x47, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "883b172c65fde10523bb39129016ba8e"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "5f562518bfd1f8cc881511604adc4c8f"}, @ptm_cap={0x3}, @generic={0x3, 0x10, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "4c5f40589eadee461e56788fb8d2e744"}]}, 0x1, [{0x68, &(0x7f00000003c0)=@string={0x68, 0x3, "6db16514dfd43153d0d61341da0770a50f36723900dea0a2c3457cdd534de7ddcb2aa3e8f6c2761da9f61cad5a86698dc4438259174f311e13f4b9001bfd0f87d96799226dc941ed917c1e2742250c031b46802863b350c65002ae69e175d11e203c65a98305"}}]})
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x210)
openat$vim2m(0xffffff9c, &(0x7f0000000540), 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)

180.777844ms ago: executing program 0 (id=348):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0)

179.764401ms ago: executing program 1 (id=349):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000002f95abbe480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r1, @ANYBLOB="14000600fe80000000000000000000004400000014000700ff050000000000000000000000000001080004"], 0x70}}, 0x0)

178.836532ms ago: executing program 1 (id=350):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a6b216f1f85d541eede0d6d584fe84b95bb2773cdd16088a8a45e42f4aea64b75a9359f4af4f80b0b7c6c5eaccebdb04766ae26846403a279871d0956f58d8995376b810070b5bf7b969ee122aecb37bd4eb3d0c40b464f914ca6e9d2dcd98718243f8716adf4478268cbd81fd2be622d9aca1a40478f2023abeec19d8c47"], 0x64}}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x25, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x5, &(0x7f00000000c0))
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
syz_emit_ethernet(0xaa, &(0x7f0000000140)={@broadcast, @random="d2c200ff00", @void, {@x25={0x805, {0x1, 0x1, 0x13, "df01505323e24e413970dcaff4c1fd93f959bc619d11e8a06b17aa059472a43a4cefecd1ed71f7d3917529f8661e51ba9b04ef0d512461d641eea5b1abe0471d9b4fedbde0619e3aabccacf9eaf991905136b9562ee261542c7d787b62c47a633d48d0d9b1ed3ee209ae5b173b44944a9a39c19d0ed3b8e018f437b176817bc36296011a338ab229a175a6194851bd14f12e6743e62138dea5"}}}}, 0x0)

120.177863ms ago: executing program 0 (id=351):
syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0)
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x68a00)
syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x400})
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)

119.618427ms ago: executing program 0 (id=352):
socket$packet(0x11, 0x2, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
listen(0xffffffffffffffff, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x14, 0x4, 0x4, 0x3041, 0x800, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602a84350014060000000000000000000000000000000000fe8000"/51, @ANYRES32=r0, @ANYRES64, @ANYBLOB="58c200009078"], 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='timerslack_ns\x00')
read$msr(r1, &(0x7f0000000040)=""/59, 0xffb5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = dup(r0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0)

0s ago: executing program 1 (id=353):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x58c, 0x3b4, 0x9403, 0x0, 0x0, 0x2c0, 0x4c4, 0x3d8, 0x3d8, 0x4c4, 0x3d8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0x0, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0x0, 0x0, 0xff], 'veth1_to_bridge\x00', 'syzkaller0\x00', {}, {}, 0x2f, 0x0, 0x4}, 0x0, 0x28c, 0x3b4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x9295, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x5fc, 0x1, 0x0, 'syz0\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xffffffff, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff000000, 0x0, 0xffffffff, 0xff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'ip_vti0\x00', 'erspan0\x00', {0xff}, {}, 0x6, 0xc, 0x7, 0x40}, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x1000000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5e8)
preadv(r0, &(0x7f0000000240)=[{&(0x7f00000029c0)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x104)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002240)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x0)
r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
write(r6, &(0x7f0000000300)='(', 0x1)
write$uinput_user_dev(r6, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x5, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x10005, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xceb, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r7 = getpid()
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r7}}, 0x3c)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r8 = socket(0x10, 0x3, 0x0)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'tunl0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x4}]}}}]}, 0x3c}}, 0x0)
sendmmsg$inet6(r1, &(0x7f00000018c0)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x2, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f000001b9c0)="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", 0x1000}, {&(0x7f0000000880)="b32ab13ff64bffda862292b6be7fec4b71d895259d4fcce74c1552e32b4c5b2fd950d42a24aa818a3f3f61d685dcbfefa7e59fd5fa1311df7972ea2cae1343b70bf5cc268559352c3e51afc2917cec65f173ac86fd04c4801a677d3df79534dd2ec6a19a5da775c33fb0f0ed0b965060de48f2b5c138194a63e7b418883c08b5f3fef7c5e227d57da90b765907c1027152213e471a506d19ff671a7e2f9ae1ff693c8e53284ed22f4596bbd98add5e1551c1ff87da741269cc44992ac396559141809e029ad4d03fa70b155a7ad9ade18c23c5a41f1bd3e8fef764be537ac737e392c765799bda", 0xe7}, {&(0x7f0000000980)="2c3e446f8f32d8c64491df18aa77557e43e35542999bbc6a2c3bdd2cee8cfdaf230bfc19c71d45e3133ad94950aedaf20f194804b8e03ffa16b440f9b81a727a3a7deaf0006f8a3e6ccf5c2f358c522ab036e735cf9e51e18c272c18908f1cc0e9b7fc1ee07e48cd3ca4e11e17a043530b6896c311e63f06f9cddc0668861e0a669e290ec787a07849c8824854e978c486b7ac49871b88ef2f724fd3", 0x9c}, {&(0x7f0000000a40)="59360a9a9865efec32966616c85e170a1921f6015f59bd2731eccbb1a783e160e05cce9a2ed062045a6c7e24cd19deddb634045f4d3f90266bc1df360a4658b9f12b401f09c640901828af455d50ad69bea2153ff7ec6d9ff057f9112c2deeb5ee4986fe874f0bf14c1315b2b60d10abadf99924f40d551f027165f93cae6d7010b6ba2cab60aeeb560b9c1590e91312bdae1e47", 0x94}, {&(0x7f0000000b00)="9681f56d63879012d8ac33143e776d8cb8182ed35ec1cd01f4a696bcca8d5163ab390040da51cd25b172125ffa1cfa612b361201674503fb2a54b93ceae50594a8f90d32efe1f89dc2d50ac9e8830f83bed52c961da9edb59b70ee92eb853ea0d874a36e7203d29429da9b0c936b382e0028c52a8660b32ec87e86e51dde5070e5b8581cc04bf59c69b9dbb272eec44b31d3b8ead076279e48de1e5464cf0bfe29a5f4ca", 0xa4}, {&(0x7f0000000bc0)="588ecda3409ab0ae1ed8182083174f54a93f6d09b37c27bfb93f88dd0ad71bdafab8df17aad641693f8fdd3772497f452c56d06d7820e086b9477fa03b6484e652a66786837682095e171e8a4bd90ba67ab2093a7950813ca22f8958a570e5d0911e271829f8f4d894c85b26158936708f0a3c6a878f05ae511f807ea86f39efd99d21e5da2b59c0292aefcadf5884c9", 0x90}, {&(0x7f0000000c80)="5667a293b7b6cc5771ef2e56d201ab4e5fb556b1034b77bc34e67b408fd38fd1ee53cda0644e7dd5896c90d6c35f2fd5edd983ebf5c9df4544ff9da89024bfd9118241620a8a108c50f24217f0cfeeb2368203fe5d983e215d3a3ad7eb38f07421727684d404522aa194f038fc46a9af7d48632b57ac76726d77127a83091d15854f8921cb370d088b6f56cca5e9027578a44ce116abecd6eff3d33533e513d9d5190a30ff90707ba9e91acd61a60db39e08a7f0428a14b4fec4097e62c309db6be6d0b61230c9d9fec0561f64606bdd4a598316c2cdba57389e03c193394fc13c5720e46278851f543841b625267e53c3680edf", 0xf4}], 0x7}}, {{&(0x7f0000000d80)={0xa, 0x4e21, 0x7fffffff, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000fc0)=[{&(0x7f0000000dc0)="ae82130241a20cd8f386801769e4bf596da7ac5e5699cd6d2a976e0c53677fc2e62dca3b2d1c67aba8e72e5dd7b806c592b766d54ea002df851f506acd4197d1390b9f3cc435c0228eb83746131b24a8ee2067099205924b534d", 0x5a}, {&(0x7f0000000e40)="ad0dfb3d0af6850793d97ec0bf3edeed98b6974268cea1cb2f211ae0e07be50fade4b82118bbc250cc5fd23312d00afa6e68895b96829c52fc6444f2b03fc8d29c9eef8c4807cf7c30642866795f426ba9852b0803d8b3ef6c30097e255e99d6f191ac1b06967fd4eb49e95c160fabc8a3ce7491c6", 0x75}, {&(0x7f0000000ec0)="025698620fbadebc4b19676c13998a23f156bd929eb787e27bf6ebcce349949858203e6dfab444cef0020d19318bd897c7feb6e72ed0c380a3436dd4ff0450a5702b657d646c50a9870cd783659c84f31ef5f382b3cddf9b5da4e9497533798c4c9de55317201e3674d9eb9fbe1127ff7890cdbfdda3198e7236ee39db9e57f2918c3112bd0e0a48be69845e45d26b550ac2c632cf8eaa06047ffc4e0bab5ad4856862eb5195013d1c6da470c553c36baa7466197d880b0ace87f53b637bc54c6059b0c47629c1d9e9209e0b5f95df34", 0xd0}], 0x3, &(0x7f0000001000)=[@pktinfo={{0x20, 0x29, 0x32, {@loopback, r10}}}, @flowinfo={{0x10, 0x29, 0xb, 0x10000}}, @dstopts={{0x164, 0x29, 0x37, {0x16, 0x2a, '\x00', [@pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic={0x2, 0xa9, "77ff823fcfe24001420aa4e3f95ba05ccdf0073a2b88b77249b3f994bae1d9ff5f2cf34d163b90853140c0d152ea5cbd94e5b1b55cbfad7bfb27f676cc14752cae1440e86952d96d3b51f73f62d673eee22181693dcf651ea3a23a16bab2f74b73dd3eca78cdccb9475abdd7eb376d9da523751db29a4bffa510ec8bb387b68ececb01b31f9e2a882636f3957a31e2f71457895fca4c78c32f43e4643a7814400926d348a4063f90cd"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x1, 0x4e, "1dbbdba86decb114ee34ff1a509312c668cd2c95a801545def4d080922e44d53a9efcae9df23f20649a647c02adaa67a6d6522d2666c615090f242119e37dda0e2469a6f6e45638396518629cab5"}, @calipso={0x7, 0x18, {0x2, 0x4, 0x8d, 0xf, [0x7, 0x8]}}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}]}}}, @hopopts_2292={{0x2c, 0x29, 0x36, {0x3a, 0x2, '\x00', [@generic={0xfb, 0xb, "0ef8ad0e12469ed2d22574"}, @jumbo={0xc2, 0x4, 0xbe}, @pad1]}}}, @tclass={{0x10, 0x29, 0x43, 0xe}}, @tclass={{0x10, 0x29, 0x43, 0x2}}, @dontfrag={{0x10, 0x29, 0x3e, 0x4}}], 0x1f0}}, {{&(0x7f0000001200)={0xa, 0x4e22, 0x5, @local, 0x1}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000001300)="f35f052467dd564723adb8c10fb325cc283d5d59cb0ed208b3ac06fc853f5727c39a91ae1146f370ad74e30c8271a6577780db5344cbbc84d08c327156b41774516d07ec79c002b22e5bf57bed83a9c442c6a1bf1ef27ba74c1240932bb83cbd1f71cf93142b4a7b4c6c8e18d9f35957a1334fa85f2f8a295a13968aa28cf849f24c14b2616024fa0221782def147cad636f7b5c4c09aa50ffd5f768b2d1fbf0ac6a87720f04664bd8597a8dbcdbbce8", 0xb0}], 0x1, &(0x7f00000013c0)=[@rthdr={{0x44, 0x29, 0x39, {0xff, 0x6, 0x2, 0x8, 0x0, [@mcast1, @empty, @mcast2]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x4}}, @rthdr={{0x84, 0x29, 0x39, {0x2c, 0xe, 0x0, 0x2, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private0]}}}, @hopopts_2292={{0x7c, 0x29, 0x36, {0x2c, 0xc, '\x00', [@ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x10, {0x3, 0x2, 0xd, 0x55, [0x1000000000000]}}, @ra={0x5, 0x2, 0x180}, @jumbo={0xc2, 0x4, 0x6}, @ra={0x5, 0x2, 0x8001}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x2, [0x1]}}]}}}], 0x154}}, {{&(0x7f0000001280)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x13}, 0x400}, 0x1c, &(0x7f00000016c0)=[{&(0x7f0000001540)="fa14a064cb9163d01d3ccd67eed38c1c231497fef78241c419353ff9012a5558ffda051390b7db1bfece502bfb4c81d763227c13b8d35f635c04590b16703f664a29b851e37cd88b99d9c7", 0x4b}, {&(0x7f00000015c0)="20a42c525b9195814b40990f8d4eecbd1708ea8892712d46157b936769c63473a1a9328e933558200e3dadb13e3739a20375e2e31e9c7a945b2554b2197f814bc602491c4aeb19bfeb99e52f81b4c770cf54346783509adb361259043b085d276d0fc144acb3a96d3f985842d65fb694685506f4853adaf1aa8652c9422c6e6789d911de93aee6137b08b8de954bb5ef0fb88d455f6ed82b607b93d9c5c6d8d1beb6dee8f60831c4976d0fe5a40bd71b1e43a395a55248358140392ba41d9b5c3724626e660e6bb80a23d3cf6b285c6ac010c5e8", 0xd4}], 0x2, &(0x7f0000001700)=[@hopopts_2292={{0x24, 0x29, 0x36, {0x3a, 0x1, '\x00', [@pad1, @jumbo]}}}], 0x24}}, {{&(0x7f0000001740)={0xa, 0x4e23, 0x30000, @mcast1, 0x9f4f}, 0x1c, &(0x7f00000017c0)=[{&(0x7f0000001780)="046696dd39af93dbe9bd7ec33521dab6cb0cf1cd55ebe90f624655", 0x1b}], 0x1, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0xb0}}], 0x5, 0x40000)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, 0x0)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
r12 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00')
write$vhost_msg(r12, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:35682' (ED25519) to the list of known hosts.
[   34.408953][ T5928] cgroup: Unknown subsys name 'net'
[   34.561833][ T5928] cgroup: Unknown subsys name 'cpuset'
[   34.566889][ T5928] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   35.299982][ T5928] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   37.593036][   T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   37.596114][   T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   37.600076][   T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   37.602071][   T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   37.604204][   T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   37.606522][   T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   37.608865][   T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   37.610832][   T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   37.612684][   T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   37.615528][   T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   37.617737][   T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   37.619501][ T5974] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   37.619663][   T64] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   37.622053][ T5974] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   37.623768][   T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   37.626261][ T5974] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   37.626922][ T5973] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   37.628667][ T5973] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   37.629999][ T5965] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   37.631279][ T5973] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   37.633329][ T5965] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   37.636427][ T5975] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   37.636719][ T5965] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   37.638498][ T5975] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   37.794374][ T5962] chnl_net:caif_netlink_parms(): no params data found
[   37.820480][ T5969] chnl_net:caif_netlink_parms(): no params data found
[   37.825561][ T5968] chnl_net:caif_netlink_parms(): no params data found
[   37.901097][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.903005][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.905752][ T5962] bridge_slave_0: entered allmulticast mode
[   37.907761][ T5962] bridge_slave_0: entered promiscuous mode
[   37.932922][ T5961] chnl_net:caif_netlink_parms(): no params data found
[   37.936897][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.938779][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.940643][ T5962] bridge_slave_1: entered allmulticast mode
[   37.942601][ T5962] bridge_slave_1: entered promiscuous mode
[   37.989684][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.991605][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.993485][ T5969] bridge_slave_0: entered allmulticast mode
[   37.996198][ T5969] bridge_slave_0: entered promiscuous mode
[   38.000750][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.002629][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.004560][ T5969] bridge_slave_1: entered allmulticast mode
[   38.006507][ T5969] bridge_slave_1: entered promiscuous mode
[   38.008360][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.010313][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.012251][ T5968] bridge_slave_0: entered allmulticast mode
[   38.015199][ T5968] bridge_slave_0: entered promiscuous mode
[   38.050510][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.052377][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.054255][ T5968] bridge_slave_1: entered allmulticast mode
[   38.056454][ T5968] bridge_slave_1: entered promiscuous mode
[   38.068659][ T5962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.086855][ T5969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.097384][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.100474][ T5962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.120697][ T5969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.123768][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.150289][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.152169][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.154027][ T5961] bridge_slave_0: entered allmulticast mode
[   38.156654][ T5961] bridge_slave_0: entered promiscuous mode
[   38.182120][ T5962] team0: Port device team_slave_0 added
[   38.183912][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.185858][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.187714][ T5961] bridge_slave_1: entered allmulticast mode
[   38.189646][ T5961] bridge_slave_1: entered promiscuous mode
[   38.202501][ T5969] team0: Port device team_slave_0 added
[   38.205393][ T5968] team0: Port device team_slave_0 added
[   38.207776][ T5962] team0: Port device team_slave_1 added
[   38.224966][ T5961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.227897][ T5969] team0: Port device team_slave_1 added
[   38.230314][ T5968] team0: Port device team_slave_1 added
[   38.239585][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.241416][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.249047][ T5962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.268229][ T5961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.277566][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.279349][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.286455][ T5962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.290848][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.292694][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.299433][ T5969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.320532][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.322413][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.329564][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.332798][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.334875][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.341542][ T5969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.352854][ T5961] team0: Port device team_slave_0 added
[   38.356192][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.358013][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.364772][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.378114][ T5961] team0: Port device team_slave_1 added
[   38.405843][ T5962] hsr_slave_0: entered promiscuous mode
[   38.408167][ T5962] hsr_slave_1: entered promiscuous mode
[   38.417631][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.419487][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.426160][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.450516][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.452358][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.459519][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.464285][ T5968] hsr_slave_0: entered promiscuous mode
[   38.466448][ T5968] hsr_slave_1: entered promiscuous mode
[   38.468253][ T5968] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   38.470330][ T5968] Cannot create hsr debugfs directory
[   38.473097][ T5969] hsr_slave_0: entered promiscuous mode
[   38.475148][ T5969] hsr_slave_1: entered promiscuous mode
[   38.476929][ T5969] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   38.478914][ T5969] Cannot create hsr debugfs directory
[   38.558043][ T5961] hsr_slave_0: entered promiscuous mode
[   38.559861][ T5961] hsr_slave_1: entered promiscuous mode
[   38.561519][ T5961] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   38.563471][ T5961] Cannot create hsr debugfs directory
[   38.684573][ T5962] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   38.688396][ T5962] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   38.693812][ T5962] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   38.698752][ T5962] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   38.709321][ T5969] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   38.714635][ T5969] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   38.721845][ T5969] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   38.725527][ T5969] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   38.737464][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.739344][ T5962] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.741473][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.743315][ T5962] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.747846][ T5968] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   38.750928][ T5968] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   38.753901][ T5968] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   38.757724][ T5968] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   38.786998][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.788917][ T5969] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.791042][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.792905][ T5969] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.796923][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.798826][ T5968] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.800826][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.802686][ T5968] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.805728][ T5961] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   38.808751][ T5961] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   38.811821][ T5961] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   38.815446][ T5961] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   38.826698][   T39] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.829625][   T39] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.832674][   T39] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.835291][   T39] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.837550][   T39] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.839827][   T39] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.876786][ T5962] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.886277][ T5962] 8021q: adding VLAN 0 to HW filter on device team0
[   38.905859][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.912919][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.914869][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.929943][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.931792][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.937503][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.941680][ T5968] 8021q: adding VLAN 0 to HW filter on device team0
[   38.947734][ T5969] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.953038][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.954973][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.966634][ T5961] 8021q: adding VLAN 0 to HW filter on device team0
[   38.971280][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.973210][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.987563][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.989476][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.993323][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.995203][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.999445][ T5969] 8021q: adding VLAN 0 to HW filter on device team0
[   39.006889][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.008747][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.019616][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.021567][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.065231][ T5962] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.080605][ T5962] veth0_vlan: entered promiscuous mode
[   39.084965][ T5962] veth1_vlan: entered promiscuous mode
[   39.097223][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.111109][ T5962] veth0_macvtap: entered promiscuous mode
[   39.115306][ T5962] veth1_macvtap: entered promiscuous mode
[   39.131597][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.136769][ T5969] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.140357][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.145789][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.148639][ T5968] veth0_vlan: entered promiscuous mode
[   39.154076][ T5968] veth1_vlan: entered promiscuous mode
[   39.156907][ T5962] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.159255][ T5962] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.161493][ T5962] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.163749][ T5962] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.200118][ T5961] veth0_vlan: entered promiscuous mode
[   39.210721][ T5968] veth0_macvtap: entered promiscuous mode
[   39.213671][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.213983][ T5969] veth0_vlan: entered promiscuous mode
[   39.216590][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.220366][ T5961] veth1_vlan: entered promiscuous mode
[   39.224081][ T5968] veth1_macvtap: entered promiscuous mode
[   39.236177][ T5969] veth1_vlan: entered promiscuous mode
[   39.239520][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.242357][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.246741][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.249158][   T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.251502][   T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.257400][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.260147][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.263127][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.266905][ T5968] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.269207][ T5968] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.271473][ T5968] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.273730][ T5968] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.285659][ T5961] veth0_macvtap: entered promiscuous mode
[   39.293127][ T5969] veth0_macvtap: entered promiscuous mode
[   39.295025][ T5962] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   39.296066][ T5969] veth1_macvtap: entered promiscuous mode
[   39.301999][ T5961] veth1_macvtap: entered promiscuous mode
[   39.312411][ T5969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.315651][ T5969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.318568][ T5969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.321261][ T5969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.324410][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.327979][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.330747][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.333323][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.336641][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.339184][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.341851][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.346747][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.350984][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.353680][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.356279][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.359043][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.362040][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.364871][ T5969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.367639][ T5969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.370303][ T5969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.373033][ T5969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.375908][ T5969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.378676][ T5969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.381606][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.387820][ T5961] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.390184][ T5961] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.392464][ T5961] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.395874][ T5961] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.399771][ T5969] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.402058][ T5969] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.404397][ T5969] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.406796][ T5969] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.455524][   T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.457531][   T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.465648][   T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.468110][   T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.481539][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.483601][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.489871][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.491951][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.503196][   T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.509077][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.509744][   T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.511203][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.614624][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   39.617152][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   39.621118][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   39.705716][ T5975] Bluetooth: hci2: command tx timeout
[   39.705719][ T5312] Bluetooth: hci3: command tx timeout
[   39.705961][ T5312] Bluetooth: hci0: command tx timeout
[   39.707506][ T5975] Bluetooth: hci1: command tx timeout
[   39.753187][ T6030] hid-generic 0000:0000:0000.0002: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[   39.836570][ T6044] input input5: cannot allocate more than FF_MAX_EFFECTS effects
[   40.024705][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   40.026882][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   40.029981][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   40.032109][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   40.034234][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   40.334744][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[   40.454774][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   40.603276][ T6032] IPVS: starting estimator thread 0...
[   40.725816][ T6078] IPVS: using max 39 ests per chain, 93600 per kthread
[   41.169235][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'.
[   41.429408][ T6086] netlink: 'syz.0.12': attribute type 10 has an invalid length.
[   41.431779][ T6086] netlink: 55 bytes leftover after parsing attributes in process `syz.0.12'.
[   41.784682][ T5975] Bluetooth: hci2: command tx timeout
[   41.784696][ T5312] Bluetooth: hci3: command tx timeout
[   41.786323][ T5965] Bluetooth: hci0: command tx timeout
[   41.795037][ T5965] Bluetooth: hci1: command tx timeout
[   42.082993][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'.
[   42.092163][ T6120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19'.
[   42.093866][ T6121] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   42.108193][ T6120] program syz.2.19 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   42.163799][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'.
[   42.319508][ T6130] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   42.350695][ T6133] netlink: 52 bytes leftover after parsing attributes in process `syz.3.24'.
[   42.711971][ T6149] syz.1.30: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   42.716128][ T6149] CPU: 0 UID: 0 PID: 6149 Comm: syz.1.30 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
[   42.718764][ T6149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   42.721525][ T6149] Call Trace:
[   42.722444][ T6149]  <TASK>
[   42.723322][ T6149]  dump_stack_lvl+0x16c/0x1f0
[   42.724697][ T6149]  warn_alloc+0x24d/0x3a0
[   42.725813][ T6149]  ? __pfx_warn_alloc+0x10/0x10
[   42.727049][ T6149]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   42.728785][ T6149]  ? kasan_save_stack+0x42/0x60
[   42.730465][ T6149]  ? kasan_save_stack+0x33/0x60
[   42.732154][ T6149]  ? kasan_save_track+0x14/0x30
[   42.733955][ T6149]  ? __kasan_kmalloc+0xaa/0xb0
[   42.735751][ T6149]  ? xskq_create+0x52/0x1d0
[   42.737408][ T6149]  ? do_sock_setsockopt+0x222/0x480
[   42.739336][ T6149]  ? __sys_setsockopt+0x1a0/0x230
[   42.741167][ T6149]  ? __ia32_sys_setsockopt+0xbc/0x160
[   42.743143][ T6149]  __vmalloc_node_range_noprof+0x10df/0x1530
[   42.745335][ T6149]  ? xskq_create+0xfb/0x1d0
[   42.747018][ T6149]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   42.749291][ T6149]  ? xskq_create+0xfb/0x1d0
[   42.750973][ T6149]  vmalloc_user_noprof+0x6b/0x90
[   42.752802][ T6149]  ? xskq_create+0xfb/0x1d0
[   42.754478][ T6149]  xskq_create+0xfb/0x1d0
[   42.756071][ T6149]  xsk_setsockopt+0x8b0/0xac0
[   42.757780][ T6149]  ? __pfx_xsk_setsockopt+0x10/0x10
[   42.759695][ T6149]  ? find_held_lock+0x2d/0x110
[   42.761460][ T6149]  ? __pfx_xsk_setsockopt+0x10/0x10
[   42.763383][ T6149]  do_sock_setsockopt+0x222/0x480
[   42.765211][ T6149]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   42.767235][ T6149]  ? lock_acquire+0x2f/0xb0
[   42.768904][ T6149]  __sys_setsockopt+0x1a0/0x230
[   42.770704][ T6149]  __ia32_sys_setsockopt+0xbc/0x160
[   42.772616][ T6149]  ? lockdep_hardirqs_on+0x7c/0x110
[   42.774535][ T6149]  ? syscall_enter_from_user_mode_prepare+0x68/0xe0
[   42.776918][ T6149]  __do_fast_syscall_32+0x73/0x120
[   42.778818][ T6149]  do_fast_syscall_32+0x32/0x80
[   42.780601][ T6149]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   42.782908][ T6149] RIP: 0023:0xf744e579
[   42.784402][ T6149] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   42.791309][ T6149] RSP: 002b:00000000f513655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e
[   42.794330][ T6149] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 000000000000011b
[   42.797171][ T6149] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 000000000000001c
[   42.800024][ T6149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   42.802869][ T6149] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[   42.805724][ T6149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   42.808136][ T6149]  </TASK>
[   42.809852][ T6149] Mem-Info:
[   42.810793][ T6149] active_anon:4325 inactive_anon:807 isolated_anon:0
[   42.810793][ T6149]  active_file:9798 inactive_file:34856 isolated_file:0
[   42.810793][ T6149]  unevictable:1768 dirty:1641 writeback:0
[   42.810793][ T6149]  slab_reclaimable:6810 slab_unreclaimable:53582
[   42.810793][ T6149]  mapped:23595 shmem:2511 pagetables:672
[   42.810793][ T6149]  sec_pagetables:294 bounce:0
[   42.810793][ T6149]  kernel_misc_reclaimable:0
[   42.810793][ T6149]  free:67008 free_pcp:3982 free_cma:0
[   42.822963][ T6149] Node 0 active_anon:3308kB inactive_anon:3228kB active_file:560kB inactive_file:7240kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:4532kB dirty:388kB writeback:0kB shmem:5504kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9752kB pagetables:1028kB sec_pagetables:1144kB all_unreclaimable? yes
[   42.831817][ T6149] Node 1 active_anon:13992kB inactive_anon:0kB active_file:38632kB inactive_file:132184kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:89848kB dirty:6176kB writeback:0kB shmem:4540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2144kB pagetables:1660kB sec_pagetables:32kB all_unreclaimable? no
[   42.840553][ T6149] Node 0 DMA free:2964kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:328kB inactive_anon:580kB active_file:20kB inactive_file:148kB unevictable:0kB writepending:136kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:188kB local_pcp:84kB free_cma:0kB
[   42.848441][ T6149] lowmem_reserve[]: 0 273 0 0 0
[   42.849830][ T6149] Node 0 DMA32 free:18720kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:4096KB active_anon:2952kB inactive_anon:2648kB active_file:540kB inactive_file:7092kB unevictable:3536kB writepending:252kB present:1032196kB managed:306332kB mlocked:0kB bounce:0kB free_pcp:1100kB local_pcp:156kB free_cma:0kB
[   42.858714][ T6149] lowmem_reserve[]: 0 0 0 0 0
[   42.859992][ T6149] Node 1 DMA32 free:244708kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:13892kB inactive_anon:0kB active_file:38632kB inactive_file:132184kB unevictable:3536kB writepending:6176kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:15328kB local_pcp:13364kB free_cma:0kB
[   42.868032][ T6149] lowmem_reserve[]: 0 0 0 0 0
[   42.869335][ T6149] Node 0 DMA: 41*4kB (ME) 58*8kB (UME) 40*16kB (UME) 37*32kB (UME) 8*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2964kB
[   42.873110][ T6149] Node 0 DMA32: 7*4kB (UMEH) 62*8kB (MEH) 38*16kB (UMEH) 201*32kB (UMEH) 103*64kB (UMEH) 19*128kB (UMEH) 4*256kB (UME) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 18636kB
[   42.877946][ T6149] Node 1 DMA32: 2*4kB (UE) 258*8kB (UME) 220*16kB (ME) 212*32kB (UME) 201*64kB (UME) 36*128kB (UME) 23*256kB (UME) 14*512kB (UM) 10*1024kB (UM) 3*2048kB (M) 45*4096kB (M) = 243608kB
[   42.882520][ T6149] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   42.885054][ T6149] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   42.887829][ T6149] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   42.890353][ T6149] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   42.892745][ T6149] 47182 total pagecache pages
[   42.893973][ T6149] 0 pages in swap cache
[   42.894557][  T828] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   42.895478][ T6149] Free swap  = 124996kB
[   42.898154][ T6149] Total swap = 124996kB
[   42.899238][ T6149] 524155 pages RAM
[   42.900214][ T6149] 0 pages HighMem/MovableOnly
[   42.901440][ T6149] 206669 pages reserved
[   42.902558][ T6149] 0 pages cma reserved
[   42.944743][ T6157] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   43.054598][  T828] usb 8-1: Using ep0 maxpacket: 16
[   43.059229][  T828] usb 8-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 177, changing to 11
[   43.062177][  T828] usb 8-1: config 1 interface 0 altsetting 9 endpoint 0x3 has invalid wMaxPacketSize 0
[   43.064899][  T828] usb 8-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 0
[   43.067459][  T828] usb 8-1: config 1 interface 0 has no altsetting 0
[   43.071216][  T828] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   43.073578][  T828] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.075930][  T828] usb 8-1: Product: syz
[   43.077164][  T828] usb 8-1: Manufacturer: syz
[   43.078499][  T828] usb 8-1: SerialNumber: syz
[   43.454561][   T30] usb 6-1: new low-speed USB device number 2 using dummy_hcd
[   43.492925][  T828] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22
[   43.498454][  T828] usb 8-1: USB disconnect, device number 2
[   43.626581][   T30] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[   43.628596][   T30] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[   43.631277][   T30] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   43.633852][   T30] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[   43.637055][   T30] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   43.640642][   T30] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[   43.642614][   T30] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[   43.645338][   T30] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   43.647947][   T30] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[   43.650842][   T30] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   43.654732][   T30] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[   43.656718][   T30] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[   43.659318][   T30] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   43.662239][   T30] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[   43.665231][   T30] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   43.670682][   T30] usb 6-1: string descriptor 0 read error: -22
[   43.672511][   T30] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   43.674992][   T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.684392][   T30] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[   43.865195][ T5965] Bluetooth: hci3: command tx timeout
[   43.865324][ T5312] Bluetooth: hci1: command tx timeout
[   43.866741][ T5975] Bluetooth: hci0: command tx timeout
[   43.866764][ T5975] Bluetooth: hci2: command tx timeout
[   43.894002][ T6169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.35'.
[   44.017531][ T6183] sp0: Synchronizing with TNC
[   44.158923][   T30] usb 6-1: USB disconnect, device number 2
[   44.615809][ T6178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   45.169314][   T40] audit: type=1326 audit(1732524183.336:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.0.42" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf743e579 code=0x0
[   45.745268][ T6230] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6
[   45.760808][ T6233] netlink: 'syz.1.50': attribute type 3 has an invalid length.
[   45.763772][ T6233] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   45.773251][ T6230] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   45.944923][ T5975] Bluetooth: hci2: command tx timeout
[   45.944962][ T5312] Bluetooth: hci1: command tx timeout
[   45.954555][ T5312] Bluetooth: hci3: command tx timeout
[   45.954568][ T5975] Bluetooth: hci0: command tx timeout
[   46.156965][ T6238] netlink: 'syz.1.52': attribute type 10 has an invalid length.
[   46.162559][ T6238] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.165071][ T6238] team0: Port device batadv0 added
[   46.267196][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'.
[   47.124068][ T6292] binder: 6291:6292 ioctl 4018620d 200001c0 returned -22
[   47.133814][ T6292] binder: 6291:6292 ioctl c0306201 20000280 returned -14
[   47.138046][ T6292] binder: 6291:6292 ioctl c0306201 20000480 returned -14
[   47.147284][ T6292] binder: 6291:6292 ioctl c0306201 20000380 returned -14
[   47.514535][  T828] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   47.529063][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.531116][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.533780][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.536153][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.538193][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.540135][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.542071][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.544022][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.546255][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.548246][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.550195][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.552131][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.554084][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.556180][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.558149][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.560068][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.562075][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.564037][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.566127][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.568085][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.570031][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.571941][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.573872][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.576020][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.577976][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.579927][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.581865][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.583819][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.585890][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.593503][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.595598][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.597545][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.599478][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.601384][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.603311][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.614663][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.616624][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.618560][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.620440][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.622332][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.624226][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.626671][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.628806][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.631129][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.633748][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.635891][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.637875][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.639817][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.641728][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.643669][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.645770][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.648427][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.650646][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.652562][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.654699][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.656758][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.658785][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.660689][ T6030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   47.665272][ T6030] hid-generic 0000:0000:0000.0003: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   47.674563][  T828] usb 5-1: Using ep0 maxpacket: 32
[   47.679999][  T828] usb 5-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   47.684217][  T828] usb 5-1: config 1 interface 0 has no altsetting 0
[   47.689193][  T828] usb 5-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.40
[   47.691661][  T828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.694311][  T828] usb 5-1: Product: syz
[   47.696142][  T828] usb 5-1: Manufacturer: syz
[   47.697430][  T828] usb 5-1: SerialNumber: syz
[   47.757943][ T6302] netlink: 16 bytes leftover after parsing attributes in process `syz.3.69'.
[   47.770556][   T35] IPVS: starting estimator thread 0...
[   47.864583][ T6305] IPVS: using max 40 ests per chain, 96000 per kthread
[   47.925201][ T6297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.928207][ T6297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.955092][ T6318] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   47.956187][  T828] usbhid 5-1:1.0: can't add hid device: -71
[   47.961759][  T828] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[   47.968450][  T828] usb 5-1: USB disconnect, device number 2
[   47.975181][ T6032] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   48.030722][   T40] audit: type=1326 audit(1732524186.196:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.1.76" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x0
[   48.174823][ T6030] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   48.324497][ T6030] usb 7-1: Using ep0 maxpacket: 8
[   48.326997][ T6030] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   48.329569][ T6030] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   48.332308][ T6030] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   48.335121][ T6030] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   48.338463][ T6030] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   48.340882][ T6030] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.551656][ T6030] usb 7-1: GET_CAPABILITIES returned 0
[   48.553742][ T6030] usbtmc 7-1:16.0: can't read capabilities
[   48.744645][ T6032] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   48.766254][ T6316] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   48.768271][ T6316] overlayfs: failed to set xattr on upper
[   48.769799][ T6316] overlayfs: ...falling back to redirect_dir=nofollow.
[   48.773891][ T6316] overlayfs: ...falling back to index=off.
[   48.775604][ T6316] overlayfs: ...falling back to uuid=null.
[   48.791946][ T6316] evm: overlay not supported
[   48.824255][ T6032] usb 7-1: USB disconnect, device number 2
[   49.047078][ T6348] input: syz0 as /devices/virtual/input/input7
[   49.059390][ T6348] netlink: 52 bytes leftover after parsing attributes in process `syz.1.82'.
[   49.251230][ T6352] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   49.275669][ T1325] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   49.280564][ T6355] 9pnet_virtio: no channels available for device syz
[   49.437022][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.88'.
[   49.439511][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.88'.
[   49.448683][ T6362] veth1_to_bridge: entered promiscuous mode
[   49.450588][ T6362] macvlan2: entered promiscuous mode
[   49.452552][ T6362] macvlan2: entered allmulticast mode
[   49.455059][ T6362] veth1_to_bridge: entered allmulticast mode
[   49.514383][ T6369] process 'syz.1.89' launched './file2' with NULL argv: empty string added
[   49.543026][ T6373] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:0
[   49.892164][ T6377] netlink: 44 bytes leftover after parsing attributes in process `syz.2.91'.
[   49.916627][ T6377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.91'.
[   49.920128][ T6383] netlink: 40 bytes leftover after parsing attributes in process `syz.1.93'.
[   49.922974][ T6383] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   50.034671][  T828] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   50.231409][ T6403] netlink: 'syz.0.96': attribute type 75 has an invalid length.
[   50.527264][ T6441] random: crng reseeded on system resumption
[   50.535374][ T6441] netlink: 'syz.1.102': attribute type 10 has an invalid length.
[   50.549101][ T6441] bond0: (slave netdevsim0): no link monitoring support
[   50.551340][ T6441] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details
[   50.562131][ T6441] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   50.617332][ T6448] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   50.784094][ T6450] netlink: 48 bytes leftover after parsing attributes in process `syz.1.104'.
[   50.803167][ T6454] Unsupported ieee802154 address type: 0
[   51.054918][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'.
[   51.171528][ T6462] ax25_connect(): syz.3.106 uses autobind, please contact jreuter@yaina.de
[   51.471370][ T6466] e1000e 0000:00:02.0 eth1: NIC Link is Down
[   51.697331][ T6487] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[   51.916098][ T6512] autofs4:pid:6512:validate_dev_ioctl: path string terminator missing for cmd(0xc0189374)
[   51.931020][ T6515] __nla_validate_parse: 2 callbacks suppressed
[   51.931030][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'.
[   51.985585][   T40] audit: type=1326 audit(1732524190.156:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.1.115" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x0
[   52.115232][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   52.480390][ T6543] syz.1.120 (6543): drop_caches: 2
[   52.526151][ T6554] =======================================================
[   52.526151][ T6554] WARNING: The mand mount option has been deprecated and
[   52.526151][ T6554]          and is ignored by this kernel. Remove the mand
[   52.526151][ T6554]          option from the mount to silence this warning.
[   52.526151][ T6554] =======================================================
[   52.648551][ T6564] ieee802154 phy0 wpan0: encryption failed: -22
[   52.769092][ T6580] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   52.779850][ T6586] dccp_invalid_packet: invalid packet type
[   52.797036][ T1325] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   52.844826][ T5975] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[   52.845071][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.137'.
[   52.851027][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.137'.
[   53.020588][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'.
[   53.023621][ T6618] random: crng reseeded on system resumption
[   53.094029][ T6624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.142'.
[   53.101386][ T6626] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   53.124568][ T6030] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   53.133563][ T6629] capability: warning: `syz.0.144' uses deprecated v2 capabilities in a way that may be insecure
[   53.148631][ T6632] batman_adv: batadv0: Adding interface: dummy0
[   53.150804][ T6632] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.157897][ T6632] batman_adv: batadv0: Interface activated: dummy0
[   53.163991][ T6632] batadv0: mtu less than device minimum
[   53.166359][ T6632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   53.169884][ T6632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   53.173348][ T6632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   53.176786][ T6632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   53.180158][ T6632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   53.183535][ T6632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   53.186975][ T6632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   53.190415][ T6632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   53.326963][ T6646] syz.2.149: attempt to access beyond end of device
[   53.326963][ T6646] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0
[   53.330560][ T6646] syz.2.149: attempt to access beyond end of device
[   53.330560][ T6646] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0
[   53.333913][ T6646] Mount JFS Failure: -5
[   53.384574][    C2] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   53.437708][ T6653] overlayfs: failed to resolve './file1': -2
[   53.716394][ T1325] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   53.734600][ T6030] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   53.750236][ T6664] warning: `syz.1.153' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   53.881372][ T1325] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   53.955647][ T6671] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[   53.957491][ T6671] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   53.960395][ T6671] vhci_hcd vhci_hcd.0: Device attached
[   53.978207][ T6671] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   54.064980][ T1325] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   54.275450][ T6032] vhci_hcd: vhci_device speed not set
[   54.388920][ T6032] usb 43-1: new full-speed USB device number 2 using vhci_hcd
[   54.474564][   T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   54.695218][   T25] usb 6-1: too many configurations: 9, using maximum allowed: 8
[   54.699022][   T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   54.701340][   T25] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   54.704175][   T25] usb 6-1: config 0 interface 0 has no altsetting 0
[   54.707609][   T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   54.711754][   T25] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   54.714652][   T25] usb 6-1: config 0 interface 0 has no altsetting 0
[   54.718224][   T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   54.720535][   T25] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   54.723383][   T25] usb 6-1: config 0 interface 0 has no altsetting 0
[   54.727683][   T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   54.727702][   T25] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   54.727714][   T25] usb 6-1: config 0 interface 0 has no altsetting 0
[   54.728386][   T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   54.728404][   T25] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   54.728415][   T25] usb 6-1: config 0 interface 0 has no altsetting 0
[   54.729081][   T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   54.729097][   T25] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   54.729108][   T25] usb 6-1: config 0 interface 0 has no altsetting 0
[   54.729774][   T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   54.729796][   T25] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   54.729807][   T25] usb 6-1: config 0 interface 0 has no altsetting 0
[   54.730491][   T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   54.730508][   T25] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   54.730520][   T25] usb 6-1: config 0 interface 0 has no altsetting 0
[   54.731889][   T25] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   54.731902][   T25] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   54.731911][   T25] usb 6-1: Product: syz
[   54.731918][   T25] usb 6-1: Manufacturer: syz
[   54.731925][   T25] usb 6-1: SerialNumber: syz
[   54.733926][   T25] usb 6-1: config 0 descriptor??
[   54.766977][ T6672] vhci_hcd: connection reset by peer
[   54.771397][   T25] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[   54.777855][ T6593] vhci_hcd: stop threads
[   54.788102][ T6593] vhci_hcd: release socket
[   54.790072][ T6593] vhci_hcd: disconnect device
[   54.977702][ T6682] syz.1.158 uses obsolete (PF_INET,SOCK_PACKET)
[   55.044257][   T25] usb 6-1: USB disconnect, device number 3
[   55.047014][   T25] yurex 6-1:0.0: USB YUREX #0 now disconnected
[   55.080735][ T6697] netlink: 'syz.0.162': attribute type 10 has an invalid length.
[   55.084786][ T6697] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.087394][ T6697] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   55.294502][ T5312] Bluetooth: hci3: command 0x0405 tx timeout
[   55.309088][ T6701] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.163'.
[   55.698302][   T40] audit: type=1326 audit(1732524193.866:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.0.169" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x0
[   55.944754][ T1325] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   55.984576][ T3221] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   56.016170][ T1325] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   56.101548][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'.
[   56.134534][ T3221] usb 8-1: Using ep0 maxpacket: 8
[   56.137270][ T3221] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   56.140663][ T3221] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[   56.145232][ T3221] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[   56.148030][ T3221] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.150418][ T3221] usb 8-1: Product: syz
[   56.151680][ T3221] usb 8-1: Manufacturer: syz
[   56.153090][ T3221] usb 8-1: SerialNumber: syz
[   56.458554][ T6757] x_tables: duplicate underflow at hook 1
[   56.510253][ T6761] FAULT_INJECTION: forcing a failure.
[   56.510253][ T6761] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   56.513719][ T6761] CPU: 2 UID: 0 PID: 6761 Comm: syz.1.180 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
[   56.516386][ T6761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   56.519267][ T6761] Call Trace:
[   56.520162][ T6761]  <TASK>
[   56.520952][ T6761]  dump_stack_lvl+0x16c/0x1f0
[   56.522217][ T6761]  should_fail_ex+0x497/0x5b0
[   56.523458][ T6761]  _copy_to_user+0x32/0xd0
[   56.524644][ T6761]  put_old_timespec32+0x194/0x1e0
[   56.525980][ T6761]  ? __pfx_put_old_timespec32+0x10/0x10
[   56.527436][ T6761]  ? read_tsc+0x9/0x20
[   56.528503][ T6761]  ? ktime_get_ts64+0x256/0x400
[   56.529766][ T6761]  poll_select_finish+0x5c4/0x6b0
[   56.531075][ T6761]  ? __pfx_poll_select_finish+0x10/0x10
[   56.532526][ T6761]  do_compat_pselect+0x218/0x240
[   56.533872][ T6761]  ? __pfx_do_compat_pselect+0x10/0x10
[   56.535316][ T6761]  __ia32_compat_sys_pselect6_time32+0x17c/0x240
[   56.536941][ T6761]  ? __pfx___ia32_compat_sys_pselect6_time32+0x10/0x10
[   56.538735][ T6761]  __do_fast_syscall_32+0x73/0x120
[   56.540086][ T6761]  do_fast_syscall_32+0x32/0x80
[   56.541369][ T6761]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   56.543070][ T6761] RIP: 0023:0xf744e579
[   56.544148][ T6761] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   56.549126][ T6761] RSP: 002b:00000000f513655c EFLAGS: 00000296 ORIG_RAX: 0000000000000134
[   56.551656][ T6761] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 00000000200001c0
[   56.553684][ T6761] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020000300
[   56.555716][ T6761] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   56.557748][ T6761] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   56.559755][ T6761] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   56.561802][ T6761]  </TASK>
[   56.562695][    C2] vkms_vblank_simulate: vblank timer overrun
[   56.635346][ T1325] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   56.729743][ T6774] ubi0: attaching mtd0
[   56.731775][ T6774] ubi0: scanning is finished
[   56.733016][ T6774] ubi0: empty MTD device detected
[   56.793379][ T6774] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[   56.795532][ T6774] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[   56.797494][ T6774] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[   56.799400][ T6774] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[   56.801390][ T6774] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[   56.803263][ T6774] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[   56.805792][ T6774] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3783220321
[   56.808499][ T6774] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[   56.811478][ T6779] ubi0: background thread "ubi_bgt0d" started, PID 6779
[   56.859847][ T6781] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   56.941501][ T6793] Zero length message leads to an empty skb
[   57.204261][ T6797] FAULT_INJECTION: forcing a failure.
[   57.204261][ T6797] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   57.207779][ T6797] CPU: 2 UID: 0 PID: 6797 Comm: syz.2.192 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
[   57.210309][ T6797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   57.213095][ T6797] Call Trace:
[   57.213988][ T6797]  <TASK>
[   57.214773][ T6797]  dump_stack_lvl+0x16c/0x1f0
[   57.216010][ T6797]  should_fail_ex+0x497/0x5b0
[   57.217204][ T6797]  _copy_to_user+0x32/0xd0
[   57.218392][ T6797]  simple_read_from_buffer+0xd0/0x160
[   57.219799][ T6797]  proc_fail_nth_read+0x198/0x270
[   57.221126][ T6797]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   57.222556][ T6797]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   57.223963][ T6797]  vfs_read+0x1df/0xbe0
[   57.225057][ T6797]  ? __fget_files+0x1fc/0x3a0
[   57.226303][ T6797]  ? __pfx___mutex_lock+0x10/0x10
[   57.227643][ T6797]  ? __pfx_vfs_read+0x10/0x10
[   57.228873][ T6797]  ? __fget_files+0x206/0x3a0
[   57.230101][ T6797]  ksys_read+0x12b/0x250
[   57.231199][ T6797]  ? __pfx_ksys_read+0x10/0x10
[   57.232465][ T6797]  __do_fast_syscall_32+0x73/0x120
[   57.233825][ T6797]  do_fast_syscall_32+0x32/0x80
[   57.235131][ T6797]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   57.236781][ T6797] RIP: 0023:0xf7f31579
[   57.237851][ T6797] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   57.242841][ T6797] RSP: 002b:00000000f50b6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[   57.244959][ T6797] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f50b6620
[   57.246949][ T6797] RDX: 000000000000000f RSI: 00000000f73bdff4 RDI: 0000000000000000
[   57.248957][ T6797] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[   57.250999][ T6797] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[   57.253060][ T6797] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   57.255126][ T6797]  </TASK>
[   57.256042][    C2] vkms_vblank_simulate: vblank timer overrun
[   57.304688][ T5337] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   57.495668][ T6806] bridge0: port 3(syz_tun) entered blocking state
[   57.497974][ T6806] bridge0: port 3(syz_tun) entered disabled state
[   57.500470][ T6806] syz_tun: entered allmulticast mode
[   57.502766][ T6806] syz_tun: entered promiscuous mode
[   57.504767][ T6806] bridge0: port 3(syz_tun) entered blocking state
[   57.506550][ T6806] bridge0: port 3(syz_tun) entered forwarding state
[   57.641189][   T40] audit: type=1326 audit(1732524195.806:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.2.196" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x0
[   57.847050][ T6813] xt_CT: No such helper "pptp"
[   58.642427][ T1325] usb 8-1: USB disconnect, device number 3
[   58.694322][ T6835] sg_write: data in/out 92/70 bytes for SCSI command 0x0-- guessing data in;
[   58.694322][ T6835]    program syz.3.204 not setting count and/or reply_len properly
[   58.832751][ T6840] netlink: 'syz.0.203': attribute type 3 has an invalid length.
[   58.895365][ T6837] tmpfs: Unknown parameter 'usrquotaÿÿÿÿÿÿÿÿ'
[   58.927586][ T5312] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[   58.931299][ T5312] CPU: 2 UID: 0 PID: 5312 Comm: kworker/u33:1 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
[   58.935123][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   58.938997][ T5312] Workqueue: hci2 hci_rx_work
[   58.940718][ T5312] Call Trace:
[   58.941951][ T5312]  <TASK>
[   58.943054][ T5312]  dump_stack_lvl+0x16c/0x1f0
[   58.944801][ T5312]  sysfs_warn_dup+0x7f/0xa0
[   58.946486][ T5312]  sysfs_create_dir_ns+0x24d/0x2b0
[   58.948379][ T5312]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[   58.950468][ T5312]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   58.952448][ T5312]  ? kobject_add_internal+0x12d/0x990
[   58.954414][ T5312]  ? do_raw_spin_unlock+0x172/0x230
[   58.956299][ T5312]  kobject_add_internal+0x2c8/0x990
[   58.958217][ T5312]  kobject_add+0x16f/0x240
[   58.959878][ T5312]  ? __pfx_kobject_add+0x10/0x10
[   58.961703][ T5312]  ? class_to_subsys+0x3e/0x160
[   58.963503][ T5312]  ? do_raw_spin_unlock+0x172/0x230
[   58.965403][ T5312]  ? kobject_put+0xab/0x5a0
[   58.966875][ T5312]  device_add+0x289/0x1a70
[   58.968011][ T5312]  ? __pfx_dev_set_name+0x10/0x10
[   58.969321][ T5312]  ? __pfx_device_add+0x10/0x10
[   58.970559][ T5312]  ? mgmt_send_event_skb+0x2f2/0x460
[   58.971871][ T5312]  hci_conn_add_sysfs+0x17e/0x230
[   58.973153][ T5312]  le_conn_complete_evt+0xfc6/0x1cd0
[   58.974478][ T5312]  ? __pfx_le_conn_complete_evt+0x10/0x10
[   58.975839][ T5312]  ? __mutex_lock+0x1cc/0xa60
[   58.977070][ T5312]  hci_le_enh_conn_complete_evt+0x23d/0x380
[   58.978584][ T5312]  ? skb_pull_data+0x166/0x210
[   58.979790][ T5312]  hci_le_meta_evt+0x2e2/0x5d0
[   58.981003][ T5312]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[   58.982682][ T5312]  hci_event_packet+0x666/0x1190
[   58.983954][ T5312]  ? __pfx_hci_le_meta_evt+0x10/0x10
[   58.985263][ T5312]  ? __pfx_hci_event_packet+0x10/0x10
[   58.986615][ T5312]  ? kcov_remote_start+0x3df/0x6e0
[   58.987948][ T5312]  hci_rx_work+0x2c5/0x16b0
[   58.989094][ T5312]  ? process_one_work+0x8bb/0x1b30
[   58.990369][ T5312]  process_one_work+0x958/0x1b30
[   58.991603][ T5312]  ? __pfx_lock_acquire.part.0+0x10/0x10
[   58.992981][ T5312]  ? __pfx_process_one_work+0x10/0x10
[   58.994285][ T5312]  ? rcu_is_watching+0x12/0xc0
[   58.995498][ T5312]  ? assign_work+0x1a0/0x250
[   58.996643][ T5312]  worker_thread+0x6c8/0xf00
[   58.997782][ T5312]  ? __kthread_parkme+0x148/0x220
[   58.999034][ T5312]  ? __pfx_worker_thread+0x10/0x10
[   59.000324][ T5312]  kthread+0x2c1/0x3a0
[   59.001358][ T5312]  ? _raw_spin_unlock_irq+0x23/0x50
[   59.002679][ T5312]  ? __pfx_kthread+0x10/0x10
[   59.003848][ T5312]  ret_from_fork+0x45/0x80
[   59.004949][ T5312]  ? __pfx_kthread+0x10/0x10
[   59.006121][ T5312]  ret_from_fork_asm+0x1a/0x30
[   59.007351][ T5312]  </TASK>
[   59.008225][    C2] vkms_vblank_simulate: vblank timer overrun
[   59.010001][ T5312] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   59.013537][ T5312] Bluetooth: hci2: failed to register connection device
[   59.029278][ T6848] FAULT_INJECTION: forcing a failure.
[   59.029278][ T6848] name failslab, interval 1, probability 0, space 0, times 0
[   59.032472][ T6848] CPU: 3 UID: 0 PID: 6848 Comm: syz.0.207 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
[   59.035098][ T6848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   59.037900][ T6848] Call Trace:
[   59.038855][ T6848]  <TASK>
[   59.039655][ T6848]  dump_stack_lvl+0x16c/0x1f0
[   59.040974][ T6848]  should_fail_ex+0x497/0x5b0
[   59.042573][ T6848]  ? fs_reclaim_acquire+0xae/0x150
[   59.044108][ T6848]  should_failslab+0xc2/0x120
[   59.045336][ T6848]  __kmalloc_cache_noprof+0x6b/0x310
[   59.046770][ T6848]  ? copy_mount_options+0x55/0x190
[   59.048219][ T6848]  ? _copy_from_user+0x59/0xd0
[   59.049580][ T6848]  copy_mount_options+0x55/0x190
[   59.050963][ T6848]  __ia32_sys_mount+0x1ad/0x310
[   59.052179][ T6848]  ? __pfx___ia32_sys_mount+0x10/0x10
[   59.053575][ T6848]  __do_fast_syscall_32+0x73/0x120
[   59.054861][ T6848]  do_fast_syscall_32+0x32/0x80
[   59.056088][ T6848]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   59.057695][ T6848] RIP: 0023:0xf743e579
[   59.058779][ T6848] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   59.063793][ T6848] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[   59.065964][ T6848] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000300
[   59.067939][ T6848] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000020000200
[   59.069896][ T6848] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   59.071950][ T6848] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   59.073946][ T6848] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   59.076127][ T6848]  </TASK>
[   59.136799][ T6853] netlink: 'syz.3.209': attribute type 32 has an invalid length.
[   59.138884][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'.
[   59.141134][ T6853] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[   59.204968][ T1325] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   59.248170][ T6870] overlayfs: missing 'lowerdir'
[   59.253440][ T6872] net_ratelimit: 16 callbacks suppressed
[   59.253450][ T6872] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   59.259336][ T6870] lo speed is unknown, defaulting to 1000
[   59.262201][ T6870] lo speed is unknown, defaulting to 1000
[   59.264332][ T6870] lo speed is unknown, defaulting to 1000
[   59.285006][ T5337] ip6_tnl_xmit_ctl: 2 callbacks suppressed
[   59.285016][ T5337] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   59.312487][ T6870] infiniband syz0: set active
[   59.314499][ T6870] infiniband syz0: added lo
[   59.314795][   T35] lo speed is unknown, defaulting to 1000
[   59.341232][ T6870] RDS/IB: syz0: added
[   59.342578][ T6870] smc: adding ib device syz0 with port count 1
[   59.344255][ T6870] smc:    ib device syz0 port 1 has pnetid 
[   59.348531][ T6870] lo speed is unknown, defaulting to 1000
[   59.351390][ T5337] lo speed is unknown, defaulting to 1000
[   59.356010][ T1325] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[   59.358215][ T1325] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   59.361382][ T1325] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   59.363708][ T1325] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   59.365767][ T1325] usb 6-1: Manufacturer: syz
[   59.367956][ T1325] usb 6-1: config 0 descriptor??
[   59.392556][ T6870] lo speed is unknown, defaulting to 1000
[   59.432140][ T6870] lo speed is unknown, defaulting to 1000
[   59.434587][ T1325] rc_core: IR keymap rc-hauppauge not found
[   59.436567][ T1325] Registered IR keymap rc-empty
[   59.439712][ T1325] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0
[   59.443634][ T1325] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input9
[   59.517630][ T6870] lo speed is unknown, defaulting to 1000
[   59.544523][ T6032] vhci_hcd: vhci_device speed not set
[   59.603784][ T6883] overlayfs: overlapping lowerdir path
[   59.621693][ T6883] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   59.686214][ T6885] netlink: 20 bytes leftover after parsing attributes in process `syz.2.215'.
[   59.814637][ T5337] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   60.162254][ T3221] usb 6-1: USB disconnect, device number 4
[   60.215016][ T6883] Set syz1 is full, maxelem 65536 reached
[   60.401577][ T6905] 9pnet_virtio: no channels available for device syz
[   60.508607][ T6907] x_tables: ip6_tables: ipcomp match: only valid for protocol 108
[   60.545210][ T6911] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   60.554707][    T8] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   60.575135][ T6032] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   60.693031][ T6931] fuse: Unknown parameter ''
[   60.704548][    T8] usb 8-1: Using ep0 maxpacket: 8
[   60.715506][    T8] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   60.717652][ T6933] tipc: Started in network mode
[   60.718138][    T8] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   60.719359][ T6933] tipc: Node identity ac14142f, cluster identity 4711
[   60.719673][ T6933] tipc: New replicast peer: 0.0.0.0
[   60.723591][    T8] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   60.726440][ T6933] tipc: Enabled bearer <udp:syz2>, priority 10
[   60.729244][    T8] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   60.730651][ T6936] 9pnet_fd: Insufficient options for proto=fd
[   60.731042][ T6933] tipc: New replicast peer: 100.1.1.0
[   60.732610][    T8] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   60.732623][    T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.777140][   T40] audit: type=1326 audit(1732524198.946:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.0.231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[   60.782682][   T40] audit: type=1326 audit(1732524198.946:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.0.231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[   60.788419][   T40] audit: type=1326 audit(1732524198.946:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.0.231" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf743e579 code=0x7ffc0000
[   60.793968][   T40] audit: type=1326 audit(1732524198.946:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.0.231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[   60.799418][   T40] audit: type=1326 audit(1732524198.946:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.0.231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[   60.806305][   T40] audit: type=1326 audit(1732524198.946:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.0.231" exe="/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf743e579 code=0x7ffc0000
[   60.811709][   T40] audit: type=1326 audit(1732524198.946:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.0.231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[   60.817310][   T40] audit: type=1326 audit(1732524198.946:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.0.231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[   60.822796][   T40] audit: type=1326 audit(1732524198.946:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.0.231" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf743e579 code=0x7ffc0000
[   60.840150][ T6942] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   60.846652][ T6942] xt_TPROXY: Can be used only with -p tcp or -p udp
[   60.871518][ T6944] overlay: ./file0 is not a directory
[   60.914228][ T6942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.928161][ T6949] overlayfs: invalid origin (0000007900ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[   61.024687][ T6032] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   61.064663][ T5975] Bluetooth: hci2: command tx timeout
[   61.119217][ T6963] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   61.145387][ T5337] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   61.160892][    T8] usb 8-1: usb_control_msg returned -71
[   61.168099][    T8] usbtmc 8-1:16.0: can't read capabilities
[   61.176652][    T8] usb 8-1: USB disconnect, device number 4
[   61.184539][ T3221] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   61.334684][ T3221] usb 5-1: Using ep0 maxpacket: 8
[   61.346936][ T3221] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[   61.349214][ T3221] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[   61.351268][ T3221] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[   61.353655][ T3221] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[   61.358567][ T3221] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[   61.359120][ T6990] netlink: 'syz.3.238': attribute type 10 has an invalid length.
[   61.361580][ T3221] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   61.370223][ T6990] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.372718][ T6990] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.374917][ T3221] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[   61.379825][ T3221] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[   61.382789][ T6990] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.384699][ T3221] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[   61.385623][ T6990] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.387845][ T3221] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[   61.390565][ T6990] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.395081][ T3221] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[   61.395734][ T6990] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.403078][ T6990] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   61.404584][ T3221] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   61.412503][ T3221] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[   61.415478][ T3221] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[   61.415972][ T6982] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   61.417482][ T3221] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[   61.425065][ T3221] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[   61.428082][ T3221] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[   61.430945][ T3221] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   61.433564][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.238'.
[   61.438301][ T3221] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   61.438558][ T6982] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   61.440868][ T3221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.446407][ T6990] bridge_slave_1: left allmulticast mode
[   61.446426][ T6990] bridge_slave_1: left promiscuous mode
[   61.446556][ T6990] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.449441][ T3221] usb 5-1: Product: syz
[   61.455245][ T3221] usb 5-1: Manufacturer: syz
[   61.456559][ T3221] usb 5-1: SerialNumber: syz
[   61.457183][ T6990] bridge_slave_0: left allmulticast mode
[   61.459809][ T6990] bridge_slave_0: left promiscuous mode
[   61.462013][ T6990] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.465517][ T5337] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   61.481607][ T6990] bond0: (slave bridge0): Releasing backup interface
[   61.714739][ T6022] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   61.855305][  T828] tipc: Node number set to 2886997039
[   61.942598][ T7017] overlayfs: workdir and upperdir must reside under the same mount
[   61.972728][ T7016] input: syz1 as /devices/virtual/input/input10
[   62.519367][ T7006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.817080][   T40] kauditd_printk_skb: 30 callbacks suppressed
[   62.817090][   T40] audit: type=1326 audit(1732524200.986:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7039 comm="syz.1.250" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x0
[   62.964891][   T40] audit: type=1326 audit(1732524201.136:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.0.231" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf743e579 code=0x7ffc0000
[   62.972319][ T3221] adutux 5-1:246.0: interrupt endpoints not found
[   62.974315][   T40] audit: type=1326 audit(1732524201.136:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.0.231" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf743e5a7 code=0x7ffc0000
[   62.978619][ T3221] usb 5-1: USB disconnect, device number 3
[   62.990564][   T40] audit: type=1326 audit(1732524201.136:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.0.231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[   63.001496][   T40] audit: type=1326 audit(1732524201.136:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.0.231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[   63.067699][ T7047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.251'.
[   63.350135][ T6030] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   63.361522][ T6030] hid-generic 0000:0000:0000.0004: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   63.374563][   T25] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[   63.503560][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.254'.
[   63.536237][   T25] usb 7-1: config 0 has no interfaces?
[   63.539212][   T25] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   63.541649][   T25] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   63.543911][   T25] usb 7-1: Product: syz
[   63.545584][   T25] usb 7-1: Manufacturer: syz
[   63.548039][   T25] usb 7-1: SerialNumber: syz
[   63.550164][   T25] usb 7-1: config 0 descriptor??
[   63.651296][ T7063] sg_write: data in/out 986/98 bytes for SCSI command 0x7-- guessing data in;
[   63.651296][ T7063]    program syz.0.256 not setting count and/or reply_len properly
[   63.756116][  T828] usb 7-1: USB disconnect, device number 3
[   63.866416][ T5975] Bluetooth: hci2: command tx timeout
[   64.023405][ T7083] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   64.124797][ T7087] 9pnet_fd: Insufficient options for proto=fd
[   64.235636][ T7094] tmpfs: Unknown parameter 'usrquotaÀ'
[   64.391041][ T7101] trusted_key: syz.2.265 sent an empty control message without MSG_MORE.
[   64.578033][ T7106] FAULT_INJECTION: forcing a failure.
[   64.578033][ T7106] name failslab, interval 1, probability 0, space 0, times 0
[   64.581348][ T7106] CPU: 1 UID: 0 PID: 7106 Comm: syz.0.267 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
[   64.583912][ T7106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   64.586581][ T7106] Call Trace:
[   64.587436][ T7106]  <TASK>
[   64.588188][ T7106]  dump_stack_lvl+0x16c/0x1f0
[   64.589396][ T7106]  should_fail_ex+0x497/0x5b0
[   64.590685][ T7106]  ? fs_reclaim_acquire+0xae/0x150
[   64.592020][ T7106]  should_failslab+0xc2/0x120
[   64.593248][ T7106]  __kmalloc_noprof+0xcb/0x410
[   64.594477][ T7106]  ? __kmalloc_noprof+0x207/0x410
[   64.595789][ T7106]  tomoyo_realpath_from_path+0xbf/0x710
[   64.597218][ T7106]  ? tomoyo_fill_path_info+0x233/0x420
[   64.598644][ T7106]  tomoyo_mount_acl+0x1af/0x880
[   64.599874][ T7106]  ? hlock_class+0x4e/0x130
[   64.600982][ T7106]  ? __lock_acquire+0x15a9/0x3c40
[   64.602277][ T7106]  ? __pfx_tomoyo_mount_acl+0x10/0x10
[   64.603666][ T7106]  ? __pfx___lock_acquire+0x10/0x10
[   64.604995][ T7106]  ? stack_trace_save+0x95/0xd0
[   64.606277][ T7106]  ? __pfx_lock_release+0x10/0x10
[   64.607607][ T7106]  ? trace_lock_acquire+0x146/0x1e0
[   64.608977][ T7106]  ? tomoyo_mount_permission+0x149/0x420
[   64.610465][ T7106]  ? lock_acquire+0x2f/0xb0
[   64.611651][ T7106]  ? tomoyo_mount_permission+0x149/0x420
[   64.613093][ T7106]  tomoyo_mount_permission+0x16e/0x420
[   64.614484][ T7106]  ? tomoyo_mount_permission+0x149/0x420
[   64.615886][ T7106]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[   64.617370][ T7106]  ? get_current_fs_domain+0x184/0x1f0
[   64.618706][ T7106]  security_sb_mount+0x9b/0x260
[   64.619904][ T7106]  path_mount+0x129/0x1f10
[   64.621018][ T7106]  ? kmem_cache_free+0x152/0x4b0
[   64.622249][ T7106]  ? __pfx_path_mount+0x10/0x10
[   64.623487][ T7106]  ? putname+0x13c/0x180
[   64.624523][ T7106]  __ia32_sys_mount+0x292/0x310
[   64.625719][ T7106]  ? __pfx___ia32_sys_mount+0x10/0x10
[   64.627090][ T7106]  __do_fast_syscall_32+0x73/0x120
[   64.628379][ T7106]  do_fast_syscall_32+0x32/0x80
[   64.629611][ T7106]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   64.631150][ T7106] RIP: 0023:0xf743e579
[   64.632203][ T7106] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   64.636914][ T7106] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[   64.638987][ T7106] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000300
[   64.640903][ T7106] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000020000200
[   64.642846][ T7106] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   64.644760][ T7106] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   64.646666][ T7106] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   64.648611][ T7106]  </TASK>
[   64.649801][ T7106] ERROR: Out of memory at tomoyo_realpath_from_path.
[   65.369236][ T7117] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[   65.371475][ T7117] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   65.376404][ T7117] vhci_hcd vhci_hcd.0: Device attached
[   65.756212][ T6030] vhci_hcd: vhci_device speed not set
[   65.918513][ T7127] lo speed is unknown, defaulting to 1000
[   66.031697][ T6030] usb 43-1: new full-speed USB device number 3 using vhci_hcd
[   66.067058][ T7137] netlink: 56 bytes leftover after parsing attributes in process `syz.2.275'.
[   66.108942][ T7140] FAULT_INJECTION: forcing a failure.
[   66.108942][ T7140] name failslab, interval 1, probability 0, space 0, times 0
[   66.112253][ T7140] CPU: 3 UID: 0 PID: 7140 Comm: syz.2.276 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
[   66.114830][ T7140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   66.117404][ T7140] Call Trace:
[   66.118245][ T7140]  <TASK>
[   66.119025][ T7140]  dump_stack_lvl+0x16c/0x1f0
[   66.120190][ T7140]  should_fail_ex+0x497/0x5b0
[   66.121376][ T7140]  ? fs_reclaim_acquire+0xae/0x150
[   66.122648][ T7140]  should_failslab+0xc2/0x120
[   66.123827][ T7140]  __kmalloc_noprof+0xcb/0x410
[   66.125043][ T7140]  ? __pfx_d_absolute_path+0x10/0x10
[   66.126365][ T7140]  tomoyo_encode2+0x100/0x3e0
[   66.127557][ T7140]  tomoyo_realpath_from_path+0x1a7/0x710
[   66.128962][ T7140]  tomoyo_mount_acl+0x1af/0x880
[   66.130167][ T7140]  ? hlock_class+0x4e/0x130
[   66.131312][ T7140]  ? __lock_acquire+0x15a9/0x3c40
[   66.132589][ T7140]  ? __pfx_tomoyo_mount_acl+0x10/0x10
[   66.133968][ T7140]  ? __pfx___lock_acquire+0x10/0x10
[   66.135292][ T7140]  ? stack_trace_save+0x95/0xd0
[   66.136542][ T7140]  ? __pfx_lock_release+0x10/0x10
[   66.137788][ T7140]  ? trace_lock_acquire+0x146/0x1e0
[   66.139116][ T7140]  ? tomoyo_mount_permission+0x149/0x420
[   66.140524][ T7140]  ? lock_acquire+0x2f/0xb0
[   66.141713][ T7140]  ? tomoyo_mount_permission+0x149/0x420
[   66.143131][ T7140]  tomoyo_mount_permission+0x16e/0x420
[   66.144522][ T7140]  ? tomoyo_mount_permission+0x149/0x420
[   66.145944][ T7140]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[   66.147450][ T7140]  ? get_current_fs_domain+0x184/0x1f0
[   66.148828][ T7140]  security_sb_mount+0x9b/0x260
[   66.150001][ T7140]  path_mount+0x129/0x1f10
[   66.151143][ T7140]  ? kmem_cache_free+0x152/0x4b0
[   66.152409][ T7140]  ? __pfx_path_mount+0x10/0x10
[   66.153677][ T7140]  ? putname+0x13c/0x180
[   66.154794][ T7140]  __ia32_sys_mount+0x292/0x310
[   66.156019][ T7140]  ? __pfx___ia32_sys_mount+0x10/0x10
[   66.157379][ T7140]  __do_fast_syscall_32+0x73/0x120
[   66.158700][ T7140]  do_fast_syscall_32+0x32/0x80
[   66.160249][ T7140]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   66.162236][ T7140] RIP: 0023:0xf7f31579
[   66.163569][ T7140] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   66.169690][ T7140] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[   66.171853][ T7140] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000300
[   66.173885][ T7140] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000020000200
[   66.176034][ T7140] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   66.178068][ T7140] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   66.180147][ T7140] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   66.182184][ T7140]  </TASK>
[   66.185840][ T7140] ERROR: Out of memory at tomoyo_realpath_from_path.
[   66.238124][ T7119] vhci_hcd: connection reset by peer
[   66.241478][ T6593] vhci_hcd: stop threads
[   66.243067][ T6593] vhci_hcd: release socket
[   66.250671][ T6593] vhci_hcd: disconnect device
[   66.269241][ T7149] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   66.295144][ T5337] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   66.676212][ T5337] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[   66.905122][ T5337] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   67.046317][ T7182] FAULT_INJECTION: forcing a failure.
[   67.046317][ T7182] name failslab, interval 1, probability 0, space 0, times 0
[   67.059392][ T7182] CPU: 1 UID: 0 PID: 7182 Comm: syz.1.286 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
[   67.062016][ T7182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   67.064766][ T7182] Call Trace:
[   67.065614][ T7182]  <TASK>
[   67.066381][ T7182]  dump_stack_lvl+0x16c/0x1f0
[   67.067537][ T7182]  should_fail_ex+0x497/0x5b0
[   67.068720][ T7182]  ? fs_reclaim_acquire+0xae/0x150
[   67.070019][ T7182]  should_failslab+0xc2/0x120
[   67.071238][ T7182]  __kmalloc_noprof+0xcb/0x410
[   67.072607][ T7182]  ? __get_fs_type+0x21/0x170
[   67.073789][ T7182]  tomoyo_encode2+0x100/0x3e0
[   67.075048][ T7182]  tomoyo_encode+0x2c/0x40
[   67.076152][ T7182]  tomoyo_mount_acl+0x314/0x880
[   67.077419][ T7182]  ? hlock_class+0x4e/0x130
[   67.078612][ T7182]  ? __lock_acquire+0x15a9/0x3c40
[   67.080024][ T7182]  ? __pfx_tomoyo_mount_acl+0x10/0x10
[   67.081326][ T7182]  ? __pfx___lock_acquire+0x10/0x10
[   67.082630][ T7182]  ? stack_trace_save+0x95/0xd0
[   67.083922][ T7182]  ? __pfx_lock_release+0x10/0x10
[   67.085186][ T7182]  ? trace_lock_acquire+0x146/0x1e0
[   67.086525][ T7182]  ? tomoyo_mount_permission+0x149/0x420
[   67.087924][ T7182]  ? lock_acquire+0x2f/0xb0
[   67.089060][ T7182]  ? tomoyo_mount_permission+0x149/0x420
[   67.090486][ T7182]  tomoyo_mount_permission+0x16e/0x420
[   67.091859][ T7182]  ? tomoyo_mount_permission+0x149/0x420
[   67.093284][ T7182]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[   67.094815][ T7182]  ? get_current_fs_domain+0x184/0x1f0
[   67.096214][ T7182]  security_sb_mount+0x9b/0x260
[   67.097456][ T7182]  path_mount+0x129/0x1f10
[   67.098612][ T7182]  ? kmem_cache_free+0x152/0x4b0
[   67.099891][ T7182]  ? __pfx_path_mount+0x10/0x10
[   67.101115][ T7182]  ? putname+0x13c/0x180
[   67.102179][ T7182]  __ia32_sys_mount+0x292/0x310
[   67.103373][ T7182]  ? __pfx___ia32_sys_mount+0x10/0x10
[   67.104741][ T7182]  __do_fast_syscall_32+0x73/0x120
[   67.106030][ T7182]  do_fast_syscall_32+0x32/0x80
[   67.107232][ T7182]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   67.108830][ T7182] RIP: 0023:0xf744e579
[   67.110059][ T7182] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   67.114846][ T7182] RSP: 002b:00000000f513655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[   67.117063][ T7182] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000300
[   67.119150][ T7182] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000020000200
[   67.121135][ T7182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   67.123180][ T7182] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   67.125332][ T7182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   67.127471][ T7182]  </TASK>
[   67.320025][ T7194] input: syz0 as /devices/virtual/input/input12
[   67.464669][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   69.384945][    C3] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   70.664661][    C2] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   70.669891][ T1410] ieee802154 phy0 wpan0: encryption failed: -22
[   70.671607][ T1410] ieee802154 phy1 wpan1: encryption failed: -22
[   71.134586][ T6030] vhci_hcd: vhci_device speed not set
[   72.586069][    C2] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   73.951136][ T7223] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   73.987633][   T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   73.995054][ T1325] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   74.005844][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'.
[   74.031174][ T5975] Bluetooth: hci2: Invalid connection link type handle 0x00c9
[   74.096881][ T7228] mkiss: ax0: crc mode is auto.
[   74.099302][ T7232] tipc: Started in network mode
[   74.101135][ T7232] tipc: Node identity ac1414aa, cluster identity 4711
[   74.103453][ T7232] tipc: Enabled bearer <udp:s>, priority 10
[   74.126667][ T1325] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   74.202312][ T7241] mkiss: ax0: crc mode is auto.
[   74.240178][ T7228] overlayfs: unescaped trailing colons in lowerdir mount option.
[   74.399489][ T7248] FAULT_INJECTION: forcing a failure.
[   74.399489][ T7248] name failslab, interval 1, probability 0, space 0, times 0
[   74.402742][ T7248] CPU: 2 UID: 0 PID: 7248 Comm: syz.1.297 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
[   74.405394][ T7248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   74.408137][ T7248] Call Trace:
[   74.409144][ T7248]  <TASK>
[   74.409960][ T7248]  dump_stack_lvl+0x16c/0x1f0
[   74.411198][ T7248]  should_fail_ex+0x497/0x5b0
[   74.412680][ T7248]  ? fs_reclaim_acquire+0xae/0x150
[   74.414442][ T7248]  should_failslab+0xc2/0x120
[   74.416158][ T7248]  __kmalloc_cache_noprof+0x6b/0x310
[   74.417641][ T7248]  ? alloc_fs_context+0x57/0x9c0
[   74.418959][ T7248]  alloc_fs_context+0x57/0x9c0
[   74.420217][ T7248]  path_mount+0xbfb/0x1f10
[   74.421400][ T7248]  ? kmem_cache_free+0x152/0x4b0
[   74.422897][ T7248]  ? __pfx_path_mount+0x10/0x10
[   74.424382][ T7248]  ? putname+0x13c/0x180
[   74.425476][ T7248]  __ia32_sys_mount+0x292/0x310
[   74.426734][ T7248]  ? __pfx___ia32_sys_mount+0x10/0x10
[   74.428095][ T7248]  __do_fast_syscall_32+0x73/0x120
[   74.429399][ T7248]  do_fast_syscall_32+0x32/0x80
[   74.430659][ T7248]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   74.432293][ T7248] RIP: 0023:0xf744e579
[   74.433561][ T7248] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   74.440128][ T7248] RSP: 002b:00000000f513655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[   74.442313][ T7248] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000300
[   74.444528][ T7248] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000020000200
[   74.446569][ T7248] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   74.448608][ T7248] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   74.450656][ T7248] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   74.452700][ T7248]  </TASK>
[   74.570770][ T7255] overlayfs: failed to resolve './file1': -2
[   74.574745][ T5975] Bluetooth: hci0: unexpected subevent 0x03 length: 11 > 9
[   74.631142][ T7266] tty tty21: ldisc open failed (-12), clearing slot 20
[   74.848291][ T7282] FAULT_INJECTION: forcing a failure.
[   74.848291][ T7282] name failslab, interval 1, probability 0, space 0, times 0
[   74.851677][ T7282] CPU: 3 UID: 0 PID: 7282 Comm: syz.1.307 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
[   74.854354][ T7282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   74.857161][ T7282] Call Trace:
[   74.858056][ T7282]  <TASK>
[   74.858835][ T7282]  dump_stack_lvl+0x16c/0x1f0
[   74.860087][ T7282]  should_fail_ex+0x497/0x5b0
[   74.861321][ T7282]  ? fs_reclaim_acquire+0xae/0x150
[   74.862694][ T7282]  should_failslab+0xc2/0x120
[   74.863938][ T7282]  __kmalloc_cache_noprof+0x6b/0x310
[   74.865329][ T7282]  ? legacy_init_fs_context+0x42/0xe0
[   74.866778][ T7282]  ? __pfx_legacy_init_fs_context+0x10/0x10
[   74.868305][ T7282]  legacy_init_fs_context+0x42/0xe0
[   74.869673][ T7282]  alloc_fs_context+0x54a/0x9c0
[   74.871786][ T7282]  path_mount+0xbfb/0x1f10
[   74.871809][ T7282]  ? kmem_cache_free+0x152/0x4b0
[   74.871828][ T7282]  ? __pfx_path_mount+0x10/0x10
[   74.876851][ T7282]  ? putname+0x13c/0x180
[   74.878896][ T7282]  __ia32_sys_mount+0x292/0x310
[   74.880775][ T7282]  ? __pfx___ia32_sys_mount+0x10/0x10
[   74.882779][ T7282]  __do_fast_syscall_32+0x73/0x120
[   74.884569][ T7282]  do_fast_syscall_32+0x32/0x80
[   74.884596][ T7282]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   74.884618][ T7282] RIP: 0023:0xf744e579
[   74.889584][ T7282] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   74.895509][ T7282] RSP: 002b:00000000f513655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[   74.897635][ T7282] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000300
[   74.899719][ T7282] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000020000200
[   74.901788][ T7282] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   74.903844][ T7282] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   74.905900][ T7282] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   74.907962][ T7282]  </TASK>
[   74.924222][ T7284] netlink: 48 bytes leftover after parsing attributes in process `syz.3.308'.
[   74.984643][   T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   75.116272][ T3221] tipc: Node number set to 2886997162
[   75.317792][ T7302] netlink: 48 bytes leftover after parsing attributes in process `syz.2.313'.
[   75.791249][ T1010] cfg80211: failed to load regulatory.db
[   75.940560][ T7311] input: syz0 as /devices/virtual/input/input13
[   75.954153][ T7311] netlink: 'syz.1.315': attribute type 11 has an invalid length.
[   75.959385][ T7311] netlink: 140 bytes leftover after parsing attributes in process `syz.1.315'.
[   76.079476][ T7318] FAULT_INJECTION: forcing a failure.
[   76.079476][ T7318] name failslab, interval 1, probability 0, space 0, times 0
[   76.082937][ T7318] CPU: 2 UID: 0 PID: 7318 Comm: syz.1.318 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
[   76.085804][ T7318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   76.088589][ T7318] Call Trace:
[   76.089817][ T7318]  <TASK>
[   76.090880][ T7318]  dump_stack_lvl+0x16c/0x1f0
[   76.092128][ T7318]  should_fail_ex+0x497/0x5b0
[   76.093423][ T7318]  ? fs_reclaim_acquire+0xae/0x150
[   76.094925][ T7318]  should_failslab+0xc2/0x120
[   76.096286][ T7318]  __kmalloc_cache_noprof+0x6b/0x310
[   76.097837][ T7318]  ? v9fs_mount+0xa7/0xa30
[   76.099421][ T7318]  v9fs_mount+0xa7/0xa30
[   76.100962][ T7318]  ? __pfx_v9fs_mount+0x10/0x10
[   76.102753][ T7318]  ? __pfx_v9fs_mount+0x10/0x10
[   76.104524][ T7318]  legacy_get_tree+0x109/0x220
[   76.106279][ T7318]  vfs_get_tree+0x8f/0x380
[   76.107852][ T7318]  path_mount+0x6e1/0x1f10
[   76.109466][ T7318]  ? kmem_cache_free+0x152/0x4b0
[   76.111273][ T7318]  ? __pfx_path_mount+0x10/0x10
[   76.113071][ T7318]  ? putname+0x13c/0x180
[   76.114609][ T7318]  __ia32_sys_mount+0x292/0x310
[   76.116391][ T7318]  ? __pfx___ia32_sys_mount+0x10/0x10
[   76.118307][ T7318]  __do_fast_syscall_32+0x73/0x120
[   76.119978][ T7318]  do_fast_syscall_32+0x32/0x80
[   76.121745][ T7318]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   76.123642][ T7318] RIP: 0023:0xf744e579
[   76.125112][ T7318] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   76.131814][ T7318] RSP: 002b:00000000f513655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[   76.134600][ T7318] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000300
[   76.136642][ T7318] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000020000200
[   76.138689][ T7318] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   76.140715][ T7318] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   76.142752][ T7318] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   76.144804][ T7318]  </TASK>
[   76.216050][ T7304] Process accounting resumed
[   76.242349][ T7330] lo speed is unknown, defaulting to 1000
[   76.315359][   T40] audit: type=1326 audit(1732524214.486:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7329 comm="syz.0.321" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[   76.315397][   T40] audit: type=1326 audit(1732524214.486:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7329 comm="syz.0.321" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[   76.315968][   T40] audit: type=1326 audit(1732524214.486:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7329 comm="syz.0.321" exe="/syz-executor" sig=0 arch=40000003 syscall=75 compat=1 ip=0xf743e579 code=0x7ffc0000
[   76.316043][   T40] audit: type=1326 audit(1732524214.486:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7329 comm="syz.0.321" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[   76.316061][   T40] audit: type=1326 audit(1732524214.486:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7329 comm="syz.0.321" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[   76.316505][   T40] audit: type=1326 audit(1732524214.486:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7329 comm="syz.0.321" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf743e579 code=0x7ffc0000
[   76.317897][   T40] audit: type=1326 audit(1732524214.486:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7329 comm="syz.0.321" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[   76.318219][   T40] audit: type=1326 audit(1732524214.486:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7329 comm="syz.0.321" exe="/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf743e579 code=0x7ffc0000
[   76.321098][   T40] audit: type=1326 audit(1732524214.486:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7329 comm="syz.0.321" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[   76.321480][   T40] audit: type=1326 audit(1732524214.486:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7329 comm="syz.0.321" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[   76.515748][ T7335] capability: warning: `syz.0.322' uses 32-bit capabilities (legacy support in use)
[   76.801300][ T7351] bridge1: entered allmulticast mode
[   76.826257][ T7353] FAULT_INJECTION: forcing a failure.
[   76.826257][ T7353] name failslab, interval 1, probability 0, space 0, times 0
[   76.830745][ T7353] CPU: 0 UID: 0 PID: 7353 Comm: syz.3.328 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
[   76.834178][ T7353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   76.837288][ T7353] Call Trace:
[   76.838299][ T7353]  <TASK>
[   76.839089][ T7353]  dump_stack_lvl+0x16c/0x1f0
[   76.840704][ T7353]  should_fail_ex+0x497/0x5b0
[   76.841998][ T7353]  ? fs_reclaim_acquire+0xae/0x150
[   76.843401][ T7353]  should_failslab+0xc2/0x120
[   76.844640][ T7353]  __kmalloc_node_track_caller_noprof+0xcf/0x440
[   76.846314][ T7353]  ? v9fs_mount+0xa7/0xa30
[   76.847487][ T7353]  ? v9fs_session_init+0xb4/0x1a80
[   76.848824][ T7353]  ? __ia32_sys_mount+0x292/0x310
[   76.850156][ T7353]  kstrdup+0x3c/0x80
[   76.851191][ T7353]  v9fs_session_init+0xb4/0x1a80
[   76.852513][ T7353]  ? __pfx_v9fs_session_init+0x10/0x10
[   76.853951][ T7353]  ? kasan_save_track+0x14/0x30
[   76.855244][ T7353]  v9fs_mount+0xc6/0xa30
[   76.856368][ T7353]  ? __pfx_v9fs_mount+0x10/0x10
[   76.857649][ T7353]  ? __pfx_v9fs_mount+0x10/0x10
[   76.858929][ T7353]  legacy_get_tree+0x109/0x220
[   76.860183][ T7353]  vfs_get_tree+0x8f/0x380
[   76.861369][ T7353]  path_mount+0x6e1/0x1f10
[   76.862550][ T7353]  ? kmem_cache_free+0x152/0x4b0
[   76.863844][ T7353]  ? __pfx_path_mount+0x10/0x10
[   76.865130][ T7353]  ? putname+0x13c/0x180
[   76.866339][ T7353]  __ia32_sys_mount+0x292/0x310
[   76.867625][ T7353]  ? __pfx___ia32_sys_mount+0x10/0x10
[   76.869040][ T7353]  __do_fast_syscall_32+0x73/0x120
[   76.870392][ T7353]  do_fast_syscall_32+0x32/0x80
[   76.871666][ T7353]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   76.873329][ T7353] RIP: 0023:0xf7f43579
[   76.874407][ T7353] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   76.879851][ T7353] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[   76.882022][ T7353] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000300
[   76.884073][ T7353] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000020000200
[   76.886129][ T7353] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   76.888173][ T7353] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   76.890202][ T7353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   76.892490][ T7353]  </TASK>
[   76.957892][ T7363] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   77.054792][ T7364] lo speed is unknown, defaulting to 1000
[   77.067587][ T7367] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   77.094574][   T73] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   77.946820][ T1325] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   78.003007][ T7392] pimreg: entered allmulticast mode
[   78.262630][ T1325] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   78.438595][ T1325] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   78.442098][ T1325] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.445093][ T1325] usb 7-1: Product: syz
[   78.446604][ T1325] usb 7-1: Manufacturer: syz
[   78.448433][ T1325] usb 7-1: SerialNumber: syz
[   78.458113][ T1325] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   78.493217][ T1325] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   78.498562][ T7403] FAULT_INJECTION: forcing a failure.
[   78.498562][ T7403] name failslab, interval 1, probability 0, space 0, times 0
[   78.501814][ T7403] CPU: 0 UID: 0 PID: 7403 Comm: syz.0.341 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
[   78.504543][ T7403] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   78.507411][ T7403] Call Trace:
[   78.508261][ T7403]  <TASK>
[   78.509038][ T7403]  dump_stack_lvl+0x16c/0x1f0
[   78.510281][ T7403]  should_fail_ex+0x497/0x5b0
[   78.511510][ T7403]  ? fs_reclaim_acquire+0xae/0x150
[   78.512850][ T7403]  should_failslab+0xc2/0x120
[   78.514090][ T7403]  __kmalloc_node_track_caller_noprof+0xcf/0x440
[   78.515729][ T7403]  ? v9fs_mount+0xa7/0xa30
[   78.516895][ T7403]  ? v9fs_session_init+0xb4/0x1a80
[   78.518231][ T7403]  ? __ia32_sys_mount+0x292/0x310
[   78.519547][ T7403]  kstrdup+0x3c/0x80
[   78.520573][ T7403]  v9fs_session_init+0xb4/0x1a80
[   78.521865][ T7403]  ? __pfx_v9fs_session_init+0x10/0x10
[   78.523274][ T7403]  ? kasan_save_track+0x14/0x30
[   78.524546][ T7403]  v9fs_mount+0xc6/0xa30
[   78.525567][ T7403]  ? __pfx_v9fs_mount+0x10/0x10
[   78.526840][ T7403]  ? __pfx_v9fs_mount+0x10/0x10
[   78.528109][ T7403]  legacy_get_tree+0x109/0x220
[   78.529358][ T7403]  vfs_get_tree+0x8f/0x380
[   78.530528][ T7403]  path_mount+0x6e1/0x1f10
[   78.531649][ T7403]  ? kmem_cache_free+0x152/0x4b0
[   78.532952][ T7403]  ? __pfx_path_mount+0x10/0x10
[   78.534236][ T7403]  ? putname+0x13c/0x180
[   78.535384][ T7403]  __ia32_sys_mount+0x292/0x310
[   78.536658][ T7403]  ? __pfx___ia32_sys_mount+0x10/0x10
[   78.538067][ T7403]  __do_fast_syscall_32+0x73/0x120
[   78.539407][ T7403]  do_fast_syscall_32+0x32/0x80
[   78.540679][ T7403]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   78.542441][ T7403] RIP: 0023:0xf743e579
[   78.543532][ T7403] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   78.548709][ T7403] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[   78.550906][ T7403] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000300
[   78.552986][ T7403] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000020000200
[   78.555061][ T7403] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   78.557118][ T7403] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   78.559199][ T7403] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   78.561282][ T7403]  </TASK>
[   78.700207][   T73] usb 7-1: USB disconnect, device number 4
[   79.467988][ T7421] lo speed is unknown, defaulting to 1000
[   79.523200][ T7422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.346'.
[   79.544596][ T1325] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[   79.547488][ T1325] ath9k_htc: Failed to initialize the device
[   79.551090][   T73] usb 7-1: ath9k_htc: USB layer deinitialized
[   79.854572][   T73] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   80.008988][   T73] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   80.013766][   T73] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.016845][   T73] usb 7-1: Product: syz
[   80.018137][   T73] usb 7-1: Manufacturer: syz
[   80.019421][   T73] usb 7-1: SerialNumber: syz
[   80.032641][   T73] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   80.057488][   T73] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   80.072417][ T7408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.104590][ T7432] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   80.122824][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'.
[   80.124721][ T3221] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   80.140878][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'.
[   80.265351][ T7392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.267684][ T7392] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.270358][ T7445] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   80.286169][ T7392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.289594][ T7392] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.293854][ T6030] usb 7-1: USB disconnect, device number 5
[   80.599747][ T7451] 
[   80.600417][ T7451] =============================
[   80.601689][ T7451] [ BUG: Invalid wait context ]
[   80.603176][ T7451] 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 Not tainted
[   80.606739][ T7451] -----------------------------
[   80.608386][ T7451] iou-wrk-7442/7451 is trying to lock:
[   80.609922][ T7451] ffff888023005358 (&sighand->siglock){-.-.}-{3:3}, at: __lock_task_sighand+0xc2/0x340
[   80.612496][ T7451] other info that might help us debug this:
[   80.614324][ T7451] context-{5:5}
[   80.615434][ T7451] 3 locks held by iou-wrk-7442/7451:
[   80.616808][ T7451]  #0: ffff888000ac5128 (&acct->lock){+.+.}-{2:2}, at: io_wq_worker+0x34c/0xdf0
[   80.619187][ T7451]  #1: ffffffff8ddbaf40 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1c2/0x590
[   80.621652][ T7451]  #2: ffffffff8ddbaf40 (rcu_read_lock){....}-{1:3}, at: __lock_task_sighand+0x3f/0x340
[   80.624238][ T7451] stack backtrace:
[   80.625241][ T7451] CPU: 3 UID: 0 PID: 7451 Comm: iou-wrk-7442 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
[   80.628032][ T7451] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   80.630869][ T7451] Call Trace:
[   80.631771][ T7451]  <TASK>
[   80.632619][ T7451]  dump_stack_lvl+0x116/0x1f0
[   80.633914][ T7451]  __lock_acquire+0x878/0x3c40
[   80.635265][ T7451]  ? __pfx___lock_acquire+0x10/0x10
[   80.636644][ T7451]  ? __pfx___lock_acquire+0x10/0x10
[   80.638070][ T7451]  lock_acquire.part.0+0x11b/0x380
[   80.639455][ T7451]  ? __lock_task_sighand+0xc2/0x340
[   80.640836][ T7451]  ? __pfx_lock_acquire.part.0+0x10/0x10
[   80.642356][ T7451]  ? rcu_is_watching+0x12/0xc0
[   80.643643][ T7451]  ? trace_lock_acquire+0x146/0x1e0
[   80.645070][ T7451]  ? trace_lock_acquire+0x146/0x1e0
[   80.646472][ T7451]  ? __lock_task_sighand+0xc2/0x340
[   80.647863][ T7451]  ? lock_acquire+0x2f/0xb0
[   80.649095][ T7451]  ? __lock_task_sighand+0xc2/0x340
[   80.650517][ T7451]  _raw_spin_lock_irqsave+0x3a/0x60
[   80.651905][ T7451]  ? __lock_task_sighand+0xc2/0x340
[   80.653298][ T7451]  __lock_task_sighand+0xc2/0x340
[   80.654693][ T7451]  group_send_sig_info+0x290/0x300
[   80.656059][ T7451]  ? __pfx_group_send_sig_info+0x10/0x10
[   80.657552][ T7451]  ? __pfx___lock_acquire+0x10/0x10
[   80.658944][ T7451]  bpf_send_signal_common+0x415/0x520
[   80.660431][ T7451]  ? __pfx_bpf_send_signal_common+0x10/0x10
[   80.662017][ T7451]  ? trace_lock_acquire+0x146/0x1e0
[   80.663410][ T7451]  ? find_held_lock+0x2d/0x110
[   80.664800][ T7451]  ? bpf_trace_run2+0x1c2/0x590
[   80.666185][ T7451]  bpf_send_signal+0x1d/0x30
[   80.667426][ T7451]  bpf_prog_631417f49dd64198+0x25/0x48
[   80.668866][ T7451]  bpf_trace_run2+0x231/0x590
[   80.670176][ T7451]  ? __pfx_bpf_trace_run2+0x10/0x10
[   80.671593][ T7451]  ? hlock_class+0x4e/0x130
[   80.672837][ T7451]  trace_contention_end.constprop.0+0xe8/0x170
[   80.674500][ T7451]  __pv_queued_spin_lock_slowpath+0x27e/0xc90
[   80.676141][ T7451]  ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10
[   80.677888][ T7451]  ? lock_acquire.part.0+0x11b/0x380
[   80.679319][ T7451]  ? __pfx_lock_acquire.part.0+0x10/0x10
[   80.680837][ T7451]  do_raw_spin_lock+0x210/0x2c0
[   80.682160][ T7451]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   80.683563][ T7451]  ? lock_acquire+0x2f/0xb0
[   80.684847][ T7451]  ? io_wq_worker+0x34c/0xdf0
[   80.686335][ T7451]  io_wq_worker+0x34c/0xdf0
[   80.687825][ T7451]  ? __pfx_io_wq_worker+0x10/0x10
[   80.689389][ T7451]  ? ret_from_fork+0x23/0x80
[   80.690879][ T7451]  ? __pfx_lock_release+0x10/0x10
[   80.692438][ T7451]  ? do_raw_spin_lock+0x12d/0x2c0
[   80.693978][ T7451]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   80.695547][ T7451]  ? __pfx_io_wq_worker+0x10/0x10
[   80.697093][ T7451]  ret_from_fork+0x45/0x80
[   80.698504][ T7451]  ? __pfx_io_wq_worker+0x10/0x10
[   80.700059][ T7451]  ret_from_fork_asm+0x1a/0x30
[   80.701562][ T7451]  </TASK>
[   80.702686][    C3] vkms_vblank_simulate: vblank timer overrun
[   80.764586][ T3221] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   81.064602][   T73] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[   81.066629][   T73] ath9k_htc: Failed to initialize the device
[   81.068456][ T6030] usb 7-1: ath9k_htc: USB layer deinitialized

VM DIAGNOSIS:
08:43:38  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffe8ffac27b600 RCX=0000000000000007 RDX=1ffffd1ff584f6c8
RSI=00000012c46d8997 RDI=ffffe8ffac27b640 RBP=ffffe8ffac27b600 RSP=ffffc900036e7570
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffe8ffac27b63c
R12=000000000000011a R13=0000000000000000 R14=0000000000000000 R15=ffff88806724a000
RIP=ffffffff8166f12e RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000000000000 CR3=0000000022a18000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=fffff5200008ff9d RBX=ffff88802b52d440 RCX=0000000000000000 RDX=ffff88801ced4880
RSI=ffffffff81804eb8 RDI=0000000000000001 RBP=1ffff9200008ff9d RSP=ffffc9000047fce8
R8 =0000000000000000 R9 =ffffed10056a5a88 R10=ffff88802b52d443 R11=0000000000000001
R12=ffffc9000047fd08 R13=0000000000000001 R14=ffffffff901cf850 R15=0000000000000000
RIP=ffffffff81804ecb RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b500000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000000000000 CR3=000000001efb2000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=dffffc0000000000 RBX=ffff88802b63ebc0 RCX=0000000000000004 RDX=1ffff110056c7f39
RSI=ffff88802b621a10 RDI=ffff88802b63f9d0 RBP=ffffc9000048fdf0 RSP=ffffc9000048fc58
R8 =1ffffffff1b04777 R9 =1ffff110056c7d98 R10=0000000000000002 R11=0000000000000001
R12=ffff888022b9a440 R13=dffffc0000000000 R14=ffff88802b63ebc0 R15=ffff88802b63ebc0
RIP=ffffffff8b170ae9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000000000000 CR3=000000002aa6a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff84ff5c65 RDI=ffffffff9a65e2a0 RBP=ffffffff9a65e260 RSP=ffffc90002da7230
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d
R12=0000000000000000 R13=0000000000000020 R14=ffffffff84ff5c00 R15=0000000000000000
RIP=ffffffff84ff5c8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000001efb2000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000