last executing test programs:

5m59.61381294s ago: executing program 1 (id=2215):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
r3 = open_tree(r2, 0x0, 0x89901)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000400))
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x3c63, @rand_addr=' \x01\x00', 0x8}, 0x1c)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r6)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={0x0, &(0x7f00000002c0)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={0x0, 0xfffffef4, r7, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r8, 0x3, 0x1, 0x5, 0x3, [<r9=>0x0, 0x0, 0x0, <r10=>0x0], [0x80000001], [0x20, 0x1001000, 0xfffffffb, 0xffffffff], [0x1, 0x401, 0x9, 0x2]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r9, 0x0, 0x0, r10], [0x2b8]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe5b})
r11 = add_key$keyring(&(0x7f0000000280), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r11)

5m59.281429159s ago: executing program 1 (id=2217):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, 0x0, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000007c0)=ANY=[], 0x310)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
unshare(0x64000600)
r4 = socket$key(0xf, 0x3, 0x2)
setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x2, 0x4)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a030000000002000100000000000000020d1600003f030006000000000002004e21000000800000000000000000030005"], 0x70}, 0x1, 0x7}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xc}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

5m55.205133022s ago: executing program 1 (id=2224):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x4, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x53}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e6574"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
unlink(0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c27ebc9342e6eecf4d1b92e4ac8c64700aec62c72fd06f652ebc960a30868729b4b249183381de3f1879286998f3493e664e810b0c", @ANYRES32, @ANYBLOB], 0x40}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xff}, {0x6, 0x0, 0x0, 0x6}]}, 0x8)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0)
r8 = getpid()
r9 = syz_pidfd_open(r8, 0x0)
process_madvise(r9, &(0x7f00000015c0)=[{0x0, 0xb3c9de750fa141ee}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x1}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79311ead3200c7aca0e920d83c8d7b92db", 0x83}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53eadf4aa6e2379fd85e9c5e7bfc", 0xd4}], 0x6, 0x9, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000140)=0x1000201, 0x4)

5m53.884478213s ago: executing program 1 (id=2227):
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
connect$tipc(r1, 0x0, 0x0)
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r3 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000140))
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000e40))
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180))
syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0xb, &(0x7f0000001540)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})

5m52.899089461s ago: executing program 1 (id=2231):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
timer_create(0x0, 0x0, &(0x7f0000bbdffc)=<r3=>0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(r3, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0x3}, 0x6)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, r5, 0x2)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r7 = fanotify_init(0x8, 0x0)
fanotify_mark(r7, 0x1, 0x8000020, r6, 0x0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
sched_getattr(0x0, 0x0, 0x0, 0x0)

5m52.669684606s ago: executing program 1 (id=2233):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x15, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$int_in(r0, 0x40000000af01, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
fsopen(&(0x7f0000000280)='btrfs\x00', 0x0)
rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00')
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0xb75}}, './file0/file0\x00'})
sendmsg$802154_raw(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)="739be4d07f7ecc0544", 0x9}, 0x1, 0x0, 0x0, 0x4000}, 0x844)

5m52.534817941s ago: executing program 32 (id=2233):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x15, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$int_in(r0, 0x40000000af01, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
fsopen(&(0x7f0000000280)='btrfs\x00', 0x0)
rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00')
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0xb75}}, './file0/file0\x00'})
sendmsg$802154_raw(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)="739be4d07f7ecc0544", 0x9}, 0x1, 0x0, 0x0, 0x4000}, 0x844)

13.3412423s ago: executing program 0 (id=2952):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x2, 0x32314742, 0x2, @discrete={0x7, 0xbe78}})
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r3 = io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0x315})
io_uring_register$IORING_REGISTER_CLOCK(r3, 0x1d, &(0x7f0000000000)={0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$cuse(0xffffff9c, 0x0, 0x2, 0x0)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r5, r5, 0x0, 0x200900)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x2}, {0x5002, 0x5000, 0xf, 0x8, 0x0, 0x0, 0x81, 0x0, 0x41, 0xe, 0x0, 0x3}, {0x8080000, 0x0, 0x8, 0x0, 0x0, 0xf3}, {0x11000, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x31, 0x0, 0x0, 0x84}, {0x3000, 0x80a0000, 0x9, 0x0, 0x20}, {0x0, 0x0, 0xf, 0x82, 0x0, 0x0, 0x0, 0xe, 0x5}, {0x1}, {0x1, 0xfffe}, 0x40040030, 0x0, 0x0, 0x0, 0x0, 0x3901, 0x900, [0x40, 0x0, 0x10000, 0x3]})

11.965670623s ago: executing program 0 (id=2956):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x9, 0x1, 0xc45, 0x1012, 0xc7, 0x2, 0x7, 'syz0\x00'})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', <r9=>0x0})
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)

10.338940671s ago: executing program 4 (id=2958):
openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
timer_create(0x0, 0x0, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000040)={{@any, 0xf}, 0x0, 0x1, 0x9})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@any, 0x8000}, 0x0, 0x1})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, 0x0)
ioctl$sock_bt_hci(r3, 0x400448c9, 0x0)

9.360944266s ago: executing program 3 (id=2961):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS(r5, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x56})
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000240)=0x3)
ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x7f)
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000000))
read$dsp(r6, &(0x7f0000000300)=""/79, 0x4f)
ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000140)=@get={0x1, 0x0, 0x8000000000000001})
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
fcntl$dupfd(r1, 0x0, r4)
dup(r7)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x39, 0x3, "9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f03000000000000000000000001"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

9.195656178s ago: executing program 4 (id=2962):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = syz_clone(0x82000, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f00000005c0)="3b8dd83898cd2e05b934a1778e71b55efb8661d8976248339ff8e266ca0f0ac93961c1e41a441c003010d5cc204ea748415c3a877057ff027f8d2f7794a10b3272fb867822eba70264bd94150da01a9b30ccec4ffd8e261561929ca49303c39d0279ffa1611e585c853c28451ec033138a11c46dc4f9e2e48730aaacfa79aaac48f3bd1c56e560e6a967caa7aa27a47b787d4d4feaf72077664ab777954da9320bbc53b5")
rt_sigqueueinfo(r3, 0x5, &(0x7f0000000680)={0xd, 0x8, 0x5})
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
creat(&(0x7f0000000240)='./file0\x00', 0x8f560c55c64d9df4)
lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x1)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r4, &(0x7f0000000140)='^', 0x1, 0x40080, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r4, 0xda90)
lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=""/203, 0xcb)
close(0x3)
bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4)
accept4(r1, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25)
rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x3, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)

8.615937428s ago: executing program 0 (id=2963):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r0, 0x0, 0x20040090)
unshare(0x6020680)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(&(0x7f0000000000)={0xc})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r2 = syz_open_dev$sg(0x0, 0x0, 0x800)
ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000040)=0xfffffffa)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
sched_getparam(0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000000940)={0x2, 0x0, @pic={0xfd, 0xf3, 0x2, 0x6, 0x6, 0x2, 0x9, 0x1, 0x81, 0x81, 0x7, 0x4, 0x4, 0x62, 0x4, 0xf9}})
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, 0x0, 0x0)
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1})
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)

8.002395956s ago: executing program 4 (id=2965):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x110)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000, &(0x7f0000000040), &(0x7f0000000a00)=""/4096, 0x7, 0x0, 0x0, 0x600, &(0x7f0000001a00), &(0x7f0000002a00)="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", 0x4, 0x0, 0x2}, 0x4c)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x25)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x100000000, 0x4}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xbd000000}}, 0xe4)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
openat$ptmx(0xffffff9c, 0x0, 0x200, 0x0)
r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=<r5=>0x0, &(0x7f00000006c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
io_uring_enter(r4, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0)
io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x4, 0x4, 0x4, 0xbf22, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48)
rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00')
read$FUSE(0xffffffffffffffff, &(0x7f0000008180)={0x2020}, 0x2020)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x48a1c3, 0x0)

6.901802349s ago: executing program 3 (id=2966):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000"], 0x50)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f00000002c0)={0x0, "fbd78df8363b88d9c3a4cae9b29b529de5e20000000000001400", 0x3})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="26edff"], 0x50)
write(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
epoll_create1(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
landlock_create_ruleset(&(0x7f0000000140)={0x407, 0x3, 0x3}, 0x18, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ni\x00'}, 0xffffffffffffffbd)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, r2, 0x3000)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x32a000, 0x800}, 0x20)
syz_clone3(&(0x7f0000000140)={0x1805000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3}, 0x58)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r6 = dup(r5)
connect$inet6(r6, &(0x7f00000000c0)={0x27, 0x4c21, 0x1, @remote, 0x7}, 0x1c)
ioctl$LOOP_SET_FD(r6, 0x4c00, r0)

6.893844931s ago: executing program 4 (id=2967):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000400))
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x3c63, @rand_addr=' \x01\x00', 0x8}, 0x1c)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r5)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={0x0, &(0x7f00000002c0)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={0x0, 0xfffffef4, r6, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r7, 0x3, 0x1, 0x5, 0x3, [<r8=>0x0, 0x0, 0x0, <r9=>0x0], [0x80000001], [0x20, 0x1001000, 0xfffffffb, 0xffffffff], [0x1, 0x401, 0x9, 0x2]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe5b})
ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000080))
r10 = add_key$keyring(&(0x7f0000000280), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r10)

6.885411436s ago: executing program 2 (id=2975):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = dup(r1)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fcntl$dupfd(r3, 0x0, r3)
ptrace$getregset(0x4204, 0xffffffffffffffff, 0x202, &(0x7f0000000340)={&(0x7f0000000240)=""/72, 0x48})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x39d}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r5, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/current\x00')
readv(r8, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2)
socket$netlink(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x143102)
setsockopt$inet_buf(r8, 0x0, 0x26, &(0x7f00000000c0)="33f3c36541e6df623fde68c68a1781d6589d0a0b6c4f76ca94427cb06278bc7884955dd8f6b8", 0x26)

6.783551952s ago: executing program 0 (id=2968):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000300), 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203030000000008000100010000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}}, 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'macvlan0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r7, @ANYBLOB="08000a00fb"], 0x84}}, 0x20008040)
mount(&(0x7f0000000140)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='ubifs\x00', 0x2208004, 0x0)

5.78279019s ago: executing program 2 (id=2969):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket(0x10, 0x80002, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
listen(r2, 0x0)
accept4(r2, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)='%-5lx  \x00'}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x80, 0x20, 0x45ed, 0xfffffffd, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x68, 0x0, 0x3, 0x29, 0x0, @multicast2, @loopback}}}})
openat$full(0xffffff9c, &(0x7f0000000200), 0x2, 0x0)

3.994528375s ago: executing program 2 (id=2970):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = getpid()
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000000)='#\x00', &(0x7f0000000040)="6967121bd997da0afb5cfd58ab739a9b387f904aea3069355123defed72cd71e3500c88ba86a5339abf0a518e7489ab334849d24df661a5e6e7ea0f7edd40a5d5a", 0x41)
r2 = syz_pidfd_open(r0, 0x0)
setns(r2, 0x24020000)
syz_clone(0xb60e5500, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
getsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, 0x0, &(0x7f0000000100))
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8000)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x1)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0)
syz_io_uring_setup(0x3a65, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1})
getpriority(0x1, r0)

3.96572049s ago: executing program 3 (id=2971):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{&(0x7f00000003c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000006c0)=""/113, 0x71}}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000002f40)=""/88, 0x58}, {&(0x7f0000002fc0)=""/185, 0xb9}, {0x0}], 0x3}, 0x3}, {{&(0x7f0000003340)=@ieee802154, 0x80, 0x0, 0x0, &(0x7f0000006b80)=""/4096, 0x1000}, 0x250}], 0x3, 0x40002110, &(0x7f0000003580)={0x0, 0x3938700})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000))
openat$nci(0xffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000001c0)={0x410000, 0x2, 0x1})
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0x8, [0x1, 0x8, 0x5, 0x3ff, 0x9, 0x2, 0x6, 0x8, 0x1ff, 0xd9, 0x494, 0x139, 0x6, 0x5, 0x5, 0x7, 0x6, 0x9, 0x2, 0x1005, 0x1, 0x1, 0xd, 0x9, 0x9, 0x8, 0xc8bc, 0x8, 0x7, 0x9, 0x4, 0x5, 0x9, 0x2, 0x9, 0x258d, 0xa, 0x9, 0x6, 0x1, 0xb, 0x79, 0x7ff, 0x7, 0x7f, 0xdea, 0x5, 0x9b], 0x80000000}})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad84825"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, &(0x7f0000001040)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e6229bc5c7ac135fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8)
close_range(r3, 0xffffffffffffffff, 0x10000000000000)

2.942868046s ago: executing program 3 (id=2972):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfb", 0x26}], 0x2)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1})
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10})
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x9, 0x3}, {}, {0x5, 0x1}}}, 0x24}}, 0x40004)
socket$netlink(0x10, 0x3, 0x0)
ioctl$UI_DEV_CREATE(r4, 0x5501)
ioctl$UI_DEV_DESTROY(r4, 0x5502)
r7 = syz_open_dev$usbfs(0x0, 0x1, 0x351000)
ioctl$USBDEVFS_GET_SPEED(r7, 0x551f)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRESOCT], 0x6c}}, 0x800)

2.634145273s ago: executing program 2 (id=2973):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0x52}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
socket$netlink(0x10, 0x3, 0x15)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x5}, 0x8)
socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
pipe(&(0x7f00000001c0))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
shutdown(r3, 0x1)
r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
preadv(r4, 0x0, 0x0, 0x0, 0x0)
close(r4)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0})
clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0xfff0bdc1, 0x4100, 0xb, 0x0, 0x9, 0x800000000000003, 0x800000000006, 0x0, 0x100, 0x3, 0x4, 0x7, 0x0, 0x8000, 0x5, 0x0, 0x0, 0x1, 0x9, 0x7fff, 0x7, 0x6, 0x3, 0x0, 0x4e})
r5 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
close(r5)

1.683995837s ago: executing program 3 (id=2974):
mknod$loop(&(0x7f0000000400)='./file0\x00', 0x10, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000001001000001"], 0x10}, 0x8000)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='rxrpc_local\x00', r3, 0x0, 0x5}, 0xfffffe2e)
kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000)
r4 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0)
ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000100)=0x21)
r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f00000000c0)=0x32)
r6 = socket$inet6(0xa, 0x80002, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80882, 0x0)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

1.68152402s ago: executing program 0 (id=2983):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0xc)
r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
open_by_handle_at(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000100010004"], 0x408100)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x3, 0x925e51864c51e074, 0x40000000, 0x3, 0x5}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x2, 0x0, 0x40, 0x0, 0x8})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0)
timerfd_create(0x8, 0x80800)
timerfd_gettime(r2, &(0x7f0000000000))
r7 = socket$alg(0x26, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000140)=0x8)
bind$alg(r7, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x270140, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r8, 0x29, 0x39, 0x0, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r8, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8)

1.679588062s ago: executing program 4 (id=2976):
r0 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
readlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/7, 0x7)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x4000000)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
sendmsg$nl_route_sched(r7, 0x0, 0x880)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, 0x0)
io_uring_enter(r0, 0x47f5, 0x0, 0x8, 0x0, 0x0)

882.074133ms ago: executing program 2 (id=2977):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x110)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000, &(0x7f0000000040), &(0x7f0000000a00)=""/4096, 0x7, 0x0, 0x0, 0x600, &(0x7f0000001a00), &(0x7f0000002a00)="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", 0x4, 0x0, 0x2}, 0x4c)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x25)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x100000000, 0x4}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xbd000000}}, 0xe4)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
openat$ptmx(0xffffff9c, 0x0, 0x200, 0x0)
r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=<r5=>0x0, &(0x7f00000006c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r4, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0)
io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x4, 0x4, 0x4, 0xbf22, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48)
rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00')
read$FUSE(0xffffffffffffffff, &(0x7f0000008180)={0x2020}, 0x2020)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x48a1c3, 0x0)

685.337425ms ago: executing program 4 (id=2978):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xd, 0xffffffff, 0x6, 0x1, 0x24322, 0xffffffffffffffff, 0xd98, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010b00000000000000000e00000008000300", @ANYRES32=r4, @ANYBLOB="41ec33fed941782c7a127a2e16f2e983de9493f4a40ac937f7c8ec6b3a1d2ff489fc1d1ba6e325f4cce3d9e16851b0c9893413cef8cb106c1ea96a019d024aabca6f9658f65cf1c26ec23c"], 0x1c}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty}, &(0x7f00000001c0)=0xc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x92, 0x6, 0x8, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x10, 0x10, 0x0, 0xf4}})
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', <r6=>0x0})
setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r5, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
r7 = socket(0x10, 0x3, 0x6)
socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040))
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@multicast1, @remote}, &(0x7f0000000340)=0x8)
shutdown(r1, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@deltaction={0x80, 0x31, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x80}}, 0x0)

276.165459ms ago: executing program 0 (id=2979):
r0 = syz_open_procfs(0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x4c, r2, 0x1, 0x1000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}}, 0x0)
pread64(r0, 0x0, 0x0, 0x4eb)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r8 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
ioctl$RNDZAPENTCNT(r8, 0x5204, &(0x7f0000000340)=0x9)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000800)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x301, 0x800000, 0x25dfdbfb, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40006)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

30.793036ms ago: executing program 3 (id=2980):
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r4)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

0s ago: executing program 2 (id=2981):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ptrace$ARCH_SHSTK_LOCK(0x1e, r2, 0x0, 0x5003)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x8, 0x6, 0x7, 0x3f06})
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x48)
r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
r7 = socket$l2tp(0x2, 0x2, 0x73)
close(r7)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000018c0)={r5, 0x0, 0x0, 0x4}, 0x20)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000c4ee7c79308b0dbd84000000060a0b50b5129411b54ed88b044a3c602dc1655797335e05d9338b9cf36b2fa20400000000000000000200000058000480540001800a0001006d617463680000004400028008"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

kernel console output (not intermixed with test programs):

: 'syz.2.1917': attribute type 2 has an invalid length.
[  758.425010][T16089] netlink: 'syz.2.1917': attribute type 1 has an invalid length.
[  759.645879][T16099] comedi comedi0: Minor 3 specified more than once!
[  759.662078][T16099] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1919'.
[  759.755788][T16098] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  759.758074][T16098] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  759.854533][T16098] vhci_hcd vhci_hcd.0: Device attached
[  760.089803][T16088] bridge40: entered promiscuous mode
[  760.279078][ T6938] usb 40-1: SetAddress Request (47) to port 0
[  760.281240][ T6938] usb 40-1: new SuperSpeed USB device number 47 using vhci_hcd
[  761.246486][T16100] vhci_hcd: connection reset by peer
[  761.251064][   T12] vhci_hcd: stop threads
[  761.252485][   T12] vhci_hcd: release socket
[  761.255230][   T12] vhci_hcd: disconnect device
[  761.291602][T16114] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1922'.
[  761.777736][T16128] capability: warning: `syz.3.1924' uses deprecated v2 capabilities in a way that may be insecure
[  763.729441][T16150] bridge48: entered promiscuous mode
[  763.734090][T16150] netlink: 'syz.1.1931': attribute type 2 has an invalid length.
[  763.737400][T16150] netlink: 'syz.1.1931': attribute type 1 has an invalid length.
[  763.790725][T16162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1932'.
[  763.801575][T16161] comedi comedi0: Minor 3 specified more than once!
[  763.806195][T16161] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1930'.
[  763.806420][T16162] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  763.806420][T16162]    program syz.3.1932 not setting count and/or reply_len properly
[  764.854359][T16186] hfsplus: unable to find HFS+ superblock
[  764.868607][T16188] netlink: 'syz.2.1938': attribute type 16 has an invalid length.
[  764.871991][T16188] netlink: 'syz.2.1938': attribute type 17 has an invalid length.
[  764.880251][T16188] bridge35: left promiscuous mode
[  764.882541][T16188] bridge36: left promiscuous mode
[  764.884771][T16188] bridge37: left promiscuous mode
[  764.887402][T16188] bridge38: left promiscuous mode
[  764.891523][T16188] veth5: left promiscuous mode
[  764.893712][T16188] bridge39: left promiscuous mode
[  764.895981][T16188] bridge40: left promiscuous mode
[  764.898158][ T1192] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  764.901781][ T1326] lo speed is unknown, defaulting to 1000
[  764.904166][ T1326] syz0: Port: 1 Link DOWN
[  764.906610][ T1192] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  764.910760][ T1192] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  764.914375][ T1192] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  765.118631][ T6938] usb 40-1: device descriptor read/8, error -110
[  765.501623][ T6938] usb usb40-port1: attempt power cycle
[  766.511067][ T6938] usb usb40-port1: unable to enumerate USB device
[  767.021929][T16213] bridge41: entered promiscuous mode
[  767.110140][T16213] netlink: 'syz.2.1942': attribute type 2 has an invalid length.
[  767.113629][T16213] netlink: 'syz.2.1942': attribute type 1 has an invalid length.
[  767.338907][ T1326] libceph: connect (1)[c::]:6789 error -101
[  767.346022][ T1326] libceph: mon0 (1)[c::]:6789 connect error
[  767.607727][ T1326] libceph: connect (1)[c::]:6789 error -101
[  767.614858][ T1326] libceph: mon0 (1)[c::]:6789 connect error
[  768.369695][ T1326] libceph: connect (1)[c::]:6789 error -101
[  768.372557][ T1326] libceph: mon0 (1)[c::]:6789 connect error
[  768.606517][T16214] ceph: No mds server is up or the cluster is laggy
[  769.837731][T16247] overlayfs: missing 'lowerdir'
[  770.068323][T16251] 9pnet_virtio: no channels available for device syz
[  770.655038][T16258] bridge49: entered promiscuous mode
[  770.668108][T16258] netlink: 'syz.1.1954': attribute type 2 has an invalid length.
[  770.671419][T16258] netlink: 'syz.1.1954': attribute type 1 has an invalid length.
[  772.343199][T16274] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  772.345801][T16274] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  772.349578][T16274] vhci_hcd vhci_hcd.0: Device attached
[  773.109759][T16275] vhci_hcd: connection closed
[  773.112626][T15018] vhci_hcd: stop threads
[  773.118970][T15018] vhci_hcd: release socket
[  773.122237][T15018] vhci_hcd: disconnect device
[  773.159125][ T6938] usb 38-1: enqueue for inactive port 0
[  773.702968][ T6938] usb usb38-port1: attempt power cycle
[  773.839167][T16280] infiniband syz1: set down
[  773.841387][T16280] infiniband syz1: added syz_tun
[  773.875408][T16286] IPVS: ip_vs_edit_dest(): server weight less than zero
[  773.892730][T16280] RDS/IB: syz1: added
[  773.902118][T16280] smc: adding ib device syz1 with port count 1
[  773.905577][T16280] smc:    ib device syz1 port 1 has pnetid SYZ2 (user defined)
[  774.236658][ T6938] usb usb38-port1: unable to enumerate USB device
[  775.256702][T16294] siw: device registration error -23
[  778.642811][T16349] hfsplus: unable to find HFS+ superblock
[  778.715980][T16350] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  778.718324][T16350] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  778.723311][T16350] vhci_hcd vhci_hcd.0: Device attached
[  779.098780][   T59] usb 44-1: SetAddress Request (42) to port 0
[  779.101331][   T59] usb 44-1: new SuperSpeed USB device number 42 using vhci_hcd
[  779.344451][T16358] lo speed is unknown, defaulting to 1000
[  779.812687][T16358] lo speed is unknown, defaulting to 1000
[  779.815289][T16358] lo speed is unknown, defaulting to 1000
[  780.487264][T16373] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1975'.
[  780.636474][T16374] lo speed is unknown, defaulting to 1000
[  781.005359][T16374] lo speed is unknown, defaulting to 1000
[  781.010702][T16374] lo speed is unknown, defaulting to 1000
[  781.741186][T16351] vhci_hcd: connection reset by peer
[  781.744045][   T46] vhci_hcd: stop threads
[  781.745495][   T46] vhci_hcd: release socket
[  781.747042][   T46] vhci_hcd: disconnect device
[  781.869441][T16387] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  781.871525][T16387] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  781.874016][T16387] vhci_hcd vhci_hcd.0: Device attached
[  781.984870][T16390] wireguard0: entered promiscuous mode
[  781.987214][T16390] wireguard0: entered allmulticast mode
[  782.112928][ T6938] usb 37-1: new low-speed USB device number 5 using vhci_hcd
[  782.329076][T16396] siw: device registration error -23
[  782.603845][T16388] vhci_hcd: connection reset by peer
[  782.606055][T15018] vhci_hcd: stop threads
[  782.607413][T15018] vhci_hcd: release socket
[  782.609346][T15018] vhci_hcd: disconnect device
[  784.018396][   T59] usb 44-1: device descriptor read/8, error -110
[  784.421714][   T59] usb usb44-port1: attempt power cycle
[  784.586442][T16418] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1983'.
[  785.109694][   T59] usb usb44-port1: unable to enumerate USB device
[  785.236738][T16436] bridge45: entered promiscuous mode
[  785.257402][T16436] netlink: 'syz.0.1985': attribute type 2 has an invalid length.
[  785.260691][T16436] netlink: 'syz.0.1985': attribute type 1 has an invalid length.
[  786.637573][T16446] fuse: Bad value for 'fd'
[  786.739576][T16447] comedi comedi0: Minor 3 specified more than once!
[  786.753449][T16447] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1986'.
[  786.789727][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1996'.
[  786.991105][T16453] hfsplus: unable to find HFS+ superblock
[  787.008046][ T6938] vhci_hcd: vhci_device speed not set
[  787.458878][T16459] random: crng reseeded on system resumption
[  787.783325][T16465] netlink: 'syz.1.1992': attribute type 2 has an invalid length.
[  787.786889][T16465] netlink: 'syz.1.1992': attribute type 1 has an invalid length.
[  788.609251][T16474] lo speed is unknown, defaulting to 1000
[  788.748089][T16474] lo speed is unknown, defaulting to 1000
[  788.752269][T16474] lo speed is unknown, defaulting to 1000
[  789.153177][T16478] hfsplus: unable to find HFS+ superblock
[  789.250995][T16483] overlayfs: missing 'lowerdir'
[  790.151824][T16491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1998'.
[  790.158919][T16491] lo: entered promiscuous mode
[  790.161112][T16491] lo: entered allmulticast mode
[  790.166542][T16491] tunl0: entered promiscuous mode
[  790.168248][T16491] tunl0: entered allmulticast mode
[  790.173110][T16491] gre0: entered promiscuous mode
[  790.174820][T16491] gre0: entered allmulticast mode
[  790.180219][T16491] gretap0: entered promiscuous mode
[  790.182904][T16491] gretap0: entered allmulticast mode
[  790.187814][T16491] erspan0: entered promiscuous mode
[  790.189570][T16491] erspan0: entered allmulticast mode
[  790.198196][T16491] ip_vti0: entered promiscuous mode
[  790.214952][T16491] ip_vti0: entered allmulticast mode
[  790.225052][T16491] ip6_vti0: entered promiscuous mode
[  790.226978][T16491] ip6_vti0: entered allmulticast mode
[  790.234363][T16491] sit0: entered promiscuous mode
[  790.236217][T16491] sit0: entered allmulticast mode
[  790.257274][T16491] ip6tnl0: entered promiscuous mode
[  790.270351][T16494] siw: device registration error -23
[  790.279977][T16491] ip6tnl0: entered allmulticast mode
[  790.300745][T16491] ip6gre0: entered promiscuous mode
[  790.302908][T16491] ip6gre0: entered allmulticast mode
[  790.312597][T16491] syz_tun: entered promiscuous mode
[  790.315362][T16491] syz_tun: entered allmulticast mode
[  790.322602][T16491] ip6gretap0: entered promiscuous mode
[  790.326614][T16491] ip6gretap0: entered allmulticast mode
[  790.344952][T16491] bridge0: entered promiscuous mode
[  790.347267][T16491] bridge0: entered allmulticast mode
[  790.359480][T16491] vcan0: entered promiscuous mode
[  790.361609][T16491] vcan0: entered allmulticast mode
[  790.367220][T16491] bond0: entered promiscuous mode
[  790.369566][T16491] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  790.376839][T16491] bond0: entered allmulticast mode
[  790.378937][T16491] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  790.389658][T16491] 8021q: adding VLAN 0 to HW filter on device bond0
[  790.395686][T16491] dummy0: entered promiscuous mode
[  790.397959][T16491] dummy0: entered allmulticast mode
[  790.409647][T16491] nlmon0: entered promiscuous mode
[  790.412164][T16491] nlmon0: entered allmulticast mode
[  790.981693][T16491] caif0: entered promiscuous mode
[  790.983439][T16491] caif0: entered allmulticast mode
[  790.985487][T16491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  793.503622][T16534] lo speed is unknown, defaulting to 1000
[  793.591104][T16534] lo speed is unknown, defaulting to 1000
[  793.593709][T16534] lo speed is unknown, defaulting to 1000
[  793.853282][T16537] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR
[  794.059795][T16546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2007'.
[  797.573486][T16600] lo speed is unknown, defaulting to 1000
[  797.782595][T16600] lo speed is unknown, defaulting to 1000
[  797.785072][T16600] lo speed is unknown, defaulting to 1000
[  799.840882][T16625] hfsplus: unable to find HFS+ superblock
[  800.279505][T16637] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  800.281609][T16637] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  800.292194][T16637] vhci_hcd vhci_hcd.0: Device attached
[  800.574751][ T6938] usb 40-1: SetAddress Request (51) to port 0
[  800.576823][ T6938] usb 40-1: new SuperSpeed USB device number 51 using vhci_hcd
[  800.965597][T16638] vhci_hcd: connection reset by peer
[  800.975324][T15018] vhci_hcd: stop threads
[  800.976729][T15018] vhci_hcd: release socket
[  800.978283][T15018] vhci_hcd: disconnect device
[  801.589166][ T1417] ieee802154 phy0 wpan0: encryption failed: -22
[  803.779554][T16674] netlink: 'syz.2.2035': attribute type 2 has an invalid length.
[  803.782038][T16674] netlink: 'syz.2.2035': attribute type 1 has an invalid length.
[  803.787919][T16679] netlink: 'syz.0.2037': attribute type 2 has an invalid length.
[  803.791477][T16679] netlink: 'syz.0.2037': attribute type 1 has an invalid length.
[  805.399857][ T6938] usb 40-1: device descriptor read/8, error -110
[  805.783475][ T6938] usb usb40-port1: attempt power cycle
[  806.548174][ T6938] usb usb40-port1: unable to enumerate USB device
[  807.488978][T16724] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  807.491758][T16724] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  807.495434][T16724] vhci_hcd vhci_hcd.0: Device attached
[  807.598882][T16724] 9pnet_virtio: no channels available for device syz
[  807.777105][T16725] vhci_hcd: connection closed
[  807.779249][  T102] vhci_hcd: stop threads
[  807.783131][  T102] vhci_hcd: release socket
[  807.796709][  T102] vhci_hcd: disconnect device
[  807.906208][T16735] netlink: 'syz.0.2050': attribute type 2 has an invalid length.
[  807.909705][T16735] netlink: 'syz.0.2050': attribute type 1 has an invalid length.
[  808.847434][T16740] nfs: Unknown parameter 'syzkaller1'
[  810.088246][T16745] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  810.091113][T16745] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  810.094702][T16745] vhci_hcd vhci_hcd.0: Device attached
[  810.296011][T16745] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  810.298946][T16745] block device autoloading is deprecated and will be removed.
[  810.347787][T16748] vhci_hcd: connection closed
[  810.349528][   T46] vhci_hcd: stop threads
[  810.352471][   T46] vhci_hcd: release socket
[  810.354325][   T46] vhci_hcd: disconnect device
[  811.443294][T16775] syzkaller0: entered promiscuous mode
[  811.445078][T16775] syzkaller0: entered allmulticast mode
[  813.445476][T16794] netlink: 'syz.1.2062': attribute type 2 has an invalid length.
[  813.448066][T16794] netlink: 'syz.1.2062': attribute type 1 has an invalid length.
[  814.089139][T16784] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  814.092286][T16784] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  814.095179][T16784] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  814.632914][T16811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2066'.
[  816.257457][T15018] Bluetooth: hci4: Frame reassembly failed (-84)
[  816.265368][T16829] siw: device registration error -23
[  816.965221][T16840] netlink: 'syz.2.2073': attribute type 2 has an invalid length.
[  816.967651][T16840] netlink: 'syz.2.2073': attribute type 1 has an invalid length.
[  818.040857][T16848] sp0: Synchronizing with TNC
[  818.209227][ T5944] Bluetooth: hci4: command 0x1003 tx timeout
[  818.213627][T14108] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  819.633169][T16859] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  819.635388][T16859] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  819.638361][T16859] vhci_hcd vhci_hcd.0: Device attached
[  819.980589][ T6938] usb 38-1: SetAddress Request (40) to port 0
[  819.983873][ T6938] usb 38-1: new SuperSpeed USB device number 40 using vhci_hcd
[  820.179097][T16860] vhci_hcd: connection reset by peer
[  820.181996][  T102] vhci_hcd: stop threads
[  820.183849][  T102] vhci_hcd: release socket
[  820.185825][  T102] vhci_hcd: disconnect device
[  821.062725][T16869] hfsplus: unable to find HFS+ superblock
[  821.700722][T16883] netlink: 'syz.3.2083': attribute type 2 has an invalid length.
[  821.703225][T16883] netlink: 'syz.3.2083': attribute type 1 has an invalid length.
[  822.233368][T16890] siw: device registration error -23
[  822.775833][T16898] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  822.777906][T16898] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  822.780636][T16898] vhci_hcd vhci_hcd.0: Device attached
[  823.041685][   T59] usb 44-1: SetAddress Request (46) to port 0
[  823.045020][   T59] usb 44-1: new SuperSpeed USB device number 46 using vhci_hcd
[  823.883575][T16899] vhci_hcd: connection reset by peer
[  823.886980][   T62] vhci_hcd: stop threads
[  823.889056][   T62] vhci_hcd: release socket
[  823.891718][   T62] vhci_hcd: disconnect device
[  824.865620][ T6938] usb 38-1: device descriptor read/8, error -110
[  825.017901][T16933] bridge46: entered promiscuous mode
[  825.534715][ T6938] usb usb38-port1: attempt power cycle
[  825.889491][T16946] fuse: Bad value for 'fd'
[  826.265732][ T6938] usb usb38-port1: unable to enumerate USB device
[  826.985132][T16957] hfsplus: unable to find HFS+ superblock
[  827.379290][T16963] netlink: 'syz.2.2100': attribute type 1 has an invalid length.
[  827.552866][T16970] lo speed is unknown, defaulting to 1000
[  827.710306][T16970] lo speed is unknown, defaulting to 1000
[  827.713633][T16970] lo speed is unknown, defaulting to 1000
[  827.895307][   T59] usb 44-1: device descriptor read/8, error -110
[  829.152580][   T59] usb usb44-port1: attempt power cycle
[  829.320431][T16986] random: crng reseeded on system resumption
[  829.636645][T16993] 9pnet_virtio: no channels available for device syz
[  830.241611][   T59] usb usb44-port1: unable to enumerate USB device
[  830.245754][T16996] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  830.247937][T16996] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  830.265554][T16996] vhci_hcd vhci_hcd.0: Device attached
[  830.517888][   T59] usb 44-1: SetAddress Request (50) to port 0
[  830.520368][   T59] usb 44-1: new SuperSpeed USB device number 50 using vhci_hcd
[  830.889679][T16997] vhci_hcd: connection reset by peer
[  830.892386][   T46] vhci_hcd: stop threads
[  830.894095][   T46] vhci_hcd: release socket
[  830.895963][   T46] vhci_hcd: disconnect device
[  832.413717][T17019] hfsplus: unable to find HFS+ superblock
[  833.065878][T17028] wireguard0: entered promiscuous mode
[  833.068386][T17028] wireguard0: entered allmulticast mode
[  834.180605][T17037] hfsplus: unable to find HFS+ superblock
[  835.844145][   T59] usb 44-1: device descriptor read/8, error -110
[  835.849950][T17063] netlink: 'syz.2.2121': attribute type 2 has an invalid length.
[  835.853031][T17063] netlink: 'syz.2.2121': attribute type 1 has an invalid length.
[  836.268127][   T59] usb usb44-port1: attempt power cycle
[  836.812970][   T59] usb usb44-port1: unable to enumerate USB device
[  837.226262][T17098] bridge52: entered promiscuous mode
[  837.366287][   T40] audit: type=1800 audit(1760224690.750:1098): pid=17102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2129" name="bus" dev="overlay" ino=3203 res=0 errno=0
[  838.212111][T17113] kernel profiling enabled (shift: 34)
[  838.214295][T17113] profiling shift: 34 too large
[  839.227024][T17130] comedi comedi0: Minor 3 specified more than once!
[  839.234560][T17130] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2134'.
[  840.185596][T17142] netlink: 'syz.1.2138': attribute type 2 has an invalid length.
[  840.188287][T17142] netlink: 'syz.1.2138': attribute type 1 has an invalid length.
[  841.009917][T17148] bridge53: entered promiscuous mode
[  841.194376][T17135] netlink: 'syz.0.2136': attribute type 1 has an invalid length.
[  841.329762][T17151] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2136'.
[  841.353568][T17147] hfsplus: unable to find HFS+ superblock
[  841.665649][T17163] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  841.668462][T17163] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  841.673839][T17163] vhci_hcd vhci_hcd.0: Device attached
[  842.023014][T17163] 9pnet_virtio: no channels available for device syz
[  842.121754][    T9] usb 42-1: SetAddress Request (34) to port 0
[  842.128232][    T9] usb 42-1: new SuperSpeed USB device number 34 using vhci_hcd
[  842.446540][T17164] vhci_hcd: connection reset by peer
[  842.465950][T15018] vhci_hcd: stop threads
[  842.467766][T15018] vhci_hcd: release socket
[  842.469772][T15018] vhci_hcd: disconnect device
[  844.231292][T17187] netlink: 'syz.1.2147': attribute type 2 has an invalid length.
[  844.233789][T17187] netlink: 'syz.1.2147': attribute type 1 has an invalid length.
[  844.688922][T17191] bridge42: entered promiscuous mode
[  844.697439][T17191] netlink: 'syz.2.2148': attribute type 2 has an invalid length.
[  844.699927][T17191] netlink: 'syz.2.2148': attribute type 1 has an invalid length.
[  845.569195][T17206] mkiss: ax0: crc mode is auto.
[  845.630973][T17203] hfsplus: unable to find HFS+ superblock
[  846.128417][T17214] syzkaller0: entered promiscuous mode
[  846.130383][T17214] syzkaller0: entered allmulticast mode
[  846.607636][T17221] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[  846.610212][T17221] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[  846.873179][T17226] 9pnet_fd: Insufficient options for proto=fd
[  847.163080][    T9] usb 42-1: device descriptor read/8, error -110
[  847.548825][    T9] usb usb42-port1: attempt power cycle
[  848.114158][    T9] usb usb42-port1: unable to enumerate USB device
[  848.291117][T17227] bridge43: entered promiscuous mode
[  848.301050][T17223] Process accounting resumed
[  848.824687][T17245] netlink: 'syz.2.2158': attribute type 2 has an invalid length.
[  848.830161][T17245] netlink: 'syz.2.2158': attribute type 1 has an invalid length.
[  848.833732][T17246] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2160'.
[  849.360421][T17250] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.2162'.
[  849.454769][T17257] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2162'.
[  849.634846][T17259] hfsplus: unable to find HFS+ superblock
[  849.750348][T17262] syz.3.2162 (17262): drop_caches: 2
[  849.755729][T17262] syz.3.2162 (17262): drop_caches: 2
[  850.473223][T17272] qnx6: unable to read the first superblock
[  850.475323][T17272] qnx6: unable to read the first superblock
[  850.477446][T17272] qnx6: unable to read the first superblock
[  850.728545][T17282] bridge44: entered promiscuous mode
[  851.094727][T17285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2165'.
[  852.262576][T17305] netlink: 'syz.0.2170': attribute type 2 has an invalid length.
[  852.265670][T17305] netlink: 'syz.0.2170': attribute type 1 has an invalid length.
[  852.837731][T17310] syzkaller0: entered promiscuous mode
[  852.840028][T17310] syzkaller0: entered allmulticast mode
[  853.707008][T17324] wireguard0: entered promiscuous mode
[  853.718064][T17324] wireguard0: entered allmulticast mode
[  855.676687][T17338] bridge50: entered promiscuous mode
[  856.171088][T17351] syzkaller0: entered promiscuous mode
[  856.172841][T17351] syzkaller0: entered allmulticast mode
[  856.804249][T17360] netlink: 'syz.2.2182': attribute type 2 has an invalid length.
[  856.806762][T17360] netlink: 'syz.2.2182': attribute type 1 has an invalid length.
[  857.112612][T17362] netlink: 'syz.1.2183': attribute type 1 has an invalid length.
[  857.353471][   T59] libceph: connect (1)[c::]:6789 error -101
[  857.356380][   T59] libceph: mon0 (1)[c::]:6789 connect error
[  857.608058][   T59] libceph: connect (1)[c::]:6789 error -101
[  857.610832][   T59] libceph: mon0 (1)[c::]:6789 connect error
[  857.994851][T17372] ceph: No mds server is up or the cluster is laggy
[  858.181947][T17362] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  858.189654][T17368] bridge0: left promiscuous mode
[  858.194296][T17368] bridge0: left allmulticast mode
[  858.714352][T17380] bridge45: entered promiscuous mode
[  858.717522][T17380] netlink: 'syz.2.2185': attribute type 2 has an invalid length.
[  858.719951][T17380] netlink: 'syz.2.2185': attribute type 1 has an invalid length.
[  858.782701][   T59] Process accounting resumed
[  859.357810][T17397] bridge46: entered promiscuous mode
[  860.130169][T17407] lo speed is unknown, defaulting to 1000
[  860.166448][ T1417] ieee802154 phy0 wpan0: encryption failed: -22
[  860.485606][T17407] lo speed is unknown, defaulting to 1000
[  860.514209][T17407] lo speed is unknown, defaulting to 1000
[  860.522385][T17404] netlink: 'syz.0.2191': attribute type 4 has an invalid length.
[  860.602500][T14802] lo speed is unknown, defaulting to 1000
[  860.611611][T14802] syz2: Port: 1 Link DOWN
[  861.245503][T17431] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  861.247611][T17431] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  861.266161][T17431] vhci_hcd vhci_hcd.0: Device attached
[  861.520261][ T6938] usb 38-1: SetAddress Request (44) to port 0
[  861.522611][ T6938] usb 38-1: new SuperSpeed USB device number 44 using vhci_hcd
[  862.095186][T17432] vhci_hcd: connection reset by peer
[  862.097091][  T102] vhci_hcd: stop threads
[  862.098440][  T102] vhci_hcd: release socket
[  862.100352][  T102] vhci_hcd: disconnect device
[  862.237968][T17450] tipc: Started in network mode
[  862.240025][T17450] tipc: Node identity 4, cluster identity 4711
[  862.246510][T17450] tipc: Node number set to 4
[  862.467755][T17457] bridge54: entered promiscuous mode
[  862.475861][T17457] netlink: 'syz.3.2198': attribute type 2 has an invalid length.
[  862.478347][T17457] netlink: 'syz.3.2198': attribute type 1 has an invalid length.
[  862.781518][T17458] syzkaller0: entered promiscuous mode
[  862.783925][T17458] syzkaller0: entered allmulticast mode
[  863.878760][T17463] hfsplus: unable to find HFS+ superblock
[  864.036740][T17475] rdma_rxe: rxe_newlink: failed to add syz_tun
[  864.374741][T17479] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2203'.
[  865.132945][T17467] bridge47: entered promiscuous mode
[  865.914924][T17496] hfsplus: unable to find HFS+ superblock
[  866.447555][ T6938] usb 38-1: device descriptor read/8, error -110
[  866.985239][ T6938] usb usb38-port1: attempt power cycle
[  867.698327][ T6938] usb usb38-port1: unable to enumerate USB device
[  868.477308][T17521] bridge47: entered promiscuous mode
[  869.534748][T17542] lo speed is unknown, defaulting to 1000
[  869.745077][T17542] lo speed is unknown, defaulting to 1000
[  869.749731][T17542] lo speed is unknown, defaulting to 1000
[  870.412593][T17553] kvm: pic: non byte read
[  870.416216][T17553] kvm: pic: level sensitive irq not supported
[  870.416566][T17553] kvm: pic: non byte read
[  870.554171][T17553] kvm: pic: level sensitive irq not supported
[  870.564991][T17553] kvm: pic: non byte read
[  870.621808][T17553] kvm: pic: level sensitive irq not supported
[  870.622554][T17553] kvm: pic: non byte read
[  870.642008][T17553] kvm: pic: level sensitive irq not supported
[  870.642826][T17553] kvm: pic: non byte read
[  870.656068][T17553] kvm: pic: level sensitive irq not supported
[  870.662554][T17553] kvm: pic: non byte read
[  870.724572][T17553] kvm: pic: level sensitive irq not supported
[  870.768760][T17553] kvm: pic: non byte read
[  870.829762][T17553] kvm: pic: level sensitive irq not supported
[  870.833852][T17553] kvm: pic: non byte read
[  870.873101][T17553] kvm: pic: level sensitive irq not supported
[  870.877713][T17553] kvm: pic: non byte read
[  871.901111][T17559] bridge48: entered promiscuous mode
[  873.270536][T17573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2224'.
[  873.321730][T17573] wireguard0: entered promiscuous mode
[  873.323695][T17573] wireguard0: entered allmulticast mode
[  873.674913][T17583] bridge48: entered promiscuous mode
[  873.809245][T17584] bridge55: entered promiscuous mode
[  874.663781][T17599] bridge49: entered promiscuous mode
[  874.667453][T17599] netlink: 'syz.0.2230': attribute type 1 has an invalid length.
[  875.748733][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  875.769827][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  875.773401][ T5944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  875.777199][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  875.780678][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  875.789493][T14108] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  875.792933][T14108] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  875.801069][T14108] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  875.816938][T14108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  875.821449][T14108] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  875.870476][T17612] lo speed is unknown, defaulting to 1000
[  876.034067][T17612] lo speed is unknown, defaulting to 1000
[  876.137632][T17612] lo speed is unknown, defaulting to 1000
[  876.198539][T17615] lo speed is unknown, defaulting to 1000
[  876.574557][T17612] chnl_net:caif_netlink_parms(): no params data found
[  876.721270][T17615] lo speed is unknown, defaulting to 1000
[  876.737056][T17615] lo speed is unknown, defaulting to 1000
[  876.821447][T17612] bridge0: port 1(bridge_slave_0) entered blocking state
[  876.824621][T17612] bridge0: port 1(bridge_slave_0) entered disabled state
[  876.827861][T17612] bridge_slave_0: entered allmulticast mode
[  876.832175][T17612] bridge_slave_0: entered promiscuous mode
[  876.837465][T17612] bridge0: port 2(bridge_slave_1) entered blocking state
[  876.840708][T17612] bridge0: port 2(bridge_slave_1) entered disabled state
[  876.843760][T17612] bridge_slave_1: entered allmulticast mode
[  876.853237][T17612] bridge_slave_1: entered promiscuous mode
[  876.875631][T17638] bridge49: entered promiscuous mode
[  876.887134][T17638] netlink: 'syz.2.2237': attribute type 2 has an invalid length.
[  876.904919][T17634] netlink: 'syz.3.2236': attribute type 4 has an invalid length.
[  876.945064][T17612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  876.955224][T17612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  876.967564][T17634] loop6: detected capacity change from 0 to 63
[  877.002652][T17622] buffer_io_error: 9 callbacks suppressed
[  877.002669][T17622] Buffer I/O error on dev loop6, logical block 0, async page read
[  877.012933][T17622] Buffer I/O error on dev loop6, logical block 0, async page read
[  877.015972][T17622] Buffer I/O error on dev loop6, logical block 0, async page read
[  877.018960][T17622] Buffer I/O error on dev loop6, logical block 0, async page read
[  877.024910][T17622] Buffer I/O error on dev loop6, logical block 0, async page read
[  877.029054][T17622] udevd[17622]: symlink '../../loop6' '/dev/disk/by-diskseq/84.tmp-b7:6' failed: Read-only file system
[  877.045793][T17612] team0: Port device team_slave_0 added
[  877.050557][T17612] team0: Port device team_slave_1 added
[  877.123678][T17612] batman_adv: batadv0: Adding interface: batadv_slave_0
[  877.126327][T17612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  877.136367][T17612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  877.142434][T17612] batman_adv: batadv0: Adding interface: batadv_slave_1
[  877.145083][T17612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  877.154773][T17612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  877.225381][T17634] Buffer I/O error on dev loop6, logical block 0, async page read
[  877.229146][T17634] Buffer I/O error on dev loop6, logical block 0, async page read
[  877.231544][T17612] hsr_slave_0: entered promiscuous mode
[  877.234111][T17634] Buffer I/O error on dev loop6, logical block 0, async page read
[  877.237667][T17612] hsr_slave_1: entered promiscuous mode
[  877.239656][T17634] Buffer I/O error on dev loop6, logical block 0, async page read
[  877.241650][T17612] debugfs: 'hsr0' already exists in 'hsr'
[  877.245102][T17634] Buffer I/O error on dev loop6, logical block 0, async page read
[  877.250659][T17612] Cannot create hsr debugfs directory
[  877.787958][ T5944] Bluetooth: hci3: command tx timeout
[  877.805395][T17643] bridge50: entered promiscuous mode
[  878.175452][T17612] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  878.182275][T17612] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  878.188300][T17612] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  878.197347][T17612] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  878.288624][T17612] 8021q: adding VLAN 0 to HW filter on device bond0
[  878.298674][T17612] 8021q: adding VLAN 0 to HW filter on device team0
[  878.308425][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  878.311507][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  878.323655][T17622] udevd[17622]: symlink '../../loop6' '/dev/disk/by-diskseq/84.tmp-b7:6' failed: Read-only file system
[  878.336192][T17622] udevd[17622]: symlink '../../loop6' '/dev/disk/by-diskseq/84.tmp-b7:6' failed: Read-only file system
[  878.342762][  T102] bridge0: port 2(bridge_slave_1) entered blocking state
[  878.346100][  T102] bridge0: port 2(bridge_slave_1) entered forwarding state
[  878.364878][T17622] udevd[17622]: symlink '../../loop6' '/dev/disk/by-diskseq/85.tmp-b7:6' failed: Read-only file system
[  878.476245][T17612] 8021q: adding VLAN 0 to HW filter on device batadv0
[  878.706479][T17667] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2240'.
[  878.742745][T17612] veth0_vlan: entered promiscuous mode
[  878.752073][T17612] veth1_vlan: entered promiscuous mode
[  878.767494][T17612] veth0_macvtap: entered promiscuous mode
[  878.773228][T17612] veth1_macvtap: entered promiscuous mode
[  878.783127][T17612] batman_adv: batadv0: Interface activated: batadv_slave_0
[  878.789553][T17612] batman_adv: batadv0: Interface activated: batadv_slave_1
[  878.797559][ T1192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  878.801867][ T1192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  878.805922][ T1192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  878.814826][ T1192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  878.857974][T17673] netlink: 'syz.3.2239': attribute type 4 has an invalid length.
[  879.009509][T17664] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13)
[  879.012261][T17664] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  879.015598][T17664] vhci_hcd vhci_hcd.0: Device attached
[  879.048954][T17669] lo speed is unknown, defaulting to 1000
[  879.234079][T17668] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  879.251498][T17669] lo speed is unknown, defaulting to 1000
[  879.294650][T17669] lo speed is unknown, defaulting to 1000
[  879.312282][ T6277] usb 41-1: new low-speed USB device number 4 using vhci_hcd
[  879.370740][  T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  879.372482][T17672] vhci_hcd: connection reset by peer
[  879.373281][  T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  879.381424][ T1192] vhci_hcd: stop threads
[  879.382815][ T1192] vhci_hcd: release socket
[  879.387274][ T1192] vhci_hcd: disconnect device
[  879.392433][ T1192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  879.395062][ T1192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  879.761212][ T5944] Bluetooth: hci3: command tx timeout
[  880.261139][T17688] netlink: 'syz.0.2241': attribute type 1 has an invalid length.
[  880.268620][T17684] bridge50: entered promiscuous mode
[  881.242968][T17713] wireguard0: entered promiscuous mode
[  881.245437][T17713] wireguard0: entered allmulticast mode
[  881.652697][T17712] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  881.659755][T17712] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  881.706935][T17712] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  882.279958][T17723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2247'.
[  882.503641][T17732] lo speed is unknown, defaulting to 1000
[  882.706626][T17732] lo speed is unknown, defaulting to 1000
[  882.709128][T17732] lo speed is unknown, defaulting to 1000
[  883.583246][ T5944] Bluetooth: hci3: command 0x0419 tx timeout
[  883.675846][T17764] syzkaller0: entered promiscuous mode
[  883.678232][T17764] syzkaller0: entered allmulticast mode
[  884.174389][ T6277] vhci_hcd: vhci_device speed not set
[  885.556517][ T5944] Bluetooth: hci3: command 0x0419 tx timeout
[  885.802546][T17770] netlink: 'syz.2.2253': attribute type 1 has an invalid length.
[  886.608792][T17769] bridge51: entered promiscuous mode
[  887.213698][T17793] bridge1: entered promiscuous mode
[  887.225884][T17793] netlink: 'syz.4.2257': attribute type 2 has an invalid length.
[  887.228341][T17793] netlink: 'syz.4.2257': attribute type 1 has an invalid length.
[  887.282984][T17792] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  887.285019][T17792] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  887.299994][T17792] vhci_hcd vhci_hcd.0: Device attached
[  887.432001][T17788] siw: device registration error -23
[  887.539052][ T5944] Bluetooth: hci3: command 0x0419 tx timeout
[  887.577082][   T59] usb 42-1: SetAddress Request (38) to port 0
[  887.586491][   T59] usb 42-1: new SuperSpeed USB device number 38 using vhci_hcd
[  888.135193][T17806] bridge51: entered promiscuous mode
[  888.158428][T17806] netlink: 'syz.0.2267': attribute type 2 has an invalid length.
[  888.161985][T17806] netlink: 'syz.0.2267': attribute type 1 has an invalid length.
[  889.521773][ T5944] Bluetooth: hci3: command 0x0419 tx timeout
[  889.679686][T17794] vhci_hcd: connection reset by peer
[  889.688761][T15018] vhci_hcd: stop threads
[  889.690434][T15018] vhci_hcd: release socket
[  889.695649][T15018] vhci_hcd: disconnect device
[  890.138023][T17823] bridge52: entered promiscuous mode
[  890.154797][T17823] netlink: 'syz.0.2262': attribute type 2 has an invalid length.
[  890.158311][T17823] netlink: 'syz.0.2262': attribute type 1 has an invalid length.
[  890.558453][T17825] hfsplus: unable to find HFS+ superblock
[  892.335743][T17855] tipc: Started in network mode
[  892.357290][T17855] tipc: Node identity 4, cluster identity 4711
[  892.370909][T17855] tipc: Node number set to 4
[  892.418825][   T59] usb 42-1: device descriptor read/8, error -110
[  892.658243][T15018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  892.663501][T15018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  893.642741][   T59] usb usb42-port1: attempt power cycle
[  893.729160][T17874] bridge53: entered promiscuous mode
[  894.530655][T17883] bridge56: entered promiscuous mode
[  894.550792][T17883] netlink: 'syz.3.2274': attribute type 2 has an invalid length.
[  894.554293][T17883] netlink: 'syz.3.2274': attribute type 1 has an invalid length.
[  894.731711][   T59] usb usb42-port1: unable to enumerate USB device
[  895.279418][T17896] syzkaller0: entered promiscuous mode
[  895.281930][T17896] syzkaller0: entered allmulticast mode
[  896.606719][T17900] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  896.609445][T17900] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  896.632802][T17900] vhci_hcd vhci_hcd.0: Device attached
[  897.813597][ T6938] usb 38-1: SetAddress Request (48) to port 0
[  897.815845][ T6938] usb 38-1: new SuperSpeed USB device number 48 using vhci_hcd
[  897.920715][T17901] vhci_hcd: connection reset by peer
[  897.928424][   T46] vhci_hcd: stop threads
[  897.929763][   T46] vhci_hcd: release socket
[  897.931684][   T46] vhci_hcd: disconnect device
[  899.272303][T17931] bridge52: entered promiscuous mode
[  899.442990][T17935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2285'.
[  900.212847][T17939] bridge57: entered promiscuous mode
[  900.335490][T17945] 9pnet_fd: Insufficient options for proto=fd
[  900.850161][T17948] bridge58: entered promiscuous mode
[  900.856944][T17948] netlink: 'syz.3.2288': attribute type 2 has an invalid length.
[  900.859522][T17948] netlink: 'syz.3.2288': attribute type 1 has an invalid length.
[  900.911468][T17945] Process accounting resumed
[  901.219086][T17957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2289'.
[  902.081492][T17970] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  902.083566][T17970] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  902.099378][T17970] vhci_hcd vhci_hcd.0: Device attached
[  902.126283][T17974] syzkaller0: entered promiscuous mode
[  902.130386][T17974] syzkaller0: entered allmulticast mode
[  902.304061][T17979] lo speed is unknown, defaulting to 1000
[  902.361112][   T59] usb 44-1: SetAddress Request (54) to port 0
[  902.363126][   T59] usb 44-1: new SuperSpeed USB device number 54 using vhci_hcd
[  902.444872][T17979] lo speed is unknown, defaulting to 1000
[  902.447484][T17979] lo speed is unknown, defaulting to 1000
[  902.636771][ T6938] usb 38-1: device descriptor read/8, error -110
[  902.646282][   T40] audit: type=1800 audit(1760224759.217:1099): pid=17970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2291" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0
[  903.009516][ T6938] usb usb38-port1: attempt power cycle
[  903.358586][T17973] vhci_hcd: connection reset by peer
[  903.360453][T15018] vhci_hcd: stop threads
[  903.361905][T15018] vhci_hcd: release socket
[  903.363455][T15018] vhci_hcd: disconnect device
[  903.552620][ T6938] usb usb38-port1: unable to enumerate USB device
[  904.642924][T17987] syzkaller0: entered promiscuous mode
[  904.648218][T17987] syzkaller0: entered allmulticast mode
[  904.696512][T17992] bridge59: entered promiscuous mode
[  905.353794][T17993] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  905.356723][T17993] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  905.411515][T17993] vhci_hcd vhci_hcd.0: Device attached
[  905.667629][T14880] usb 46-1: SetAddress Request (2) to port 0
[  905.669916][T14880] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd
[  905.823049][T17995] vhci_hcd: connection reset by peer
[  905.824943][  T102] vhci_hcd: stop threads
[  905.826284][  T102] vhci_hcd: release socket
[  905.827818][  T102] vhci_hcd: disconnect device
[  907.211900][   T59] usb 44-1: device descriptor read/8, error -110
[  907.607530][   T59] usb usb44-port1: attempt power cycle
[  908.165728][   T59] usb usb44-port1: unable to enumerate USB device
[  908.619018][T18020] bridge53: entered promiscuous mode
[  908.697631][T18032] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.2302'.
[  908.714056][T18032] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2302'.
[  908.925911][T18038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2304'.
[  909.080184][   T40] audit: type=1800 audit(1760224765.743:1100): pid=18036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2304" name="bus" dev="overlay" ino=3071 res=0 errno=0
[  909.346175][T18046] syz.2.2302 (18046): drop_caches: 2
[  909.356192][T18046] syz.2.2302 (18046): drop_caches: 2
[  909.609022][T18049] 9pnet_virtio: no channels available for device syz
[  909.802499][T18052] syzkaller0: entered promiscuous mode
[  909.804807][T18052] syzkaller0: entered allmulticast mode
[  910.493605][T14880] usb 46-1: device descriptor read/8, error -110
[  910.863127][T14880] usb usb46-port1: attempt power cycle
[  911.416309][T14880] usb usb46-port1: unable to enumerate USB device
[  912.415491][T18074] siw: device registration error -23
[  912.475599][T18073] bridge2: entered promiscuous mode
[  912.515265][T18075] 9pnet_fd: Insufficient options for proto=fd
[  912.925222][T18078] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  912.927965][T18078] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  912.932357][T18078] vhci_hcd vhci_hcd.0: Device attached
[  913.058032][T18075] Process accounting resumed
[  913.331121][T14880] usb 42-1: SetAddress Request (42) to port 0
[  913.333749][T14880] usb 42-1: new SuperSpeed USB device number 42 using vhci_hcd
[  913.745282][T18079] vhci_hcd: connection reset by peer
[  913.748867][   T12] vhci_hcd: stop threads
[  913.756828][   T12] vhci_hcd: release socket
[  913.758995][   T12] vhci_hcd: disconnect device
[  914.515311][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  914.517890][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  915.316026][   T40] audit: type=1800 audit(1760224772.521:1101): pid=18098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2324" name="bus" dev="overlay" ino=153 res=0 errno=0
[  915.317240][T18098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2324'.
[  915.594740][T18103] Bluetooth: hci4: Frame reassembly failed (-84)
[  915.638588][   T46] Bluetooth: hci4: Frame reassembly failed (-84)
[  915.662471][T18105] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.2318'.
[  915.714289][T18102] syzkaller0: entered promiscuous mode
[  915.716775][T18102] syzkaller0: entered allmulticast mode
[  915.844450][T18105] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2318'.
[  916.011503][T18110] syz.4.2318 (18110): drop_caches: 2
[  916.014797][T18110] syz.4.2318 (18110): drop_caches: 2
[  916.834401][T18114] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2321'.
[  917.586004][ T5944] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  917.586533][T17955] Bluetooth: hci4: command 0x1003 tx timeout
[  918.268631][T14880] usb 42-1: device descriptor read/8, error -110
[  918.516940][T18124] wireguard0: entered promiscuous mode
[  918.518691][T18124] wireguard0: entered allmulticast mode
[  918.669598][T14880] usb usb42-port1: attempt power cycle
[  918.728844][ T1417] ieee802154 phy0 wpan0: encryption failed: -22
[  919.139032][T18140] 9pnet_fd: Insufficient options for proto=fd
[  919.244572][T18144] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  919.247271][T18144] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  919.257550][T18144] vhci_hcd vhci_hcd.0: Device attached
[  919.411354][T14880] usb usb42-port1: unable to enumerate USB device
[  919.564291][T14880] usb 44-1: SetAddress Request (58) to port 0
[  919.567614][T14880] usb 44-1: new SuperSpeed USB device number 58 using vhci_hcd
[  919.705038][T18136] Process accounting resumed
[  920.634744][T17680] Process accounting resumed
[  920.678519][T18145] vhci_hcd: connection reset by peer
[  920.684133][   T62] vhci_hcd: stop threads
[  920.686538][   T62] vhci_hcd: release socket
[  920.688985][   T62] vhci_hcd: disconnect device
[  921.561450][T18157] lo speed is unknown, defaulting to 1000
[  921.674216][T18157] lo speed is unknown, defaulting to 1000
[  921.675820][T18173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2332'.
[  921.676757][T18157] lo speed is unknown, defaulting to 1000
[  921.720529][T18174] netlink: 'syz.2.2330': attribute type 4 has an invalid length.
[  921.986405][T18158] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  922.574092][T18181] syzkaller0: entered promiscuous mode
[  922.575859][T18181] syzkaller0: entered allmulticast mode
[  923.933217][   T40] audit: type=1800 audit(1760224781.554:1102): pid=18197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2338" name="bus" dev="overlay" ino=3383 res=0 errno=0
[  924.017810][T18199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2338'.
[  924.443148][T14880] usb 44-1: device descriptor read/8, error -110
[  924.445968][T18201] siw: device registration error -23
[  924.900834][T14880] usb usb44-port1: attempt power cycle
[  925.918565][T14880] usb usb44-port1: unable to enumerate USB device
[  926.590548][T18186] syzkaller0: entered promiscuous mode
[  926.592994][T18186] syzkaller0: entered allmulticast mode
[  929.308407][T18244] siw: device registration error -23
[  929.708745][T18246] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2347'.
[  930.483945][T18246] batadv1: entered allmulticast mode
[  931.984010][T18279] syzkaller0: entered promiscuous mode
[  931.986392][T18279] syzkaller0: entered allmulticast mode
[  932.315431][T18284] bridge60: entered promiscuous mode
[  932.329840][T18284] netlink: 'syz.3.2356': attribute type 1 has an invalid length.
[  933.481616][T18292] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  933.483666][T18292] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  933.486764][T18293] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[  933.489568][T18293] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  933.494704][T18293] vhci_hcd vhci_hcd.0: Device attached
[  933.522245][T18292] vhci_hcd vhci_hcd.0: Device attached
[  933.737590][ T5949] usb 45-1: new low-speed USB device number 2 using vhci_hcd
[  933.775585][T14880] usb 44-1: SetAddress Request (62) to port 0
[  933.777568][T14880] usb 44-1: new SuperSpeed USB device number 62 using vhci_hcd
[  934.003914][T18294] vhci_hcd: connection reset by peer
[  934.006584][  T102] vhci_hcd: stop threads
[  934.009005][  T102] vhci_hcd: release socket
[  934.011740][  T102] vhci_hcd: disconnect device
[  934.309352][T18296] vhci_hcd: connection reset by peer
[  934.313127][  T102] vhci_hcd: stop threads
[  934.315054][  T102] vhci_hcd: release socket
[  934.317128][  T102] vhci_hcd: disconnect device
[  935.858708][T18311] syzkaller0: entered promiscuous mode
[  935.860995][T18311] syzkaller0: entered allmulticast mode
[  936.978935][T18300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2358'.
[  937.004535][T18315] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2361'.
[  938.618166][ T5949] vhci_hcd: vhci_device speed not set
[  938.626374][T14880] usb 44-1: device descriptor read/8, error -110
[  939.125566][T14880] usb usb44-port1: attempt power cycle
[  939.773073][T14880] usb usb44-port1: unable to enumerate USB device
[  939.983297][T18342] block device autoloading is deprecated and will be removed.
[  940.430084][T18340] bridge3: entered promiscuous mode
[  941.024010][T18357] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  941.026514][T18357] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  941.051537][T18357] vhci_hcd vhci_hcd.0: Device attached
[  941.401632][T14880] usb 46-1: SetAddress Request (6) to port 0
[  941.421358][T14880] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd
[  941.692427][T18358] vhci_hcd: connection reset by peer
[  941.700203][   T46] vhci_hcd: stop threads
[  941.701873][   T46] vhci_hcd: release socket
[  941.703658][   T46] vhci_hcd: disconnect device
[  941.725215][T18359] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  941.728641][T18359] IPv6: NLM_F_CREATE should be set when creating new route
[  941.730980][T18359] IPv6: NLM_F_CREATE should be set when creating new route
[  941.741407][T18359] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2371'.
[  941.764032][T18359] batadv1: entered allmulticast mode
[  944.204640][T18397] lo speed is unknown, defaulting to 1000
[  944.527904][T18397] lo speed is unknown, defaulting to 1000
[  944.531153][T18397] lo speed is unknown, defaulting to 1000
[  945.418959][T18404] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2378'.
[  946.480301][T14880] usb 46-1: device descriptor read/8, error -110
[  946.852603][T14880] usb usb46-port1: attempt power cycle
[  947.077122][  T102] Bluetooth: hci4: Frame reassembly failed (-90)
[  947.576395][T14880] usb usb46-port1: unable to enumerate USB device
[  947.615656][T18428] fuse: Unknown parameter '0x0000000000000009'
[  948.683077][T18435] 9pnet_fd: Insufficient options for proto=fd
[  948.845501][ T5944] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  950.567058][T18453] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  950.569832][T18453] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  950.574191][T18453] vhci_hcd vhci_hcd.0: Device attached
[  951.116109][T18456] lo speed is unknown, defaulting to 1000
[  951.328867][   T59] usb 42-1: SetAddress Request (46) to port 0
[  951.331625][   T59] usb 42-1: new SuperSpeed USB device number 46 using vhci_hcd
[  951.371127][T18454] vhci_hcd: connection reset by peer
[  951.373354][  T217] vhci_hcd: stop threads
[  951.374805][  T217] vhci_hcd: release socket
[  951.376542][  T217] vhci_hcd: disconnect device
[  951.473147][T18464] hfsplus: unable to find HFS+ superblock
[  951.628859][T18456] lo speed is unknown, defaulting to 1000
[  951.634711][T18456] lo speed is unknown, defaulting to 1000
[  952.291409][T18469] siw: device registration error -23
[  952.903618][T18483] siw: device registration error -23
[  953.318207][T18480] tipc: Started in network mode
[  953.320495][T18480] tipc: Node identity c, cluster identity 4711
[  953.323313][T18480] tipc: Node number set to 12
[  953.807208][T18487] siw: device registration error -23
[  953.827610][T18491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2396'.
[  953.831750][T18491] 8021q: VLANs not supported on lo
[  953.833591][T18491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2396'.
[  953.836457][T18491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2396'.
[  954.320121][T18497] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  954.322181][T18497] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  954.516636][T18497] vhci_hcd vhci_hcd.0: Device attached
[  954.860853][ T9911] usb 38-1: SetAddress Request (52) to port 0
[  954.862902][ T9911] usb 38-1: new SuperSpeed USB device number 52 using vhci_hcd
[  955.582114][T18498] vhci_hcd: connection reset by peer
[  955.584701][  T102] vhci_hcd: stop threads
[  955.586593][  T102] vhci_hcd: release socket
[  955.588940][  T102] vhci_hcd: disconnect device
[  956.163667][   T59] usb 42-1: device descriptor read/8, error -110
[  956.611590][   T59] usb usb42-port1: attempt power cycle
[  957.280324][   T59] usb usb42-port1: unable to enumerate USB device
[  957.842328][T18539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2405'.
[  958.540367][T18543] tipc: Started in network mode
[  958.543500][T18543] tipc: Node identity c, cluster identity 4711
[  958.546062][T18543] tipc: Node number set to 12
[  958.591158][T18545] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2413'.
[  958.669157][T18545] batadv1: entered allmulticast mode
[  959.285645][T18553] lo speed is unknown, defaulting to 1000
[  959.680153][ T9911] usb 38-1: device descriptor read/8, error -110
[  959.833179][T18553] lo speed is unknown, defaulting to 1000
[  959.840580][T18553] lo speed is unknown, defaulting to 1000
[  960.062284][ T9911] usb usb38-port1: attempt power cycle
[  960.073761][T18566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2409'.
[  960.319123][T18571] lo speed is unknown, defaulting to 1000
[  960.672569][T18565] netlink: 'syz.4.2408': attribute type 4 has an invalid length.
[  960.737794][T18571] lo speed is unknown, defaulting to 1000
[  960.740480][T18571] lo speed is unknown, defaulting to 1000
[  960.960157][T18570] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  961.158305][ T9911] usb usb38-port1: unable to enumerate USB device
[  962.192034][   T40] audit: type=1326 audit(1760224821.697:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18586 comm="syz.4.2412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000
[  962.204165][T18589] pim6reg: entered allmulticast mode
[  962.209375][   T40] audit: type=1326 audit(1760224821.697:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18586 comm="syz.4.2412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000
[  962.281925][   T40] audit: type=1326 audit(1760224821.697:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18586 comm="syz.4.2412" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7f95579 code=0x7ffc0000
[  962.291931][   T40] audit: type=1326 audit(1760224821.697:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18586 comm="syz.4.2412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000
[  962.302187][   T40] audit: type=1326 audit(1760224821.697:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18586 comm="syz.4.2412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000
[  962.342616][   T40] audit: type=1326 audit(1760224821.697:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18586 comm="syz.4.2412" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f95579 code=0x7ffc0000
[  962.355586][   T40] audit: type=1326 audit(1760224821.697:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18586 comm="syz.4.2412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000
[  962.362480][   T40] audit: type=1326 audit(1760224821.697:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18586 comm="syz.4.2412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000
[  962.369273][   T40] audit: type=1326 audit(1760224821.697:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18586 comm="syz.4.2412" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f95579 code=0x7ffc0000
[  962.376404][   T40] audit: type=1326 audit(1760224821.697:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18586 comm="syz.4.2412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000
[  962.759385][T18586] pim6reg: left allmulticast mode
[  965.668708][T18636] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2422'.
[  966.768488][T18650] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 0, id = 0
[  967.253923][T18659] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2428'.
[  967.289034][T18659] batadv1: entered allmulticast mode
[  967.316187][T18662] IPVS: stopping backup sync thread 18650 ...
[  967.389182][T18652] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  967.391682][T18652] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  967.414364][T18652] vhci_hcd vhci_hcd.0: Device attached
[  967.676903][ T9911] usb 44-1: SetAddress Request (66) to port 0
[  967.679030][ T9911] usb 44-1: new SuperSpeed USB device number 66 using vhci_hcd
[  967.972479][T18661] vhci_hcd: connection reset by peer
[  967.974448][  T217] vhci_hcd: stop threads
[  967.975952][  T217] vhci_hcd: release socket
[  967.977405][  T217] vhci_hcd: disconnect device
[  968.081431][T18672] 9pnet_fd: Insufficient options for proto=fd
[  968.331453][T18676] bridge54: entered promiscuous mode
[  968.609306][T18678] syzkaller0: entered promiscuous mode
[  968.611842][T18678] syzkaller0: entered allmulticast mode
[  968.950327][T18683] hfsplus: unable to find HFS+ superblock
[  970.555035][T18692] lo speed is unknown, defaulting to 1000
[  970.691921][T18692] lo speed is unknown, defaulting to 1000
[  970.695281][T18692] lo speed is unknown, defaulting to 1000
[  970.930042][T18711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2438'.
[  972.359295][T18723] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2437'.
[  972.392855][T18723] batadv0: entered allmulticast mode
[  972.518467][ T9911] usb 44-1: device descriptor read/8, error -110
[  972.969859][ T9911] usb usb44-port1: attempt power cycle
[  973.719260][T18734] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  973.721408][T18734] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  973.724379][T18734] vhci_hcd vhci_hcd.0: Device attached
[  974.119286][   T59] usb 46-1: SetAddress Request (10) to port 0
[  974.121787][   T59] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd
[  974.148334][ T9911] usb usb44-port1: unable to enumerate USB device
[  974.163430][T18735] vhci_hcd: connection reset by peer
[  974.165847][  T217] vhci_hcd: stop threads
[  974.167330][  T217] vhci_hcd: release socket
[  974.175888][  T217] vhci_hcd: disconnect device
[  974.578408][T18748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2447'.
[  974.903618][T18749] ubi: mtd0 is already attached to ubi31
[  975.872529][T18762] fuse: Unknown parameter '0x0000000000000008'
[  976.601506][T18773] siw: device registration error -23
[  977.472392][ T1417] ieee802154 phy0 wpan0: encryption failed: -22
[  979.750825][T18800] siw: device registration error -23
[  980.109420][   T59] usb 46-1: device descriptor read/8, error -110
[  980.492501][   T59] usb usb46-port1: attempt power cycle
[  981.279809][T18804] netlink: 'syz.3.2459': attribute type 1 has an invalid length.
[  981.486176][   T46] Bluetooth: hci4: Frame reassembly failed (-90)
[  981.555106][   T59] usb usb46-port1: unable to enumerate USB device
[  981.689147][T18830] fuse: Unknown parameter '0x0000000000000009'
[  983.426632][T18847] siw: device registration error -23
[  983.459402][T17955] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  983.958538][T18852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  983.969518][T18852] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2469'.
[  983.989717][T18852] batadv1: entered allmulticast mode
[  984.237121][T18859] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  984.239341][T18859] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  984.278808][ T1326] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  984.337824][T18859] vhci_hcd vhci_hcd.0: Device attached
[  984.394410][T18863] siw: device registration error -23
[  984.418122][T18859] netlink: 'syz.2.2470': attribute type 10 has an invalid length.
[  984.437357][T18859] : (slave batadv_slave_0): Enslaving as an active interface with an up link
[  984.471640][ T1326] usb 9-1: config index 0 descriptor too short (expected 39, got 27)
[  984.474962][ T1326] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  984.478896][ T1326] usb 9-1: config 0 interface 0 has no altsetting 0
[  984.483966][ T1326] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  984.487327][ T1326] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  984.490869][ T1326] usb 9-1: Product: syz
[  984.492656][ T1326] usb 9-1: Manufacturer: syz
[  984.494621][ T1326] usb 9-1: SerialNumber: syz
[  984.498656][ T1326] usb 9-1: config 0 descriptor??
[  984.502204][ T1326] hub 9-1:0.0: bad descriptor, ignoring hub
[  984.504602][ T1326] hub 9-1:0.0: probe with driver hub failed with error -5
[  984.509175][ T1326] usb 9-1: selecting invalid altsetting 0
[  984.788982][ T6938] usb 42-1: SetAddress Request (50) to port 0
[  984.791036][ T6938] usb 42-1: new SuperSpeed USB device number 50 using vhci_hcd
[  984.829257][T18862] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  984.829298][T18861] vhci_hcd: connection closed
[  984.832427][  T217] vhci_hcd: stop threads
[  984.836338][  T217] vhci_hcd: release socket
[  984.838312][  T217] vhci_hcd: disconnect device
[  985.228357][T18872] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0
[  985.607099][   T40] kauditd_printk_skb: 22 callbacks suppressed
[  985.607112][   T40] audit: type=1326 audit(1760224846.270:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18868 comm="syz.3.2474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000
[  985.617046][   T40] audit: type=1326 audit(1760224846.270:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18868 comm="syz.3.2474" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf707d579 code=0x7ffc0000
[  985.624247][   T40] audit: type=1326 audit(1760224846.270:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18868 comm="syz.3.2474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000
[  985.631079][   T40] audit: type=1326 audit(1760224846.270:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18868 comm="syz.3.2474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000
[  985.638382][   T40] audit: type=1326 audit(1760224846.270:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18868 comm="syz.3.2474" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707d579 code=0x7ffc0000
[  985.645229][   T40] audit: type=1326 audit(1760224846.270:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18868 comm="syz.3.2474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000
[  985.652026][   T40] audit: type=1326 audit(1760224846.270:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18868 comm="syz.3.2474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000
[  985.658738][   T40] audit: type=1326 audit(1760224846.270:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18868 comm="syz.3.2474" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707d579 code=0x7ffc0000
[  985.665635][   T40] audit: type=1326 audit(1760224846.270:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18868 comm="syz.3.2474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000
[  985.672392][   T40] audit: type=1326 audit(1760224846.270:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18868 comm="syz.3.2474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000
[  985.998397][T18873] pim6reg: entered allmulticast mode
[  986.230445][T18868] pim6reg: left allmulticast mode
[  987.352696][   T59] usb 9-1: USB disconnect, device number 2
[  987.962730][  T217] Bluetooth: hci4: Frame reassembly failed (-84)
[  988.386419][T18913] siw: device registration error -23
[  988.646303][T18915] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  988.649108][T18915] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  988.653064][T18915] vhci_hcd vhci_hcd.0: Device attached
[  989.111605][   T59] usb 38-1: SetAddress Request (56) to port 0
[  989.114647][   T59] usb 38-1: new SuperSpeed USB device number 56 using vhci_hcd
[  989.588851][T18916] vhci_hcd: connection reset by peer
[  989.592711][   T46] vhci_hcd: stop threads
[  989.594124][   T46] vhci_hcd: release socket
[  989.596061][   T46] vhci_hcd: disconnect device
[  989.635270][ T6938] usb 42-1: device descriptor read/8, error -110
[  989.949693][ T5944] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  990.019234][ T6938] usb usb42-port1: attempt power cycle
[  990.562224][ T6938] usb usb42-port1: unable to enumerate USB device
[  991.529874][T18933] bridge55: entered promiscuous mode
[  992.526411][T18946] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  992.529156][T18946] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  992.532736][T18946] vhci_hcd vhci_hcd.0: Device attached
[  993.238164][ T9911] usb 46-1: SetAddress Request (14) to port 0
[  993.241256][ T9911] usb 46-1: new SuperSpeed USB device number 14 using vhci_hcd
[  993.257034][T18948] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  993.287387][ T1192] vhci_hcd: stop threads
[  993.290350][ T1192] vhci_hcd: release socket
[  993.292703][ T1192] vhci_hcd: disconnect device
[  994.122591][   T59] usb 38-1: device descriptor read/8, error -110
[  994.556044][   T59] usb usb38-port1: attempt power cycle
[  996.701205][   T59] usb usb38-port1: unable to enumerate USB device
[  996.775747][T18969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2495'.
[  997.335484][T18987] sd 0:0:0:0: PR command failed: 1026
[  997.338575][T18987] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  997.341646][T18987] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  998.098222][ T9911] usb 46-1: device descriptor read/8, error -110
[  998.731462][ T9911] usb usb46-port1: attempt power cycle
[  999.286490][T19020] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  999.287904][T19034] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 0, id = 0
[  999.290282][T19020] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  999.298849][T19020] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  999.530748][ T9911] usb usb46-port1: unable to enumerate USB device
[  999.776401][T19035] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2500'.
[  999.791167][T19035] batadv0: entered allmulticast mode
[  999.905777][T19043] IPVS: stopping backup sync thread 19034 ...
[ 1000.583258][T19057] bridge0: entered promiscuous mode
[ 1000.812736][T19064] hfsplus: unable to find HFS+ superblock
[ 1001.958627][T19073] siw: device registration error -23
[ 1002.744992][T19087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2506'.
[ 1002.768236][T19082] create_pit_timer: 1 callbacks suppressed
[ 1002.768252][T19082] kvm: requested 16761 ns i8254 timer period limited to 200000 ns
[ 1003.847825][T19082] kvm: requested 75428 ns i8254 timer period limited to 200000 ns
[ 1003.857595][T19082] kvm: requested 111466 ns i8254 timer period limited to 200000 ns
[ 1003.865691][T19082] kvm: requested 9219 ns i8254 timer period limited to 200000 ns
[ 1003.942184][T19082] kvm: requested 18438 ns i8254 timer period limited to 200000 ns
[ 1003.982492][T19082] kvm: requested 81295 ns i8254 timer period limited to 200000 ns
[ 1003.999548][T19082] kvm: requested 129066 ns i8254 timer period limited to 200000 ns
[ 1004.045706][T19082] kvm: requested 74590 ns i8254 timer period limited to 200000 ns
[ 1004.053932][T19082] kvm: requested 58666 ns i8254 timer period limited to 200000 ns
[ 1004.064397][T19082] kvm: requested 80457 ns i8254 timer period limited to 200000 ns
[ 1005.139524][T19109] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2513'.
[ 1005.408846][T19115] siw: device registration error -23
[ 1006.010789][T19118] veth1_to_bridge: entered promiscuous mode
[ 1006.021345][T19117] veth1_to_bridge: left promiscuous mode
[ 1007.164374][T19137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2521'.
[ 1008.171017][T19147] bridge4: entered promiscuous mode
[ 1008.531358][T19151] lo speed is unknown, defaulting to 1000
[ 1008.670151][T19151] lo speed is unknown, defaulting to 1000
[ 1008.676221][T19151] lo speed is unknown, defaulting to 1000
[ 1010.426961][T19165] ceph: No mds server is up or the cluster is laggy
[ 1010.444353][   T59] libceph: connect (1)[c::]:6789 error -101
[ 1010.445434][   T59] libceph: mon0 (1)[c::]:6789 connect error
[ 1010.587201][T19163] /dev/nullb0: Can't open blockdev
[ 1011.145124][T19172] 9pnet_virtio: no channels available for device syz
[ 1012.811455][T19206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2533'.
[ 1014.405414][T19217] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[ 1014.407522][T19217] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1014.431943][T19220] hfsplus: unable to find HFS+ superblock
[ 1014.441093][T19217] vhci_hcd vhci_hcd.0: Device attached
[ 1014.489531][T19222] lo speed is unknown, defaulting to 1000
[ 1014.701809][T19222] lo speed is unknown, defaulting to 1000
[ 1014.704450][T19222] lo speed is unknown, defaulting to 1000
[ 1014.728558][   T59] usb 44-1: SetAddress Request (70) to port 0
[ 1014.730924][   T59] usb 44-1: new SuperSpeed USB device number 70 using vhci_hcd
[ 1014.986191][T19228] comedi: valid board names for 8255 driver are:
[ 1014.988376][T19228]  8255
[ 1014.989333][T19228] comedi: valid board names for vmk80xx driver are:
[ 1014.991619][T19228]  vmk80xx
[ 1014.992610][T19228] comedi: valid board names for usbduxsigma driver are:
[ 1014.995489][T19228]  usbduxsigma
[ 1014.996604][T19228] comedi: valid board names for usbduxfast driver are:
[ 1014.998962][T19228]  usbduxfast
[ 1015.000072][T19228] comedi: valid board names for usbdux driver are:
[ 1015.002202][T19228]  usbdux
[ 1015.004769][T19228] comedi: valid board names for ni6501 driver are:
[ 1015.007923][T19228]  ni6501
[ 1015.009182][T19228] comedi: valid board names for dt9812 driver are:
[ 1015.012015][T19228]  dt9812
[ 1015.015630][T19228] comedi: valid board names for ni_labpc_cs driver are:
[ 1015.018024][T19228]  ni_labpc_cs
[ 1015.019338][T19228] comedi: valid board names for ni_daq_700 driver are:
[ 1015.023598][T19228]  ni_daq_700
[ 1015.025492][T19228] comedi: valid board names for labpc_pci driver are:
[ 1015.027778][T19228]  labpc_pci
[ 1015.063391][T19228] comedi: valid board names for adl_pci9118 driver are:
[ 1015.088151][T19228]  pci9118dg
[ 1015.102744][T19228]  pci9118hg
[ 1015.110128][T19228]  pci9118hr
[ 1015.111231][T19228] comedi: valid board names for 8255_pci driver are:
[ 1015.113381][T19228]  8255_pci
[ 1015.114438][T19228] comedi: valid board names for s526 driver are:
[ 1015.116489][T19228]  s526
[ 1015.117568][T19228] comedi: valid board names for multiq3 driver are:
[ 1015.120917][T19228]  multiq3
[ 1015.126457][T19228] comedi: valid board names for pcmuio driver are:
[ 1015.135743][T19228]  pcmuio48
[ 1015.136952][T19228]  pcmuio96
[ 1015.138504][T19228] comedi: valid board names for pcmmio driver are:
[ 1015.140677][T19228]  pcmmio
[ 1015.141672][T19228] comedi: valid board names for pcmda12 driver are:
[ 1015.143884][T19228]  pcmda12
[ 1015.144938][T19228] comedi: valid board names for pcmad driver are:
[ 1015.147113][T19228]  pcmad12
[ 1015.148719][T19228]  pcmad16
[ 1015.149830][T19228] comedi: valid board names for ni_labpc driver are:
[ 1015.151988][T19228]  lab-pc-1200
[ 1015.153106][T19228]  lab-pc-1200ai
[ 1015.154384][T19228]  lab-pc+
[ 1015.155416][T19228] comedi: valid board names for atmio16 driver are:
[ 1015.158133][T19228]  atmio16
[ 1015.159176][T19228]  atmio16d
[ 1015.160248][T19228] comedi: valid board names for ni_at_ao driver are:
[ 1015.162365][T19228]  at-ao-6
[ 1015.163388][T19228]  at-ao-10
[ 1015.164530][T19228] comedi: valid board names for ni_at_a2150 driver are:
[ 1015.166751][T19228]  ni_at_a2150
[ 1015.168587][T19228] comedi: valid board names for adq12b driver are:
[ 1015.170710][T19228]  adq12b
[ 1015.171698][T19228] comedi: valid board names for mpc624 driver are:
[ 1015.173783][T19228]  mpc624
[ 1015.174867][T19228] comedi: valid board names for c6xdigio driver are:
[ 1015.178165][T19228]  c6xdigio
[ 1015.179417][T19228] comedi: valid board names for aio_iiro_16 driver are:
[ 1015.181853][T19228]  aio_iiro_16
[ 1015.183248][T19228] comedi: valid board names for aio_aio12_8 driver are:
[ 1015.185815][T19228]  aio_aio12_8
[ 1015.187233][T19228]  aio_ai12_8
[ 1015.188521][T19228]  aio_ao12_4
[ 1015.193118][T19228] comedi: valid board names for fl512 driver are:
[ 1015.195628][T19228]  fl512
[ 1015.198322][T19228] comedi: valid board names for dmm32at driver are:
[ 1015.200502][T19228]  dmm32at
[ 1015.201759][T19228] comedi: valid board names for dt282x driver are:
[ 1015.203977][T19228]  dt2821
[ 1015.205577][T19228]  dt2821-f
[ 1015.207327][T19228]  dt2821-g
[ 1015.208528][T19228]  dt2823
[ 1015.209555][T19228]  dt2824-pgh
[ 1015.210669][T19228]  dt2824-pgl
[ 1015.211760][T19228]  dt2825
[ 1015.212936][T19228]  dt2827
[ 1015.214025][T19228]  dt2828
[ 1015.215933][T19228]  dt2829
[ 1015.217358][T19228]  dt21-ez
[ 1015.218594][T19228]  dt23-ez
[ 1015.219725][T19228]  dt24-ez
[ 1015.220771][T19228]  dt24-ez-pgl
[ 1015.221882][T19228] comedi: valid board names for dt2817 driver are:
[ 1015.225206][T19228]  dt2817
[ 1015.226393][T19228] comedi: valid board names for dt2815 driver are:
[ 1015.228617][T19228]  dt2815
[ 1015.230023][T19228] comedi: valid board names for dt2814 driver are:
[ 1015.232072][T19228]  dt2814
[ 1015.234951][T19228] comedi: valid board names for dt2811 driver are:
[ 1015.237127][T19228]  dt2811-pgh
[ 1015.238344][T19228]  dt2811-pgl
[ 1015.239584][T19228] comedi: valid board names for dt2801 driver are:
[ 1015.241727][T19228]  dt2801
[ 1015.243243][T19228] comedi: valid board names for das6402 driver are:
[ 1015.245501][T19228]  das6402-12
[ 1015.246752][T19228]  das6402-16
[ 1015.248018][T19228] comedi: valid board names for das1800 driver are:
[ 1015.250203][T19228]  das-1701st
[ 1015.251368][T19228]  das-1701st-da
[ 1015.253449][T19228]  das-1702st
[ 1015.254692][T19228]  das-1702st-da
[ 1015.256121][T19228]  das-1702hr
[ 1015.257271][T19228]  das-1702hr-da
[ 1015.258591][T19228]  das-1701ao
[ 1015.259815][T19228]  das-1702ao
[ 1015.260958][T19228]  das-1801st
[ 1015.263356][T19228]  das-1801st-da
[ 1015.266703][T19228]  das-1802st
[ 1015.268954][T19228]  das-1802st-da
[ 1015.309358][T19228]  das-1802hr
[ 1015.361652][T19228]  das-1802hr-da
[ 1015.363982][T19228]  das-1801hc
[ 1015.365636][T19228]  das-1802hc
[ 1015.367672][T19228]  das-1801ao
[ 1015.369288][T19228]  das-1802ao
[ 1015.370842][T19228] comedi: valid board names for das800 driver are:
[ 1015.373660][T19228]  das-800
[ 1015.375154][T19228]  cio-das800
[ 1015.377041][T19228]  das-801
[ 1015.378485][T19228]  cio-das801
[ 1015.379813][T19228]  das-802
[ 1015.381022][T19228]  cio-das802
[ 1015.382583][T19228]  cio-das802/16
[ 1015.384255][T19228] comedi: valid board names for isa-das08 driver are:
[ 1015.395757][T19228]  isa-das08
[ 1015.397411][T19228]  das08-pgm
[ 1015.399024][T19228]  das08-pgh
[ 1015.400655][T19228]  das08-pgl
[ 1015.407053][T19228]  das08-aoh
[ 1015.408662][T19228]  das08-aol
[ 1015.411360][T19228]  das08-aom
[ 1015.412940][T19228]  das08/jr-ao
[ 1015.414654][T19228]  das08jr-16-ao
[ 1015.416462][T19228]  pc104-das08
[ 1015.424323][T19228]  das08jr/16
[ 1015.426323][T19228] comedi: valid board names for das16m1 driver are:
[ 1015.433723][T19228]  das16m1
[ 1015.436129][T19228] comedi: valid board names for dac02 driver are:
[ 1015.439042][T19228]  dac02
[ 1015.440452][T19228] comedi: valid board names for rti802 driver are:
[ 1015.443396][T19228]  rti802
[ 1015.444779][T19228] comedi: valid board names for rti800 driver are:
[ 1015.447671][T19228]  rti800
[ 1015.449115][T19228]  rti815
[ 1015.450584][T19228] comedi: valid board names for pcm3724 driver are:
[ 1015.453770][T19228]  pcm3724
[ 1015.455310][T19228] comedi: valid board names for pcl818 driver are:
[ 1015.458147][T19228]  pcl818l
[ 1015.459628][T19228]  pcl818h
[ 1015.461164][T19228]  pcl818hd
[ 1015.462739][T19228]  pcl818hg
[ 1015.464274][T19228]  pcl818
[ 1015.465668][T19228]  pcl718
[ 1015.467087][T19228]  pcm3718
[ 1015.468705][T19228] comedi: valid board names for pcl816 driver are:
[ 1015.471598][T19228]  pcl816
[ 1015.473255][T19228]  pcl814b
[ 1015.474988][T19228] comedi: valid board names for pcl812 driver are:
[ 1015.477860][T19228]  pcl812
[ 1015.480406][T19228]  pcl812pg
[ 1015.490917][T19228]  acl8112pg
[ 1015.492505][T19228]  acl8112dg
[ 1015.494816][T19228]  acl8112hg
[ 1015.620445][T19228]  a821pgl
[ 1015.621976][T19228]  a821pglnda
[ 1015.634202][T19228]  a821pgh
[ 1015.635509][T19228]  a822pgl
[ 1015.637817][T19228]  a822pgh
[ 1015.640042][T19228]  a823pgl
[ 1015.642325][T19228]  a823pgh
[ 1015.643811][T19228]  pcl813
[ 1015.645700][T19228]  pcl813b
[ 1015.647972][T19228]  acl8113
[ 1015.650232][T19228]  iso813
[ 1015.652534][T19228]  acl8216
[ 1015.654039][T19228]  a826pg
[ 1015.655902][T19228] comedi: valid board names for pcl730 driver are:
[ 1015.658158][T19228]  pcl730
[ 1015.659310][T19228]  iso730
[ 1015.660433][T19228]  acl7130
[ 1015.661545][T19228]  pcm3730
[ 1015.662662][T19228]  pcl725
[ 1015.663773][T19228]  p8r8dio
[ 1015.664950][T19228]  acl7225b
[ 1015.666081][T19228]  p16r16dio
[ 1015.667192][T19228]  pcl733
[ 1015.668304][T19228]  pcl734
[ 1015.669428][T19228]  opmm-1616-xt
[ 1015.671714][T19228]  pearl-mm-p
[ 1015.673454][T19228]  ir104-pbf
[ 1015.675126][T19228] comedi: valid board names for pcl726 driver are:
[ 1015.678395][T19228]  pcl726
[ 1015.680666][T19228]  pcl727
[ 1015.682253][T19228]  pcl728
[ 1015.683685][T19228]  acl6126
[ 1015.685170][T19228]  acl6128
[ 1015.686233][T19228] comedi: valid board names for pcl724 driver are:
[ 1015.688497][T19228]  pcl724
[ 1015.689598][T19228]  pcl722
[ 1015.691871][T19228]  pcl731
[ 1015.693460][T19228]  acl7122
[ 1015.695267][T19228]  acl7124
[ 1015.697520][T19228]  pet48dio
[ 1015.699778][T19228]  pcmio48
[ 1015.701204][T19228]  onyx-mm-dio
[ 1015.703211][T19228] comedi: valid board names for pcl711 driver are:
[ 1015.706858][T19228]  pcl711
[ 1015.709123][T19228]  pcl711b
[ 1015.711389][T19228]  acl8112hg
[ 1015.712965][T19228]  acl8112dg
[ 1015.714773][T19228] comedi: valid board names for amplc_pc263 driver are:
[ 1015.718223][T19228]  pc263
[ 1015.720364][T19228] comedi: valid board names for amplc_pc236 driver are:
[ 1015.723443][T19228]  pc36at
[ 1015.725728][T19228] comedi: valid board names for amplc_dio200 driver are:
[ 1015.729026][T19228]  pc212e
[ 1015.732388][T19228]  pc214e
[ 1015.733763][T19228]  pc215e
[ 1015.735759][T19228]  pc218e
[ 1015.738027][T19228]  pc272e
[ 1015.739483][T19228] comedi: valid board names for comedi_parport driver are:
[ 1015.742429][T19228]  comedi_parport
[ 1015.744121][T19228] comedi: valid board names for comedi_test driver are:
[ 1015.747999][T19228]  comedi_test
[ 1015.750239][T19228] comedi: valid board names for comedi_bond driver are:
[ 1015.754366][T19228]  comedi_bond
[ 1015.844301][T19218] vhci_hcd: connection reset by peer
[ 1015.848010][  T102] vhci_hcd: stop threads
[ 1015.849496][  T102] vhci_hcd: release socket
[ 1015.850970][  T102] vhci_hcd: disconnect device
[ 1016.806091][T19244] bridge61: entered promiscuous mode
[ 1017.104319][T19241] random: crng reseeded on system resumption
[ 1017.174068][T19241] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1018.053888][T19252] lo speed is unknown, defaulting to 1000
[ 1018.261265][T19252] lo speed is unknown, defaulting to 1000
[ 1018.271077][T19252] lo speed is unknown, defaulting to 1000
[ 1019.607755][   T59] usb 44-1: device descriptor read/8, error -110
[ 1019.949892][T19266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2545'.
[ 1020.112298][T19271] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2544'.
[ 1020.142374][   T59] usb usb44-port1: attempt power cycle
[ 1020.712813][T19278] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1020.730084][T19278] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2552'.
[ 1020.752762][   T59] usb usb44-port1: unable to enumerate USB device
[ 1020.768710][T19278] batadv1: entered allmulticast mode
[ 1023.700843][T19316] bridge5: entered promiscuous mode
[ 1023.998833][T19324] 9pnet_virtio: no channels available for device syz
[ 1024.033615][T19324] bridge62: entered promiscuous mode
[ 1024.259597][T19322] "syz.3.2554" (19322) uses obsolete ecb(arc4) skcipher
[ 1025.296518][T19338] 9pnet_virtio: no channels available for device syz
[ 1026.340188][T19345] syzkaller0: entered promiscuous mode
[ 1026.342082][T19345] syzkaller0: entered allmulticast mode
[ 1027.669028][T19353] netlink: 'syz.0.2562': attribute type 27 has an invalid length.
[ 1028.130016][T19361] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1028.818649][T19365] netlink: 'syz.4.2563': attribute type 4 has an invalid length.
[ 1028.879465][T19366] netlink: 'syz.4.2563': attribute type 4 has an invalid length.
[ 1029.767637][T19353] lo: left promiscuous mode
[ 1029.769670][T19353] lo: left allmulticast mode
[ 1029.772027][T19353] tunl0: left promiscuous mode
[ 1029.774165][T19353] tunl0: left allmulticast mode
[ 1029.777492][T19353] gre0: left promiscuous mode
[ 1029.779545][T19353] gre0: left allmulticast mode
[ 1029.783804][T19353] gretap0: left promiscuous mode
[ 1029.785947][T19353] gretap0: left allmulticast mode
[ 1029.789542][T19353] erspan0: left promiscuous mode
[ 1029.791671][T19353] erspan0: left allmulticast mode
[ 1029.797853][T19353] ip_vti0: left promiscuous mode
[ 1029.800040][T19353] ip_vti0: left allmulticast mode
[ 1029.803056][T19353] ip6_vti0: left promiscuous mode
[ 1029.805223][T19353] ip6_vti0: left allmulticast mode
[ 1029.809302][T19353] sit0: left promiscuous mode
[ 1029.811293][T19353] sit0: left allmulticast mode
[ 1029.817625][T19353] ip6tnl0: left promiscuous mode
[ 1029.819798][T19353] ip6tnl0: left allmulticast mode
[ 1029.823214][T19353] ip6gre0: left promiscuous mode
[ 1029.825988][T19353] ip6gre0: left allmulticast mode
[ 1029.829571][T19353] ip6gretap0: left promiscuous mode
[ 1029.831785][T19353] ip6gretap0: left allmulticast mode
[ 1029.835633][T19353] vcan0: left promiscuous mode
[ 1029.838106][T19353] vcan0: left allmulticast mode
[ 1029.844057][T19353] bond0: left promiscuous mode
[ 1029.846480][T19353] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[ 1029.853268][T19353] bond0: left allmulticast mode
[ 1029.855468][T19353] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[ 1029.869211][T19353] dummy0: left promiscuous mode
[ 1029.870987][T19353] dummy0: left allmulticast mode
[ 1029.875038][T19353] nlmon0: left promiscuous mode
[ 1029.878951][T19353] nlmon0: left allmulticast mode
[ 1029.891489][T19353] caif0: left promiscuous mode
[ 1029.893531][T19353] caif0: left allmulticast mode
[ 1029.920483][T19353] bridge43: left promiscuous mode
[ 1029.929741][T19353] bridge44: left promiscuous mode
[ 1029.932022][T19353] bridge45: left promiscuous mode
[ 1029.934241][T19353] bridge46: left promiscuous mode
[ 1029.936452][T19353] bridge47: left promiscuous mode
[ 1029.938337][T19353] bridge48: left promiscuous mode
[ 1029.948446][T19353] bridge49: left promiscuous mode
[ 1029.950336][T19353] bridge50: left promiscuous mode
[ 1029.952557][T19353] bridge51: left promiscuous mode
[ 1029.954788][T19353] bridge52: left promiscuous mode
[ 1029.956788][T19353] bridge53: left promiscuous mode
[ 1029.967119][T19353] bridge54: left promiscuous mode
[ 1029.969810][T19353] bridge55: left promiscuous mode
[ 1030.006293][T19356] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1030.011088][T19356] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1030.064391][   T59] lo speed is unknown, defaulting to 1000
[ 1030.066513][   T59] syz2: Port: 1 Link ACTIVE
[ 1030.085410][T19371] veth1_to_bridge: entered promiscuous mode
[ 1030.119560][T19370] veth1_to_bridge: left promiscuous mode
[ 1030.142634][T19374] veth1_to_bridge: entered promiscuous mode
[ 1030.153625][T19373] veth1_to_bridge: left promiscuous mode
[ 1030.786585][T19386] random: crng reseeded on system resumption
[ 1030.854021][T19386] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1031.164777][T19389] lo speed is unknown, defaulting to 1000
[ 1031.300931][T19389] lo speed is unknown, defaulting to 1000
[ 1031.330159][T19389] lo speed is unknown, defaulting to 1000
[ 1031.742611][T19402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2571'.
[ 1031.745418][T19402] bridge_slave_1: left allmulticast mode
[ 1031.747450][T19402] bridge_slave_1: left promiscuous mode
[ 1031.749946][T19402] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1031.756842][T19402] bridge_slave_0: left allmulticast mode
[ 1031.758712][T19402] bridge_slave_0: left promiscuous mode
[ 1031.761333][T19402] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1032.459436][T19411] bridge0: entered promiscuous mode
[ 1032.737584][T19416] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[ 1032.740352][T19416] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1032.744559][T19416] vhci_hcd vhci_hcd.0: Device attached
[ 1033.073552][T19422] syzkaller0: entered promiscuous mode
[ 1033.075559][T19422] syzkaller0: entered allmulticast mode
[ 1033.565751][T19417] vhci_hcd: connection closed
[ 1033.566642][T18953] vhci_hcd: stop threads
[ 1033.573352][T18953] vhci_hcd: release socket
[ 1033.577895][T18953] vhci_hcd: disconnect device
[ 1033.579046][   T59] usb 38-1: SetAddress Request (60) to port 0
[ 1033.581981][   T59] usb 38-1: new SuperSpeed USB device number 60 using vhci_hcd
[ 1033.598667][   T59] usb 38-1: enqueue for inactive port 0
[ 1033.881027][T19427] kvm: requested 16761 ns i8254 timer period limited to 200000 ns
[ 1033.892871][T19427] kvm: requested 75428 ns i8254 timer period limited to 200000 ns
[ 1033.897904][T19427] kvm: requested 111466 ns i8254 timer period limited to 200000 ns
[ 1033.902630][T19427] kvm: requested 9219 ns i8254 timer period limited to 200000 ns
[ 1033.993863][T19427] kvm: requested 18438 ns i8254 timer period limited to 200000 ns
[ 1034.000744][   T59] usb usb38-port1: attempt power cycle
[ 1034.010335][T19427] kvm: requested 81295 ns i8254 timer period limited to 200000 ns
[ 1034.035920][T19427] kvm: requested 129066 ns i8254 timer period limited to 200000 ns
[ 1034.069340][T19427] kvm: requested 74590 ns i8254 timer period limited to 200000 ns
[ 1034.076329][T19427] kvm: requested 58666 ns i8254 timer period limited to 200000 ns
[ 1034.082387][T19427] kvm: requested 80457 ns i8254 timer period limited to 200000 ns
[ 1034.592590][   T59] usb usb38-port1: unable to enumerate USB device
[ 1035.840259][ T1417] ieee802154 phy0 wpan0: encryption failed: -22
[ 1037.215046][T19472] ubi31: detaching mtd0
[ 1037.240621][T19472] ubi31: mtd0 is detached
[ 1038.011113][T19476] sd 0:0:0:0: PR command failed: 1026
[ 1038.013345][T19476] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[ 1038.015817][T19476] sd 0:0:0:0: Add. Sense: Invalid command operation code
[ 1038.568853][T19480] lo speed is unknown, defaulting to 1000
[ 1039.198624][T19480] lo speed is unknown, defaulting to 1000
[ 1039.220642][T19480] lo speed is unknown, defaulting to 1000
[ 1039.688401][T19493] hfsplus: unable to find HFS+ superblock
[ 1040.816689][T19515] 9pnet_fd: Insufficient options for proto=fd
[ 1042.757068][T19540] netlink: 'syz.0.2594': attribute type 27 has an invalid length.
[ 1043.192599][ T1326] lo speed is unknown, defaulting to 1000
[ 1043.194927][ T1326] syz2: Port: 1 Link DOWN
[ 1043.251648][T19540] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1043.258054][T19540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1043.265846][   T24] lo speed is unknown, defaulting to 1000
[ 1043.268193][   T24] syz2: Port: 1 Link ACTIVE
[ 1043.338635][T19540] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1046.604761][   T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 1047.376070][T19575] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1048.899868][T19622] binder: 19613:19622 ioctl 0 80000040 returned -22
[ 1049.612145][T19627] 9pnet_virtio: no channels available for device syz
[ 1049.847305][T19631] hfsplus: unable to find HFS+ superblock
[ 1049.995757][T19636] lo speed is unknown, defaulting to 1000
[ 1050.210261][T19636] lo speed is unknown, defaulting to 1000
[ 1050.212731][T19636] lo speed is unknown, defaulting to 1000
[ 1056.986707][T19648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2611'.
[ 1057.064234][T19648] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2611'.
[ 1057.187364][T19648] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1057.197288][T19648] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1057.293190][T19648] bridge1: left promiscuous mode
[ 1057.294974][T19648] bridge2: left promiscuous mode
[ 1057.296595][T19648] bridge3: left promiscuous mode
[ 1057.299357][T19648] bridge4: left promiscuous mode
[ 1057.302669][T19648] bridge5: left promiscuous mode
[ 1057.306710][T19648] bridge0: left promiscuous mode
[ 1057.327749][   T46] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1057.333863][   T46] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1057.341050][   T46] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1057.344512][   T46] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1057.682994][T19663] hfsplus: unable to find HFS+ superblock
[ 1058.254415][T19671] "syz.2.2615" (19671) uses obsolete ecb(arc4) skcipher
[ 1058.264130][T19671] 9pnet_virtio: no channels available for device syz
[ 1058.304761][T19671] bridge54: entered promiscuous mode
[ 1059.499309][T19685] hfsplus: unable to find HFS+ superblock
[ 1059.918083][T19687] lo speed is unknown, defaulting to 1000
[ 1060.274654][T19687] lo speed is unknown, defaulting to 1000
[ 1060.277343][T19687] lo speed is unknown, defaulting to 1000
[ 1060.800793][T19692] binder: 19690:19692 ioctl 0 80000040 returned -22
[ 1060.813702][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1060.816840][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1061.672724][T19708] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[ 1061.674975][T19708] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1061.677930][T19708] vhci_hcd vhci_hcd.0: Device attached
[ 1061.721922][T19706] netlink: 'syz.2.2623': attribute type 27 has an invalid length.
[ 1061.887533][T19706] bridge41: left promiscuous mode
[ 1061.891301][T19706] bridge42: left promiscuous mode
[ 1061.912612][T19706] bridge43: left promiscuous mode
[ 1061.914462][T19706] bridge44: left promiscuous mode
[ 1061.916384][T19706] bridge45: left promiscuous mode
[ 1061.918266][T19706] bridge46: left promiscuous mode
[ 1061.920328][T19706] bridge47: left promiscuous mode
[ 1061.922286][T19706] bridge48: left promiscuous mode
[ 1061.924228][T19706] bridge49: left promiscuous mode
[ 1061.926075][T19706] bridge50: left promiscuous mode
[ 1061.927836][T19706] bridge51: left promiscuous mode
[ 1061.962676][T19706] bridge52: left promiscuous mode
[ 1061.964780][T19706] bridge53: left promiscuous mode
[ 1061.967699][T19706] bridge0: left promiscuous mode
[ 1061.971234][T19706] bridge54: left promiscuous mode
[ 1061.973878][ T9911] usb 38-1: SetAddress Request (64) to port 0
[ 1061.976113][ T9911] usb 38-1: new SuperSpeed USB device number 64 using vhci_hcd
[ 1062.013988][T19712] 8021q: adding VLAN 0 to HW filter on device 
[ 1062.030410][T19712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1062.036737][   T59] lo speed is unknown, defaulting to 1000
[ 1062.038666][ T6938] syz1: Port: 1 Link ACTIVE
[ 1062.040226][   T59] syz0: Port: 1 Link ACTIVE
[ 1062.243079][T19709] vhci_hcd: connection reset by peer
[ 1062.246070][   T46] vhci_hcd: stop threads
[ 1062.247863][   T46] vhci_hcd: release socket
[ 1062.249872][   T46] vhci_hcd: disconnect device
[ 1062.542260][T19736] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1063.647118][T19744] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2628'.
[ 1063.659386][T19744] rdma_rxe: rxe_newlink: failed to add veth1_vlan
[ 1063.676289][T19744] SET target dimension over the limit!
[ 1063.688845][T19744] bridge0: port 1(erspan0) entered blocking state
[ 1063.693386][T19744] bridge0: port 1(erspan0) entered disabled state
[ 1063.696742][T19744] erspan0: entered allmulticast mode
[ 1063.701825][T19744] erspan0: entered promiscuous mode
[ 1063.720906][T19744] erspan0: left allmulticast mode
[ 1063.723291][T19744] erspan0: left promiscuous mode
[ 1063.728418][T19744] bridge0: port 1(erspan0) entered disabled state
[ 1063.904945][T19751] "syz.0.2627" (19751) uses obsolete ecb(arc4) skcipher
[ 1063.918043][T19751] 9pnet_virtio: no channels available for device syz
[ 1063.958686][T19751] bridge56: entered promiscuous mode
[ 1065.997629][T19775] bridge63: entered promiscuous mode
[ 1066.357332][T19767] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1066.791061][ T9911] usb 38-1: device descriptor read/8, error -110
[ 1067.163336][ T9911] usb usb38-port1: attempt power cycle
[ 1067.696460][ T9911] usb usb38-port1: unable to enumerate USB device
[ 1067.705438][T17955] Bluetooth: hci3: command 0x0419 tx timeout
[ 1068.015350][T19781] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1068.170681][T19786] random: crng reseeded on system resumption
[ 1069.651862][T19816] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1069.654809][T19816] overlayfs: failed to set xattr on upper
[ 1069.657196][T19816] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1069.659966][T19816] overlayfs: ...falling back to index=off.
[ 1069.661865][T19816] overlayfs: ...falling back to uuid=null.
[ 1069.663761][T19816] overlayfs: maximum fs stacking depth exceeded
[ 1069.821330][T19819] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[ 1069.824008][T19819] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1069.826906][T19819] vhci_hcd vhci_hcd.0: Device attached
[ 1070.259941][ T9911] usb 46-1: SetAddress Request (18) to port 0
[ 1070.265094][ T9911] usb 46-1: new SuperSpeed USB device number 18 using vhci_hcd
[ 1070.486953][T19820] vhci_hcd: connection reset by peer
[ 1070.489407][  T102] vhci_hcd: stop threads
[ 1070.490783][  T102] vhci_hcd: release socket
[ 1070.492228][  T102] vhci_hcd: disconnect device
[ 1071.214917][T19838] netlink: 'syz.2.2646': attribute type 27 has an invalid length.
[ 1071.365545][   T24] lo speed is unknown, defaulting to 1000
[ 1071.367597][   T24] syz0: Port: 1 Link DOWN
[ 1071.389481][T19839] 8021q: adding VLAN 0 to HW filter on device 
[ 1071.459392][T19839] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1071.468415][   T24] lo speed is unknown, defaulting to 1000
[ 1071.470349][   T24] syz0: Port: 1 Link ACTIVE
[ 1071.561601][T19843] "syz.4.2647" (19843) uses obsolete ecb(arc4) skcipher
[ 1071.568651][T19843] 9pnet_virtio: no channels available for device syz
[ 1071.589720][T19843] bridge6: entered promiscuous mode
[ 1072.760724][T19854] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1074.024589][T19871] hfsplus: unable to find HFS+ superblock
[ 1074.390097][T19868] hfsplus: unable to find HFS+ superblock
[ 1074.493217][T19881] netlink: 'syz.4.2654': attribute type 27 has an invalid length.
[ 1074.510764][T19881] bridge6: left promiscuous mode
[ 1074.536890][T19881] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1074.540909][T19881] 8021q: adding VLAN 0 to HW filter on device team0
[ 1074.548230][T19881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1075.101044][ T9911] usb 46-1: device descriptor read/8, error -110
[ 1075.130407][T19889] veth1_to_bridge: entered promiscuous mode
[ 1075.139410][T19888] veth1_to_bridge: left promiscuous mode
[ 1075.608111][ T9911] usb usb46-port1: attempt power cycle
[ 1076.733133][T19917] lo speed is unknown, defaulting to 1000
[ 1077.365287][T19913] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1077.372658][T19924] hfsplus: unable to find HFS+ superblock
[ 1077.445454][ T5949] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 1077.497419][T19917] lo speed is unknown, defaulting to 1000
[ 1077.591671][T19917] lo speed is unknown, defaulting to 1000
[ 1077.789996][ T9911] usb usb46-port1: unable to enumerate USB device
[ 1078.461602][T19942] veth1_to_bridge: entered promiscuous mode
[ 1078.553415][T19941] veth1_to_bridge: left promiscuous mode
[ 1080.324634][T19975] binder: 19966:19975 ioctl 0 80000040 returned -22
[ 1080.934282][T19977] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1080.937985][T19977] block device autoloading is deprecated and will be removed.
[ 1083.202009][T20006] can0: slcan on ttyS3.
[ 1083.283838][T20011] syzkaller0: entered promiscuous mode
[ 1083.286326][T20011] syzkaller0: entered allmulticast mode
[ 1083.306851][T20006] can0 (unregistered): slcan off ttyS3.
[ 1084.616147][T20026] create_pit_timer: 6 callbacks suppressed
[ 1084.616169][T20026] kvm: requested 16761 ns i8254 timer period limited to 200000 ns
[ 1084.669191][T20026] kvm: requested 75428 ns i8254 timer period limited to 200000 ns
[ 1084.681384][T20026] kvm: requested 111466 ns i8254 timer period limited to 200000 ns
[ 1084.752920][T20026] kvm: requested 9219 ns i8254 timer period limited to 200000 ns
[ 1084.784755][T20026] kvm: requested 18438 ns i8254 timer period limited to 200000 ns
[ 1084.791933][T20026] kvm: requested 81295 ns i8254 timer period limited to 200000 ns
[ 1084.801216][T20026] kvm: requested 129066 ns i8254 timer period limited to 200000 ns
[ 1084.841109][T20026] kvm: requested 74590 ns i8254 timer period limited to 200000 ns
[ 1084.847922][T20026] kvm: requested 58666 ns i8254 timer period limited to 200000 ns
[ 1084.854374][T20026] kvm: requested 80457 ns i8254 timer period limited to 200000 ns
[ 1085.434240][T20025] lo speed is unknown, defaulting to 1000
[ 1085.555206][T20025] lo speed is unknown, defaulting to 1000
[ 1085.559168][T20025] lo speed is unknown, defaulting to 1000
[ 1085.610749][T20032] random: crng reseeded on system resumption
[ 1086.702200][T20041] fuse: Bad value for 'fd'
[ 1086.861368][T20048] syzkaller0: entered promiscuous mode
[ 1086.863129][T20048] syzkaller0: entered allmulticast mode
[ 1086.943856][T20052] siw: device registration error -23
[ 1087.327460][T20055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2689'.
[ 1089.072532][T20063] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1090.772414][T20077] syzkaller0: entered promiscuous mode
[ 1090.774748][T20077] syzkaller0: entered allmulticast mode
[ 1093.053611][T20110] random: crng reseeded on system resumption
[ 1094.487761][ T1417] ieee802154 phy0 wpan0: encryption failed: -22
[ 1094.672916][T20122] syzkaller0: entered promiscuous mode
[ 1094.675260][T20122] syzkaller0: entered allmulticast mode
[ 1096.678395][T20127] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1096.699316][T20147] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1098.623946][T20157] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1098.664125][T17955] Bluetooth: hci3: command 0x0419 tx timeout
[ 1099.201098][T20169] random: crng reseeded on system resumption
[ 1101.745523][T20196] syzkaller0: entered promiscuous mode
[ 1101.747312][T20196] syzkaller0: entered allmulticast mode
[ 1105.283010][   T40] kauditd_printk_skb: 20 callbacks suppressed
[ 1105.283020][   T40] audit: type=1326 audit(1760224987.856:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20223 comm="syz.0.2722" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f26579 code=0x0
[ 1105.303588][T20210] hfsplus: unable to find HFS+ superblock
[ 1105.394945][T20229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2721'.
[ 1105.398359][T20229] netlink: 'syz.4.2721': attribute type 5 has an invalid length.
[ 1105.401202][T20229] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2721'.
[ 1105.425373][T20229] geneve2: entered promiscuous mode
[ 1105.427056][T20229] geneve2: entered allmulticast mode
[ 1105.436109][T18953] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[ 1105.439067][T18953] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[ 1105.442097][T18953] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[ 1105.444896][T18953] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[ 1105.479958][T20231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2723'.
[ 1105.483736][T20231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2723'.
[ 1105.781199][T20237] lo speed is unknown, defaulting to 1000
[ 1105.810052][T20239] netlink: 360 bytes leftover after parsing attributes in process `syz.2.2724'.
[ 1106.109005][T20237] lo speed is unknown, defaulting to 1000
[ 1106.115317][T20237] lo speed is unknown, defaulting to 1000
[ 1106.378760][T20248] siw: device registration error -23
[ 1106.460941][T20246] vivid-001: disconnect
[ 1106.464376][T20246] vivid-001: reconnect
[ 1106.586632][T20249] random: crng reseeded on system resumption
[ 1106.832984][T20138] udevd[20138]: symlink '../../sr0' '/dev/disk/by-diskseq/88.tmp-b11:0' failed: Read-only file system
[ 1107.033380][T20262] ieee802154 phy0 wpan0: encryption failed: -22
[ 1108.524517][T20280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2732'.
[ 1109.202477][T20286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2737'.
[ 1109.285362][T20287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2733'.
[ 1109.288321][T20287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2733'.
[ 1109.547182][ T5944] Bluetooth: hci3: command 0x0419 tx timeout
[ 1110.123536][T20299] create_pit_timer: 6 callbacks suppressed
[ 1110.123551][T20299] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1111.139037][T20317] lo speed is unknown, defaulting to 1000
[ 1111.310084][T20317] lo speed is unknown, defaulting to 1000
[ 1111.316066][T20317] lo speed is unknown, defaulting to 1000
[ 1113.016561][T20342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2745'.
[ 1113.205080][ T5944] Bluetooth: hci4: command 0x1003 tx timeout
[ 1113.205733][T17955] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1113.760869][T20353] veth1_to_bridge: entered promiscuous mode
[ 1113.824200][T20352] veth1_to_bridge: left promiscuous mode
[ 1114.239298][T20359] ceph: No mds server is up or the cluster is laggy
[ 1114.301397][T20362] vxfs: WRONG superblock magic 00000000 at 1
[ 1114.306533][T20362] vxfs: WRONG superblock magic 00000000 at 8
[ 1114.311074][T20362] vxfs: can't find superblock.
[ 1114.632675][ T9911] libceph: connect (1)[c::]:6789 error -101
[ 1114.637672][ T9911] libceph: mon0 (1)[c::]:6789 connect error
[ 1115.634663][T20369] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1115.914321][T20380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2751'.
[ 1115.929004][T20380] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1115.929004][T20380]    program syz.3.2751 not setting count and/or reply_len properly
[ 1116.766391][T20392] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1117.547099][T20389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2757'.
[ 1117.548281][T17955] Bluetooth: hci3: command 0x0419 tx timeout
[ 1118.297992][T20413] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1118.998840][T20426] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[ 1119.001574][T20426] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1119.005332][T20426] vhci_hcd vhci_hcd.0: Device attached
[ 1119.301318][ T9911] usb 46-1: SetAddress Request (22) to port 0
[ 1119.304389][ T9911] usb 46-1: new SuperSpeed USB device number 22 using vhci_hcd
[ 1120.190640][T20427] vhci_hcd: connection reset by peer
[ 1120.192625][   T46] vhci_hcd: stop threads
[ 1120.194451][   T46] vhci_hcd: release socket
[ 1120.196777][   T46] vhci_hcd: disconnect device
[ 1122.242691][T20456] veth1_to_bridge: entered promiscuous mode
[ 1122.316741][T20455] veth1_to_bridge: left promiscuous mode
[ 1123.161494][   T40] audit: type=1326 audit(1760225014.628:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20464 comm="syz.4.2773" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f95579 code=0x0
[ 1123.350667][T20468] lo speed is unknown, defaulting to 1000
[ 1123.422819][T20468] lo speed is unknown, defaulting to 1000
[ 1123.425818][T20468] lo speed is unknown, defaulting to 1000
[ 1123.780851][T20474] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1123.971637][T20483] random: crng reseeded on system resumption
[ 1124.264359][ T9911] usb 46-1: device descriptor read/8, error -110
[ 1124.990565][ T9911] usb usb46-port1: attempt power cycle
[ 1125.594144][ T9911] usb usb46-port1: unable to enumerate USB device
[ 1125.874428][ T1120] sr 2:0:0:0: [sr0] tag#31 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1125.878825][ T1120] sr 2:0:0:0: [sr0] tag#31 Sense Key : Illegal Request [current] 
[ 1125.882178][ T1120] sr 2:0:0:0: [sr0] tag#31 Add. Sense: Invalid command operation code
[ 1125.885730][ T1120] sr 2:0:0:0: [sr0] tag#31 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00
[ 1125.888874][ T1120] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x208800 phys_seg 1 prio class 2
[ 1128.524213][T15018] bond0 (unregistering): Released all slaves
[ 1128.541280][T20518] veth1_to_bridge: entered promiscuous mode
[ 1128.543918][T20518] veth1_to_bridge: left promiscuous mode
[ 1128.577466][T20138] udevd[20138]: symlink '../../loop6' '/dev/disk/by-diskseq/85.tmp-b7:6' failed: Read-only file system
[ 1128.665640][ T5949] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 1128.703617][T15018] tipc: Left network mode
[ 1128.719422][T15018] IPVS: stopping master sync thread 8444 ...
[ 1130.006497][T20549] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1130.428164][T15018] hsr_slave_0: left promiscuous mode
[ 1130.431379][T15018] hsr_slave_1: left promiscuous mode
[ 1130.781984][T20580] futex_wake_op: syz.2.2790 tries to shift op by 144; fix this program
[ 1130.881444][T20578] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1131.953995][ T5944] Bluetooth: hci3: command 0x0419 tx timeout
[ 1132.126102][T20593] veth1_to_bridge: entered promiscuous mode
[ 1132.128121][T20593] veth1_to_bridge: left promiscuous mode
[ 1132.139317][T20566] lo speed is unknown, defaulting to 1000
[ 1132.299630][T20566] lo speed is unknown, defaulting to 1000
[ 1132.303044][T20566] lo speed is unknown, defaulting to 1000
[ 1133.065737][T15018] IPVS: stop unused estimator thread 0...
[ 1133.941884][T17955] Bluetooth: hci3: command 0x0419 tx timeout
[ 1134.328479][T20654] vxfs: WRONG superblock magic 00000000 at 1
[ 1134.332047][T20654] vxfs: WRONG superblock magic 00000000 at 8
[ 1134.334863][T20654] vxfs: can't find superblock.
[ 1134.532166][T20653] ceph: No mds server is up or the cluster is laggy
[ 1134.765604][T20648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2798'.
[ 1135.390334][ T9911] libceph: connect (1)[c::]:6789 error -101
[ 1135.392676][ T9911] libceph: mon0 (1)[c::]:6789 connect error
[ 1135.775862][T20662] ieee802154 phy0 wpan0: encryption failed: -22
[ 1135.953491][T20669] Invalid logical block size (53355)
[ 1137.162118][ T5949] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 1137.507889][T20670] syzkaller0: entered promiscuous mode
[ 1137.509666][T20670] syzkaller0: entered allmulticast mode
[ 1137.654419][   T40] audit: type=1804 audit(1760225045.847:1167): pid=20688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2801" name="/newroot/144/file0" dev="tmpfs" ino=823 res=1 errno=0
[ 1137.701998][T20672] /dev/sr0: Can't open blockdev
[ 1140.215083][T20718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2813'.
[ 1140.218901][T20718] netlink: 'syz.2.2813': attribute type 5 has an invalid length.
[ 1140.229351][T20718] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2813'.
[ 1140.428780][T20718] geneve3: entered promiscuous mode
[ 1140.450762][T20718] geneve3: entered allmulticast mode
[ 1140.476791][T19457] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[ 1140.479636][T19457] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[ 1140.482186][T19457] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[ 1140.484830][T19457] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[ 1141.553097][ T5949] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 1142.270581][T20763] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1142.361524][T20768] lo speed is unknown, defaulting to 1000
[ 1142.563071][T20768] lo speed is unknown, defaulting to 1000
[ 1142.565932][T20768] lo speed is unknown, defaulting to 1000
[ 1142.805615][T20766] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1144.229980][T17955] Bluetooth: hci3: command 0x0419 tx timeout
[ 1150.656222][T20825] overlayfs: workdir and upperdir must be separate subtrees
[ 1150.899108][T20828] syzkaller0: entered promiscuous mode
[ 1150.901395][T20828] syzkaller0: entered allmulticast mode
[ 1154.205042][ T1417] ieee802154 phy0 wpan0: encryption failed: -22
[ 1156.226193][T20858] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1156.518587][ T5949] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 1156.566294][T20859] lo speed is unknown, defaulting to 1000
[ 1156.659473][T20859] lo speed is unknown, defaulting to 1000
[ 1156.662352][T20859] lo speed is unknown, defaulting to 1000
[ 1157.252774][T20865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2831'.
[ 1157.255670][T20865] netlink: 'syz.3.2831': attribute type 5 has an invalid length.
[ 1157.257970][T20865] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2831'.
[ 1157.273750][T20865] geneve2: entered promiscuous mode
[ 1157.275294][T20865] geneve2: entered allmulticast mode
[ 1157.278601][T19457] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[ 1157.284996][T19457] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[ 1157.288302][T19457] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[ 1157.292006][T19457] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[ 1157.694654][T20873] syzkaller0: entered promiscuous mode
[ 1157.696470][T20873] syzkaller0: entered allmulticast mode
[ 1158.391214][T20841] udevd[20841]: symlink '../../loop6' '/dev/disk/by-diskseq/85.tmp-b7:6' failed: Read-only file system
[ 1158.590342][T20882] ceph: No mds server is up or the cluster is laggy
[ 1158.596196][ T9911] libceph: connect (1)[c::]:6789 error -101
[ 1158.598244][ T9911] libceph: mon0 (1)[c::]:6789 connect error
[ 1158.606118][T20881] vxfs: WRONG superblock magic 00000000 at 1
[ 1158.608195][T20881] vxfs: WRONG superblock magic 00000000 at 8
[ 1158.610104][T20881] vxfs: can't find superblock.
[ 1159.795155][T20903] serio: Serial port ptm0
[ 1161.728496][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1161.860954][T20925] lo speed is unknown, defaulting to 1000
[ 1162.719766][T20925] lo speed is unknown, defaulting to 1000
[ 1162.727311][T20925] lo speed is unknown, defaulting to 1000
[ 1163.252583][T20924] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1164.075774][T20933] ptrace attach of ""[20930] was attempted by "/syz-executor exec"[20933]
[ 1164.787061][T20933] netlink: 'syz.3.2844': attribute type 1 has an invalid length.
[ 1164.789921][T20933] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2844'.
[ 1165.228088][T20949] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1166.019387][T20961] virtio-fs: tag <c:::> not found
[ 1166.826937][T20963] syzkaller0: entered promiscuous mode
[ 1166.829012][T20963] syzkaller0: entered allmulticast mode
[ 1166.983424][T20973] ubi31: attaching mtd0
[ 1167.019895][T20973] ubi31: scanning is finished
[ 1167.670849][T20973] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 1167.680530][T20973] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 1167.718269][T20973] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 1167.725919][T20973] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[ 1167.734088][T20973] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 1167.740817][T20973] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 1167.749297][T20973] ubi31: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1462342510
[ 1167.759054][T20973] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 1167.778309][T20985] ubi31: background thread "ubi_bgt31d" started, PID 20985
[ 1171.033732][T21016] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[ 1171.036685][T21016] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1171.052046][T21016] vhci_hcd vhci_hcd.0: Device attached
[ 1171.079973][T20977] lo speed is unknown, defaulting to 1000
[ 1171.311622][ T9911] usb 38-1: SetAddress Request (68) to port 0
[ 1171.314521][ T9911] usb 38-1: new SuperSpeed USB device number 68 using vhci_hcd
[ 1171.722481][T20977] lo speed is unknown, defaulting to 1000
[ 1171.728910][T20977] lo speed is unknown, defaulting to 1000
[ 1171.992700][T21017] vhci_hcd: connection reset by peer
[ 1171.997469][   T46] vhci_hcd: stop threads
[ 1172.000039][   T46] vhci_hcd: release socket
[ 1172.004236][   T46] vhci_hcd: disconnect device
[ 1173.077294][T21035] syzkaller0: entered promiscuous mode
[ 1173.079691][T21035] syzkaller0: entered allmulticast mode
[ 1173.736183][T21044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2869'.
[ 1174.151394][T21051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2870'.
[ 1176.486155][ T9911] usb 38-1: device descriptor read/8, error -110
[ 1176.550323][T21061] lo speed is unknown, defaulting to 1000
[ 1176.627621][T21067] lo speed is unknown, defaulting to 1000
[ 1176.627636][T21061] lo speed is unknown, defaulting to 1000
[ 1176.632008][T21061] lo speed is unknown, defaulting to 1000
[ 1176.725241][T21067] lo speed is unknown, defaulting to 1000
[ 1176.728131][T21067] lo speed is unknown, defaulting to 1000
[ 1176.809171][T21057] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1176.998482][T21062] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1177.370187][ T9911] usb usb38-port1: attempt power cycle
[ 1177.695962][T21083] lo speed is unknown, defaulting to 1000
[ 1177.765271][T21088] veth1_to_bridge: entered promiscuous mode
[ 1177.812444][T21087] veth1_to_bridge: left promiscuous mode
[ 1177.927751][T21083] lo speed is unknown, defaulting to 1000
[ 1177.931685][ T9911] usb usb38-port1: unable to enumerate USB device
[ 1177.942243][T21083] lo speed is unknown, defaulting to 1000
[ 1178.181606][   T40] audit: type=1804 audit(1760225088.395:1168): pid=21096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2879" name="/newroot/746/bus/bus" dev="overlay" ino=4214 res=1 errno=0
[ 1178.200706][   T40] audit: type=1804 audit(1760225088.416:1169): pid=21096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2879" name="/newroot/746/bus/bus" dev="overlay" ino=4214 res=1 errno=0
[ 1178.897413][T21101] syzkaller0: entered promiscuous mode
[ 1178.899320][T21101] syzkaller0: entered allmulticast mode
[ 1180.535362][ T9911] libceph: connect (1)[c::]:6789 error -101
[ 1180.537657][ T9911] libceph: mon0 (1)[c::]:6789 connect error
[ 1180.558606][T21112] ceph: No mds server is up or the cluster is laggy
[ 1180.718342][T21116] vxfs: WRONG superblock magic 00000000 at 1
[ 1180.720846][T21116] vxfs: WRONG superblock magic 00000000 at 8
[ 1180.722880][T21116] vxfs: can't find superblock.
[ 1180.781284][ T9911] libceph: connect (1)[c::]:6789 error -101
[ 1180.783353][ T9911] libceph: mon0 (1)[c::]:6789 connect error
[ 1180.922326][ T1326] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1181.984139][T21124] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1182.260963][T21125] lo speed is unknown, defaulting to 1000
[ 1182.332546][T21125] lo speed is unknown, defaulting to 1000
[ 1182.335000][T21125] lo speed is unknown, defaulting to 1000
[ 1183.339711][T21131] input: syz1 as /devices/virtual/input/input30
[ 1183.373564][T21141] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[ 1183.375683][T21141] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1183.379158][T21141] vhci_hcd vhci_hcd.0: Device attached
[ 1183.535095][T21144] syzkaller0: entered promiscuous mode
[ 1183.537865][T21144] syzkaller0: entered allmulticast mode
[ 1183.627731][ T9911] usb 44-1: SetAddress Request (74) to port 0
[ 1183.630043][ T9911] usb 44-1: new SuperSpeed USB device number 74 using vhci_hcd
[ 1184.046019][T21142] vhci_hcd: connection reset by peer
[ 1184.048279][T19457] vhci_hcd: stop threads
[ 1184.050162][T19457] vhci_hcd: release socket
[ 1184.052090][T19457] vhci_hcd: disconnect device
[ 1184.612523][T21151] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1185.169908][T21161] ptrace attach of ""[21170] was attempted by "/syz-executor exec"[21161]
[ 1185.251256][T21173] netlink: 'syz.4.2890': attribute type 1 has an invalid length.
[ 1185.263869][T21173] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2890'.
[ 1185.897264][T21177] siw: device registration error -23
[ 1186.097453][T21178] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[ 1186.099518][T21178] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1186.177573][T21178] vhci_hcd vhci_hcd.0: Device attached
[ 1187.064826][T21179] vhci_hcd: connection closed
[ 1187.065349][   T46] vhci_hcd: stop threads
[ 1187.070840][   T46] vhci_hcd: release socket
[ 1187.072396][   T46] vhci_hcd: disconnect device
[ 1187.285690][T21185] syzkaller0: entered promiscuous mode
[ 1187.287545][T21185] syzkaller0: entered allmulticast mode
[ 1187.293133][T21165] lo speed is unknown, defaulting to 1000
[ 1187.981152][T21199] netlink: 'syz.0.2896': attribute type 21 has an invalid length.
[ 1187.983439][T21199] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2896'.
[ 1188.192182][T21201] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1188.518667][ T9911] usb 44-1: device descriptor read/8, error -110
[ 1188.949555][ T9911] usb usb44-port1: attempt power cycle
[ 1189.196254][T21165] lo speed is unknown, defaulting to 1000
[ 1189.199037][T21165] lo speed is unknown, defaulting to 1000
[ 1189.207070][T21198] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2896'.
[ 1189.226156][T21199] netlink: 'syz.0.2896': attribute type 4 has an invalid length.
[ 1189.228835][T21199] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2896'.
[ 1189.248675][T21200] batadv1: entered promiscuous mode
[ 1189.251306][T21200] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1189.504721][ T9911] usb usb44-port1: unable to enumerate USB device
[ 1189.506711][   T40] audit: type=1804 audit(1760225356.276:1170): pid=21216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2899" name="/newroot/168/bus/bus" dev="overlay" ino=975 res=1 errno=0
[ 1189.531852][   T40] audit: type=1804 audit(1760225356.297:1171): pid=21216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2899" name="/newroot/168/bus/bus" dev="overlay" ino=975 res=1 errno=0
[ 1193.523257][T21248] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2909'.
[ 1194.007257][T21255] 9pnet_virtio: no channels available for device syz
[ 1194.558746][T21265] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2912'.
[ 1194.561619][T21265] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2912'.
[ 1194.566526][T21265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2912'.
[ 1201.735149][T21309] /dev/sr0: Can't open blockdev
[ 1201.916134][T21319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2921'.
[ 1202.600617][T21327] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1202.847908][   T40] audit: type=1804 audit(1760225370.264:1172): pid=21337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2923" name="/newroot/754/bus/bus" dev="overlay" ino=4294 res=1 errno=0
[ 1202.901268][   T40] audit: type=1804 audit(1760225370.317:1173): pid=21337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2923" name="/newroot/754/bus/bus" dev="overlay" ino=4294 res=1 errno=0
[ 1203.980682][T21352] ubi: mtd0 is already attached to ubi31
[ 1204.335958][T21355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2928'.
[ 1209.908567][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1209.914946][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1210.190118][T21402] ubi: mtd0 is already attached to ubi31
[ 1211.311435][T21413] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1211.314992][T21413] overlayfs: failed to set xattr on upper
[ 1211.317484][T21413] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1211.320339][T21413] overlayfs: ...falling back to index=off.
[ 1211.323001][T21413] overlayfs: ...falling back to uuid=null.
[ 1211.631918][T21415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2943'.
[ 1211.634998][T21415] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1211.638244][T21415] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1213.656670][T21438] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1214.441924][T21444] virtio-fs: tag <c:::> not found
[ 1214.512375][T21441] lo speed is unknown, defaulting to 1000
[ 1214.614833][T21441] lo speed is unknown, defaulting to 1000
[ 1214.617409][T21441] lo speed is unknown, defaulting to 1000
[ 1215.135486][ T9911] Process accounting resumed
[ 1215.568607][T21458] syzkaller0: entered promiscuous mode
[ 1215.570880][T21458] syzkaller0: entered allmulticast mode
[ 1215.576023][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1215.578873][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1216.612260][T21472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2956'.
[ 1218.663807][T21489] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1218.735561][T21495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2959'.
[ 1218.738505][T21495] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2959'.
[ 1218.885798][T21495] geneve4: entered promiscuous mode
[ 1218.887765][T21495] geneve4: entered allmulticast mode
[ 1218.915454][T15018] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[ 1218.918177][T15018] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[ 1218.920758][T15018] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[ 1218.926103][T15018] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[ 1221.945394][T21539] syzkaller0: entered promiscuous mode
[ 1221.947999][T21539] syzkaller0: entered allmulticast mode
[ 1222.310941][T21543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2969'.
[ 1222.347827][T21544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2968'.
[ 1225.604125][T21569] input: syz1 as /devices/virtual/input/input31
[ 1225.748554][T21571] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[ 1225.750662][T21571] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1225.754095][T21571] vhci_hcd vhci_hcd.0: Device attached
[ 1226.217651][T18960] usb 42-1: SetAddress Request (54) to port 0
[ 1226.219776][T18960] usb 42-1: new SuperSpeed USB device number 54 using vhci_hcd
[ 1226.241906][T21572] vhci_hcd: connection closed
[ 1226.242145][   T62] vhci_hcd: stop threads
[ 1226.246154][   T62] vhci_hcd: release socket
[ 1226.248145][   T62] vhci_hcd: disconnect device
[ 1226.656607][T21584] siw: device registration error -23
[ 1226.980645][T21585] ubi: mtd0 is already attached to ubi31
[ 1228.334110][T21607] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1228.337185][T21607] overlayfs: failed to set xattr on upper
[ 1228.339664][T21607] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1228.342561][T21607] overlayfs: ...falling back to index=off.
[ 1228.345124][T21607] overlayfs: ...falling back to uuid=null.
[ 1228.419823][T21612] ==================================================================
[ 1228.423076][T21612] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70
[ 1228.426237][T21612] Read of size 8 at addr ffff88800b68ec30 by task syz.2.2981/21612
[ 1228.431004][T21612] 
[ 1228.431996][T21612] CPU: 3 UID: 0 PID: 21612 Comm: syz.2.2981 Not tainted syzkaller #0 PREEMPT(full) 
[ 1228.432018][T21612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 1228.432030][T21612] Call Trace:
[ 1228.432039][T21612]  <TASK>
[ 1228.432046][T21612]  dump_stack_lvl+0x116/0x1f0
[ 1228.432078][T21612]  print_report+0xcd/0x630
[ 1228.432096][T21612]  ? __virt_addr_valid+0x81/0x610
[ 1228.432114][T21612]  ? __phys_addr+0xe8/0x180
[ 1228.432133][T21612]  ? sysfs_remove_file_ns+0x63/0x70
[ 1228.432158][T21612]  kasan_report+0xe0/0x110
[ 1228.432176][T21612]  ? sysfs_remove_file_ns+0x63/0x70
[ 1228.432204][T21612]  sysfs_remove_file_ns+0x63/0x70
[ 1228.432230][T21612]  driver_remove_file+0x4a/0x60
[ 1228.432260][T21612]  bus_remove_driver+0x224/0x2c0
[ 1228.432284][T21612]  driver_unregister+0x76/0xb0
[ 1228.432312][T21612]  comedi_device_detach_locked+0x12f/0xa50
[ 1228.432341][T21612]  do_devconfig_ioctl+0x555/0x710
[ 1228.432359][T21612]  ? __mutex_lock+0x1c5/0x1060
[ 1228.432387][T21612]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[ 1228.432411][T21612]  ? kasan_save_stack+0x42/0x60
[ 1228.432437][T21612]  ? kasan_save_stack+0x33/0x60
[ 1228.432462][T21612]  ? kasan_save_track+0x14/0x30
[ 1228.432488][T21612]  ? __kasan_save_free_info+0x3b/0x60
[ 1228.432510][T21612]  ? __kasan_slab_free+0x5f/0x80
[ 1228.432537][T21612]  ? kfree+0x2b8/0x6d0
[ 1228.432558][T21612]  ? tomoyo_path_number_perm+0x470/0x580
[ 1228.432581][T21612]  ? security_file_ioctl_compat+0x9b/0x240
[ 1228.432606][T21612]  comedi_unlocked_ioctl+0x165d/0x2f00
[ 1228.432631][T21612]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1228.432661][T21612]  ? kasan_quarantine_put+0x10a/0x240
[ 1228.432687][T21612]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1228.432715][T21612]  ? find_held_lock+0x2b/0x80
[ 1228.432740][T21612]  ? tomoyo_path_number_perm+0x295/0x580
[ 1228.432763][T21612]  ? tomoyo_path_number_perm+0x18d/0x580
[ 1228.432786][T21612]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1228.432809][T21612]  comedi_compat_ioctl+0x1d0/0x990
[ 1228.432830][T21612]  ? __pfx_comedi_compat_ioctl+0x10/0x10
[ 1228.432852][T21612]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1228.432877][T21612]  ? do_vfs_ioctl+0x128/0x14f0
[ 1228.432897][T21612]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1228.432920][T21612]  ? find_held_lock+0x2b/0x80
[ 1228.432944][T21612]  ? hook_file_ioctl_common+0x145/0x410
[ 1228.432975][T21612]  ? __fget_files+0x20e/0x3c0
[ 1228.433002][T21612]  ? __pfx_comedi_compat_ioctl+0x10/0x10
[ 1228.433024][T21612]  __ia32_compat_sys_ioctl+0x242/0x370
[ 1228.433046][T21612]  __do_fast_syscall_32+0x7c/0x300
[ 1228.433075][T21612]  do_fast_syscall_32+0x32/0x80
[ 1228.433104][T21612]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1228.433128][T21612] RIP: 0023:0xf7f64579
[ 1228.433143][T21612] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 1228.433162][T21612] RSP: 002b:00000000f4ff155c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[ 1228.433180][T21612] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000040946400
[ 1228.433193][T21612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1228.433203][T21612] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1228.433214][T21612] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[ 1228.433225][T21612] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1228.433243][T21612]  </TASK>
[ 1228.433249][T21612] 
[ 1228.549581][T21612] Allocated by task 17964:
[ 1228.550995][T21612]  kasan_save_stack+0x33/0x60
[ 1228.552462][T21612]  kasan_save_track+0x14/0x30
[ 1228.553942][T21612]  __kasan_kmalloc+0xaa/0xb0
[ 1228.555398][T21612]  __kmalloc_noprof+0x32f/0x880
[ 1228.556951][T21612]  io_cache_alloc_new+0x45/0xf0
[ 1228.558444][T21612]  __io_prep_rw+0x21d/0x1090
[ 1228.559896][T21612]  io_prep_rw+0x76/0x2c0
[ 1228.561227][T21612]  io_prep_readv+0x20/0xa0
[ 1228.562629][T21612]  io_submit_sqes+0x855/0x2710
[ 1228.564130][T21612]  __do_sys_io_uring_enter+0xd69/0x1630
[ 1228.565940][T21612]  __do_fast_syscall_32+0x7c/0x300
[ 1228.567577][T21612]  do_fast_syscall_32+0x32/0x80
[ 1228.569105][T21612]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1228.571112][T21612] 
[ 1228.571892][T21612] Freed by task 17964:
[ 1228.573210][T21612]  kasan_save_stack+0x33/0x60
[ 1228.574693][T21612]  kasan_save_track+0x14/0x30
[ 1228.576177][T21612]  __kasan_save_free_info+0x3b/0x60
[ 1228.577848][T21612]  __kasan_mempool_poison_object+0xc5/0x1c0
[ 1228.579732][T21612]  io_readv_writev_cleanup+0x1fc/0x3a0
[ 1228.581496][T21612]  __io_submit_flush_completions+0xe39/0x1980
[ 1228.583398][T21612]  ctx_flush_and_put+0x9a/0x410
[ 1228.584899][T21612]  io_handle_tw_list+0x3c1/0x500
[ 1228.586473][T21612]  tctx_task_work_run+0xac/0x380
[ 1228.588175][T21612]  tctx_task_work+0x7a/0xd0
[ 1228.590072][T21612]  task_work_run+0x150/0x240
[ 1228.591999][T21612]  get_signal+0x1d0/0x26d0
[ 1228.593580][T21612]  arch_do_signal_or_restart+0x8f/0x790
[ 1228.595682][T21612]  exit_to_user_mode_loop+0x85/0x130
[ 1228.597590][T21612]  __do_fast_syscall_32+0x240/0x300
[ 1228.599233][T21612]  do_fast_syscall_32+0x32/0x80
[ 1228.601101][T21612]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1228.603168][T21612] 
[ 1228.603935][T21612] The buggy address belongs to the object at ffff88800b68ec00
[ 1228.603935][T21612]  which belongs to the cache kmalloc-256 of size 256
[ 1228.608335][T21612] The buggy address is located 48 bytes inside of
[ 1228.608335][T21612]  freed 256-byte region [ffff88800b68ec00, ffff88800b68ed00)
[ 1228.612482][T21612] 
[ 1228.613277][T21612] The buggy address belongs to the physical page:
[ 1228.615284][T21612] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88800b68e600 pfn:0xb68e
[ 1228.619075][T21612] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1228.622454][T21612] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1228.625828][T21612] page_type: f5(slab)
[ 1228.627503][T21612] raw: 00fff00000000240 ffff88801b442b40 ffffea00004b9210 ffffea00004d1090
[ 1228.631141][T21612] raw: ffff88800b68e600 000000000010000f 00000000f5000000 0000000000000000
[ 1228.634691][T21612] head: 00fff00000000240 ffff88801b442b40 ffffea00004b9210 ffffea00004d1090
[ 1228.638310][T21612] head: ffff88800b68e600 000000000010000f 00000000f5000000 0000000000000000
[ 1228.641620][T21612] head: 00fff00000000001 ffffea00002da381 00000000ffffffff 00000000ffffffff
[ 1228.644310][T21612] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 1228.647081][T21612] page dumped because: kasan: bad access detected
[ 1228.649320][T21612] page_owner tracks the page as allocated
[ 1228.651091][T21612] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 6130, tgid 6130 (syz.2.14), ts 62715339996, free_ts 62480424162
[ 1228.656949][T21612]  post_alloc_hook+0x1c0/0x230
[ 1228.658561][T21612]  get_page_from_freelist+0x10a3/0x3a30
[ 1228.660416][T21612]  __alloc_frozen_pages_noprof+0x25f/0x2470
[ 1228.662268][T21612]  new_slab+0xa5/0x360
[ 1228.663672][T21612]  ___slab_alloc+0xdc4/0x1ae0
[ 1228.665340][T21612]  __slab_alloc.constprop.0+0x63/0x110
[ 1228.667619][T21612]  __kmalloc_node_noprof+0x4dd/0x8a0
[ 1228.669831][T21612]  alloc_slab_obj_exts+0x3a/0xd0
[ 1228.671379][T21612]  __memcg_slab_post_alloc_hook+0x251/0x940
[ 1228.673206][T21612]  kmem_cache_alloc_noprof+0x550/0x6e0
[ 1228.674935][T21612]  vm_area_dup+0x27/0x8d0
[ 1228.676304][T21612]  __split_vma+0x18e/0x1070
[ 1228.678046][T21612]  vma_modify+0xee1/0x2030
[ 1228.679908][T21612]  vma_modify_flags+0x212/0x2d0
[ 1228.681619][T21612]  mprotect_fixup+0x1df/0xb40
[ 1228.683104][T21612]  do_mprotect_pkey+0x9bc/0xd40
[ 1228.684621][T21612] page last free pid 10 tgid 10 stack trace:
[ 1228.686484][T21612]  __free_frozen_pages+0x7df/0x1160
[ 1228.688178][T21612]  vfree+0x1fd/0xb50
[ 1228.689843][T21612]  delayed_vfree_work+0x56/0x70
[ 1228.691853][T21612]  process_one_work+0x9cf/0x1b70
[ 1228.693946][T21612]  worker_thread+0x6c8/0xf10
[ 1228.695589][T21612]  kthread+0x3c5/0x780
[ 1228.697066][T21612]  ret_from_fork+0x675/0x7d0
[ 1228.698722][T21612]  ret_from_fork_asm+0x1a/0x30
[ 1228.700577][T21612] 
[ 1228.701534][T21612] Memory state around the buggy address:
[ 1228.703820][T21612]  ffff88800b68eb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1228.707126][T21612]  ffff88800b68eb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1228.710418][T21612] >ffff88800b68ec00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1228.713714][T21612]                                      ^
[ 1228.716025][T21612]  ffff88800b68ec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1228.719355][T21612]  ffff88800b68ed00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1228.722200][T21612] ==================================================================
[ 1228.724933][    C3] vkms_vblank_simulate: vblank timer overrun
[ 1228.727583][T21612] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1228.730651][T21612] CPU: 3 UID: 0 PID: 21612 Comm: syz.2.2981 Not tainted syzkaller #0 PREEMPT(full) 
[ 1228.734347][T21612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 1228.738350][T21612] Call Trace:
[ 1228.739634][T21612]  <TASK>
[ 1228.740637][T21612]  dump_stack_lvl+0x3d/0x1f0
[ 1228.742119][T21612]  vpanic+0x640/0x6f0
[ 1228.743403][T21612]  panic+0xca/0xd0
[ 1228.744583][T21612]  ? __pfx_panic+0x10/0x10
[ 1228.746318][T21612]  check_panic_on_warn+0xab/0xb0
[ 1228.748560][T21612]  end_report+0x107/0x170
[ 1228.750221][T21612]  kasan_report+0xee/0x110
[ 1228.752073][T21612]  ? sysfs_remove_file_ns+0x63/0x70
[ 1228.754257][T21612]  sysfs_remove_file_ns+0x63/0x70
[ 1228.756387][T21612]  driver_remove_file+0x4a/0x60
[ 1228.758557][T21612]  bus_remove_driver+0x224/0x2c0
[ 1228.760731][T21612]  driver_unregister+0x76/0xb0
[ 1228.762826][T21612]  comedi_device_detach_locked+0x12f/0xa50
[ 1228.765325][T21612]  do_devconfig_ioctl+0x555/0x710
[ 1228.767462][T21612]  ? __mutex_lock+0x1c5/0x1060
[ 1228.769494][T21612]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[ 1228.771822][T21612]  ? kasan_save_stack+0x42/0x60
[ 1228.773925][T21612]  ? kasan_save_stack+0x33/0x60
[ 1228.775826][T21612]  ? kasan_save_track+0x14/0x30
[ 1228.777925][T21612]  ? __kasan_save_free_info+0x3b/0x60
[ 1228.779725][T21612]  ? __kasan_slab_free+0x5f/0x80
[ 1228.781280][T21612]  ? kfree+0x2b8/0x6d0
[ 1228.782587][T21612]  ? tomoyo_path_number_perm+0x470/0x580
[ 1228.784331][T21612]  ? security_file_ioctl_compat+0x9b/0x240
[ 1228.786161][T21612]  comedi_unlocked_ioctl+0x165d/0x2f00
[ 1228.787885][T21612]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1228.789807][T21612]  ? kasan_quarantine_put+0x10a/0x240
[ 1228.791445][T21612]  ? lockdep_hardirqs_on+0x7c/0x110
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1228.793033][T21612]  ? find_held_lock+0x2b/0x80
[ 1228.795463][T21612]  ? tomoyo_path_number_perm+0x295/0x580
[ 1228.798207][T21612]  ? tomoyo_path_number_perm+0x18d/0x580
[ 1228.800487][T21612]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1228.802645][T21612]  comedi_compat_ioctl+0x1d0/0x990
[ 1228.804275][T21612]  ? __pfx_comedi_compat_ioctl+0x10/0x10
[ 1228.806389][T21612]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1228.808423][T21612]  ? do_vfs_ioctl+0x128/0x14f0
[ 1228.810192][T21612]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1228.811766][T21612]  ? find_held_lock+0x2b/0x80
[ 1228.813390][T21612]  ? hook_file_ioctl_common+0x145/0x410
[ 1228.815470][T21612]  ? __fget_files+0x20e/0x3c0
[ 1228.817175][T21612]  ? __pfx_comedi_compat_ioctl+0x10/0x10
[ 1228.819062][T21612]  __ia32_compat_sys_ioctl+0x242/0x370
[ 1228.820860][T21612]  __do_fast_syscall_32+0x7c/0x300
[ 1228.822486][T21612]  do_fast_syscall_32+0x32/0x80
[ 1228.824055][T21612]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1228.826019][T21612] RIP: 0023:0xf7f64579
[ 1228.827442][T21612] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 1228.833453][T21612] RSP: 002b:00000000f4ff155c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[ 1228.836071][T21612] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000040946400
[ 1228.838617][T21612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1228.841151][T21612] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1228.843709][T21612] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[ 1228.845986][T21612] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1228.848468][T21612]  </TASK>
[ 1228.850061][T21612] Kernel Offset: disabled
[ 1228.851441][T21612] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:59:45  Registers:
info registers vcpu 0

CPU#0
RAX=ffffc90002f0f5f0 RBX=0000000000000008 RCX=ffffffff81978af9 RDX=0000000000000008
RSI=ffffc90002f0f600 RDI=ffffc90002f0f620 RBP=ffffc90002f0f600 RSP=ffffc90002f0f5a0
R8 =0000000000000001 R9 =fffff520005e1ebe R10=0000000000000003 R11=0000000000000001
R12=ffffc90002f0f620 R13=0000000000000021 R14=1ffff920005e1ee2 R15=ffffffff8a054425
RIP=ffffffff82244336 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff8880977e1000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f5db1c06 CR3=0000000027ac5000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000080000 RBX=ffff88804b5fb5c0 RCX=ffffc900041f2000 RDX=0000000000080000
RSI=ffffffff81c8b391 RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc900039ff198
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=1ffff9200073fe39 R13=0000000000000001 R14=00000000039ff308 R15=ffffc900039ff1f8
RIP=ffffffff816e35be RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff8880978e1000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000002fea8ffc CR3=0000000027ac5000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004800000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000080000000 RBX=0000000000000000 RCX=ffffc9000c803000 RDX=ffff8880279fa480
RSI=ffffffff8185035d RDI=ffff8880279fab00 RBP=ffff888054b86180 RSP=ffffc9000351f7f0
R8 =0000000000000001 R9 =0000000000000000 R10=ffffc9000351f8e8 R11=0000000000000001
R12=ffff88802821b000 R13=0000000000000000 R14=0000000000000000 R15=ffff888058e6aa00
RIP=ffffffff81bca877 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff8880979e1000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000031904ff8 CR3=0000000073463000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004800000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=000000000000002f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff852db155 RDI=ffffffff9adf1e40 RBP=ffffffff9adf1e00 RSP=ffffc900030af1f0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030383838666666
R12=0000000000000000 R13=000000000000002f R14=ffffffff9adf1e00 R15=ffffffff852db0f0
RIP=ffffffff852db17f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888097ae1000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f731fbb4 CR3=0000000073463000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000