last executing test programs:

28.178828477s ago: executing program 2 (id=209):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="0200000002"], 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10)

28.119963123s ago: executing program 2 (id=211):
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="0000b1f5fc10d58e36b2fcee040000", @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="000000000100"/28], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000500)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0, 0x82, 0x1006, 0x3, 0x5c, 0x9, 0x7c, 0xfffa, 0x1e3, r0, r0})
close_range(r3, r1, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x36)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r5 = openat$sndtimer(0xffffff9c, &(0x7f0000000280), 0x40000)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000300)={0x1, 0x1, 0x4e72, 0x2, 0x800})
mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r6, &(0x7f0000000640)='<', 0x1, 0x805, 0x0, 0x0)
ioctl$sock_TIOCINQ(r6, 0x8905, &(0x7f0000000200))

27.781091133s ago: executing program 2 (id=215):
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x23)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYRES64], 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xf9, &(0x7f0000001380)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x3, 0x1, 0x6, 0x90, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xba}, [@extension_unit={0xa, 0x24, 0x8, 0x1, 0x2d1, 0x6, "108d7e"}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x4, 0x2, [0x1, 0x6], 0x6}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x5, 0x2, [0x2, 0x7], 0x4}, @selector_unit={0x8, 0x24, 0x5, 0x3, 0x5, "18c459"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x6, 0x1, 0x0, "16"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0x65, 0xdc}, @as_header={0x7, 0x24, 0x1, 0x40, 0x1, 0x3}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x3, 0x40, 0x2, "98"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x5d, 0x4}, @as_header={0x7, 0x24, 0x1, 0x81, 0x4, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x1, 0xf, 0x6, {0x7, 0x25, 0x1, 0x1, 0x1, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xff, 0x1, 0x7, 0xd, "e2b0a44c27865252"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x18, 0x3f9de756bd761440}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0x5, 0xd, "2127d1feed03"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xa, 0x1, 0x0, 0x8, 'M'}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0xc, 0x3, {0x7, 0x25, 0x1, 0x0, 0x7, 0x8}}}}}}}]}}, 0x0)
pipe(0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0)
ftruncate(r2, 0xc17a)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120)
readv(r3, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800)
r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0)

20.671257652s ago: executing program 2 (id=215):
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x23)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYRES64], 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xf9, &(0x7f0000001380)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x3, 0x1, 0x6, 0x90, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xba}, [@extension_unit={0xa, 0x24, 0x8, 0x1, 0x2d1, 0x6, "108d7e"}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x4, 0x2, [0x1, 0x6], 0x6}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x5, 0x2, [0x2, 0x7], 0x4}, @selector_unit={0x8, 0x24, 0x5, 0x3, 0x5, "18c459"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x6, 0x1, 0x0, "16"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0x65, 0xdc}, @as_header={0x7, 0x24, 0x1, 0x40, 0x1, 0x3}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x3, 0x40, 0x2, "98"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x5d, 0x4}, @as_header={0x7, 0x24, 0x1, 0x81, 0x4, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x1, 0xf, 0x6, {0x7, 0x25, 0x1, 0x1, 0x1, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xff, 0x1, 0x7, 0xd, "e2b0a44c27865252"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x18, 0x3f9de756bd761440}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0x5, 0xd, "2127d1feed03"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xa, 0x1, 0x0, 0x8, 'M'}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0xc, 0x3, {0x7, 0x25, 0x1, 0x0, 0x7, 0x8}}}}}}}]}}, 0x0)
pipe(0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0)
ftruncate(r2, 0xc17a)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120)
readv(r3, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800)
r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0)

13.218251421s ago: executing program 2 (id=215):
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x23)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYRES64], 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xf9, &(0x7f0000001380)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x3, 0x1, 0x6, 0x90, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xba}, [@extension_unit={0xa, 0x24, 0x8, 0x1, 0x2d1, 0x6, "108d7e"}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x4, 0x2, [0x1, 0x6], 0x6}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x5, 0x2, [0x2, 0x7], 0x4}, @selector_unit={0x8, 0x24, 0x5, 0x3, 0x5, "18c459"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x6, 0x1, 0x0, "16"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0x65, 0xdc}, @as_header={0x7, 0x24, 0x1, 0x40, 0x1, 0x3}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x3, 0x40, 0x2, "98"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x5d, 0x4}, @as_header={0x7, 0x24, 0x1, 0x81, 0x4, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x1, 0xf, 0x6, {0x7, 0x25, 0x1, 0x1, 0x1, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xff, 0x1, 0x7, 0xd, "e2b0a44c27865252"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x18, 0x3f9de756bd761440}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0x5, 0xd, "2127d1feed03"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xa, 0x1, 0x0, 0x8, 'M'}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0xc, 0x3, {0x7, 0x25, 0x1, 0x0, 0x7, 0x8}}}}}}}]}}, 0x0)
pipe(0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0)
ftruncate(r2, 0xc17a)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120)
readv(r3, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800)
r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0)

5.678200166s ago: executing program 2 (id=215):
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x23)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYRES64], 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xf9, &(0x7f0000001380)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x3, 0x1, 0x6, 0x90, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xba}, [@extension_unit={0xa, 0x24, 0x8, 0x1, 0x2d1, 0x6, "108d7e"}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x4, 0x2, [0x1, 0x6], 0x6}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x5, 0x2, [0x2, 0x7], 0x4}, @selector_unit={0x8, 0x24, 0x5, 0x3, 0x5, "18c459"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x6, 0x1, 0x0, "16"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0x65, 0xdc}, @as_header={0x7, 0x24, 0x1, 0x40, 0x1, 0x3}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x3, 0x40, 0x2, "98"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x5d, 0x4}, @as_header={0x7, 0x24, 0x1, 0x81, 0x4, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x1, 0xf, 0x6, {0x7, 0x25, 0x1, 0x1, 0x1, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xff, 0x1, 0x7, 0xd, "e2b0a44c27865252"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x18, 0x3f9de756bd761440}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0x5, 0xd, "2127d1feed03"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xa, 0x1, 0x0, 0x8, 'M'}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0xc, 0x3, {0x7, 0x25, 0x1, 0x0, 0x7, 0x8}}}}}}}]}}, 0x0)
pipe(0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0)
ftruncate(r2, 0xc17a)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120)
readv(r3, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800)
r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0)

4.804937452s ago: executing program 1 (id=356):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$inet(0x2, 0x0, 0x2)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000200)=r3)
write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe800000000000"], 0xffdd)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, <r7=>r5})
ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x10, 0x0, 0x2, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0xc0086202, &(0x7f0000000080)=0x2)
setrlimit(0x7, &(0x7f00000001c0)={0x5, 0xd})
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

3.311608182s ago: executing program 1 (id=365):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0xffffffffffffff6b}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
close(0xffffffffffffffff)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4)
sendmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004004}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000004c0)=""/93)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r6)
sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400839faf562e7eb37327c500006fddd01f3b32aa40bdbd40ff398a488ff45cc9b76325777119084f06380c9f6434eac2161749de2e9bd8e7adf24a6f23969b", @ANYRES16=r7, @ANYBLOB="0100fcff7f00000000002100000009001f0070687930000000000c00050000000000000000000500200000000000"], 0x34}}, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x54, r7, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x0, 0x35, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x854}, 0x10)

3.181172503s ago: executing program 0 (id=366):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c400000010000000100f66e57d8fd9a553457369b3c2045d8d580ea3b57145b9d7896b2ff30c6068449923381861d45bbb94e6a826be2c4ed60370449c812fa39f01405c06339fa9629e2dac9ab1e2ffa3e201927e962de7b45acf88e9d1801014a4132f5d5feaf6e07a388e0a7ae4a47b2f4976cf85bdc046f78db5a37476ece8b0f097799a89de5f900c58a22ddeda29a779eee33d3245178aa2c56c23c1828eeadcc2d80ec0e276ff9677b49dbc35d19e9711f1841", @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB="300000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32], 0x4c, 0x800}}], 0x1, 0x41)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.060768921s ago: executing program 0 (id=368):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020754d0400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000180100002020642500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r1)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r2, @ANYRES16=r2], 0x1000f)

3.000247414s ago: executing program 0 (id=370):
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_io_uring_setup(0x10b, &(0x7f00000000c0)={0x0, 0x0, 0x80, 0x1, 0x2000008}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x50, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x0, 0x1})
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
pipe2$9p(0x0, 0x8800)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0xe0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x34, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r7}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x34}}, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r1], 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', r7, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r8}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
readahead(0xffffffffffffffff, 0x1000, 0x0)
io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r0, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x26c}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x34}}, 0x20)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000004400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC=0x0, @ANYRES32, @ANYRES8=r1], 0x50)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', <r10=>0x0, 0x40, 0x10, 0xfffffffc, 0x88, {{0x1d, 0x4, 0x0, 0x4, 0x74, 0x67, 0x0, 0x2, 0x4, 0x0, @broadcast, @local, {[@generic={0x83, 0xd, "7ceb3bf941ba33e12860d3"}, @cipso={0x86, 0x51, 0x1, [{0x5, 0xb, "efde36ddb80d55d0f3"}, {0x1, 0x4, "f28a"}, {0x6, 0x9, "31ead4ee3975ca"}, {0x1, 0xb, "3c9c16974da6db48eb"}, {0x4, 0x12, "0d69c92632837eafdc912c2a791d8f1c"}, {0x0, 0x11, "c0073a979c87fd327026868a2086c0"}, {0x0, 0x5, "eb7b15"}]}]}}}}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x1fffffffffffffd7, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xe, 0x0, 0x0, 0x40f00, 0x2, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

2.789322677s ago: executing program 0 (id=371):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x200000000003, 0x0, 0x111, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}}}, 0x30)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0xa0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2}, 0x10}}, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000180)={0x1f, 0x0, @any, 0x3}, 0xe)
fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, <r5=>0x0})
prlimit64(r5, 0x6, &(0x7f0000000100)={0x4, 0x3}, &(0x7f0000000140))
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, 0x0, 0x0)
close(r3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0xfffa, 0xfff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}]}, &(0x7f0000000540)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r6, 0xfffffffd, 0x9}, 0x10)

2.788898289s ago: executing program 3 (id=372):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000060000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b7030000000080008500000006000000b7080000ff000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa1000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)

2.70113698s ago: executing program 3 (id=373):
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040))
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}, {&(0x7f0000000100)="e6c220554b0921684ce26dc31c1c6947df6dd97d", 0x14}], 0x2}, 0x800)
r1 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0xc044)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$isdn_base(0x22, 0x3, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x34, 0x9, 0x0, 0x4000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x4000010)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10)

2.590932112s ago: executing program 0 (id=374):
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r0 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x400000008000f28, 0x0)
splice(r3, 0x0, r2, 0x0, 0x114, 0xe)
ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, 0x0)
sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000a0a010300000000000000000500000108000f40000000070c000b40d03a4a737ea513c5"], 0x28}, 0x1, 0x0, 0x0, 0x24000004}, 0x80)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x100}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x9)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000001c0)={0x1, r0})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r7, 0xc048aec8, &(0x7f00000005c0)={0x500})
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000c40))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r8)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'})

2.321140625s ago: executing program 1 (id=375):
ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x40086603, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan1\x00'})
unshare(0x62040200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x528}}, 0xc000)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
syz_usbip_server_init(0x1)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r5, &(0x7f0000000080)={0x1f, @none, 0x81}, 0xa)
connect$bt_rfcomm(r5, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2}, 0xa)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = userfaultfd(0x801)
mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xa031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0))
setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r7)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0xa, 0x8000, 0x40, 0x0, 0x0, 0x2004c9, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000, 0x800})
mmap$IORING_OFF_SQES(&(0x7f0000018000/0x1000)=nil, 0x1000, 0x2000004, 0x10010, 0xffffffffffffffff, 0x10000000)
syz_open_dev$tty1(0xc, 0x4, 0x1)

1.751323942s ago: executing program 3 (id=376):
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
lseek(r0, 0x7ff, 0x1)

1.751111983s ago: executing program 3 (id=377):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="0200000002"], 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10)

1.610819055s ago: executing program 0 (id=378):
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x23)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYRES64], 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xf9, &(0x7f0000001380)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x3, 0x1, 0x6, 0x90, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xba}, [@extension_unit={0xa, 0x24, 0x8, 0x1, 0x2d1, 0x6, "108d7e"}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x4, 0x2, [0x1, 0x6], 0x6}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x5, 0x2, [0x2, 0x7], 0x4}, @selector_unit={0x8, 0x24, 0x5, 0x3, 0x5, "18c459"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x6, 0x1, 0x0, "16"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0x65, 0xdc}, @as_header={0x7, 0x24, 0x1, 0x40, 0x1, 0x3}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x3, 0x40, 0x2, "98"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x5d, 0x4}, @as_header={0x7, 0x24, 0x1, 0x81, 0x4, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x1, 0xf, 0x6, {0x7, 0x25, 0x1, 0x1, 0x1, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xff, 0x1, 0x7, 0xd, "e2b0a44c27865252"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x18, 0x3f9de756bd761440}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0x5, 0xd, "2127d1feed03"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xa, 0x1, 0x0, 0x8, 'M'}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0xc, 0x3, {0x7, 0x25, 0x1, 0x0, 0x7, 0x8}}}}}}}]}}, 0x0)
pipe(0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0)
ftruncate(r2, 0xc17a)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120)
readv(r3, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800)
r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0)

1.610589203s ago: executing program 3 (id=379):
r0 = socket$packet(0x11, 0x3, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000200)={'wlan1\x00', 0x5e})
r3 = dup(r1)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0xce09, 0x20, 0x3, 0x155, 0x0, r3}, &(0x7f0000001700)=<r5=>0x0, &(0x7f0000001740)=<r6=>0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000180), 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)=@l2={0x1f, 0x7fff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000700)="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", 0xfff}, {&(0x7f00000005c0)="3c740b0c879fd9e7ec29a9ffba8a43380c311f5042aabe16775b87d3c453bb28600bc26d8570ae984c9e38dcf3a8ef41c12e46e2bf3335c1c814c395ca682c76f8dfb5939fc6612ff50287bf7f99d17e8a546cd8cd6cdc3fb49073137c50777b", 0x60}], 0x2}, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r8=>0x0})
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r9}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000004c0)={0xd, 0x3, 0x2, 0xc, 0x3, 0x0, [{0xbe3b, 0x1, 0x8, '\x00', 0x2100}, {0x2, 0x1ff, 0x100, '\x00', 0x1100}, {0xdd, 0x100000001, 0x8, '\x00', 0x1}]})
r11 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r11, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r11, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r11, 0x7af, &(0x7f0000000080)={@hyper, 0x9})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r11, 0x7b1, &(0x7f00000000c0)={0x0, 0x1})
getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000400)=""/186, &(0x7f0000000140)=0xba)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r4, 0x708, 0x41e3, 0x0, 0x0, 0x0)
io_setup(0x8, &(0x7f0000000680)=<r12=>0x0)
io_pgetevents(r12, 0x2, 0x0, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000240)={0x77359400}, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c)

1.378514375s ago: executing program 1 (id=380):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x6, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xb}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x7085a000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fanotify_init(0x4c, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0)

481.070071ms ago: executing program 1 (id=381):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000060000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b7030000000080008500000006000000b7080000ff000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa1000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)

337.088825ms ago: executing program 1 (id=382):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x3a, 0x20000000)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000000), 0x178)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$DRM_IOCTL_AUTH_MAGIC(r7, 0x40046411, &(0x7f0000000000)=0x1)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000100010000000000"])
ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)=0xc)
r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r9 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000003c0)={0x8000201c})
syz_clone(0x20304000, 0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 3 (id=383):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0xffffffffffffff6b}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
close(0xffffffffffffffff)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4)
sendmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004004}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000004c0)=""/93)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r6)
sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400839faf562e7eb37327c500006fddd01f3b32aa40bdbd40ff398a488ff45cc9b76325777119084f06380c9f6434eac2161749de2e9bd8e7adf24a6f23969b", @ANYRES16=r7, @ANYBLOB="0100fcff7f00000000002100000009001f0070687930000000000c00050000000000000000000500200000000000"], 0x34}}, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x54, r7, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x0, 0x35, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x854}, 0x10)

kernel console output (not intermixed with test programs):

man_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.147678][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.149864][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.157768][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.178667][ T5947] hsr_slave_0: entered promiscuous mode
[   47.180928][ T5947] hsr_slave_1: entered promiscuous mode
[   47.244717][ T5946] hsr_slave_0: entered promiscuous mode
[   47.247032][ T5946] hsr_slave_1: entered promiscuous mode
[   47.249111][ T5946] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.251623][ T5946] Cannot create hsr debugfs directory
[   47.256861][ T5948] hsr_slave_0: entered promiscuous mode
[   47.259038][ T5948] hsr_slave_1: entered promiscuous mode
[   47.261031][ T5948] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.263725][ T5948] Cannot create hsr debugfs directory
[   47.348521][ T5945] hsr_slave_0: entered promiscuous mode
[   47.350714][ T5945] hsr_slave_1: entered promiscuous mode
[   47.352738][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.356339][ T5945] Cannot create hsr debugfs directory
[   47.655731][ T5946] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   47.661716][ T5946] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   47.668149][ T5946] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   47.679281][ T5946] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   47.709968][ T5945] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.714899][ T5945] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.719278][ T5945] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.723684][ T5945] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.771558][ T5947] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.777256][ T5947] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.795469][ T5947] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.799936][ T5947] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.830844][ T5948] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.838276][ T5948] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.842798][ T5948] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.850192][ T5948] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.876247][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.891612][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.903461][ T5946] 8021q: adding VLAN 0 to HW filter on device team0
[   47.927276][  T220] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.929565][  T220] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.933176][  T220] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.935557][  T220] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.951847][ T5945] 8021q: adding VLAN 0 to HW filter on device team0
[   47.980196][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.982595][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.996671][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.999000][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.011947][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.015674][ T5950] Bluetooth: hci3: command tx timeout
[   48.015681][ T5955] Bluetooth: hci0: command tx timeout
[   48.015753][   T63] Bluetooth: hci1: command tx timeout
[   48.015967][ T5309] Bluetooth: hci2: command tx timeout
[   48.056735][ T5947] 8021q: adding VLAN 0 to HW filter on device team0
[   48.062199][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.076277][ T1196] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.079251][ T1196] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.088784][ T5948] 8021q: adding VLAN 0 to HW filter on device team0
[   48.093996][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.096337][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.109317][  T220] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.111562][  T220] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.127307][  T220] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.129607][  T220] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.162247][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.198473][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.201641][ T5946] veth0_vlan: entered promiscuous mode
[   48.208761][ T5946] veth1_vlan: entered promiscuous mode
[   48.230380][ T5945] veth0_vlan: entered promiscuous mode
[   48.238225][ T5945] veth1_vlan: entered promiscuous mode
[   48.240955][ T5946] veth0_macvtap: entered promiscuous mode
[   48.247195][ T5946] veth1_macvtap: entered promiscuous mode
[   48.261313][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.269593][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.278540][ T5946] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.281349][ T5946] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.284098][ T5946] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.287125][ T5946] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.297547][ T5945] veth0_macvtap: entered promiscuous mode
[   48.302134][ T5945] veth1_macvtap: entered promiscuous mode
[   48.316005][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.325931][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.331169][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.338056][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.347285][ T5945] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.350077][ T5945] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.352885][ T5945] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.357000][ T5945] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.378926][  T220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.381445][  T220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.399287][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.402113][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.419772][ T5948] veth0_vlan: entered promiscuous mode
[   48.431127][ T5947] veth0_vlan: entered promiscuous mode
[   48.438736][ T5946] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.439489][ T5947] veth1_vlan: entered promiscuous mode
[   48.447821][  T185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.450290][  T185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.452885][ T5948] veth1_vlan: entered promiscuous mode
[   48.478667][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.481864][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.498082][ T5947] veth0_macvtap: entered promiscuous mode
[   48.503005][ T5947] veth1_macvtap: entered promiscuous mode
[   48.507045][ T5948] veth0_macvtap: entered promiscuous mode
[   48.518342][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.521209][ T5948] veth1_macvtap: entered promiscuous mode
[   48.531347][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.539546][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.543026][ T5947] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.548241][ T5947] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.550968][ T5947] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.553697][ T5947] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.556724][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   48.565094][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.569885][ T5948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.572879][ T5948] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.576267][ T5948] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.578969][ T5948] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.639406][  T185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.642398][  T185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.679532][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.682011][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.688329][  T220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.691927][  T220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.727764][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.730264][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.831236][ T6023] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.849572][ T6017] infiniband syz1: set active
[   48.851715][ T6017] infiniband syz1: added syz_tun
[   48.875436][ T6017] RDS/IB: syz1: added
[   48.880356][ T6017] smc: adding ib device syz1 with port count 1
[   48.882536][ T6017] smc:    ib device syz1 port 1 has pnetid 
[   48.888023][ T6027] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3'.
[   49.164743][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   49.547487][ T6035] netlink: 'syz.3.7': attribute type 21 has an invalid length.
[   49.560603][ T6042] befs: (nullb0): No write support. Marking filesystem read-only
[   49.562336][ T6042] befs: (nullb0): invalid magic header
[   49.747910][ T6045] rdma_rxe: rxe_newlink: failed to add syz_tun
[   49.944549][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   49.947925][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   49.951255][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   49.954935][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   49.958558][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   49.962523][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   49.967662][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   49.973527][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   50.130711][ T5955] Bluetooth: hci2: command tx timeout
[   50.130958][ T5955] Bluetooth: hci1: command tx timeout
[   50.131331][ T5955] Bluetooth: hci0: command tx timeout
[   50.131498][ T5955] Bluetooth: hci3: command tx timeout
[   50.451518][   T40] audit: type=1326 audit(1749051752.034:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.0.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000
[   50.474155][   T40] audit: type=1326 audit(1749051752.034:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.0.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000
[   50.485649][   T40] audit: type=1326 audit(1749051752.034:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.0.12" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf70de579 code=0x7ffc0000
[   50.513852][   T40] audit: type=1326 audit(1749051752.034:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.0.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000
[   50.634483][ T6063] loop6: detected capacity change from 0 to 524287999
[   50.637670][ T6063] Buffer I/O error on dev loop6, logical block 0, async page read
[   50.643828][ T6063] Buffer I/O error on dev loop6, logical block 0, async page read
[   50.646546][ T6063] Buffer I/O error on dev loop6, logical block 0, async page read
[   50.649175][ T6063] Buffer I/O error on dev loop6, logical block 0, async page read
[   50.651605][ T6063] Buffer I/O error on dev loop6, logical block 0, async page read
[   50.656408][ T6063] Buffer I/O error on dev loop6, logical block 0, async page read
[   50.665286][ T6063] Buffer I/O error on dev loop6, logical block 0, async page read
[   50.668420][ T6063] Buffer I/O error on dev loop6, logical block 0, async page read
[   50.671567][ T6063] ldm_validate_partition_table(): Disk read failed.
[   50.675835][ T6063] Buffer I/O error on dev loop6, logical block 0, async page read
[   50.679150][ T6063] Buffer I/O error on dev loop6, logical block 0, async page read
[   50.698184][ T6063] Dev loop6: unable to read RDB block 0
[   50.707159][ T6063]  loop6: unable to read partition table
[   50.712977][ T6063] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[   50.778220][   T40] audit: type=1326 audit(1749051752.044:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.0.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000
[   50.790791][   T40] audit: type=1326 audit(1749051752.044:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.0.12" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf70de579 code=0x7ffc0000
[   50.799202][   T40] audit: type=1326 audit(1749051752.044:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.0.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000
[   50.815453][   T40] audit: type=1326 audit(1749051752.044:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.0.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000
[   50.823682][   T40] audit: type=1326 audit(1749051752.054:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.0.12" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70de579 code=0x7ffc0000
[   50.835896][   T40] audit: type=1326 audit(1749051752.064:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.0.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000
[   50.885782][ T5953] ldm_validate_partition_table(): Disk read failed.
[   50.887985][ T5953] Dev loop6: unable to read RDB block 0
[   50.894831][ T5953]  loop6: unable to read partition table
[   50.906260][ T6064] ldm_validate_partition_table(): Disk read failed.
[   50.909250][ T6064] Dev loop6: unable to read RDB block 0
[   50.911615][ T6064]  loop6: unable to read partition table
[   50.913634][ T6064] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[   50.942555][ T6071] syz.3.15 uses obsolete (PF_INET,SOCK_PACKET)
[   52.142007][ T6084] tipc: Started in network mode
[   52.144147][ T6084] tipc: Node identity 7f000001, cluster identity 4711
[   52.174494][ T5955] Bluetooth: hci0: command tx timeout
[   52.176456][ T5955] Bluetooth: hci1: command tx timeout
[   52.178330][ T5955] Bluetooth: hci2: command tx timeout
[   52.180134][ T5950] Bluetooth: hci3: command tx timeout
[   52.182495][ T6084] tipc: Enabled bearer <udp:syz2>, priority 10
[   52.259901][ T6085] tipc: Enabled bearer <eth:team0>, priority 0
[   52.326233][ T6082] ptrace attach of "/syz-executor exec"[5945] was attempted by ""[6082]
[   52.587671][ T6099] rdma_rxe: rxe_newlink: failed to add syz_tun
[   52.595549][ T6097] netlink: 14 bytes leftover after parsing attributes in process `syz.2.19'.
[   52.793605][ T6097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   52.809363][ T6097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   52.815659][ T6097] bond0 (unregistering): Released all slaves
[   52.897202][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'.
[   53.030129][ T6126] Bluetooth: MGMT ver 1.23
[   53.133371][ T5950] Bluetooth: hci0: ACL packet for unknown connection handle 1
[   53.192100][ T6137] rdma_rxe: rxe_newlink: failed to add syz_tun
[   53.256052][ T1459] tipc: Node number set to 2130706433
[   53.269415][ T6131] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   53.327276][   T29] IPVS: starting estimator thread 0...
[   53.424441][ T6147] IPVS: using max 44 ests per chain, 105600 per kthread
[   53.601100][ T6153] netlink: 'syz.0.31': attribute type 4 has an invalid length.
[   53.603506][ T6153] netlink: 152 bytes leftover after parsing attributes in process `syz.0.31'.
[   53.610922][ T6153] : renamed from bond0 (while UP)
[   53.630970][ T6153] 9pnet: Found fid 0 not clunked
[   53.692281][ T6153] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[   53.757063][ T6155] Zero length message leads to an empty skb
[   53.811324][ T6157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.29'.
[   54.110109][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'.
[   54.264464][ T5950] Bluetooth: hci3: command tx timeout
[   54.266900][ T5950] Bluetooth: hci2: command tx timeout
[   54.269141][ T5950] Bluetooth: hci1: command tx timeout
[   54.271457][ T5950] Bluetooth: hci0: command tx timeout
[   54.429520][ T6170] rdma_rxe: rxe_newlink: failed to add syz_tun
[   54.710203][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'.
[   54.714128][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'.
[   55.580003][ T6192] sch_tbf: burst 1885 is lower than device lo mtu (65550) !
[   55.606905][ T6192] syz.0.40: attempt to access beyond end of device
[   55.606905][ T6192] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0
[   55.611157][ T6192] syz.0.40: attempt to access beyond end of device
[   55.611157][ T6192] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0
[   55.615563][ T6192] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[   55.618823][ T6192] syz.0.40: attempt to access beyond end of device
[   55.618823][ T6192] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0
[   55.622683][ T6192] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[   55.627425][ T6192] syz.0.40: attempt to access beyond end of device
[   55.627425][ T6192] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0
[   55.631824][ T6192] syz.0.40: attempt to access beyond end of device
[   55.631824][ T6192] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0
[   55.636177][ T6192] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[   55.639580][ T6192] syz.0.40: attempt to access beyond end of device
[   55.639580][ T6192] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0
[   55.643524][ T6192] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[   55.648299][ T6192] syz.0.40: attempt to access beyond end of device
[   55.648299][ T6192] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0
[   55.652275][ T6192] syz.0.40: attempt to access beyond end of device
[   55.652275][ T6192] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0
[   55.656628][ T6192] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[   55.659734][ T6192] syz.0.40: attempt to access beyond end of device
[   55.659734][ T6192] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0
[   55.664891][ T6192] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[   55.668740][ T6192] syz.0.40: attempt to access beyond end of device
[   55.668740][ T6192] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0
[   55.673199][ T6192] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[   55.679985][ T6192] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[   55.683068][ T6192] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[   55.695786][ T6194] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[   55.698796][ T6194] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[   55.702661][ T6194] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[   55.706665][ T6194] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[   55.710326][ T6194] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[   55.723316][ T6194] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[   55.730538][ T6194] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[   55.734076][ T6194] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[   55.741887][ T6194] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[   56.104034][ T6208] rdma_rxe: rxe_newlink: failed to add syz_tun
[   56.114588][ T6209] befs: (nullb0): No write support. Marking filesystem read-only
[   56.117966][ T6209] befs: (nullb0): invalid magic header
[   56.291657][ T6212] lo speed is unknown, defaulting to 1000
[   56.293834][ T6212] lo speed is unknown, defaulting to 1000
[   56.297982][ T6212] lo speed is unknown, defaulting to 1000
[   56.307925][ T6212] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   56.324303][ T6212] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   56.367284][ T6213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.43'.
[   56.430914][ T6212] lo speed is unknown, defaulting to 1000
[   56.433738][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.45'.
[   56.436556][ T6212] lo speed is unknown, defaulting to 1000
[   56.439845][ T6212] lo speed is unknown, defaulting to 1000
[   56.446287][ T6212] lo speed is unknown, defaulting to 1000
[   56.607213][ T6220] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   56.852762][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'.
[   57.111004][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.114328][ T6220] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.128880][ T6220] tipc: Resetting bearer <eth:team0>
[   57.230081][ T6220] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.240480][ T6220] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.321048][ T6220] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.325121][ T6220] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.328817][ T6220] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.332749][ T6220] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.684311][ T5951] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   57.689655][ T6238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.51'.
[   57.761779][ T6244] loop6: detected capacity change from 0 to 524287999
[   57.766248][ T5957] buffer_io_error: 39 callbacks suppressed
[   57.766258][ T5957] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.770761][ T5957] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.773474][ T5957] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.776436][ T5957] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.779149][ T5957] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.781817][ T5957] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.784629][ T5957] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.787467][ T5957] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.789933][ T5957] ldm_validate_partition_table(): Disk read failed.
[   57.792007][ T5957] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.795637][ T5957] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.798895][ T5957] Dev loop6: unable to read RDB block 0
[   57.800785][ T5957]  loop6: unable to read partition table
[   57.808208][ T6244] ldm_validate_partition_table(): Disk read failed.
[   57.810445][ T6244] Dev loop6: unable to read RDB block 0
[   57.817700][ T6244]  loop6: unable to read partition table
[   57.823627][ T6244] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[   57.836374][ T5951] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   57.839237][ T5951] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   57.842230][ T5951] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[   57.846056][ T5951] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   57.850373][ T5951] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   57.859314][ T5951] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   57.864637][ T5951] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   57.865025][ T5957] ldm_validate_partition_table(): Disk read failed.
[   57.867055][ T5951] usb 7-1: Product: syz
[   57.869286][ T5957] Dev loop6: unable to read RDB block 0
[   57.870425][ T5951] usb 7-1: Manufacturer: syz
[   57.872343][ T5957]  loop6: unable to read partition table
[   57.881134][ T6246] ldm_validate_partition_table(): Disk read failed.
[   57.884515][ T6246] Dev loop6: unable to read RDB block 0
[   57.886640][ T6246]  loop6: unable to read partition table
[   57.894449][ T6246] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[   57.894754][ T5951] cdc_wdm 7-1:1.0: skipping garbage
[   57.899993][ T5951] cdc_wdm 7-1:1.0: skipping garbage
[   57.927158][ T5951] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[   57.929063][ T5951] cdc_wdm 7-1:1.0: Unknown control protocol
[   58.175160][    C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   58.176843][ T5951] usb 7-1: USB disconnect, device number 2
[   58.177606][    C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   58.182064][    C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[   58.187000][ T6236] cdc_wdm 7-1:1.0: Tx URB error: -19
[   58.591658][ T6257] sch_tbf: burst 1885 is lower than device lo mtu (65550) !
[   58.606691][ T6257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[   58.609828][ T6257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[   58.613927][ T6257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[   58.617201][ T6257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[   58.620693][ T6257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[   58.623818][ T6257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[   58.627738][ T6257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[   58.630700][ T6257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[   58.633616][ T6257] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1)
[   58.647038][ T6257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[   58.650192][ T6257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[   58.653706][ T6257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[   58.658067][ T6257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[   58.662170][ T6257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[   58.668050][ T6257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[   58.671364][ T6257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[   58.674585][ T6257] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[   58.677647][ T6257] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1)
[   58.885774][ T6263] netlink: 240 bytes leftover after parsing attributes in process `syz.0.56'.
[   59.184353][   T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   59.394411][   T29] usb 7-1: Using ep0 maxpacket: 32
[   59.396561][   T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[   59.401213][   T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   59.404371][   T29] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   59.404387][   T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   59.404400][   T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   59.405961][   T29] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[   59.420262][   T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.420276][   T29] usb 7-1: Product: syz
[   59.420284][   T29] usb 7-1: Manufacturer: syz
[   59.420293][   T29] usb 7-1: SerialNumber: syz
[   59.424593][   T29] usb 7-1: config 0 descriptor??
[   59.432015][ T6268] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   59.434573][   T29] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input5
[   59.442558][ T5344] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   59.446189][ T5344] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   59.456849][ T5344] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   59.457681][ T5344] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   59.484765][ T6069] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   59.502087][ T5344] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   59.525315][ T5344] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   59.639164][ T6268] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   59.643680][ T6268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.646254][ T6268] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.674192][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.680709][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.685795][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.688958][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.694338][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.697361][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.700550][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.703838][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.712332][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.714901][ T6285] rdma_rxe: rxe_newlink: failed to add syz_tun
[   59.715839][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.721488][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.727962][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.732043][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.736480][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.739685][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.743330][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.747432][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.750559][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.753337][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.756594][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.759402][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.762330][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.766068][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.771184][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.773656][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.777174][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.779611][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.782015][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.784702][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.787251][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.789698][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.792688][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.797403][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.799868][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.800106][ T6289] netlink: 'syz.1.64': attribute type 10 has an invalid length.
[   59.802323][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.802341][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.811817][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.814618][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.816957][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.819411][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.821826][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.825129][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.828819][   T59] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[   59.840436][   T59] hid-generic 0000:007F:FFFFFFFE.0002: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   59.842811][ T6289] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   60.026577][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.66'.
[   60.030984][  T839] usb 7-1: USB disconnect, device number 3
[   60.210619][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.67'.
[   60.770863][ T6319] syz1: rxe_newlink: already configured on syz_tun
[   60.772671][ T6320] netlink: 240 bytes leftover after parsing attributes in process `syz.2.70'.
[   61.025604][ T6325] rdma_rxe: rxe_newlink: failed to add syz_tun
[   61.038260][ T6327] syz1: rxe_newlink: already configured on syz_tun
[   62.352062][ T6351] process 'syz.2.79' launched '/dev/fd/10' with NULL argv: empty string added
[   62.690540][ T6359] netlink: 240 bytes leftover after parsing attributes in process `syz.3.80'.
[   63.603992][ T6376] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.606554][ T6376] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.688842][ T6376] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.696483][ T6376] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.756277][ T6376] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.759113][ T6376] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.761996][ T6376] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.766544][ T6376] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.793216][ T5951] syz1: Port: 1 Link DOWN
[   63.794852][   T59] lo speed is unknown, defaulting to 1000
[   63.796970][   T59] syz0: Port: 1 Link DOWN
[   64.274377][   T34] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   64.426147][   T34] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   64.429774][   T34] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[   64.433382][   T34] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   64.439805][   T34] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   64.442653][   T34] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   64.446035][   T34] usb 5-1: Product: syz
[   64.447322][   T34] usb 5-1: Manufacturer: syz
[   64.454782][   T34] cdc_wdm 5-1:1.0: skipping garbage
[   64.456510][   T34] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[   64.687697][ T5951] usb 5-1: USB disconnect, device number 2
[   65.276231][ T6398] netlink: 'syz.3.91': attribute type 10 has an invalid length.
[   65.281134][ T6398] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   66.125203][ T6401] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   66.127787][ T6401] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   66.134745][ T6401] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   66.140513][ T6401] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   66.145171][ T6401] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   66.149364][ T6401] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   66.154079][ T6401] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   66.156096][ T6401] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   66.159744][ T6401] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   66.162245][ T6401] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   66.164182][ T6401] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   66.167019][ T6401] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   66.209697][   T34] IPVS: starting estimator thread 0...
[   66.329049][ T6416] IPVS: using max 44 ests per chain, 105600 per kthread
[   66.494346][   T34] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   66.585011][ T6429] netlink: 20 bytes leftover after parsing attributes in process `syz.2.94'.
[   66.644335][   T34] usb 8-1: Using ep0 maxpacket: 32
[   66.647890][   T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[   66.651113][   T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   66.653885][   T34] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   66.660148][   T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   66.663362][   T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   66.668616][   T34] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[   66.671290][   T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.673569][   T34] usb 8-1: Product: syz
[   66.681759][   T34] usb 8-1: Manufacturer: syz
[   66.683158][   T34] usb 8-1: SerialNumber: syz
[   66.689500][   T34] usb 8-1: config 0 descriptor??
[   66.695139][ T6418] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   66.723359][   T34] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input6
[   66.729151][ T5344] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   66.737248][ T5344] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   66.756580][ T5344] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   66.766127][ T5344] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   66.791042][ T6434] netlink: 'syz.1.101': attribute type 10 has an invalid length.
[   66.828153][ T5953] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   66.838769][ T5344] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   66.865176][ T5344] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   66.869228][ T5344] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   66.923495][ T6418] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   66.929158][   T34] usb 8-1: USB disconnect, device number 2
[   67.531521][ T5309] Bluetooth: hci1: connection err: -111
[   67.830035][ T6457] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   67.902053][ T6441] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   67.904925][ T6441] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   67.907785][ T6441] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   67.910615][ T6441] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   68.200188][ T6472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.110'.
[   68.894364][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   69.134397][ T5309] Bluetooth: hci1: command 0x0c1a tx timeout
[   69.519254][ T6480] netlink: 'syz.0.115': attribute type 10 has an invalid length.
[   69.522054][ T6480] wlan1: mtu less than device minimum
[   69.523971][ T6480] : (slave wlan1): Error -22 calling dev_set_mtu
[   69.919754][ T6503] befs: (nullb0): No write support. Marking filesystem read-only
[   69.923155][ T6503] befs: (nullb0): invalid magic header
[   69.937405][ T5955] Bluetooth: hci2: command 0x0c1a tx timeout
[   69.937426][ T5950] Bluetooth: hci0: command 0x0c1a tx timeout
[   69.943103][ T5309] Bluetooth: hci3: command 0x0c1a tx timeout
[   69.948285][ T6494] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   69.974741][ T6494] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   69.985730][ T6494] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   69.988509][ T6494] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   70.099418][ T6508] netlink: 240 bytes leftover after parsing attributes in process `syz.1.121'.
[   70.827927][ T1418] ieee802154 phy0 wpan0: encryption failed: -22
[   70.830339][ T1418] ieee802154 phy1 wpan1: encryption failed: -22
[   70.912993][ T6491] lo speed is unknown, defaulting to 1000
[   71.316503][ T6525] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   71.792715][ T6531] netlink: 'syz.1.126': attribute type 10 has an invalid length.
[   71.854384][ T5309] Bluetooth: hci1: command 0x0c1a tx timeout
[   72.014346][ T5309] Bluetooth: hci0: command 0x0c1a tx timeout
[   72.014480][ T5950] Bluetooth: hci3: command 0x0c1a tx timeout
[   72.016341][ T5309] Bluetooth: hci2: command 0x0c1a tx timeout
[   72.922591][ T6553] netlink: 'syz.1.131': attribute type 4 has an invalid length.
[   73.014632][  T838] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   73.185156][  T838] usb 8-1: Using ep0 maxpacket: 32
[   73.197706][  T838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[   73.201180][  T838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   73.204741][  T838] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   73.208352][  T838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   73.214904][  T838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   73.223825][  T838] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[   73.227732][  T838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.230754][  T838] usb 8-1: Product: syz
[   73.232277][  T838] usb 8-1: Manufacturer: syz
[   73.233905][  T838] usb 8-1: SerialNumber: syz
[   73.245243][  T838] usb 8-1: config 0 descriptor??
[   73.250847][ T6549] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   73.303412][  T838] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input7
[   73.385661][ T5344] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   73.568898][ T6549] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   73.585650][ T5344] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   73.594056][  T838] usb 8-1: USB disconnect, device number 3
[   73.944475][ T5955] Bluetooth: hci1: command 0x0c1a tx timeout
[   74.094330][ T5955] Bluetooth: hci2: command 0x0c1a tx timeout
[   74.104386][ T5955] Bluetooth: hci3: command 0x0c1a tx timeout
[   74.104556][ T5309] Bluetooth: hci0: command 0x0c1a tx timeout
[   74.494961][ T6575] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[   74.497152][ T6575] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   74.524157][ T6575] vhci_hcd vhci_hcd.0: Device attached
[   74.774892][ T6007] usb 43-1: new low-speed USB device number 2 using vhci_hcd
[   74.896142][ T6582] lo speed is unknown, defaulting to 1000
[   75.172690][ T6576] vhci_hcd: connection reset by peer
[   75.176906][  T220] vhci_hcd: stop threads
[   75.178808][  T220] vhci_hcd: release socket
[   75.180612][  T220] vhci_hcd: disconnect device
[   75.320964][ T6590] netlink: 240 bytes leftover after parsing attributes in process `syz.0.138'.
[   76.359831][ T6606] netlink: 240 bytes leftover after parsing attributes in process `syz.0.142'.
[   77.183434][ T6620] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   77.183569][ T6620] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   77.184843][ T6620] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   77.192031][ T6620] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   77.353211][ T6631] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   77.495014][ T6636] netlink: 240 bytes leftover after parsing attributes in process `syz.2.150'.
[   78.090220][ T6642] netlink: 'syz.3.152': attribute type 4 has an invalid length.
[   78.524313][   T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   78.674350][   T24] usb 7-1: Using ep0 maxpacket: 32
[   78.677401][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[   78.680916][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   78.683906][   T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   78.687670][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   78.691151][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   78.696689][   T24] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[   78.699634][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.702196][   T24] usb 7-1: Product: syz
[   78.703537][   T24] usb 7-1: Manufacturer: syz
[   78.705133][   T24] usb 7-1: SerialNumber: syz
[   78.708283][   T24] usb 7-1: config 0 descriptor??
[   78.710870][ T6647] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   78.715627][   T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input8
[   78.720562][ T5344] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   78.725918][ T5344] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   78.729487][ T5344] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   78.733055][ T5344] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   78.743915][ T6511] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   78.748369][ T5344] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   78.762076][ T5344] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   78.765680][    C3] xpad 7-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1
[   78.769566][ T5344] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   78.918029][ T6647] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   78.922593][   T24] usb 7-1: USB disconnect, device number 4
[   78.995863][ T6657] can0: slcan on ttyprintk.
[   79.214514][ T5309] Bluetooth: hci1: command 0x0c1a tx timeout
[   79.214702][ T5955] Bluetooth: hci3: command 0x0c1a tx timeout
[   79.214739][   T63] Bluetooth: hci2: command 0x0c1a tx timeout
[   79.214773][ T5950] Bluetooth: hci0: command 0x0c1a tx timeout
[   79.295591][ T6640] can0 (unregistered): slcan off ttyprintk.
[   79.469429][ T6679] netlink: 'syz.2.159': attribute type 10 has an invalid length.
[   79.609299][ T6676] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   79.611392][ T6676] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   79.613639][ T6676] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   79.616902][ T6676] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   79.837578][ T6692] netlink: 240 bytes leftover after parsing attributes in process `syz.1.162'.
[   79.839872][ T6687] can0: slcan on ttyprintk.
[   79.944383][ T6007] vhci_hcd: vhci_device speed not set
[   80.337707][ T6673] can0 (unregistered): slcan off ttyprintk.
[   80.974321][   T40] kauditd_printk_skb: 159 callbacks suppressed
[   80.974338][   T40] audit: type=1804 audit(1749051782.564:171): pid=6720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.166" name="/newroot/44/file0/file0" dev="9p" ino=35913891 res=1 errno=0
[   81.109926][   T53] cfg80211: failed to load regulatory.db
[   81.534355][ T5955] Bluetooth: hci1: command 0x0c1a tx timeout
[   81.557910][ T6727] netlink: 'syz.0.168': attribute type 21 has an invalid length.
[   81.614487][ T5955] Bluetooth: hci2: command 0x0c1a tx timeout
[   81.704356][ T5309] Bluetooth: hci3: command 0x0c1a tx timeout
[   81.706409][ T5309] Bluetooth: hci0: command 0x0c1a tx timeout
[   81.926189][ T6729] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   81.930269][ T6729] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   81.932872][ T6729] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   81.935806][ T6729] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   82.330923][ T6748] netlink: 240 bytes leftover after parsing attributes in process `syz.1.173'.
[   82.821476][ T6757] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   82.887702][ T6758] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   83.232625][   T40] audit: type=1326 audit(1749051784.844:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.1.179" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706e579 code=0x0
[   83.717547][ T6766] lo speed is unknown, defaulting to 1000
[   83.854358][ T5309] Bluetooth: hci1: command 0x0c1a tx timeout
[   83.937519][ T5950] Bluetooth: hci0: command 0x0c1a tx timeout
[   83.937603][ T5955] Bluetooth: hci2: command 0x0c1a tx timeout
[   84.024327][ T5955] Bluetooth: hci3: command 0x0c1a tx timeout
[   84.077831][ T6783] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   84.079911][ T6783] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   84.083588][ T6783] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   84.087396][ T6783] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   84.415548][ T6800] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[   84.417616][ T6800] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   84.420117][ T6800] vhci_hcd vhci_hcd.0: Device attached
[   84.704450][   T53] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[   85.325328][ T6807] [U] :
[   85.326401][ T6807] [U] 
[   85.327268][ T6807] [U] 
[   85.328136][ T6807] [U] 
[   85.329298][ T6807] [U] 
[   85.330163][ T6807] [U] 
[   85.331021][ T6807] [U] 
[   85.331878][ T6807] [U] 
[   85.333021][ T6807] [U] 
[   85.333915][ T6807] [U] 
[   85.334802][ T6807] [U] 
[   85.335662][ T6807] [U] 
[   85.381302][ T6807] [U] 
[   85.382230][ T6807] [U] 
[   85.383108][ T6807] [U] 
[   85.383979][ T6807] [U] 
[   85.386089][ T6807] [U] 
[   85.386995][ T6807] [U] 
[   85.387882][ T6807] [U] 
[   85.388767][ T6807] [U] 
[   85.389944][ T6807] [U] 
[   85.390806][ T6807] [U] 
[   85.391663][ T6807] [U] 
[   85.392525][ T6807] [U] 
[   85.393682][ T6807] [U] 
[   85.394542][ T6807] [U] 
[   85.395401][ T6807] [U] 
[   85.396269][ T6807] [U] 
[   85.485897][ T6807] [U] 
[   85.486797][ T6807] [U] 
[   85.487667][ T6807] [U] 
[   85.488515][ T6807] [U] 
[   85.489444][ T6807] [U] 
[   85.490314][ T6807] [U] 
[   85.491220][ T6807] [U] 
[   85.492078][ T6807] [U] 
[   85.493000][ T6807] [U] 
[   85.493899][ T6807] [U] 
[   85.494791][ T6807] [U] 
[   85.495675][ T6807] [U] 
[   85.511071][ T6801] vhci_hcd: connection reset by peer
[   85.513791][  T185] vhci_hcd: stop threads
[   85.515259][  T185] vhci_hcd: release socket
[   85.516652][  T185] vhci_hcd: disconnect device
[   85.538728][ T6807] [U] 
[   85.539642][ T6807] [U] 
[   85.540518][ T6807] [U] 
[   85.541377][ T6807] [U] 
[   85.547827][ T6807] [U] 
[   85.548847][ T6807] [U] 
[   85.549922][ T6807] [U] 
[   85.550882][ T6807] [U] 
[   85.555464][ T6807] [U] 
[   85.556675][ T6807] [U] 
[   85.557567][ T6807] [U] 
[   85.558578][ T6807] [U] 
[   85.559603][ T6807] [U] 
[   85.560493][ T6807] [U] 
[   85.561419][ T6807] [U] 
[   85.562298][ T6807] [U] 
[   85.563358][ T6807] [U] 
[   85.564263][ T6807] [U] 
[   85.565150][ T6807] [U] 
[   85.566078][ T6807] [U] 
[   85.568321][ T6807] [U] 
[   85.569238][ T6807] [U] 
[   85.570116][ T6807] [U] 
[   85.570993][ T6807] [U] 
[   85.573141][ T6807] [U] 
[   85.574039][ T6807] [U] 
[   85.574976][ T6807] [U] 
[   85.575859][ T6807] [U] 
[   85.576930][ T6807] [U] 
[   85.577832][ T6807] [U] 
[   85.578741][ T6807] [U] 
[   85.579631][ T6807] [U] 
[   85.580645][ T6807] [U] 
[   85.581549][ T6807] [U] 
[   85.582453][ T6807] [U] 
[   85.583370][ T6807] [U] 
[   85.584431][ T6807] [U] 
[   85.585383][ T6807] [U] 
[   85.586267][ T6807] [U] 
[   85.587145][ T6807] [U] 
[   85.588173][ T6807] [U] 
[   85.589072][ T6807] [U] 
[   85.589979][ T6807] [U] 
[   85.590860][ T6807] [U] 
[   85.591875][ T6807] [U] 
[   85.592772][ T6807] [U] 
[   85.593672][ T6807] [U] 
[   85.594553][ T6807] [U] 
[   85.595916][ T6807] [U] 
[   85.596824][ T6807] [U] 
[   85.597712][ T6807] [U] 
[   85.598602][ T6807] [U] 
[   85.599608][ T6807] [U] 
[   85.600497][ T6807] [U] 
[   85.601393][ T6807] [U] 
[   85.602271][ T6807] [U] 
[   85.603295][ T6807] [U] 
[   85.604157][ T6807] [U] 
[   85.605047][ T6807] [U] 
[   85.605986][ T6807] [U] 
[   85.607078][ T6807] [U] 
[   85.607980][ T6807] [U] 
[   85.608880][ T6807] [U] 
[   85.609783][ T6807] [U] 
[   85.610818][ T6807] [U] 
[   85.611716][ T6807] [U] 
[   85.612640][ T6807] [U] 
[   85.613539][ T6807] [U] 
[   85.614646][ T6807] [U] 
[   85.615551][ T6807] [U] 
[   85.616442][ T6807] [U] 
[   85.617334][ T6807] [U] 
[   85.618382][ T6807] [U] 
[   85.619278][ T6807] [U] 
[   85.620170][ T6807] [U] 
[   85.621052][ T6807] [U] 
[   85.622075][ T6807] [U] 
[   85.622987][ T6807] [U] 
[   85.623878][ T6807] [U] 
[   85.624763][ T6807] [U] 
[   85.625884][ T6807] [U] 
[   85.626785][ T6807] [U] 
[   85.627675][ T6807] [U] 
[   85.628550][ T6807] [U] 
[   85.629575][ T6807] [U] 
[   85.630474][ T6807] [U] 
[   85.631364][ T6807] [U] 
[   85.649031][ T6795] can0: slcan on ttyprintk.
[   85.710721][ T6803] [U] 
[   85.776774][ T6803] can0 (unregistered): slcan off ttyprintk.
[   85.836142][ T6825] =======================================================
[   85.836142][ T6825] WARNING: The mand mount option has been deprecated and
[   85.836142][ T6825]          and is ignored by this kernel. Remove the mand
[   85.836142][ T6825]          option from the mount to silence this warning.
[   85.836142][ T6825] =======================================================
[   86.002538][ T6825] lo speed is unknown, defaulting to 1000
[   86.094354][ T5955] Bluetooth: hci3: command 0x0c1a tx timeout
[   86.094391][ T5309] Bluetooth: hci0: command 0x0c1a tx timeout
[   86.094410][ T5309] Bluetooth: hci2: command 0x0c1a tx timeout
[   86.100799][ T6832] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   86.100997][ T6832] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   86.101328][ T6832] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   86.101465][ T6832] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   86.301793][ T6837] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   86.303040][ T6837] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   86.307828][ T6837] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   86.309176][ T6837] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   86.512298][   T40] audit: type=1804 audit(1749051788.124:173): pid=6844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.194" name="/newroot/51/file0/file0" dev="9p" ino=35913891 res=1 errno=0
[   86.612326][ T6851] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[   86.614687][ T6851] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   86.619745][ T6851] vhci_hcd vhci_hcd.0: Device attached
[   86.899814][ T6857] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   87.384437][ T6852] vhci_hcd: connection closed
[   87.385535][   T13] vhci_hcd: stop threads
[   87.392342][   T13] vhci_hcd: release socket
[   87.394329][   T13] vhci_hcd: disconnect device
[   87.412309][ T6862] FAULT_INJECTION: forcing a failure.
[   87.412309][ T6862] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   87.417496][ T6862] CPU: 3 UID: 0 PID: 6862 Comm: syz.0.200 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) 
[   87.417519][ T6862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   87.417526][ T6862] Call Trace:
[   87.417530][ T6862]  <TASK>
[   87.417535][ T6862]  dump_stack_lvl+0x16c/0x1f0
[   87.417558][ T6862]  should_fail_ex+0x512/0x640
[   87.417574][ T6862]  _copy_from_user+0x2e/0xd0
[   87.417589][ T6862]  bpf_test_init.isra.0+0xe2/0x140
[   87.417602][ T6862]  bpf_prog_test_run_skb+0x245/0x2280
[   87.417616][ T6862]  ? __fget_files+0x204/0x3c0
[   87.417635][ T6862]  ? __fget_files+0x20e/0x3c0
[   87.417651][ T6862]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[   87.417666][ T6862]  ? fput+0x70/0xf0
[   87.417679][ T6862]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[   87.417692][ T6862]  __sys_bpf+0x1488/0x4d80
[   87.417706][ T6862]  ? __pfx___sys_bpf+0x10/0x10
[   87.417716][ T6862]  ? ksys_write+0x190/0x250
[   87.417735][ T6862]  ? __mutex_unlock_slowpath+0x161/0x6a0
[   87.417755][ T6862]  ? fput+0x70/0xf0
[   87.417766][ T6862]  ? ksys_write+0x1ac/0x250
[   87.417782][ T6862]  ? __pfx_ksys_write+0x10/0x10
[   87.417801][ T6862]  __ia32_sys_bpf+0x76/0xe0
[   87.417813][ T6862]  __do_fast_syscall_32+0x7c/0x3a0
[   87.417826][ T6862]  do_fast_syscall_32+0x32/0x80
[   87.417838][ T6862]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   87.417852][ T6862] RIP: 0023:0xf70de579
[   87.417861][ T6862] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   87.417872][ T6862] RSP: 002b:00000000f50ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165
[   87.417883][ T6862] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800002c0
[   87.417890][ T6862] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000
[   87.417897][ T6862] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   87.417903][ T6862] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   87.417909][ T6862] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   87.417922][ T6862]  </TASK>
[   87.622112][ T6871] FAULT_INJECTION: forcing a failure.
[   87.622112][ T6871] name failslab, interval 1, probability 0, space 0, times 1
[   87.627849][ T6871] CPU: 0 UID: 0 PID: 6871 Comm: syz.3.204 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) 
[   87.627871][ T6871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   87.627879][ T6871] Call Trace:
[   87.627882][ T6871]  <TASK>
[   87.627887][ T6871]  dump_stack_lvl+0x16c/0x1f0
[   87.627915][ T6871]  should_fail_ex+0x512/0x640
[   87.627932][ T6871]  ? __kmalloc_noprof+0xbf/0x510
[   87.627949][ T6871]  ? sock_kmalloc+0x111/0x170
[   87.627962][ T6871]  should_failslab+0xc2/0x120
[   87.627973][ T6871]  __kmalloc_noprof+0xd2/0x510
[   87.627988][ T6871]  ? __might_fault+0xe3/0x190
[   87.628004][ T6871]  ? __might_fault+0xe3/0x190
[   87.628021][ T6871]  sock_kmalloc+0x111/0x170
[   87.628035][ T6871]  cmsghdr_from_user_compat_to_kern+0x5f8/0x7d0
[   87.628051][ T6871]  ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10
[   87.628064][ T6871]  ? __import_iovec+0x1dd/0x650
[   87.628081][ T6871]  ____sys_sendmsg+0x488/0xc70
[   87.628096][ T6871]  ? __pfx_____sys_sendmsg+0x10/0x10
[   87.628109][ T6871]  ? get_compat_msghdr+0x11a/0x170
[   87.628125][ T6871]  ___sys_sendmsg+0x134/0x1d0
[   87.628136][ T6871]  ? __pfx____sys_sendmsg+0x10/0x10
[   87.628152][ T6871]  ? find_held_lock+0x2b/0x80
[   87.628171][ T6871]  __sys_sendmsg+0x16d/0x220
[   87.628182][ T6871]  ? __pfx___sys_sendmsg+0x10/0x10
[   87.628198][ T6871]  ? rcu_is_watching+0x12/0xc0
[   87.628211][ T6871]  __do_fast_syscall_32+0x7c/0x3a0
[   87.628223][ T6871]  do_fast_syscall_32+0x32/0x80
[   87.628234][ T6871]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   87.628248][ T6871] RIP: 0023:0xf70ce579
[   87.628257][ T6871] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   87.628271][ T6871] RSP: 002b:00000000f50be55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[   87.628281][ T6871] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800017c0
[   87.628287][ T6871] RDX: 00000000000480c4 RSI: 0000000000000000 RDI: 0000000000000000
[   87.628294][ T6871] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   87.628299][ T6871] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   87.628305][ T6871] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   87.628317][ T6871]  </TASK>
[   88.334369][ T5955] Bluetooth: hci3: command 0x0c1a tx timeout
[   88.334398][ T5955] Bluetooth: hci0: command 0x0c1a tx timeout
[   88.334416][ T5955] Bluetooth: hci2: command 0x0c1a tx timeout
[   88.334434][ T5955] Bluetooth: hci1: command 0x0c1a tx timeout
[   88.723456][ T6895] syzkaller1: entered promiscuous mode
[   88.727312][ T6895] syzkaller1: entered allmulticast mode
[   89.087680][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.227891][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.234005][ T6912] netlink: 68 bytes leftover after parsing attributes in process `syz.3.217'.
[   89.333528][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.347478][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   89.350940][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   89.354205][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   89.358040][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   89.364379][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   89.426112][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.581487][   T13] bridge_slave_1: left allmulticast mode
[   89.581535][   T13] bridge_slave_1: left promiscuous mode
[   89.582163][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.586088][   T13] bridge_slave_0: left allmulticast mode
[   89.597499][   T13] bridge_slave_0: left promiscuous mode
[   89.597616][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.866528][   T53] vhci_hcd: vhci_device speed not set
[   89.888504][ T6917] lo speed is unknown, defaulting to 1000
[   90.037623][ T6917] chnl_net:caif_netlink_parms(): no params data found
[   90.231296][ T6946] netlink: 'syz.3.223': attribute type 21 has an invalid length.
[   90.298265][ T6917] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.301137][ T6917] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.304426][ T6917] bridge_slave_0: entered allmulticast mode
[   90.307102][ T6917] bridge_slave_0: entered promiscuous mode
[   90.310757][ T6917] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.313026][ T6917] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.315522][ T6917] bridge_slave_1: entered allmulticast mode
[   90.318453][ T6917] bridge_slave_1: entered promiscuous mode
[   90.414508][ T5950] Bluetooth: hci3: command 0x0c1a tx timeout
[   90.472663][ T6917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.479904][   T13] hsr_slave_0: left promiscuous mode
[   90.482123][   T13] hsr_slave_1: left promiscuous mode
[   90.486239][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.488767][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.492006][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.497957][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.520348][   T13] veth1_macvtap: left promiscuous mode
[   90.522273][   T13] veth0_macvtap: left promiscuous mode
[   90.525238][   T13] veth1_vlan: left promiscuous mode
[   90.527658][   T13] veth0_vlan: left promiscuous mode
[   91.054120][ T6960] [U] :
[   91.055079][ T6960] [U] 
[   91.055952][ T6960] [U] 
[   91.056848][ T6960] [U] 
[   91.058754][ T6960] [U] 
[   91.059714][ T6960] [U] 
[   91.060598][ T6960] [U] 
[   91.061469][ T6960] [U] 
[   91.065899][ T6960] [U] 
[   91.066844][ T6960] [U] 
[   91.067762][ T6960] [U] 
[   91.068673][ T6960] [U] 
[   91.069638][ T6960] [U] 
[   91.070530][ T6960] [U] 
[   91.071411][ T6960] [U] 
[   91.072281][ T6960] [U] 
[   91.073407][ T6960] [U] 
[   91.074325][ T6960] [U] 
[   91.075650][ T6960] [U] 
[   91.076718][ T6960] [U] 
[   91.078077][ T6960] [U] 
[   91.079032][ T6960] [U] 
[   91.080003][ T6960] [U] 
[   91.081115][ T6960] [U] 
[   91.082243][ T6960] [U] 
[   91.083238][ T6960] [U] 
[   91.084138][ T6960] [U] 
[   91.085065][ T6960] [U] 
[   91.086390][ T6960] [U] 
[   91.087361][ T6960] [U] 
[   91.088355][ T6960] [U] 
[   91.089464][ T6960] [U] 
[   91.090599][ T6960] [U] 
[   91.091462][ T6960] [U] 
[   91.092355][ T6960] [U] 
[   91.093288][ T6960] [U] 
[   91.096124][ T6960] [U] 
[   91.097180][ T6960] [U] 
[   91.098152][ T6960] [U] 
[   91.099249][ T6960] [U] 
[   91.100412][ T6960] [U] 
[   91.101537][ T6960] [U] 
[   91.102603][ T6960] [U] 
[   91.103531][ T6960] [U] 
[   91.105450][ T6960] [U] 
[   91.106387][ T6960] [U] 
[   91.107484][ T6960] [U] 
[   91.108593][ T6960] [U] 
[   91.109848][ T6960] [U] 
[   91.110825][ T6960] [U] 
[   91.111813][ T6960] [U] 
[   91.112737][ T6960] [U] 
[   91.113940][ T6960] [U] 
[   91.114918][ T6960] [U] 
[   91.115885][ T6960] [U] 
[   91.116789][ T6960] [U] 
[   91.118766][ T6960] [U] 
[   91.119787][ T6960] [U] 
[   91.120865][ T6960] [U] 
[   91.121859][ T6960] [U] 
[   91.123073][ T6960] [U] 
[   91.124064][ T6960] [U] 
[   91.124946][ T6960] [U] 
[   91.125848][ T6960] [U] 
[   91.129695][ T6960] [U] 
[   91.130599][ T6960] [U] 
[   91.131484][ T6960] [U] 
[   91.132361][ T6960] [U] 
[   91.133446][ T6960] [U] 
[   91.134354][ T6960] [U] 
[   91.135360][ T6960] [U] 
[   91.136309][ T6960] [U] 
[   91.137931][ T6960] [U] 
[   91.138846][ T6960] [U] 
[   91.139733][ T6960] [U] 
[   91.140615][ T6960] [U] 
[   91.141652][ T6960] [U] 
[   91.142550][ T6960] [U] 
[   91.143432][ T6960] [U] 
[   91.144409][ T6960] [U] 
[   91.146267][ T6960] [U] 
[   91.147333][ T6960] [U] 
[   91.148406][ T6960] [U] 
[   91.149513][ T6960] [U] 
[   91.151220][ T6960] [U] 
[   91.152080][ T6960] [U] 
[   91.152958][ T6960] [U] 
[   91.153857][ T6960] [U] 
[   91.155953][ T6960] [U] 
[   91.157024][ T6960] [U] 
[   91.157119][ T6968] random: crng reseeded on system resumption
[   91.158118][ T6960] [U] 
[   91.158147][ T6960] [U] 
[   91.162311][ T6960] [U] 
[   91.163303][ T6960] [U] 
[   91.164419][ T6960] [U] 
[   91.165530][ T6960] [U] 
[   91.167092][ T6960] [U] 
[   91.168139][ T6960] [U] 
[   91.169224][ T6960] [U] 
[   91.170103][ T6960] [U] 
[   91.170236][ T6960] [U] 
[   91.172238][ T6960] [U] 
[   91.172257][ T6960] [U] 
[   91.174314][ T6960] [U] 
[   91.175240][ T6960] [U] 
[   91.176570][ T6960] [U] 
[   91.177574][ T6960] [U] 
[   91.178612][ T6960] [U] 
[   91.179934][ T6960] [U] 
[   91.180830][ T6960] [U] 
[   91.181736][ T6960] [U] 
[   91.182657][ T6960] [U] 
[   91.183745][ T6960] [U] 
[   91.184644][ T6960] [U] 
[   91.185533][ T6960] [U] 
[   91.186400][ T6960] [U] 
[   91.188961][ T6960] [U] 
[   91.189899][ T6960] [U] 
[   91.190780][ T6960] [U] 
[   91.191659][ T6960] [U] 
[   91.194747][ T6960] [U] 
[   91.195742][ T6960] [U] 
[   91.196620][ T6960] [U] 
[   91.197501][ T6960] [U] 
[   91.198657][ T6960] [U] 
[   91.199804][ T6960] [U] 
[   91.200818][ T6960] [U] 
[   91.289205][ T6953] [U] 
[   91.408565][   T13] team0 (unregistering): Port device team_slave_1 removed
[   91.454836][ T5950] Bluetooth: hci2: command tx timeout
[   91.468093][   T13] team0 (unregistering): Port device team_slave_0 removed
[   91.668835][ T6006] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   91.844794][ T6006] usb 8-1: Using ep0 maxpacket: 32
[   91.852486][ T6006] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[   91.856401][ T6006] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   91.859618][ T6006] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   91.863705][ T6006] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   91.867407][ T6006] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   91.877416][ T6006] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[   91.881589][ T6006] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.888036][ T6006] usb 8-1: Product: syz
[   91.891364][ T6006] usb 8-1: Manufacturer: syz
[   91.895106][ T6006] usb 8-1: SerialNumber: syz
[   91.901264][ T6917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.901839][ T6006] usb 8-1: config 0 descriptor??
[   91.911983][ T6963] netlink: 68 bytes leftover after parsing attributes in process `syz.0.226'.
[   91.913168][ T6972] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   91.927195][ T6006] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input9
[   91.943411][ T5344] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   91.956840][ T5344] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   91.966907][ T5344] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   91.979441][ T5344] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   92.015399][ T5344] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   92.022925][ T6511] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   92.034973][ T5344] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   92.048219][ T6917] team0: Port device team_slave_0 added
[   92.049159][ T5344] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   92.059216][ T6917] team0: Port device team_slave_1 added
[   92.093224][ T6917] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.096030][ T6917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.103963][ T6917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.108928][ T6917] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.111141][ T6917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.119306][ T6917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.134000][ T6972] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   92.150561][ T6972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.156275][ T6972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.173972][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.177007][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.179445][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.181869][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.184349][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.186915][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.189064][ T6917] hsr_slave_0: entered promiscuous mode
[   92.189403][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.191465][ T6917] hsr_slave_1: entered promiscuous mode
[   92.194498][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.197973][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.200460][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.202925][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.205559][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.207949][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.210322][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.212716][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.215185][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.217610][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.219994][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.222393][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.252475][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.255513][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.261651][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.264033][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.266623][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.269090][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.271466][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.273942][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.276707][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.279125][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.282491][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.285229][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.287622][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.290016][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.292484][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.295127][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.297555][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.299953][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.302447][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.305529][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.308451][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.311450][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.317229][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.320172][   T34] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[   92.324493][   T34] hid-generic 0000:007F:FFFFFFFE.0003: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   92.485950][   T13] IPVS: stop unused estimator thread 0...
[   92.662106][ T5964] usb 8-1: USB disconnect, device number 4
[   92.915503][ T6917] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   92.919660][ T6917] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   92.930857][ T6917] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   92.944371][ T6917] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   92.994864][ T6917] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.011966][ T6917] 8021q: adding VLAN 0 to HW filter on device team0
[   93.023970][  T185] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.027081][  T185] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.042729][  T185] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.044924][  T185] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.191515][ T6917] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.219704][ T6917] veth0_vlan: entered promiscuous mode
[   93.226359][ T7026] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[   93.228380][ T7026] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   93.234670][ T6917] veth1_vlan: entered promiscuous mode
[   93.244141][ T7026] vhci_hcd vhci_hcd.0: Device attached
[   93.269886][ T6917] veth0_macvtap: entered promiscuous mode
[   93.284930][ T6917] veth1_macvtap: entered promiscuous mode
[   93.298345][ T6917] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.308851][ T6917] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.315748][ T6917] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.318505][ T6917] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.321219][ T6917] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.327782][ T6917] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.332663][ T7019] lo speed is unknown, defaulting to 1000
[   93.401404][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.403827][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.419501][ T7027] vhci_hcd: connection closed
[   93.419774][  T220] vhci_hcd: stop threads
[   93.419791][  T220] vhci_hcd: release socket
[   93.419836][  T220] vhci_hcd: disconnect device
[   93.428082][  T220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.428095][  T220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.474582][  T838] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[   93.474613][  T838] usb 37-1: enqueue for inactive port 0
[   93.544435][  T838] vhci_hcd: vhci_device speed not set
[   94.266138][ T7059] netlink: 68 bytes leftover after parsing attributes in process `syz.3.237'.
[   94.303159][ T7061] netlink: 'syz.3.238': attribute type 21 has an invalid length.
[   94.521174][ T7064] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   94.523288][ T7064] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   94.525616][ T7064] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   95.505724][ T7091] can0: slcan on ttyprintk.
[   95.581985][ T7097] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[   95.584116][ T7097] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   95.590441][ T7097] vhci_hcd vhci_hcd.0: Device attached
[   95.854344][   T53] usb 43-1: new low-speed USB device number 3 using vhci_hcd
[   96.066400][ T7108] netlink: 68 bytes leftover after parsing attributes in process `syz.0.247'.
[   96.098093][ T7113] netlink: 'syz.0.248': attribute type 21 has an invalid length.
[   96.118611][ T7084] can0 (unregistered): slcan off ttyprintk.
[   96.261812][  T220] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.382011][ T7098] vhci_hcd: connection reset by peer
[   96.384051][   T12] vhci_hcd: stop threads
[   96.385533][   T12] vhci_hcd: release socket
[   96.387015][   T12] vhci_hcd: disconnect device
[   96.456664][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   96.461763][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   96.465828][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   96.470948][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   96.474722][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   96.504350][ T5955] Bluetooth: hci1: command 0x0c1a tx timeout
[   96.582613][ T7128] lo speed is unknown, defaulting to 1000
[   96.584475][ T5955] Bluetooth: hci3: command 0x0c1a tx timeout
[   96.584495][ T5950] Bluetooth: hci0: command 0x0c1a tx timeout
[   96.633429][ T7136] netlink: 'syz.0.254': attribute type 10 has an invalid length.
[   96.649939][ T7136] wlan1: mtu less than device minimum
[   96.651682][ T7136] : (slave wlan1): Error -22 calling dev_set_mtu
[   96.661185][ T7139] netlink: 68 bytes leftover after parsing attributes in process `syz.1.255'.
[   96.701705][ T7128] chnl_net:caif_netlink_parms(): no params data found
[   96.788677][ T7128] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.791560][ T7128] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.794790][ T7128] bridge_slave_0: entered allmulticast mode
[   96.797544][ T7128] bridge_slave_0: entered promiscuous mode
[   96.801736][ T7128] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.804181][ T7128] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.807057][ T7128] bridge_slave_1: entered allmulticast mode
[   96.809801][ T7128] bridge_slave_1: entered promiscuous mode
[   96.840392][ T7128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.845044][ T7128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.873465][ T7142] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   96.876085][ T7142] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   96.878543][ T7142] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   96.881024][ T7142] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   96.883483][ T7142] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   96.887610][ T7142] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   96.891698][ T7128] team0: Port device team_slave_0 added
[   96.900597][ T7128] team0: Port device team_slave_1 added
[   96.958364][ T7128] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.960977][ T7128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.969265][ T7128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.974143][ T7128] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.976423][ T7128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.984527][ T7128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.061273][ T7128] hsr_slave_0: entered promiscuous mode
[   97.063558][ T7128] hsr_slave_1: entered promiscuous mode
[   97.065764][ T7128] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   97.068107][ T7128] Cannot create hsr debugfs directory
[   97.174111][ T7158] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[   97.176515][ T7158] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   97.181911][ T7158] vhci_hcd vhci_hcd.0: Device attached
[   97.205211][ T7156] lo speed is unknown, defaulting to 1000
[   97.254750][ T7159] vhci_hcd: connection closed
[   97.256320][   T46] vhci_hcd: stop threads
[   97.261179][   T46] vhci_hcd: release socket
[   97.263749][   T46] vhci_hcd: disconnect device
[   97.309304][ T7164] program syz.3.258 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   97.639842][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'.
[   97.758469][ T7173] FAULT_INJECTION: forcing a failure.
[   97.758469][ T7173] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   97.762786][ T7173] CPU: 2 UID: 0 PID: 7173 Comm: syz.0.263 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) 
[   97.762802][ T7173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   97.762808][ T7173] Call Trace:
[   97.762812][ T7173]  <TASK>
[   97.762817][ T7173]  dump_stack_lvl+0x16c/0x1f0
[   97.762839][ T7173]  should_fail_ex+0x512/0x640
[   97.762854][ T7173]  _copy_to_user+0x32/0xd0
[   97.762868][ T7173]  simple_read_from_buffer+0xcb/0x170
[   97.762884][ T7173]  proc_fail_nth_read+0x197/0x270
[   97.762899][ T7173]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   97.762913][ T7173]  ? rw_verify_area+0xcf/0x680
[   97.762928][ T7173]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   97.762941][ T7173]  vfs_read+0x1e1/0xc60
[   97.762956][ T7173]  ? fdget_pos+0x2a2/0x370
[   97.762974][ T7173]  ? __pfx_vfs_read+0x10/0x10
[   97.762988][ T7173]  ? find_held_lock+0x2b/0x80
[   97.763003][ T7173]  ? __fget_files+0x20e/0x3c0
[   97.763022][ T7173]  ksys_read+0x12a/0x250
[   97.763038][ T7173]  ? __pfx_ksys_read+0x10/0x10
[   97.763055][ T7173]  ? rcu_is_watching+0x12/0xc0
[   97.763069][ T7173]  __do_fast_syscall_32+0x7c/0x3a0
[   97.763081][ T7173]  do_fast_syscall_32+0x32/0x80
[   97.763092][ T7173]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   97.763107][ T7173] RIP: 0023:0xf70de579
[   97.763115][ T7173] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   97.763125][ T7173] RSP: 002b:00000000f50ce590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[   97.763135][ T7173] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50ce620
[   97.763142][ T7173] RDX: 000000000000000f RSI: 00000000f7442ff4 RDI: 0000000000000000
[   97.763148][ T7173] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[   97.763154][ T7173] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[   97.763160][ T7173] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   97.763172][ T7173]  </TASK>
[   97.958595][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'.
[   97.961993][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'.
[   98.362917][ T7185] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[   98.364904][ T7185] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   98.368603][ T7185] vhci_hcd vhci_hcd.0: Device attached
[   98.521168][  T220] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.624304][ T6007] usb 37-1: new low-speed USB device number 3 using vhci_hcd
[   98.652860][  T220] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.725740][  T220] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.839244][  T220] bridge_slave_1: left allmulticast mode
[   98.842133][  T220] bridge_slave_1: left promiscuous mode
[   98.844709][  T220] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.849454][  T220] bridge_slave_0: left allmulticast mode
[   98.851580][  T220] bridge_slave_0: left promiscuous mode
[   98.853563][  T220] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.904663][ T5950] Bluetooth: hci3: command 0x0c1a tx timeout
[   98.904756][ T5309] Bluetooth: hci0: command 0x0c1a tx timeout
[   98.906694][ T5950] Bluetooth: hci1: command 0x0c1a tx timeout
[   98.908065][ T5955] Bluetooth: hci2: command 0x041b tx timeout
[   98.948728][ T7186] vhci_hcd: connection reset by peer
[   98.962328][   T12] vhci_hcd: stop threads
[   98.964093][   T12] vhci_hcd: release socket
[   98.966594][   T12] vhci_hcd: disconnect device
[   99.119660][  T220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   99.125517][  T220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   99.130361][  T220] bond0 (unregistering): Released all slaves
[   99.617823][  T220] hsr_slave_0: left promiscuous mode
[   99.619926][  T220] hsr_slave_1: left promiscuous mode
[   99.621876][  T220] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.624124][  T220] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.629947][  T220] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.632266][  T220] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.653230][  T220] veth1_macvtap: left promiscuous mode
[   99.655079][  T220] veth0_macvtap: left promiscuous mode
[   99.657391][  T220] veth1_vlan: left promiscuous mode
[   99.659445][  T220] veth0_vlan: left promiscuous mode
[   99.686915][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.275'.
[   99.697937][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.275'.
[  100.116908][ T7241] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  100.118911][ T7241] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  100.121648][ T7241] vhci_hcd vhci_hcd.0: Device attached
[  100.304298][  T838] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  100.311713][  T220] team0 (unregistering): Port device team_slave_1 removed
[  100.373674][  T220] team0 (unregistering): Port device team_slave_0 removed
[  100.466237][  T838] usb 6-1: Using ep0 maxpacket: 32
[  100.472596][  T838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  100.476465][  T838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  100.480278][  T838] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  100.484149][  T838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  100.488505][  T838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  100.494400][  T838] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  100.497603][  T838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.500507][  T838] usb 6-1: Product: syz
[  100.502053][  T838] usb 6-1: Manufacturer: syz
[  100.503741][  T838] usb 6-1: SerialNumber: syz
[  100.511557][  T838] usb 6-1: config 0 descriptor??
[  100.514170][ T7240] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  100.526592][  T838] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input10
[  100.531633][ T5344] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  100.538707][ T5344] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  100.543015][ T5344] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  100.554789][ T5344] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  100.569081][ T5344] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  100.579558][ T6511] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  100.594922][ T5344] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  100.722792][ T7240] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  100.733252][ T7240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.737086][ T7240] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.751621][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.754038][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.756483][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.759457][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.761839][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.764412][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.766813][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.769181][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.771522][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.773982][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.776649][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.779134][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.781808][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.784353][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.786761][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.789281][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.792064][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.795444][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.797802][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.800269][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.802670][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.805097][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.807570][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.810282][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.812761][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.815393][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.817711][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.820527][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.823434][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.826071][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.828792][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.835435][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.837873][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.840298][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.842758][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.845144][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.847543][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.849997][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.852274][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.854868][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.857215][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.859797][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.862466][   T34] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  100.869344][   T34] hid-generic 0000:007F:FFFFFFFE.0004: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  100.885062][ T7242] vhci_hcd: connection closed
[  100.885178][  T185] vhci_hcd: stop threads
[  100.888036][  T185] vhci_hcd: release socket
[  100.889479][  T185] vhci_hcd: disconnect device
[  100.984441][ T5950] Bluetooth: hci2: command 0x041b tx timeout
[  100.984461][   T53] vhci_hcd: vhci_device speed not set
[  101.030493][ T7128] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  101.040169][ T7256] FAULT_INJECTION: forcing a failure.
[  101.040169][ T7256] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  101.045166][ T7128] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  101.045721][ T7256] CPU: 1 UID: 0 PID: 7256 Comm: syz.0.281 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) 
[  101.045736][ T7256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  101.045746][ T7256] Call Trace:
[  101.045751][ T7256]  <TASK>
[  101.045758][ T7256]  dump_stack_lvl+0x16c/0x1f0
[  101.045782][ T7256]  should_fail_ex+0x512/0x640
[  101.045801][ T7256]  _copy_from_user+0x2e/0xd0
[  101.045822][ T7256]  bpf_test_init.isra.0+0xe2/0x140
[  101.045837][ T7256]  bpf_prog_test_run_skb+0x245/0x2280
[  101.045851][ T7256]  ? __fget_files+0x204/0x3c0
[  101.045869][ T7256]  ? __fget_files+0x20e/0x3c0
[  101.045883][ T7256]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  101.045898][ T7256]  ? fput+0x70/0xf0
[  101.045910][ T7256]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  101.045923][ T7256]  __sys_bpf+0x1488/0x4d80
[  101.045935][ T7256]  ? __pfx___sys_bpf+0x10/0x10
[  101.045945][ T7256]  ? ksys_write+0x190/0x250
[  101.045968][ T7256]  ? __mutex_unlock_slowpath+0x161/0x6a0
[  101.045998][ T7256]  ? fput+0x70/0xf0
[  101.046009][ T7256]  ? ksys_write+0x1ac/0x250
[  101.046025][ T7256]  ? __pfx_ksys_write+0x10/0x10
[  101.046043][ T7256]  __ia32_sys_bpf+0x76/0xe0
[  101.046054][ T7256]  __do_fast_syscall_32+0x7c/0x3a0
[  101.046066][ T7256]  do_fast_syscall_32+0x32/0x80
[  101.046077][ T7256]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  101.046091][ T7256] RIP: 0023:0xf70de579
[  101.046099][ T7256] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  101.046110][ T7256] RSP: 002b:00000000f50ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165
[  101.046120][ T7256] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000300
[  101.046127][ T7256] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000
[  101.046133][ T7256] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  101.046138][ T7256] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  101.046144][ T7256] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  101.046157][ T7256]  </TASK>
[  101.127986][ T7238] lo speed is unknown, defaulting to 1000
[  101.134966][ T7260] mkiss: ax0: crc mode is auto.
[  101.137905][ T7128] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  101.145905][ T7128] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  101.209972][ T7128] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.220401][ T7128] 8021q: adding VLAN 0 to HW filter on device team0
[  101.228204][  T185] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.230336][  T185] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.235996][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.238120][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.238371][ T5964] usb 6-1: USB disconnect, device number 2
[  101.359913][ T7128] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.380903][ T7128] veth0_vlan: entered promiscuous mode
[  101.386082][ T7128] veth1_vlan: entered promiscuous mode
[  101.401636][ T7128] veth0_macvtap: entered promiscuous mode
[  101.405829][ T7128] veth1_macvtap: entered promiscuous mode
[  101.413898][ T7128] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.419818][ T7128] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.424099][ T7128] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.426833][ T7128] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.429451][ T7128] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.432068][ T7128] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.547046][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.550191][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.564011][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.566921][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.915627][ T7282] can0: slcan on ttyprintk.
[  102.060971][ T7284] netlink: 'syz.1.284': attribute type 4 has an invalid length.
[  102.063383][ T7284] netlink: 152 bytes leftover after parsing attributes in process `syz.1.284'.
[  102.067458][ T7284] wlan1: mtu less than device minimum
[  102.083512][ T7284] bio_check_eod: 38 callbacks suppressed
[  102.083524][ T7284] syz.1.284: attempt to access beyond end of device
[  102.083524][ T7284] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0
[  102.089541][ T7284] XFS (nbd1): SB validate failed with error -5.
[  102.455411][ T7279] can0 (unregistered): slcan off ttyprintk.
[  102.659343][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'.
[  102.668854][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'.
[  103.218454][ T7336] program syz.0.293 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  103.612388][   T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.821568][ T5309] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  103.825452][ T5309] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  103.828213][ T5309] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  103.831741][ T5309] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  103.835061][ T5309] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  103.923798][ T7349] lo speed is unknown, defaulting to 1000
[  103.998800][ T7349] chnl_net:caif_netlink_parms(): no params data found
[  104.135803][ T7349] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.141581][ T6007] vhci_hcd: vhci_device speed not set
[  104.141643][ T7349] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.151488][ T7349] bridge_slave_0: entered allmulticast mode
[  104.163842][ T7349] bridge_slave_0: entered promiscuous mode
[  104.197032][ T7359] can0: slcan on ttyprintk.
[  104.201332][ T7349] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.203986][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.206763][ T7349] bridge_slave_1: entered allmulticast mode
[  104.210140][ T7349] bridge_slave_1: entered promiscuous mode
[  104.246431][ T7349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.251322][ T7349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.285795][ T7349] team0: Port device team_slave_0 added
[  104.290037][ T7349] team0: Port device team_slave_1 added
[  104.321741][ T7349] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.323898][ T7349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.332140][ T7349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.336575][ T7349] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.338691][ T7349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.346721][ T7349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.394012][ T7349] hsr_slave_0: entered promiscuous mode
[  104.397375][ T7349] hsr_slave_1: entered promiscuous mode
[  104.585998][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'.
[  104.595831][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'.
[  104.615438][ T7346] can0 (unregistered): slcan off ttyprintk.
[  104.758459][ T7395] syz1: rxe_newlink: already configured on syz_tun
[  105.039528][ T7412] program syz.1.308 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  105.372927][ T7422] can0: slcan on ttyprintk.
[  105.554436][   T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.617490][   T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.759481][   T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.854411][ T5309] Bluetooth: hci2: command tx timeout
[  105.891163][   T46] bridge_slave_1: left allmulticast mode
[  105.893042][   T46] bridge_slave_1: left promiscuous mode
[  105.901459][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.905661][   T46] bridge_slave_0: left allmulticast mode
[  105.907385][   T46] bridge_slave_0: left promiscuous mode
[  105.909149][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.099321][ T7441] rdma_rxe: rxe_newlink: failed to add syz_tun
[  106.115827][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.316'.
[  106.119037][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.316'.
[  106.184465][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.188552][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.191970][   T46] bond0 (unregistering): Released all slaves
[  106.338007][ T7418] can0 (unregistered): slcan off ttyprintk.
[  106.657839][ T7472] program syz.1.323 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  106.891575][   T46] hsr_slave_0: left promiscuous mode
[  106.893746][   T46] hsr_slave_1: left promiscuous mode
[  106.896174][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.898469][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.901156][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.903466][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.927648][   T46] veth1_macvtap: left promiscuous mode
[  106.929351][   T46] veth0_macvtap: left promiscuous mode
[  106.931104][   T46] veth1_vlan: left promiscuous mode
[  106.932737][   T46] veth0_vlan: left promiscuous mode
[  106.935716][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.328'.
[  106.938951][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.328'.
[  107.532477][ T7499] rdma_rxe: rxe_newlink: failed to add syz_tun
[  107.575923][   T46] team0 (unregistering): Port device team_slave_1 removed
[  107.635177][   T46] team0 (unregistering): Port device team_slave_0 removed
[  107.934418][ T5309] Bluetooth: hci2: command tx timeout
[  108.146412][ T7519] program syz.3.337 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  108.538472][ T7349] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  108.553813][ T7349] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  108.566173][ T7349] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  108.573312][ T7349] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  108.661686][ T7349] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.689415][ T7349] 8021q: adding VLAN 0 to HW filter on device team0
[  108.718474][ T7349] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  108.725997][ T7349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  108.809897][ T7349] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.828052][ T7349] veth0_vlan: entered promiscuous mode
[  108.841061][ T7349] veth1_vlan: entered promiscuous mode
[  108.858589][ T7349] veth0_macvtap: entered promiscuous mode
[  108.862347][ T7349] veth1_macvtap: entered promiscuous mode
[  108.873589][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.877927][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.881624][ T7349] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.894708][ T7349] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.897423][ T7349] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.900136][ T7349] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.929667][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.932884][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.946802][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.949323][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.973793][  T220] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.976100][  T220] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.985130][  T220] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.987388][  T220] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.070170][ T7545] can0: slcan on ttyprintk.
[  109.286374][ T7509] can0 (unregistered): slcan off ttyprintk.
[  109.457769][ T7561] syz1: rxe_newlink: already configured on syz_tun
[  109.705140][ T7568] program syz.1.341 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  109.900344][ T7576] netlink: 'syz.0.344': attribute type 10 has an invalid length.
[  109.903556][ T7576] wlan1: mtu less than device minimum
[  109.906301][ T7576] : (slave wlan1): Error -22 calling dev_set_mtu
[  110.248950][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'.
[  110.252645][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'.
[  110.807580][ T7592] can0: slcan on ttyprintk.
[  110.820152][ T7595] rdma_rxe: rxe_newlink: failed to add syz_tun
[  110.875900][ T7597] program syz.1.348 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  111.130321][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.694715][ T7588] can0 (unregistered): slcan off ttyprintk.
[  111.814902][ T5950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  111.820505][ T5950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  111.823711][ T5950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  111.834553][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  111.844531][ T5950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  111.992409][ T7623] lo speed is unknown, defaulting to 1000
[  112.111346][ T7637] syzkaller0: entered promiscuous mode
[  112.113523][ T7637] syzkaller0: entered allmulticast mode
[  112.120665][ T7623] chnl_net:caif_netlink_parms(): no params data found
[  112.124469][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'.
[  112.127821][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'.
[  112.202611][ T7623] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.205707][ T7623] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.208021][ T7623] bridge_slave_0: entered allmulticast mode
[  112.210754][ T7623] bridge_slave_0: entered promiscuous mode
[  112.213964][ T7623] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.216773][ T7623] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.219238][ T7623] bridge_slave_1: entered allmulticast mode
[  112.221864][ T7623] bridge_slave_1: entered promiscuous mode
[  112.314861][ T7652] FAULT_INJECTION: forcing a failure.
[  112.314861][ T7652] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  112.320424][ T7652] CPU: 3 UID: 0 PID: 7652 Comm: syz.0.359 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) 
[  112.320441][ T7652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  112.320448][ T7652] Call Trace:
[  112.320452][ T7652]  <TASK>
[  112.320457][ T7652]  dump_stack_lvl+0x16c/0x1f0
[  112.320479][ T7652]  should_fail_ex+0x512/0x640
[  112.320495][ T7652]  _copy_to_user+0x32/0xd0
[  112.320510][ T7652]  simple_read_from_buffer+0xcb/0x170
[  112.320527][ T7652]  proc_fail_nth_read+0x197/0x270
[  112.320542][ T7652]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  112.320556][ T7652]  ? rw_verify_area+0xcf/0x680
[  112.320571][ T7652]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  112.320585][ T7652]  vfs_read+0x1e1/0xc60
[  112.320601][ T7652]  ? fdget_pos+0x2a2/0x370
[  112.320618][ T7652]  ? __pfx_vfs_read+0x10/0x10
[  112.320633][ T7652]  ? find_held_lock+0x2b/0x80
[  112.320648][ T7652]  ? __fget_files+0x20e/0x3c0
[  112.320668][ T7652]  ksys_read+0x12a/0x250
[  112.320683][ T7652]  ? __pfx_ksys_read+0x10/0x10
[  112.320700][ T7652]  ? rcu_is_watching+0x12/0xc0
[  112.320714][ T7652]  __do_fast_syscall_32+0x7c/0x3a0
[  112.320726][ T7652]  do_fast_syscall_32+0x32/0x80
[  112.320737][ T7652]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  112.320752][ T7652] RIP: 0023:0xf70de579
[  112.320761][ T7652] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  112.320771][ T7652] RSP: 002b:00000000f50ce590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  112.320781][ T7652] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f50ce620
[  112.320788][ T7652] RDX: 000000000000000f RSI: 00000000f7442ff4 RDI: 0000000000000000
[  112.320794][ T7652] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  112.320800][ T7652] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  112.320806][ T7652] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  112.320825][ T7652]  </TASK>
[  112.411508][ T7654] syz1: rxe_newlink: already configured on syz_tun
[  112.734934][ T7663] program syz.0.362 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  113.450362][ T7623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.455305][ T7623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  113.455480][ T7669] slcan: can't register candev
[  113.468624][ T7669] Falling back ldisc for ttyprintk.
[  113.631022][ T7623] team0: Port device team_slave_0 added
[  113.635179][ T7623] team0: Port device team_slave_1 added
[  113.680617][ T7623] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.682793][ T7623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.694885][ T7623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.714047][ T7623] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.723505][ T7623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.733797][ T7623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.854765][ T5950] Bluetooth: hci2: command tx timeout
[  113.857419][ T7623] hsr_slave_0: entered promiscuous mode
[  113.859861][ T7623] hsr_slave_1: entered promiscuous mode
[  113.862219][ T7623] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  113.866665][ T7623] Cannot create hsr debugfs directory
[  113.888629][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'.
[  113.896598][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'.
[  113.941746][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.010787][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.019297][ T7693] rdma_rxe: rxe_newlink: failed to add syz_tun
[  114.113165][ T7697] netlink: 'syz.3.373': attribute type 10 has an invalid length.
[  114.137446][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.263407][   T12] bridge_slave_1: left allmulticast mode
[  114.265339][   T12] bridge_slave_1: left promiscuous mode
[  114.267298][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.270915][   T12] bridge_slave_0: left allmulticast mode
[  114.272789][   T12] bridge_slave_0: left promiscuous mode
[  114.277326][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.564080][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.565309][ T7709] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  114.569235][ T7709] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  114.569749][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.569962][ T7709] vhci_hcd vhci_hcd.0: Device attached
[  114.578525][   T12] bond0 (unregistering): Released all slaves
[  114.718149][ T7708] lo speed is unknown, defaulting to 1000
[  114.778270][ T7710] vhci_hcd: connection closed
[  114.778480][ T1196] vhci_hcd: stop threads
[  114.778492][ T1196] vhci_hcd: release socket
[  114.778713][ T1196] vhci_hcd: disconnect device
[  114.804339][ T1459] usb 39-1: new low-speed USB device number 3 using vhci_hcd
[  114.804379][ T1459] usb 39-1: enqueue for inactive port 0
[  114.874670][ T1459] vhci_hcd: vhci_device speed not set
[  115.064271][   T12] hsr_slave_0: left promiscuous mode
[  115.071030][   T12] hsr_slave_1: left promiscuous mode
[  115.071441][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.071462][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.079064][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.093588][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.123686][   T12] veth1_macvtap: left promiscuous mode
[  115.123737][   T12] veth0_macvtap: left promiscuous mode
[  115.123845][   T12] veth1_vlan: left promiscuous mode
[  115.123919][   T12] veth0_vlan: left promiscuous mode
[  115.460096][   T34] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  115.689233][   T12] team0 (unregistering): Port device team_slave_1 removed
[  115.751325][   T12] team0 (unregistering): Port device team_slave_0 removed
[  115.824361][   T34] usb 5-1: Using ep0 maxpacket: 32
[  115.828257][   T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  115.831673][   T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  115.834672][   T34] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  115.838147][   T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  115.841416][   T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  115.846474][   T34] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  115.849010][   T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.851473][   T34] usb 5-1: Product: syz
[  115.852732][   T34] usb 5-1: Manufacturer: syz
[  115.854143][   T34] usb 5-1: SerialNumber: syz
[  115.858801][   T34] usb 5-1: config 0 descriptor??
[  115.860798][ T7738] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  115.868771][   T34] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input11
[  115.872515][ T5344] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  115.876883][ T5344] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  115.887109][ T5344] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  115.890961][ T5344] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  115.909940][ T6511] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  115.914439][ T5344] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  115.929556][ T5344] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  115.936603][ T5950] Bluetooth: hci2: command tx timeout
[  115.939860][ T5344] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  116.069834][ T7738] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  116.077163][ T7738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.083196][ T7738] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.165335][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.167752][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.170168][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.172499][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.175059][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.177580][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.179966][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.182431][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.188120][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.190772][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.193223][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.195759][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.198444][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.200835][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.203266][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.205800][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.208178][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.210606][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.213040][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.215484][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.217941][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.220342][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.222896][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.226143][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.229417][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.232722][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.236054][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.239392][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.242685][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.245886][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.249159][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.252334][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.277629][   T61] smc: removing ib device syz1
[  116.311354][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.313824][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.324294][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.326792][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.329337][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.331797][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.336859][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.339628][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.342114][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.345123][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.347913][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  116.355765][ T6007] hid-generic 0000:007F:FFFFFFFE.0005: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  116.494035][ T7623] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  116.499960][ T7623] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  116.506347][ T7623] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  116.510994][ T7623] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  116.621324][ T7757] program syz.1.382 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  116.653943][ T7623] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.685824][ T7623] 8021q: adding VLAN 0 to HW filter on device team0
[  116.691228][ T1196] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.693445][ T1196] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.696060][ T6007] usb 5-1: USB disconnect, device number 3
[  116.709040][ T1196] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.712052][ T1196] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.858285][   T61] ------------[ cut here ]------------
[  116.860352][   T61] GID entry ref leak for dev syz1 index 2 ref=2
[  116.866319][   T61] WARNING: CPU: 1 PID: 61 at drivers/infiniband/core/cache.c:806 gid_table_release_one+0x387/0x4b0
[  116.869678][   T61] Modules linked in:
[  116.871161][   T61] CPU: 1 UID: 0 PID: 61 Comm: kworker/u32:3 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) 
[  116.876171][   T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  116.879362][   T61] Workqueue: ib-unreg-wq ib_unregister_work
[  116.881142][   T61] RIP: 0010:gid_table_release_one+0x387/0x4b0
[  116.882984][   T61] Code: 07 00 00 48 85 f6 74 2b 48 89 74 24 38 e8 01 b5 35 f9 48 8b 74 24 38 44 89 f1 44 89 ea 48 c7 c7 00 03 99 8c e8 5a d3 f4 f8 90 <0f> 0b 90 90 e9 6e fe ff ff e8 db b4 35 f9 48 8d bd 48 07 00 00 48
[  116.889172][   T61] RSP: 0018:ffffc900007cfb50 EFLAGS: 00010286
[  116.891109][   T61] RAX: 0000000000000000 RBX: ffff88804fd4be00 RCX: ffffffff817a92c8
[  116.893595][   T61] RDX: ffff888020164880 RSI: ffffffff817a92d5 RDI: 0000000000000001
[  116.896957][   T61] RBP: ffff88802af24000 R08: 0000000000000001 R09: 0000000000000000
[  116.899399][   T61] R10: 0000000000000001 R11: 0000000000000001 R12: ffffed1009fa97db
[  116.901861][   T61] R13: 0000000000000002 R14: 0000000000000002 R15: dffffc0000000000
[  116.904572][   T61] FS:  0000000000000000(0000) GS:ffff888097872000(0000) knlGS:0000000000000000
[  116.907297][   T61] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.909459][   T61] CR2: 0000000056824414 CR3: 000000006a3ca000 CR4: 0000000000352ef0
[  116.911919][   T61] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  116.914432][   T61] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  116.916750][   T61] Call Trace:
[  116.917773][   T61]  <TASK>
[  116.918692][   T61]  ib_device_release+0xef/0x1e0
[  116.920162][   T61]  ? __pfx_ib_device_release+0x10/0x10
[  116.921801][   T61]  device_release+0xa1/0x240
[  116.923186][   T61]  kobject_put+0x1e7/0x5a0
[  116.924715][   T61]  put_device+0x1f/0x30
[  116.926006][   T61]  process_one_work+0x9cf/0x1b70
[  116.927497][   T61]  ? __pfx_netdevice_event_work_handler+0x10/0x10
[  116.929473][   T61]  ? __pfx_process_one_work+0x10/0x10
[  116.931259][   T61]  ? assign_work+0x1a0/0x250
[  116.932752][   T61]  worker_thread+0x6c8/0xf10
[  116.934191][   T61]  ? __kthread_parkme+0x19e/0x250
[  116.935836][   T61]  ? __pfx_worker_thread+0x10/0x10
[  116.937390][   T61]  kthread+0x3c2/0x780
[  116.938621][   T61]  ? __pfx_kthread+0x10/0x10
[  116.940051][   T61]  ? rcu_is_watching+0x12/0xc0
[  116.941498][   T61]  ? __pfx_kthread+0x10/0x10
[  116.942944][   T61]  ret_from_fork+0x5d7/0x6f0
[  116.944877][   T61]  ? __pfx_kthread+0x10/0x10
[  116.946412][   T61]  ret_from_fork_asm+0x1a/0x30
[  116.947831][   T61]  </TASK>
[  116.948769][   T61] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  116.950976][   T61] CPU: 1 UID: 0 PID: 61 Comm: kworker/u32:3 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) 
[  116.954438][   T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  116.957659][   T61] Workqueue: ib-unreg-wq ib_unregister_work
[  116.959726][   T61] Call Trace:
[  116.960788][   T61]  <TASK>
[  116.961699][   T61]  dump_stack_lvl+0x3d/0x1f0
[  116.963084][   T61]  panic+0x71c/0x800
[  116.964384][   T61]  ? __pfx_panic+0x10/0x10
[  116.965991][   T61]  ? show_trace_log_lvl+0x29b/0x3e0
[  116.968201][   T61]  ? check_panic_on_warn+0x1f/0xb0
[  116.970032][   T61]  ? gid_table_release_one+0x387/0x4b0
[  116.971845][   T61]  check_panic_on_warn+0xab/0xb0
[  116.973373][   T61]  __warn+0xf6/0x3c0
[  116.974733][   T61]  ? preempt_schedule_notrace+0x62/0xe0
[  116.976374][   T61]  ? gid_table_release_one+0x387/0x4b0
[  116.977999][   T61]  report_bug+0x3c3/0x580
[  116.979309][   T61]  ? gid_table_release_one+0x387/0x4b0
[  116.980947][   T61]  handle_bug+0x184/0x210
[  116.982221][   T61]  exc_invalid_op+0x17/0x50
[  116.983611][   T61]  asm_exc_invalid_op+0x1a/0x20
[  116.985097][   T61] RIP: 0010:gid_table_release_one+0x387/0x4b0
[  116.986932][   T61] Code: 07 00 00 48 85 f6 74 2b 48 89 74 24 38 e8 01 b5 35 f9 48 8b 74 24 38 44 89 f1 44 89 ea 48 c7 c7 00 03 99 8c e8 5a d3 f4 f8 90 <0f> 0b 90 90 e9 6e fe ff ff e8 db b4 35 f9 48 8d bd 48 07 00 00 48
[  116.992699][   T61] RSP: 0018:ffffc900007cfb50 EFLAGS: 00010286
[  116.994517][   T61] RAX: 0000000000000000 RBX: ffff88804fd4be00 RCX: ffffffff817a92c8
[  116.996846][   T61] RDX: ffff888020164880 RSI: ffffffff817a92d5 RDI: 0000000000000001
[  116.999233][   T61] RBP: ffff88802af24000 R08: 0000000000000001 R09: 0000000000000000
[  117.001902][   T61] R10: 0000000000000001 R11: 0000000000000001 R12: ffffed1009fa97db
[  117.004267][   T61] R13: 0000000000000002 R14: 0000000000000002 R15: dffffc0000000000
[  117.006664][   T61]  ? __warn_printk+0x198/0x350
[  117.008178][   T61]  ? __warn_printk+0x1a5/0x350
[  117.009726][   T61]  ib_device_release+0xef/0x1e0
[  117.011227][   T61]  ? __pfx_ib_device_release+0x10/0x10
[  117.013106][   T61]  device_release+0xa1/0x240
[  117.014500][   T61]  kobject_put+0x1e7/0x5a0
[  117.015839][   T61]  put_device+0x1f/0x30
[  117.017336][   T61]  process_one_work+0x9cf/0x1b70
[  117.019299][   T61]  ? __pfx_netdevice_event_work_handler+0x10/0x10
[  117.021811][   T61]  ? __pfx_process_one_work+0x10/0x10
[  117.023973][   T61]  ? assign_work+0x1a0/0x250
[  117.025849][   T61]  worker_thread+0x6c8/0xf10
[  117.027682][   T61]  ? __kthread_parkme+0x19e/0x250
[  117.029728][   T61]  ? __pfx_worker_thread+0x10/0x10
[  117.031812][   T61]  kthread+0x3c2/0x780
[  117.033526][   T61]  ? __pfx_kthread+0x10/0x10
[  117.035317][   T61]  ? rcu_is_watching+0x12/0xc0
[  117.037195][   T61]  ? __pfx_kthread+0x10/0x10
[  117.039009][   T61]  ret_from_fork+0x5d7/0x6f0
[  117.040825][   T61]  ? __pfx_kthread+0x10/0x10
[  117.042626][   T61]  ret_from_fork_asm+0x1a/0x30
[  117.044558][   T61]  </TASK>
[  117.046390][   T61] Kernel Offset: disabled
[  117.048063][   T61] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:43:38  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff8e3c4b40 RCX=0000000000000002 RDX=0000000000000000
RSI=ffffffff8dcfc308 RDI=ffffffff8bf533a0 RBP=0000000000000002 RSP=ffffc9002357f130
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000012100
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8197f84f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ffaf0ccac80 ffffffff 00c00000
GS =0000 ffff888097772000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007ffaf0e89230 CR3=0000000025486000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff0000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ffff
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 002b002b002b002c 002b000000004554
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004554
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 002d002b002b002b 002c002b00000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffaf1035b20 00007ffaf1036050
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000055 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8555fc15 RDI=ffffffff9ae5ca00 RBP=ffffffff9ae5c9c0 RSP=ffffc900007cf4c0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=0000000000000055 R14=ffffffff9ae5c9c0 R15=ffffffff8555fbb0
RIP=ffffffff8555fc3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888097872000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000056824414 CR3=000000006a3ca000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=ffffea00006cb0c0 RCX=ffffffff81fcd2ee RDX=ffff8880245ac880
RSI=ffffffff81fccd27 RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc900045f6c38
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=ffff88804a595f10 R13=0000000000002251 R14=0000000000000000 R15=0000000000002251
RIP=ffffffff81bb7326 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888097972000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000ff8bef6f CR3=000000002878e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=ffffc90000415110 RBX=0000000000000000 RCX=1ffff11004e7e206 RDX=0000000000000008
RSI=ffffc90000415100 RDI=ffff8880273f1030 RBP=ffff8880273f1400 RSP=ffffc900005e8e58
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=dffffc0000000000 R13=0000000000000001 R14=ffffed1004e7e28a R15=ffff888022cb0000
RIP=ffffffff865d30fd RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888097a72000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000000000000 CR3=000000002993a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 170e8a8c37aea900 6bbf2c232a5bf20d
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a39b7f5c7ba952cf 1d5e780d6c552631
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fc688868d9c29025 6a269712a4624703
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a35fb124c9b17ce5 8eac7270febcfecc
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000005a80
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 725a0080f7340080 004802de2e340080
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000001000000 0100000005780080
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 004802c501000000 16e40080004802bd
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000000480382 0048033801000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 35f3daa7a3001ec3 3d24627a6796eb1f
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c678cdea2770f405 bce433049fd19188
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 67203630383a632e 65686361632f6572 6f632f646e616269 6e69666e692f7372
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 34323031206f7420 676e697474657320 2c31393339352074 656b63617078616d
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2064696c61766e69 2073616820463878 3020746e696f7064 6e65203020676e69
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74746573746c6120 3020656361667265 746e692030206769 666e6f63203a312d
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3520627375205d34 33542020205b5d36 31343134382e3531 3120205b203a6c65
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000