last executing test programs:

8m33.434587905s ago: executing program 3 (id=110):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000140)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0], 0x50)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, 0x0, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x0)
getdents64(r2, &(0x7f0000001400)=""/4096, 0x1000)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r7, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
shutdown(r7, 0x2)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000200))
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000180)=0x6)
ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f00000013c0))
read$dsp(r8, &(0x7f0000000440)=""/171, 0xab)

8m33.299889933s ago: executing program 1 (id=111):
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x209d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4000)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x80800, &(0x7f0000000380)={[{@index_off}, {@uuid_null}, {@index_off}, {@uuid_on}, {@xino_auto}, {@metacopy_on}, {@xino_on}, {@nfs_export_on}, {@volatile}], [{@smackfsroot={'smackfsroot', 0x3d, 'netdevsim0\x00'}}, {@permit_directio}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x34, 0x30, 0x32, 0x37, 0x66, 0x62, 0x38], 0x2d, [0x35, 0x33, 0x62, 0x61], 0x2d, [0x66, 0x37, 0x37, 0x39], 0x2d, [0x32, 0x35, 0x34, 0x39], 0x2d, [0x65, 0x39, 0x34, 0x62, 0x38, 0x39, 0x66, 0x65]}}}, {@obj_user={'obj_user', 0x3d, 'ife\x00'}}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_test={0x51, 0x0, 0x5}})
r3 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
fcntl$setpipe(r3, 0x407, 0x4)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
times(&(0x7f00000001c0))
syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r7=>0x0})
r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x20800, 0x0)
ioctl$TIOCGSOFTCAR(r8, 0x5419, &(0x7f0000000000))
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0)

8m33.115063111s ago: executing program 2 (id=112):
socket$packet(0x11, 0x2, 0x300)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', 0x0})
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet(0x2, 0x2, 0x1)
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x40}}, 0x0)

8m33.114662816s ago: executing program 2 (id=113):
r0 = socket$inet6(0xa, 0x6, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
getpid()
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
recvmsg$kcm(r5, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b00010000000000000000000401"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4})
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000040)={0x3, r8, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1})
close_range(r0, 0xffffffffffffffff, 0x0)

8m32.130276151s ago: executing program 1 (id=115):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
pipe(0x0)
pipe(&(0x7f0000000100)={<r5=>0xffffffffffffffff})
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0)
shutdown(0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x15)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 'dh\x00'}, 0x2c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, 0x0, 0x0)
r7 = syz_open_dev$sndpcmc(&(0x7f0000001800), 0x1, 0x20080)
sendmsg$nl_generic(r5, &(0x7f0000000a00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x42c, 0x10, 0x400, 0x70bd29, 0x25dfdbfb, {0x7}, [@generic="cf7090299590003748766457432d332c7b61bc565a67a7390bc9de67e54f4b29616532228058213c3cbe9de04d69e0e40aea06ef89024864809b52697e871a320d4682c55c3ae045401cf4e88b041c8858ccb5a76201e10261a44854338bc1324b61a9aa31407ba68d7c90e7e4953d75c5b7c957e947344f102d3c4befa6b79173abd0d5d5b0a47453122b6fa12f2763d06b8ec0bd875f89cc8a7e773360d17ce075bf75ff9946544bbd311ac1ad879d16f6af6892ad24465fea60", @typed={0x7, 0xf0, 0x0, 0x0, @str='dh\x00'}, @nested={0x158, 0xd9, 0x0, 0x1, [@generic="c80b6e09fdf9dc4274fbc2845db455de7262f81f8362f26d3402458bd69e66246eed62e076f931b5dd4e7161547de2d8b443b6351f6b", @typed={0x14, 0x139, 0x0, 0x0, @ipv6=@private2}, @nested={0x4, 0x87}, @generic="203e6453ca", @nested={0x4, 0x131}, @typed={0x19, 0x5, 0x0, 0x0, @binary="51556eed3b739a501d9e0563de1fbf46a84e1f8ba1"}, @generic="4948e88fb022ba830e46b33eff9199fcd69077e7fe07c4d823d8b50b5e4429e996af4d5ab46a78c6b7c40f184adc36271088a28d8db422d8206718b328da47da8686c1ab77d31eee7e30bb973e4442380c8ace57ae1a4a9407666bd47d7594f3d77ae2d867dc2e174d8eec48360a1cf2425e31bc0a2d45d23a07497959979cdb3106106618d75445d3defa31c08473f1f976f737da9174076d7ab2f1a246c6cfcc8b2c4eb34f69e0bb26421c89ffdec9d1586c44b05dbe1259c87e71849f218c743f4e9e6d7172d2d03ba540c9e954a94cd679b067f9e4cb1ed671cb795f6f8db7"]}, @typed={0x8, 0xf7, 0x0, 0x0, @ipv4=@local}, @nested={0x149, 0x4d, 0x0, 0x1, [@generic="05e6abf36d44409f002e71749dd6406be477fb5627309455fe1781fe6bfa3192804c83c263d243e707df746a9cddf55c176ca1aa1ed4f1e94cb0d5666fb8efa14d6776756b994c1e63f7b8a48f5855e1259cda6a1999f2aa66a1039f530f70cd41ff323b5af1f4d4bfead1fcce892baa61f8f6fafec1eebb7c7c16dd0e4ba4b485b28632ec2a2f4015654252c494ddcaf8063c307552e802d4760d568ebacb243dd496e0bf321c1b39fa9e31f7bd37cd2e4ad2980ed50c9037213a3e83dad6a9792a2e9e40daa57246310db65491696c6dc5472840534ccb7bcf8d7eb0ea203a4b4db396be625322df6aa0ee223595f3", @generic="166a9f52bb2785c585d78480c56019ef6e34b68df8634c74d3e66607955e3e059250935d1ce8ba04029dd17b2834b4fcfaca475389e2b43bcf910917114279a0dc4afa13c4f363db45c582d4e04f2d769a6b16bd13"]}, @generic="ab8dfd6169966c301170ee57f0230b91b4cad3c1d973664b315884b1f651e7f73ed97638bfcb419a70523e5c9f20e3fc921969bfba64dca0adec97a7eef5125fa2513f12c1c6aed7fdf106c9b0288af9e30aeac582f62f7224fadf0fc0d51aca2bd7", @generic="cd0e556178564053546c802049fed240e1fd61b64d28b4188ab7b99a727a1ab1c66c0ebd9f6d9dcb5a919e9d2c66864c3207ace78458a73c", @typed={0x8, 0x81, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x4, 0x12c}]}, 0x42c}, 0x1, 0x0, 0x0, 0x81}, 0x44)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r7, 0xc0884123, &(0x7f0000001840)={0x1, "3dba1ae023b40a2f8fc6fe5cef4c0ac9d94581e617e2bf8279933b9ea1cc1ef986462fdf92b30f220382b2dbefa52971af1bf19862302bb2fbf48a9c3cdb2e38", {0x77c4, 0x5}})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r8 = syz_io_uring_setup(0x1111, &(0x7f0000000300), &(0x7f0000000040)=<r9=>0x0, &(0x7f0000000180)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x8, 0x0, 0x7, 0x0, 0x0})
io_uring_enter(r8, 0x47fa, 0x0, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}}, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)

8m32.129939562s ago: executing program 3 (id=116):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xcc}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000280))
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad00"], 0x125)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r4 = io_uring_setup(0x79ae, &(0x7f0000000340)={0x0, 0x1})
r5 = socket$inet6(0xa, 0x40000080806, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r6}, 0x10)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c)
listen(r5, 0x20000005)
r7 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10)
r8 = accept4(r5, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r8)
close_range(r4, 0xffffffffffffffff, 0x0)
sendmsg$key(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="020e0403027000fcdbdf25cee4627474bf179f5cc1c782a290d09eaaf7c36c6a0521422514e5babd949b65000b051906142cfb2f760690da4d5cc5fbed1c0d184d1b684b50aaa6c5b072a67f943371b37193132399819b7029fe887e32728706352a7b852cef5e64313d9683e51bcbb4112284762031a2aad9a6181eb350ab80a1f4cdcc6ef0d767a3d891c5a3fcf06df30bc24c99ccf400"/174], 0x10}}, 0x20000004)

8m31.843484541s ago: executing program 2 (id=118):
openat$vicodec1(0xffffff9c, &(0x7f00000008c0), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000100"], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
close(r5)
execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r6)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00')
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2})

8m31.435654849s ago: executing program 1 (id=119):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x800, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0xf9fbd7041ec22bb6}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x280408c0}, 0x4040042)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00')
pread64(r6, &(0x7f00000002c0)=""/163, 0xa3, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x67)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r8 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e22, 0x0, @mcast2}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x5, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0xd, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a]}}, 0x5c)
setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000380)=0xa, 0x4)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r8, {0x1}}, './file0\x00'})
name_to_handle_at(r7, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=ANY=[], 0x0, 0x200)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000)
sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="12", 0x1}], 0x1}, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140400}, 0xc, &(0x7f0000000440)={&(0x7f0000000780)=ANY=[@ANYBLOB="30020000", @ANYRES16=0x0, @ANYBLOB="00072dbd7000fbdbdf254a00000008000300030000000e00a80066697273746e616d65000000080001007063690011000200303030303a30303a31302e30000000000e00a80066697273746e616d650000000e0001006e657464657673696d0000000f0002006e657464657673696d300000f100a800678a4169a5ad8b5bbfce9b5c0209b54035be47c5938e5b2915928818710e1a32cc7c10204c6a98871610db0f5d078692937bbf8b40afca470f7ff62fb7a416c13c5a372102a77f210de1f464d53c1121202ae194b9f763ae44c5e754354cba10a332383a9dc939644eab778e6962b4f15e50639256d25471d245dc855680a09d720e6f7eeb8bc1d578b99d1d3f4f7cca8cb2bf169c734e96636729a9f0e03f89df0359b70fa93f179ee85688a75e2f33de27f5cf567a33656cb01d3f324adddd5e32aacca136f14495a644b1830c2f399a19f57cc83fa61bd0be522e2a590c3f580b75116769228f5e6be25af20000009e00a80098a2e926b125a3a28267b45316a11fa65b92d492d0162a395e04032cc3e472ecd814d933bb5e1c8128b491f848b3fcd2366b9571e5fc95e3649a700c5d0754ddaba8b9600fba0828eb43f19fb04b8cc2167ac4dd3848344e90c996e2c5d88b4105ad9c1349c2e445937f5d7b675c0b18b71bd2c5879567f8d10bdbd1711c3ebc6296edd37670f7b6a12bfa17a2842804103dde4a57a1866e98fbb66a4c81e0a8a60000080001007063690011000200303030303a30303a31302e30000000000800030003000000"], 0x230}, 0x1, 0x0, 0x0, 0x40045}, 0x40)
recvmsg$kcm(r5, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x40000002)

8m31.224571311s ago: executing program 3 (id=120):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xcc}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000280))
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e"], 0x125)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r4 = io_uring_setup(0x79ae, &(0x7f0000000340)={0x0, 0x1})
r5 = socket$inet6(0xa, 0x40000080806, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r6}, 0x10)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c)
listen(r5, 0x20000005)
r7 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10)
r8 = accept4(r5, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r8)
close_range(r4, 0xffffffffffffffff, 0x0)
sendmsg$key(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="020e0403027000fcdbdf25cee4627474bf179f5cc1c782a290d09eaaf7c36c6a0521422514e5babd949b65000b051906142cfb2f760690da4d5cc5fbed1c0d184d1b684b50aaa6c5b072a67f943371b37193132399819b7029fe887e32728706352a7b852cef5e64313d9683e51bcbb4112284762031a2aad9a6181eb350ab80a1f4cdcc6ef0d767a3d891c5a3fcf06df30bc24c99ccf400"/174], 0x10}}, 0x20000004)

8m30.911967914s ago: executing program 2 (id=121):
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x8d, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000040)=0x2)
ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000080)=0x2)
sendmmsg$inet6(r4, 0x0, 0x0, 0x0)
getsockopt$bt_hci(r4, 0x84, 0x2, &(0x7f0000000f00)=""/4095, &(0x7f0000000000)=0xfff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="2000000011000100400000000000000008000000", @ANYRES32=r7, @ANYBLOB="08000000ac141400"], 0x20}], 0x1}, 0x0)
syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc48454ad5ab0dbcd795bf5fb1f628b38949083230"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r6, 0x0, 0x7fff, 0x0)

8m30.534458758s ago: executing program 1 (id=123):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000140)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0], 0x50)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, 0x0, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x0)
getdents64(r2, &(0x7f0000001400)=""/4096, 0x1000)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r7, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
shutdown(r7, 0x2)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000200))
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000180)=0x6)
ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f00000013c0))
read$dsp(r8, &(0x7f0000000440)=""/171, 0xab)

8m30.325376046s ago: executing program 3 (id=124):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x33c2, &(0x7f0000000380)={0x0, 0x200002, 0x10100, 0x0, 0x1000038, 0x0, r1}, &(0x7f0000000180)=<r2=>0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000080)=0x2, 0x4)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x11)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, 0x0)
unshare(0x8040480)
r8 = epoll_create(0x2)
r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000140))
signalfd4(r9, &(0x7f0000000000), 0x8, 0x0)
ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0x3)
ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r7, 0x5501)
ioctl$UI_DEV_DESTROY(r7, 0x5502)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e00000020000280040012000500160002000000060018000008000005001700"], 0x54}}, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xc2)
socket$inet(0x2, 0x3, 0x4)

8m30.06301969s ago: executing program 3 (id=125):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xcc}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000280))
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad0000abfa"], 0x125)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r4 = io_uring_setup(0x79ae, 0x0)
r5 = socket$inet6(0xa, 0x40000080806, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r6}, 0x10)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c)
listen(r5, 0x20000005)
r7 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10)
r8 = accept4(r5, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r8)
close_range(r4, 0xffffffffffffffff, 0x0)
sendmsg$key(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="020e0403027000fcdbdf25cee4627474bf179f5cc1c782a290d09eaaf7c36c6a0521422514e5babd949b65000b051906142cfb2f760690da4d5cc5fbed1c0d184d1b684b50aaa6c5b072a67f943371b37193132399819b7029fe887e32728706352a7b852cef5e64313d9683e51bcbb4112284762031a2aad9a6181eb350ab80a1f4cdcc6ef0d767a3d891c5a3fcf06df30bc24c99ccf400"/174], 0x10}}, 0x20000004)

8m29.977752357s ago: executing program 0 (id=126):
socket$netlink(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f0000000180)=0x3, 0x12)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001c00)={0x0, @in6={{0xa, 0x4e24, 0x6, @private1, 0x7af}}, 0x7, 0x0, 0x200000, 0x9, 0x80, 0x1}, &(0x7f00000000c0)=0x9c)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r6 = syz_open_dev$vim2m(0x0, 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x34325852}})

8m29.977388494s ago: executing program 2 (id=127):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4141, 0x3)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x5c2, 0x0, &(0x7f0000000240), 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="a963000000000000000006ddd4dc6e067f6b", @ANYRES32=r5], 0x1c}}, 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[], [], 0x2f})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
r6 = openat$dir(0xffffff9c, &(0x7f0000000240)='./file1\x00', 0x82102, 0x28)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000200))
mknodat(r6, &(0x7f0000000280)='./file0\x00', 0x4, 0x7)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
fsetxattr(r8, &(0x7f00000016c0)=@known='system.posix_acl_access\x00', &(0x7f0000001700)='*\x00', 0x2, 0x1)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
chdir(&(0x7f0000000140)='./bus\x00')
chmod(&(0x7f0000000100)='./file0\x00', 0x84)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)=""/117, &(0x7f0000000380)=0x75)
pivot_root(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./bus\x00')

8m29.522114651s ago: executing program 1 (id=128):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xcc}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000280))
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad00"], 0x125)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r4 = io_uring_setup(0x79ae, &(0x7f0000000340)={0x0, 0x1})
r5 = socket$inet6(0xa, 0x40000080806, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r6}, 0x10)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c)
listen(r5, 0x20000005)
r7 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10)
r8 = accept4(r5, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r8)
close_range(r4, 0xffffffffffffffff, 0x0)
sendmsg$key(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="020e0403027000fcdbdf25cee4627474bf179f5cc1c782a290d09eaaf7c36c6a0521422514e5babd949b65000b051906142cfb2f760690da4d5cc5fbed1c0d184d1b684b50aaa6c5b072a67f943371b37193132399819b7029fe887e32728706352a7b852cef5e64313d9683e51bcbb4112284762031a2aad9a6181eb350ab80a1f4cdcc6ef0d767a3d891c5a3fcf06df30bc24c99ccf400"/174], 0x10}}, 0x20000004)

8m29.269329626s ago: executing program 2 (id=129):
openat$vicodec1(0xffffff9c, &(0x7f00000008c0), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000100"], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
close(r5)
execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r6)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00')
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2})

8m29.114448008s ago: executing program 3 (id=130):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="f10f7e9b04970aa92c3f15307f6af9cc6f4cf03d8e7f35e366882c5a2c6883778f3472e2da692b6d95942274148e639fc198bd6e48167488a0ead51905b374f5f665a4a980e32da4bb93b4ceb996b7d852119aa79d7320a1594db15211c03b65d5b2ab7f3c3682dd06f48451fa7355ada7be0e6c4a959cbb557c4683b1f8a6718f"], 0x8)
r2 = syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x2b7a, 0x400, 0x2, 0x4}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000800)=<r4=>0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_io_uring_setup(0x40566f, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x2000, 0x3a0, 0x0, r2}, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r8 = socket$igmp(0x2, 0x3, 0x2)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x8, 0x0, r8, 0x0, 0x0, 0x0, 0x44040})
unshare(0x22020600)
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020003000900010073797a30000000000900030073797a3100000000"], 0x2c}}, 0x0)

8m28.595024451s ago: executing program 1 (id=131):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000005c0)=[{0x0, 0x1, 0x4, 0x8}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000640)=0x1ff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
prctl$PR_GET_TSC(0x43, &(0x7f0000000040))
brk(0x55555ede6000)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x8400, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
fchdir(r3)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r4 = memfd_create(&(0x7f0000002280)='\xcaB\x89\xed`@>\x89=\x9e', 0x0)
write(r4, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00')
ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f00000002c0))
r5 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc2c45513, &(0x7f0000000280)={{0xc, 0x1, 0x80000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1007, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x800003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b76f8d5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x4]})

8m28.197950115s ago: executing program 0 (id=132):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xcc}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000280))
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e"], 0x125)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r4 = io_uring_setup(0x79ae, &(0x7f0000000340)={0x0, 0x1})
r5 = socket$inet6(0xa, 0x40000080806, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r6}, 0x10)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c)
listen(r5, 0x20000005)
r7 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10)
r8 = accept4(r5, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r8)
close_range(r4, 0xffffffffffffffff, 0x0)
sendmsg$key(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="020e0403027000fcdbdf25cee4627474bf179f5cc1c782a290d09eaaf7c36c6a0521422514e5babd949b65000b051906142cfb2f760690da4d5cc5fbed1c0d184d1b684b50aaa6c5b072a67f943371b37193132399819b7029fe887e32728706352a7b852cef5e64313d9683e51bcbb4112284762031a2aad9a6181eb350ab80a1f4cdcc6ef0d767a3d891c5a3fcf06df30bc24c99ccf400"/174], 0x10}}, 0x20000004)

8m14.268161883s ago: executing program 32 (id=129):
openat$vicodec1(0xffffff9c, &(0x7f00000008c0), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000100"], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
close(r5)
execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r6)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00')
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2})

8m13.756477322s ago: executing program 33 (id=130):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="f10f7e9b04970aa92c3f15307f6af9cc6f4cf03d8e7f35e366882c5a2c6883778f3472e2da692b6d95942274148e639fc198bd6e48167488a0ead51905b374f5f665a4a980e32da4bb93b4ceb996b7d852119aa79d7320a1594db15211c03b65d5b2ab7f3c3682dd06f48451fa7355ada7be0e6c4a959cbb557c4683b1f8a6718f"], 0x8)
r2 = syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x2b7a, 0x400, 0x2, 0x4}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000800)=<r4=>0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_io_uring_setup(0x40566f, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x2000, 0x3a0, 0x0, r2}, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r8 = socket$igmp(0x2, 0x3, 0x2)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x8, 0x0, r8, 0x0, 0x0, 0x0, 0x44040})
unshare(0x22020600)
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020003000900010073797a30000000000900030073797a3100000000"], 0x2c}}, 0x0)

8m13.355028738s ago: executing program 34 (id=131):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000005c0)=[{0x0, 0x1, 0x4, 0x8}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000640)=0x1ff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
prctl$PR_GET_TSC(0x43, &(0x7f0000000040))
brk(0x55555ede6000)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x8400, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
fchdir(r3)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r4 = memfd_create(&(0x7f0000002280)='\xcaB\x89\xed`@>\x89=\x9e', 0x0)
write(r4, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00')
ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f00000002c0))
r5 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc2c45513, &(0x7f0000000280)={{0xc, 0x1, 0x80000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1007, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x800003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b76f8d5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x4]})

8m13.273183964s ago: executing program 0 (id=136):
socket$rxrpc(0x21, 0x2, 0xa)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = io_uring_setup(0x6bc0, &(0x7f0000000000)={0x0, 0x9c1e, 0x80, 0x0, 0x2f8})
syz_emit_vhci(&(0x7f0000000680)=ANY=[], 0x8)
syz_io_uring_setup(0x110, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
r5 = openat2$dir(0xffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x2000, 0x104, 0x4}, 0x18)
statx(r5, &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f0000000480))
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$pmem0(0xffffff9c, &(0x7f00000000c0), 0x1b1801, 0x0)
ioctl$BLKROTATIONAL(r6, 0x127e, &(0x7f0000000100))
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f0000000840)=@data_frame={@a_msdu=@type11={{0x0, 0x2, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x8, 0xff7}, @device_b, @void, @value=@ver_80211n={0x0, 0x2, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0xff, "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"}, {@broadcast, @broadcast, 0x41, "8b1057f1e82015957ed0af2a8483c07b67c9be7c5caa19fe26654b3981a7144d410a761d4cf54a11a519a10924420234c2401abf069c41c6cd894be0958771ec83"}, {@broadcast, @broadcast, 0xc3, "ce8967fb48de03f561aee8882d8841a9d736942c4e5d7aca919fcdb1adfdc37af3dcbbf3be9653999eef93a6593c98638fdced9c9f5fe97782d8edab378a6f640f0eed3213f086e7fd48f3750f742b2f97d12a70a40944e5a830b5829d2be0f55bbf8a2ee7d06f738511d2a51eab02f331d1f699cccc61de8d44d55784e88dd3e721e740156712fc10df30959c9d414b4202ea5abb3a9dc839c3fc1f2d35751e4054f28e1fd71e520e939e2b59a244c64104e8bf563c9876af445c80d35134aed33f4d"}]}, 0x256)
getpeername(r7, 0x0, 0x0)
r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r8, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffd, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00', &(0x7f0000002240)=""/4103, 0x0, 0x0, 0x0, 0x0})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x5131, r1, 0x8000000)
bind$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)

8m11.763883915s ago: executing program 0 (id=137):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000140)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0], 0x50)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, 0x0, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x0)
getdents64(r2, &(0x7f0000001400)=""/4096, 0x1000)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r7, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
shutdown(r7, 0x2)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000200))
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000180)=0x6)
ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f00000013c0))
read$dsp(r8, &(0x7f0000000440)=""/171, 0xab)

8m6.273881362s ago: executing program 0 (id=138):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xcc}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000280))
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad0000abfa"], 0x125)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0)
r4 = io_uring_setup(0x79ae, &(0x7f0000000340)={0x0, 0x1})
r5 = socket$inet6(0xa, 0x40000080806, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r6}, 0x10)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c)
listen(r5, 0x20000005)
r7 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10)
r8 = accept4(r5, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r8)
close_range(r4, 0xffffffffffffffff, 0x0)
sendmsg$key(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="020e0403027000fcdbdf25cee4627474bf179f5cc1c782a290d09eaaf7c36c6a0521422514e5babd949b65000b051906142cfb2f760690da4d5cc5fbed1c0d184d1b684b50aaa6c5b072a67f943371b37193132399819b7029fe887e32728706352a7b852cef5e64313d9683e51bcbb4112284762031a2aad9a6181eb350ab80a1f4cdcc6ef0d767a3d891c5a3fcf06df30bc24c99ccf400"/174], 0x10}}, 0x20000004)

8m5.335178452s ago: executing program 0 (id=139):
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
socket$netlink(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0xa}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)
socket$packet(0x11, 0x2, 0x300)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2a0640, 0x0)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r6=>0x0})
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
syz_io_uring_setup(0x743a, &(0x7f0000000380)={0x0, 0xf6cb, 0x20, 0x2, 0xffffffff, 0x0, r1}, &(0x7f0000000140), &(0x7f00000001c0))

7m50.240209265s ago: executing program 35 (id=139):
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
socket$netlink(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0xa}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)
socket$packet(0x11, 0x2, 0x300)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2a0640, 0x0)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r6=>0x0})
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
syz_io_uring_setup(0x743a, &(0x7f0000000380)={0x0, 0xf6cb, 0x20, 0x2, 0xffffffff, 0x0, r1}, &(0x7f0000000140), &(0x7f00000001c0))

2.903986884s ago: executing program 4 (id=2338):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000400)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]})

2.900703336s ago: executing program 4 (id=2340):
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4)
r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"})

2.838717979s ago: executing program 4 (id=2341):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3)

2.780386657s ago: executing program 4 (id=2343):
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2)
mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa6d214, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)

2.780193047s ago: executing program 4 (id=2344):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e24, 0x5, @mcast2, 0x6}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x118)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x2}}, 0x18)

2.471185856s ago: executing program 4 (id=2357):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200052f"], 0xcfa4)
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000005c0)={0x40, 0x0, 0x3}, 0x10)
bind$tipc(r0, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
rmdir(&(0x7f0000000040)='./file0\x00')
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r1, &(0x7f00000002c0)='./file1\x00', 0xc000, 0x0)
r2 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pidfd_send_signal(r2, 0x12, 0x0, 0x4)
openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
r7 = syz_open_procfs(0x0, &(0x7f0000002100)='ns\x00')
getdents64(r7, &(0x7f0000000180)=""/212, 0xd4)
getdents64(r7, &(0x7f0000000f80)=""/243, 0xf3)
getdents64(r7, 0x0, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0xc, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"])
ioctl$USBDEVFS_REAPURBNDELAY(r8, 0x4004550c, 0x0)

2.420685109s ago: executing program 36 (id=2357):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200052f"], 0xcfa4)
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000005c0)={0x40, 0x0, 0x3}, 0x10)
bind$tipc(r0, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
rmdir(&(0x7f0000000040)='./file0\x00')
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r1, &(0x7f00000002c0)='./file1\x00', 0xc000, 0x0)
r2 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pidfd_send_signal(r2, 0x12, 0x0, 0x4)
openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
r7 = syz_open_procfs(0x0, &(0x7f0000002100)='ns\x00')
getdents64(r7, &(0x7f0000000180)=""/212, 0xd4)
getdents64(r7, &(0x7f0000000f80)=""/243, 0xf3)
getdents64(r7, 0x0, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0xc, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"])
ioctl$USBDEVFS_REAPURBNDELAY(r8, 0x4004550c, 0x0)

2.223138728s ago: executing program 8 (id=2359):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, r0, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}}, 0x0)

2.109937461s ago: executing program 8 (id=2359):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, r0, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}}, 0x0)

2.030930471s ago: executing program 6 (id=2366):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="f639f3"])

2.030580882s ago: executing program 6 (id=2367):
r0 = socket(0x1, 0x4, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000003140)={&(0x7f0000003100), 0x0, 0x0, 0x0, 0x8000, 0xfa94, 0x10001, 0x8, {0x1, 0x4, 0xa39b, 0x9537, 0x7ac, 0x4, 0x808, 0xf8, 0x3826, 0x1c, 0x5, 0x3, 0x7ffffffe, 0x81, "d7bcdb48b6880031946fa9ddc2a3383a9cafaeb6a52b4dd386fd47c0774f5c09"}})
syz_io_uring_setup(0x6aac, &(0x7f0000000380)={0x0, 0x1ffffe, 0x1000, 0x2, 0x0, 0x0, r2}, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESHEX], 0x1c}}, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x13)
ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00', 0x4f})
ioctl$UI_DEV_CREATE(r6, 0x5501)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7)
sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x40, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0x4000000)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYRES64=r0], 0x54}, 0x1, 0x0, 0x0, 0x4008841}, 0x81)
creat(0x0, 0xc2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
read$FUSE(r9, &(0x7f0000000480)={0x2020}, 0x2020)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r10, 0x6, 0xb, 0x0, &(0x7f0000000300))
socket(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)

2.030117994s ago: executing program 6 (id=2368):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x2, &(0x7f00000001c0)={0x3, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$inet(r3, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f00000005c0)='0', 0x1}], 0x2}}], 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f00000000c0)={0x3, 0x0, 0x8, 0x80000001, 0x0, 0x400, 0x1, 0x9, 0xbf})
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={0x0})
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0))
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89801)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_WRITEPROTECT(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2})
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
getpid()

1.970933139s ago: executing program 6 (id=2369):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}})
fcntl$setown(r0, 0x8, r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000300)=0x2, 0x4)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
r7 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={<r9=>0xffffffffffffffff}, 0x13f, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000940)={0x15, 0x110, 0xfa00, {r9, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ib}}, 0x118)
write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000680)={0x13, 0x10, 0xfa00, {&(0x7f0000000740), r9, 0x2}}, 0x18)
write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r9}}, 0x18)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000100)=0x2, 0x4)
sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

1.970706604s ago: executing program 8 (id=2359):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, r0, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}}, 0x0)

1.509458164s ago: executing program 7 (id=2371):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200052f"], 0xcfa4)
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000005c0)={0x40, 0x0, 0x3}, 0x10)
bind$tipc(r0, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
rmdir(&(0x7f0000000040)='./file0\x00')
r1 = open(0x0, 0x0, 0x0)
mknodat$loop(r1, &(0x7f00000002c0)='./file1\x00', 0xc000, 0x0)
r2 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pidfd_send_signal(r2, 0x12, 0x0, 0x4)
openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
r7 = syz_open_procfs(0x0, &(0x7f0000002100)='ns\x00')
getdents64(r7, &(0x7f0000000180)=""/212, 0xd4)
getdents64(r7, &(0x7f0000000f80)=""/243, 0xf3)
getdents64(r7, 0x0, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0xc, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"])
ioctl$USBDEVFS_REAPURBNDELAY(r8, 0x4004550c, 0x0)

1.509309708s ago: executing program 5 (id=2372):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200052f"], 0xcfa4)
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000005c0)={0x40, 0x0, 0x3}, 0x10)
bind$tipc(r0, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
rmdir(0x0)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r1, &(0x7f00000002c0)='./file1\x00', 0xc000, 0x0)
r2 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pidfd_send_signal(r2, 0x12, 0x0, 0x4)
r3 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f00000002c0)={{0x0, 0x1}, {0xc}})
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r7 = dup(r6)
r8 = syz_open_procfs(0x0, &(0x7f0000002100)='ns\x00')
getdents64(r8, &(0x7f0000000180)=""/212, 0xd4)
getdents64(r8, &(0x7f0000000f80)=""/243, 0xf3)
getdents64(r8, 0x0, 0x0)
write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c)
read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0xc, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r9, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"])
ioctl$USBDEVFS_REAPURBNDELAY(r9, 0x4004550c, 0x0)

1.410765359s ago: executing program 5 (id=2373):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10)
setfsgid(0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'})
mq_notify(0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
r4 = socket$inet6(0xa, 0x80803, 0x83)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in6=@private0, 0x4e23, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast1, 0x3}}, 0xe4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40), 0x0)
recvmmsg(r0, &(0x7f0000004d80), 0x493, 0xa, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0)
inotify_init1(0x81800)
r6 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
fsmount(r6, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0)

1.410620548s ago: executing program 8 (id=2359):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, r0, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}}, 0x0)

831.19637ms ago: executing program 7 (id=2374):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x2, &(0x7f00000001c0)={0x3, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$inet(r3, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f00000005c0)='0', 0x1}], 0x2}}], 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f00000000c0)={0x3, 0x0, 0x8, 0x80000001, 0x0, 0x400, 0x1, 0x9, 0xbf})
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70})
lstat(0x0, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89801)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_WRITEPROTECT(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2})
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
getpid()

830.799636ms ago: executing program 6 (id=2375):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10)
setfsgid(0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'})
mq_notify(0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x80803, 0x83)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in6=@private0, 0x4e23, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast1, 0x3}}, 0xe4)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40), 0x0)
recvmmsg(r0, &(0x7f0000004d80), 0x493, 0xa, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0)
inotify_init1(0x81800)
r5 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
fsmount(r5, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0)

830.48053ms ago: executing program 5 (id=2376):
r0 = socket(0x1, 0x4, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000003140)={&(0x7f0000003100), 0x0, 0x0, 0x0, 0x8000, 0xfa94, 0x10001, 0x8, {0x1, 0x4, 0xa39b, 0x9537, 0x7ac, 0x4, 0x808, 0xf8, 0x3826, 0x1c, 0x5, 0x3, 0x7ffffffe, 0x81, "d7bcdb48b6880031946fa9ddc2a3383a9cafaeb6a52b4dd386fd47c0774f5c09"}})
syz_io_uring_setup(0x6aac, &(0x7f0000000380)={0x0, 0x1ffffe, 0x1000, 0x2, 0x0, 0x0, r2}, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESHEX], 0x1c}}, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x13)
ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00', 0x4f})
ioctl$UI_DEV_CREATE(r6, 0x5501)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7)
sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x40, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0x4000000)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYRES64=r0], 0x54}, 0x1, 0x0, 0x0, 0x4008841}, 0x81)
creat(0x0, 0xc2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
read$FUSE(r9, &(0x7f0000000480)={0x2020}, 0x2020)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r10, 0x6, 0xb, 0x0, &(0x7f0000000300))
socket(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)

830.133142ms ago: executing program 7 (id=2377):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x2, &(0x7f00000001c0)={0x3, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$inet(r3, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f00000005c0)='0', 0x1}], 0x2}}], 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f00000000c0)={0x3, 0x0, 0x8, 0x80000001, 0x0, 0x400, 0x1, 0x9, 0xbf})
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70})
lstat(0x0, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89801)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_WRITEPROTECT(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2})
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
getpid()

760.90768ms ago: executing program 5 (id=2378):
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000100)={"4689d4c4841a41c9e4641d9d", &(0x7f0000000000)="bb", 0x20000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0})

760.551844ms ago: executing program 5 (id=2379):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000040), 0x2)
ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e05411, 0x0)

760.419126ms ago: executing program 8 (id=2359):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, r0, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}}, 0x0)

760.394602ms ago: executing program 5 (id=2380):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ppoll(&(0x7f0000000100)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)

81.648832ms ago: executing program 7 (id=2381):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200052f"], 0xcfa4)
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000005c0)={0x40, 0x0, 0x3}, 0x10)
bind$tipc(r0, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
rmdir(&(0x7f0000000040)='./file0\x00')
r1 = open(0x0, 0x0, 0x0)
mknodat$loop(r1, &(0x7f00000002c0)='./file1\x00', 0xc000, 0x0)
r2 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pidfd_send_signal(r2, 0x12, 0x0, 0x4)
r3 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f00000002c0)={{0x0, 0x1}, {0xc}})
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r7 = dup(r6)
r8 = syz_open_procfs(0x0, &(0x7f0000002100)='ns\x00')
getdents64(r8, &(0x7f0000000180)=""/212, 0xd4)
getdents64(r8, &(0x7f0000000f80)=""/243, 0xf3)
getdents64(r8, 0x0, 0x0)
write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c)
read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0xc, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r9, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"])
ioctl$USBDEVFS_REAPURBNDELAY(r9, 0x4004550c, 0x0)

81.284486ms ago: executing program 6 (id=2382):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200052f"], 0xcfa4)
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000005c0)={0x40, 0x0, 0x3}, 0x10)
bind$tipc(r0, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
rmdir(&(0x7f0000000040)='./file0\x00')
r1 = open(0x0, 0x0, 0x0)
mknodat$loop(r1, &(0x7f00000002c0)='./file1\x00', 0xc000, 0x0)
r2 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pidfd_send_signal(r2, 0x12, 0x0, 0x4)
openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
r7 = syz_open_procfs(0x0, &(0x7f0000002100)='ns\x00')
getdents64(r7, &(0x7f0000000180)=""/212, 0xd4)
getdents64(r7, &(0x7f0000000f80)=""/243, 0xf3)
getdents64(r7, 0x0, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0xc, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"])
ioctl$USBDEVFS_REAPURBNDELAY(r8, 0x4004550c, 0x0)

543.525µs ago: executing program 7 (id=2383):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000380)='hugetlb.2MB.failcnt\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x9c)

152.233µs ago: executing program 7 (id=2384):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10)
setfsgid(0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'})
mq_notify(0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
r4 = socket$inet6(0xa, 0x80803, 0x83)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in6=@private0, 0x4e23, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast1, 0x3}}, 0xe4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40), 0x0)
recvmmsg(r0, &(0x7f0000004d80), 0x493, 0xa, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0)
inotify_init1(0x81800)
r6 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
fsmount(r6, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0)

0s ago: executing program 8 (id=2359):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, r0, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}}, 0x0)

kernel console output (not intermixed with test programs):

9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  255.810958][    T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  255.812967][    T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  255.815029][    T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  255.817867][    T9] hid-generic 0000:0000:0000.0009: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  256.506025][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.6.678'.
[  256.610821][ T9624] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  256.694780][ T9628] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  256.928304][ T9643] netlink: 'syz.4.686': attribute type 10 has an invalid length.
[  257.724080][ T9660] 9pnet_fd: Insufficient options for proto=fd
[  258.186163][ T9667] netlink: 16 bytes leftover after parsing attributes in process `syz.5.691'.
[  259.127787][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.696'.
[  259.251703][ T9695] hub 5-0:1.0: USB hub found
[  259.254079][ T9695] hub 5-0:1.0: 1 port detected
[  260.834936][ T9719] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[  260.836700][ T9719] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  260.838958][ T9719] vhci_hcd vhci_hcd.0: Device attached
[  260.963086][ T9723] usbip_core: unknown command
[  260.965244][ T9723] vhci_hcd: unknown pdu 4279239216
[  260.974949][ T9723] usbip_core: unknown command
[  260.976500][ T1135] vhci_hcd: stop threads
[  260.977683][ T1135] vhci_hcd: release socket
[  260.980016][ T1135] vhci_hcd: disconnect device
[  261.020011][   T72] vhci_hcd: vhci_device speed not set
[  261.372932][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.7.706'.
[  261.758801][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.708'.
[  262.071322][ T9752] input: syz0 as /devices/virtual/input/input16
[  262.110941][ T9748] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  263.014671][ T9774] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  263.016763][ T9774] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  263.019146][ T9774] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  263.021246][ T9774] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  263.497870][ T5942] Bluetooth: hci1: command 0x0c1a tx timeout
[  267.195898][ T5943] Bluetooth: hci4: unexpected event for opcode 0x1005
[  268.090091][   T72] usb 11-1: new high-speed USB device number 5 using dummy_hcd
[  268.251092][   T72] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  268.254078][   T72] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  268.257098][   T72] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  268.260506][   T72] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  268.262892][   T72] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.265580][   T72] usb 11-1: config 0 descriptor??
[  268.671033][   T72] plantronics 0003:047F:FFFF.000A: ignoring exceeding usage max
[  268.673783][   T72] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[  268.764463][   T72] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  269.482432][ T5882] usb 11-1: USB disconnect, device number 5
[  270.795867][ T9929] netlink: 180 bytes leftover after parsing attributes in process `syz.5.750'.
[  270.955984][ T9933] syz.5.750 (9933): drop_caches: 2
[  272.149983][   T40] audit: type=1326 audit(1733605883.524:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.4.755" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x0
[  273.021318][ T9973] fuse: Unknown parameter '0x0000000000000006'
[  273.036961][ T9973] ERROR: device name not specified.
[  273.737219][ T9991] siw: device registration error -23
[  274.099725][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.5.766'.
[  274.481591][T10004] lo speed is unknown, defaulting to 1000
[  274.950758][T10018] netlink: 40 bytes leftover after parsing attributes in process `syz.4.770'.
[  275.009539][T10025] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  275.011541][T10025] overlayfs: failed to set xattr on upper
[  275.013041][T10025] overlayfs: ...falling back to redirect_dir=nofollow.
[  275.014788][T10025] overlayfs: ...falling back to index=off.
[  275.016266][T10025] overlayfs: ...falling back to uuid=null.
[  276.365743][T10044] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  276.812965][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.781'.
[  277.857724][T10084] netlink: 56 bytes leftover after parsing attributes in process `syz.6.786'.
[  278.399953][   T25] usb 12-1: new high-speed USB device number 5 using dummy_hcd
[  278.571294][   T25] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  278.576275][   T25] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  278.580448][   T25] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  278.582905][   T25] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.589109][T10103] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  278.593539][   T25] usb 12-1: Quirk or no altset; falling back to MIDI 1.0
[  278.998065][   T56] usb 12-1: USB disconnect, device number 5
[  279.273696][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.6.794'.
[  279.842472][T10129] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  280.699319][T10148] netlink: 56 bytes leftover after parsing attributes in process `syz.5.801'.
[  282.863235][T10183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.807'.
[  284.359356][T10198] netlink: 56 bytes leftover after parsing attributes in process `syz.4.811'.
[  285.010007][ T5942] Bluetooth: hci1: command 0x0c1a tx timeout
[  285.440990][T10223] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  285.473709][T10229] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  286.362566][T10245] netlink: 56 bytes leftover after parsing attributes in process `syz.5.821'.
[  288.382065][T10283] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  288.838919][   T40] audit: type=1326 audit(1733605900.214:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10268 comm="syz.4.826" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7fc00000
[  288.847179][   T40] audit: type=1326 audit(1733605900.224:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.5.829" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x0
[  289.032419][T10291] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  289.199356][T10296] netlink: 'syz.5.829': attribute type 10 has an invalid length.
[  289.338219][T10296] team0: Port device geneve1 added
[  289.582342][T10303] netlink: 56 bytes leftover after parsing attributes in process `syz.6.833'.
[  290.044904][T10319] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  290.048123][T10319] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  290.050932][T10319] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  290.054071][T10319] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  290.057116][T10319] geneve2: entered promiscuous mode
[  290.058514][T10319] geneve2: entered allmulticast mode
[  290.124832][T10322] netlink: 'syz.6.837': attribute type 1 has an invalid length.
[  291.030545][T10339] dccp_close: ABORT with 32 bytes unread
[  291.200746][T10341] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  292.051271][T10356] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  293.042380][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.7.849'.
[  293.386100][T10380] netlink: 24 bytes leftover after parsing attributes in process `syz.4.851'.
[  294.161638][T10388] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  294.666539][T10399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.856'.
[  294.753488][T10398] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  295.165243][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.6.858'.
[  295.168214][T10403] netlink: 4 bytes leftover after parsing attributes in process `syz.6.858'.
[  295.727455][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.7.861'.
[  295.900789][T10420] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  297.358375][T10439] netlink: 56 bytes leftover after parsing attributes in process `syz.4.867'.
[  297.430467][T10441] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  298.431422][T10466] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  298.437019][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.872'.
[  298.980044][T10474] can0: slcan on ptm0.
[  299.269481][T10490] netlink: 'syz.6.878': attribute type 10 has an invalid length.
[  299.271896][T10490] netlink: 55 bytes leftover after parsing attributes in process `syz.6.878'.
[  299.274806][T10490] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  299.276851][T10490] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  299.280437][T10490] team0: Port device virt_wifi0 added
[  299.375595][T10496] dccp_close: ABORT with 32 bytes unread
[  299.451949][T10495] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  299.810385][T10472] can0 (unregistered): slcan off ptm0.
[  300.940799][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.884'.
[  300.980773][T10534] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  301.227565][T10540] input: syz0 as /devices/virtual/input/input17
[  302.642299][T10561] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  303.536683][T10584] usb 1-1: USB disconnect, device number 2
[  304.123488][T10594] netlink: 8 bytes leftover after parsing attributes in process `syz.7.897'.
[  305.400517][T10623] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  306.019479][T10633] input: syz1 as /devices/virtual/input/input18
[  306.218545][   T11] Bluetooth: hci2: Frame reassembly failed (-84)
[  306.469979][ T5882] usb 11-1: new high-speed USB device number 6 using dummy_hcd
[  306.619948][ T5882] usb 11-1: Using ep0 maxpacket: 32
[  306.622419][ T5882] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.626320][ T5882] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  306.628739][ T5882] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  306.630900][ T5882] usb 11-1: Product: syz
[  306.632396][ T5882] usb 11-1: Manufacturer: syz
[  306.633649][ T5882] usb 11-1: SerialNumber: syz
[  306.635377][ T5882] usb 11-1: config 0 descriptor??
[  306.756291][T10652] netlink: 'syz.7.910': attribute type 10 has an invalid length.
[  306.768604][T10649] netlink: 'syz.4.911': attribute type 39 has an invalid length.
[  306.842381][   T25] usb 11-1: USB disconnect, device number 6
[  308.081676][T10674] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  308.158711][T10677] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  308.289990][ T5943] Bluetooth: hci2: command 0xfc11 tx timeout
[  308.290087][ T5942] Bluetooth: hci2: Entering manufacturer mode failed (-110)
[  309.221333][T10689] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  309.389725][T10694] Bluetooth: hci2: Frame reassembly failed (-84)
[  309.392681][   T67] Bluetooth: hci2: Frame reassembly failed (-84)
[  309.394436][   T67] Bluetooth: hci2: Frame reassembly failed (-84)
[  309.850327][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.6.923'.
[  310.190339][T10710] 9pnet_fd: Insufficient options for proto=fd
[  311.001758][T10723] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  311.410004][ T5943] Bluetooth: hci2: command 0x1003 tx timeout
[  311.411624][ T5942] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  311.517855][T10730] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  312.312773][T10741] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  312.510651][   T40] audit: type=1326 audit(1733605923.884:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10747 comm="syz.6.936" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x0
[  312.534895][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.935'.
[  313.273137][   T56] libceph: connect (1)[c::]:6789 error -101
[  313.275396][   T56] libceph: mon0 (1)[c::]:6789 connect error
[  313.277721][T10772] input: syz0 as /devices/virtual/input/input19
[  313.380922][T10773] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  313.531461][   T56] libceph: connect (1)[c::]:6789 error -101
[  313.533589][   T56] libceph: mon0 (1)[c::]:6789 connect error
[  313.932299][T10769] ceph: No mds server is up or the cluster is laggy
[  313.961687][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.941'.
[  314.141250][T10783] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  314.991299][T10800] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  315.306617][T10806] fuse: Unknown parameter '0x0000000000000005'
[  315.317480][T10806] ERROR: device name not specified.
[  315.334160][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.5.947'.
[  316.195035][T10815] lo speed is unknown, defaulting to 1000
[  316.441128][T10829] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  316.461545][ T1413] ieee802154 phy0 wpan0: encryption failed: -22
[  316.463355][ T1413] ieee802154 phy1 wpan1: encryption failed: -22
[  316.786004][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.7.953'.
[  316.828883][T10836] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  317.462190][T10849] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  317.698735][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.7.959'.
[  318.115510][T10862] overlayfs: missing 'workdir'
[  318.456945][T10867] netlink: 'syz.7.970': attribute type 13 has an invalid length.
[  318.511234][T10869] netlink: 'syz.5.962': attribute type 10 has an invalid length.
[  318.925355][T10870] lo speed is unknown, defaulting to 1000
[  319.761259][T10891] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117
[  319.763074][T10891] PKCS7: Only support pkcs7_signedData type
[  319.796176][T10894] can0: slcan on ttyS3.
[  319.829833][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.968'.
[  320.059958][    T9] usb 12-1: new high-speed USB device number 6 using dummy_hcd
[  320.220022][    T9] usb 12-1: Using ep0 maxpacket: 32
[  320.222434][    T9] usb 12-1: config 251 has an invalid interface number: 19 but max is 0
[  320.224544][    T9] usb 12-1: config 251 has no interface number 0
[  320.226152][    T9] usb 12-1: config 251 interface 19 has no altsetting 0
[  320.229188][    T9] usb 12-1: New USB device found, idVendor=12d1, idProduct=c4a9, bcdDevice=bd.40
[  320.231728][    T9] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.233813][    T9] usb 12-1: Product: syz
[  320.234988][    T9] usb 12-1: Manufacturer: syz
[  320.236217][    T9] usb 12-1: SerialNumber: syz
[  320.592918][T10916] netlink: 'syz.5.973': attribute type 39 has an invalid length.
[  320.686935][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.972'.
[  320.721553][    T9] option 12-1:251.19: GSM modem (1-port) converter detected
[  320.728797][    T9] usb 12-1: USB disconnect, device number 6
[  320.738665][    T9] option 12-1:251.19: device disconnected
[  320.759148][T10924] netlink: 20 bytes leftover after parsing attributes in process `syz.6.975'.
[  321.170022][    T9] usb 12-1: new high-speed USB device number 7 using dummy_hcd
[  321.340037][    T9] usb 12-1: Using ep0 maxpacket: 8
[  321.342543][    T9] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  321.345052][    T9] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  321.347613][    T9] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  321.350138][    T9] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  321.353384][    T9] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  321.355705][    T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.401466][T10932] 9pnet_fd: Insufficient options for proto=fd
[  321.431410][T10913] can0 (unregistered): slcan off ttyS3.
[  321.532437][T10936] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  321.568407][    T9] usb 12-1: GET_CAPABILITIES returned 0
[  321.570528][    T9] usbtmc 12-1:16.0: can't read capabilities
[  321.797094][T10948] netlink: 'syz.5.977': attribute type 1 has an invalid length.
[  321.817474][T10948] bond1: (slave ipip0): The slave device specified does not support setting the MAC address
[  321.820208][T10948] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode
[  321.823691][T10948] bond1: (slave ipip0): making interface the new active one
[  321.825823][T10948] bond1: (slave ipip0): Enslaving as an active interface with an up link
[  322.296425][   T25] usb 12-1: USB disconnect, device number 7
[  322.341056][T10959] netlink: 68 bytes leftover after parsing attributes in process `syz.5.980'.
[  322.456803][T10960] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  322.632039][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.981'.
[  323.580242][T10981] netlink: 20 bytes leftover after parsing attributes in process `syz.6.986'.
[  323.686807][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.984'.
[  324.463401][   T56] libceph: connect (1)[c::]:6789 error -101
[  324.465593][   T56] libceph: mon0 (1)[c::]:6789 connect error
[  324.501096][T10993] netlink: 256 bytes leftover after parsing attributes in process `syz.7.987'.
[  324.561830][T11001] syz.4.989 (11001): drop_caches: 2
[  324.614731][T11006] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  324.617266][T10997] ceph: No mds server is up or the cluster is laggy
[  324.791395][T11010] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  325.072643][T11016] fuse: Unknown parameter 'fx'
[  325.233070][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.6.993'.
[  325.270632][   T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  325.659666][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.996'.
[  326.070223][   T40] audit: type=1804 audit(1733605937.444:269): pid=11054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.998" name="/newroot/201/file0/bus" dev="9p" ino=36701709 res=1 errno=0
[  326.377969][T11056] netlink: zone id is out of range
[  326.650823][T11064] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  336.423237][T11096] Bluetooth: hci2: Frame reassembly failed (-84)
[  336.425533][ T1143] Bluetooth: hci2: Frame reassembly failed (-84)
[  337.092197][T11111] netlink: 'syz.4.1007': attribute type 39 has an invalid length.
[  337.099761][T11113] netlink: 'syz.7.1009': attribute type 2 has an invalid length.
[  337.102675][T11113] netlink: 'syz.7.1009': attribute type 11 has an invalid length.
[  337.105379][T11113] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1009'.
[  337.110795][T11113] fuse: Unknown parameter 'group_i00000000000000000000'
[  337.212581][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1008'.
[  337.281702][T11116] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  338.358837][T11135] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1012'.
[  338.449980][ T5942] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  338.450002][ T5943] Bluetooth: hci2: command 0x1003 tx timeout
[  338.610746][T11141] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  339.431939][ T5942] Bluetooth: hci5: unexpected event for opcode 0x1005
[  341.890044][ T5943] Bluetooth: hci1: command 0x0c1a tx timeout
[  342.844471][T11184] input: syz0 as /devices/virtual/input/input20
[  343.265776][T11185] lo speed is unknown, defaulting to 1000
[  343.805357][T11205] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  343.929946][ T6789] usb 11-1: new full-speed USB device number 7 using dummy_hcd
[  344.094026][ T6789] usb 11-1: not running at top speed; connect to a high speed hub
[  344.097815][ T6789] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  344.104077][ T6789] usb 11-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40
[  344.107436][ T6789] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.110600][ T6789] usb 11-1: Product: Ф
[  344.111722][ T6789] usb 11-1: Manufacturer: 轧ꥊ榬�丞጗ῼ뗶耲�ꗓ脥穄蕗샵ﵿꑵ逗练蕱ዱ釬믌�픺≼앸䉀Ͳ㚑ﴂ鋪溙煯⦂�忰��鸡洣㜅ਗ਼�庤빟튃걨�
[  344.116695][ T6789] usb 11-1: SerialNumber: à ”
[  344.119148][T11202] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  344.358091][ T6789] usbhid 11-1:1.0: can't add hid device: -71
[  344.359789][ T6789] usbhid 11-1:1.0: probe with driver usbhid failed with error -71
[  344.362838][ T6789] usb 11-1: USB disconnect, device number 7
[  344.661290][T11218] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  345.081952][T11224] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  345.084337][T11224] overlayfs: failed to set xattr on upper
[  345.087426][T11224] overlayfs: ...falling back to redirect_dir=nofollow.
[  345.090312][T11224] overlayfs: ...falling back to index=off.
[  345.091960][T11224] overlayfs: ...falling back to uuid=null.
[  345.269595][ T7775] Bluetooth: hci2: Frame reassembly failed (-84)
[  345.272515][ T1143] Bluetooth: hci2: Frame reassembly failed (-84)
[  346.297775][T11244] can: request_module (can-proto-0) failed.
[  346.481050][T11254] input: syz0 as /devices/virtual/input/input21
[  347.308783][ T5942] Bluetooth: hci2: command 0x1003 tx timeout
[  347.310938][ T5943] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  347.454291][T11267] random: crng reseeded on system resumption
[  347.677691][ T6789] usb 12-1: new high-speed USB device number 8 using dummy_hcd
[  347.835266][ T6789] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  347.839272][ T6789] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  347.842917][ T6789] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  347.846446][ T6789] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.850713][T11265] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  347.855155][ T6789] usb 12-1: Quirk or no altset; falling back to MIDI 1.0
[  348.023985][T11281] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  348.065497][    T9] usb 12-1: USB disconnect, device number 8
[  348.080380][T11282] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1043'.
[  348.084232][T11282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1043'.
[  348.668320][ T6789] usb 11-1: new high-speed USB device number 8 using dummy_hcd
[  348.824302][ T6789] usb 11-1: Using ep0 maxpacket: 16
[  348.828227][ T6789] usb 11-1: config 0 has an invalid interface number: 8 but max is 0
[  348.831136][ T6789] usb 11-1: config 0 has no interface number 0
[  348.833376][ T6789] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  348.837359][ T6789] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  348.841474][ T6789] usb 11-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  348.843933][ T6789] usb 11-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  348.846072][ T6789] usb 11-1: Product: syz
[  348.847195][ T6789] usb 11-1: SerialNumber: syz
[  348.849120][ T6789] usb 11-1: config 0 descriptor??
[  348.851588][ T6789] cm109 11-1:0.8: invalid payload size 0, expected 4
[  348.855096][ T6789] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.8/input/input22
[  348.980586][T11293] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  349.079631][   T40] audit: type=1804 audit(1733605960.529:270): pid=11284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1044" name="/newroot/226/file0/bus/bus" dev="overlay" ino=11 res=1 errno=0
[  349.080903][T11284] Invalid ELF header magic: != ELF
[  349.095886][    C3] cm109 11-1:0.8: cm109_urb_ctl_callback: urb status -71
[  349.095938][   T25] usb 11-1: USB disconnect, device number 8
[  349.098443][    C3] cm109 11-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  349.103415][   T25] cm109 11-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  350.553522][T11309] lo speed is unknown, defaulting to 1000
[  350.779132][   T56] libceph: connect (1)[c::]:6789 error -101
[  350.781315][   T56] libceph: mon0 (1)[c::]:6789 connect error
[  350.892265][T11325] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  350.895412][T11316] ceph: No mds server is up or the cluster is laggy
[  351.183221][ T6789] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[  351.379182][ T6789] usb 10-1: not running at top speed; connect to a high speed hub
[  351.381905][ T6789] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  351.392258][ T6789] usb 10-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40
[  351.395356][ T6789] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.397713][ T6789] usb 10-1: Product: Ф
[  351.398913][ T6789] usb 10-1: Manufacturer: 轧ꥊ榬�丞጗ῼ뗶耲�ꗓ脥穄蕗샵ﵿꑵ逗练蕱ዱ釬믌�픺≼앸䉀Ͳ㚑ﴂ鋪溙煯⦂�忰��鸡洣㜅ਗ਼�庤빟튃걨�
[  351.403484][ T6789] usb 10-1: SerialNumber: à ”
[  351.409636][T11327] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  351.616931][T11337] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  351.618808][T11337] overlayfs: failed to set xattr on upper
[  351.620311][T11337] overlayfs: ...falling back to redirect_dir=nofollow.
[  351.622093][T11337] overlayfs: ...falling back to index=off.
[  351.623674][T11337] overlayfs: ...falling back to uuid=null.
[  351.738840][ T6789] usbhid 10-1:1.0: can't add hid device: -71
[  351.744077][ T6789] usbhid 10-1:1.0: probe with driver usbhid failed with error -71
[  351.748521][ T6789] usb 10-1: USB disconnect, device number 6
[  352.354971][T11344] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1056'.
[  352.535203][T11346] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1058'.
[  352.580801][T11358] input: syz0 as /devices/virtual/input/input23
[  352.718887][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1057'.
[  353.875436][ T5943] Bluetooth: hci1: unexpected event for opcode 0x1005
[  354.399562][   T40] audit: type=1326 audit(1733605965.972:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11388 comm="syz.4.1065" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x0
[  354.457579][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1066'.
[  355.275166][T11409] input: syz0 as /devices/virtual/input/input24
[  355.300544][T11404] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  355.302721][T11404] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  355.305179][T11404] vhci_hcd vhci_hcd.0: Device attached
[  355.310804][T11404] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  355.449722][T11413] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1071'.
[  355.477305][T11406] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  355.479180][T11406] overlayfs: failed to set xattr on upper
[  355.480646][T11406] overlayfs: ...falling back to redirect_dir=nofollow.
[  355.482401][T11406] overlayfs: ...falling back to index=off.
[  355.484034][T11406] overlayfs: ...falling back to uuid=null.
[  355.513270][ T5983] vhci_hcd: vhci_device speed not set
[  355.582053][ T5983] usb 45-1: new full-speed USB device number 2 using vhci_hcd
[  355.640242][T11410] vhci_hcd: connection reset by peer
[  355.641876][ T7775] vhci_hcd: stop threads
[  355.643229][ T7775] vhci_hcd: release socket
[  355.644735][ T7775] vhci_hcd: disconnect device
[  356.071015][T11417] input: syz0 as /devices/virtual/input/input25
[  356.135211][T11422] netlink: 'syz.5.1074': attribute type 21 has an invalid length.
[  356.240594][   T40] audit: type=1326 audit(1733605967.835:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11418 comm="syz.5.1074" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000
[  356.245679][   T40] audit: type=1326 audit(1733605967.835:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11418 comm="syz.5.1074" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000
[  356.251061][   T40] audit: type=1326 audit(1733605967.846:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11418 comm="syz.5.1074" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf740e579 code=0x7ffc0000
[  356.256603][   T40] audit: type=1326 audit(1733605967.846:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11418 comm="syz.5.1074" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000
[  356.262225][   T40] audit: type=1326 audit(1733605967.846:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11418 comm="syz.5.1074" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000
[  357.167293][T11444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1079'.
[  357.253928][T11446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1077'.
[  357.388379][T11449] lo speed is unknown, defaulting to 1000
[  357.397040][T11451] ieee802154 phy0 wpan0: encryption failed: -22
[  358.138147][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1082'.
[  358.545461][T11456] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  358.888199][T11484] input: syz0 as /devices/virtual/input/input26
[  359.069879][T11489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1085'.
[  359.838242][T11507] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1089'.
[  360.001758][T11510] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  360.625513][ T5983] vhci_hcd: vhci_device speed not set
[  360.642439][T11526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1094'.
[  361.552360][T11542] input: syz0 as /devices/virtual/input/input27
[  362.401903][T11560] overlayfs: conflicting lowerdir path
[  362.578296][T11568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1103'.
[  362.780903][T11572] veth1_macvtap: left promiscuous mode
[  362.782434][T11572] macsec0: entered promiscuous mode
[  362.783863][T11572] macsec0: entered allmulticast mode
[  362.797074][T11572] lo speed is unknown, defaulting to 1000
[  363.228351][T11579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1106'.
[  363.894512][T11597] input: syz0 as /devices/virtual/input/input28
[  365.005590][T11619] netlink: del zone limit has 4 unknown bytes
[  365.225373][T11624] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7)
[  365.227093][T11624] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  365.229654][T11624] vhci_hcd vhci_hcd.0: Device attached
[  365.318805][T11632] syz.5.1116: attempt to access beyond end of device
[  365.318805][T11632] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0
[  365.322265][T11632] XFS (nbd5): SB validate failed with error -5.
[  365.621225][    T9] vhci_hcd: vhci_device speed not set
[  365.653845][T11641] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  365.691097][    T9] usb 49-1: new full-speed USB device number 3 using vhci_hcd
[  365.930379][T11650] dccp_close: ABORT with 32 bytes unread
[  366.024470][T11653] [U] 
[  366.025256][T11653] [U] 
[  366.025997][T11653] [U] 
[  366.026728][T11653] [U] 
[  366.027620][T11653] [U] 
[  366.028431][T11653] [U] 
[  366.029183][T11653] [U] 
[  366.029952][T11653] [U] 
[  366.030723][T11653] [U] 
[  366.031477][T11653] [U] 
[  366.032228][T11653] [U] 
[  366.032977][T11653] [U] 
[  366.033759][T11653] [U] 
[  366.034518][T11653] [U] 
[  366.035284][T11653] [U] 
[  366.036030][T11653] [U] 
[  366.036871][T11653] [U] 
[  366.037652][T11653] [U] 
[  366.038415][T11653] [U] 
[  366.039159][T11653] [U] 
[  366.039918][T11653] [U] 
[  366.040674][T11653] [U] 
[  366.041437][T11653] [U] 
[  366.042198][T11653] [U] 
[  366.042963][T11653] [U] 
[  366.043716][T11653] [U] 
[  366.044485][T11653] [U] 
[  366.045240][T11653] [U] 
[  366.046012][T11653] [U] 
[  366.046797][T11653] [U] 
[  366.047547][T11653] [U] 
[  366.048308][T11653] [U] 
[  366.049326][T11653] [U] 
[  366.050109][T11653] [U] 
[  366.050860][T11653] [U] 
[  366.051598][T11653] [U] 
[  366.052352][T11653] [U] 
[  366.053119][T11653] [U] 
[  366.053896][T11653] [U] 
[  366.054637][T11653] [U] 
[  366.055406][T11653] [U] 
[  366.056160][T11653] [U] 
[  366.056936][T11653] [U] 
[  366.057694][T11653] [U] 
[  366.058564][T11653] [U] 
[  366.059330][T11653] [U] 
[  366.060096][T11653] [U] 
[  366.060836][T11653] [U] 
[  366.061620][T11653] [U] 
[  366.062380][T11653] [U] 
[  366.063144][T11653] [U] 
[  366.063894][T11653] [U] 
[  366.064865][T11653] [U] 
[  366.065639][T11653] [U] 
[  366.066388][T11653] [U] 
[  366.067141][T11653] [U] 
[  366.067987][T11653] [U] 
[  366.068758][T11653] [U] 
[  366.069523][T11653] [U] 
[  366.070273][T11653] [U] 
[  366.071019][T11653] [U] 
[  366.071779][T11653] [U] 
[  366.072504][T11653] [U] 
[  366.073253][T11653] [U] 
[  366.074024][T11653] [U] 
[  366.074787][T11653] [U] 
[  366.075539][T11653] [U] 
[  366.076287][T11653] [U] 
[  366.077520][T11653] [U] 
[  366.077954][T11654] netlink: 'syz.4.1122': attribute type 27 has an invalid length.
[  366.078289][T11653] [U] 
[  366.081101][T11653] [U] 
[  366.081876][T11653] [U] 
[  366.082668][T11653] [U] 
[  366.083425][T11653] [U] 
[  366.084178][T11653] [U] 
[  366.084931][T11653] [U] 
[  366.085736][T11653] [U] 
[  366.086503][T11653] [U] 
[  366.087241][T11653] [U] 
[  366.087993][T11653] [U] 
[  366.088833][T11653] [U] 
[  366.089610][T11653] [U] 
[  366.090361][T11653] [U] 
[  366.091113][T11653] [U] 
[  366.091892][T11653] [U] 
[  366.092680][T11653] [U] 
[  366.093426][T11653] [U] 
[  366.094193][T11653] [U] 
[  366.094983][T11653] [U] 
[  366.095755][T11653] [U] 
[  366.096512][T11653] [U] 
[  366.097267][T11653] [U] 
[  366.098129][T11653] [U] 
[  366.098888][T11653] [U] 
[  366.099631][T11653] [U] 
[  366.100388][T11653] [U] 
[  366.101306][T11653] [U] 
[  366.102086][T11653] [U] 
[  366.102835][T11653] [U] 
[  366.103590][T11653] [U] 
[  366.104384][T11653] [U] 
[  366.105137][T11653] [U] 
[  366.105903][T11653] [U] 
[  366.106667][T11653] [U] 
[  366.107532][T11653] [U] 
[  366.108287][T11653] [U] 
[  366.109033][T11653] [U] 
[  366.109828][T11653] [U] 
[  366.110690][T11653] [U] 
[  366.111669][T11653] [U] 
[  366.112447][T11653] [U] 
[  366.113228][T11653] [U] 
[  366.114067][T11653] [U] 
[  366.114837][T11653] [U] 
[  366.115614][T11653] [U] 
[  366.116395][T11653] [U] 
[  366.117238][T11653] [U] 
[  366.118014][T11653] [U] 
[  366.118772][T11653] [U] 
[  366.119526][T11653] [U] 
[  366.120305][T11653] [U] 
[  366.121069][T11653] [U] 
[  366.121849][T11653] [U] 
[  366.122610][T11653] [U] 
[  366.123380][T11653] [U] 
[  366.124149][T11653] [U] 
[  366.124911][T11653] [U] 
[  366.141831][T11654] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  366.145424][T11654] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  366.160773][T11654] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.163144][T11654] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.165544][T11654] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.168386][T11654] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.174760][T11654] hsr_slave_1: left allmulticast mode
[  366.176593][T11654] vlan2: left promiscuous mode
[  366.177858][T11654] vlan2: left allmulticast mode
[  366.179557][T11653] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1122'.
[  366.213584][T11629] vhci_hcd: connection reset by peer
[  366.215971][  T100] vhci_hcd: stop threads
[  366.217188][  T100] vhci_hcd: release socket
[  366.218452][  T100] vhci_hcd: disconnect device
[  366.791786][T11651] [U] 
[  366.826578][T11669] afs: Unknown parameter '18446744073709551615'
[  367.224259][T11673] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  367.769771][T11683] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  368.092259][T11690] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  368.139198][ T5882] usb 12-1: new full-speed USB device number 9 using dummy_hcd
[  368.299691][ T5882] usb 12-1: not running at top speed; connect to a high speed hub
[  368.305503][ T5882] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  368.311389][ T5882] usb 12-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40
[  368.314064][T11694] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1132'.
[  368.314086][ T5882] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.319250][ T5882] usb 12-1: Product: Ф
[  368.320514][ T5882] usb 12-1: Manufacturer: 轧ꥊ榬�丞጗ῼ뗶耲�ꗓ脥穄蕗샵ﵿꑵ逗练蕱ዱ釬믌�픺≼앸䉀Ͳ㚑ﴂ鋪溙煯⦂�忰��鸡洣㜅ਗ਼�庤빟튃걨�
[  368.325221][ T5882] usb 12-1: SerialNumber: à ”
[  368.329406][T11679] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  368.580701][ T5882] usbhid 12-1:1.0: can't add hid device: -71
[  368.582564][ T5882] usbhid 12-1:1.0: probe with driver usbhid failed with error -71
[  368.586129][ T5882] usb 12-1: USB disconnect, device number 9
[  368.831628][T11706] dccp_close: ABORT with 32 bytes unread
[  368.844369][T11702] lo speed is unknown, defaulting to 1000
[  369.332188][T11714] lo speed is unknown, defaulting to 1000
[  369.533373][T11718] serio: Serial port pts0
[  369.655553][T11720] overlayfs: failed to resolve './bus/file0': -2
[  369.695204][T11723] vivid-007: disconnect
[  369.826693][ T5882] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  369.915037][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1140'.
[  369.922424][T11728] dlm: no local IP address has been set
[  369.924049][T11728] dlm: cannot start dlm midcomms -107
[  370.010946][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1141'.
[  370.015339][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1141'.
[  370.097263][ T5882] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  370.123550][ T5882] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  370.143981][ T5882] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  370.147795][ T5882] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  370.150911][ T5882] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.385350][ T5882] usb 9-1: config 0 descriptor??
[  370.410287][T11718] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  370.548023][T11738] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  370.612133][T11728] vivid-007: reconnect
[  370.765741][T11743] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1143'.
[  370.770308][    T9] vhci_hcd: vhci_device speed not set
[  371.053587][T11716] syz.4.1137 (11716): drop_caches: 2
[  371.069425][ T5882] usbhid 9-1:0.0: can't add hid device: -71
[  371.077518][ T5882] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  371.082898][ T5882] usb 9-1: USB disconnect, device number 4
[  371.308764][T11756] netlink: 'syz.6.1145': attribute type 10 has an invalid length.
[  371.325142][T11756] team0: left allmulticast mode
[  371.326623][T11756] team_slave_0: left allmulticast mode
[  371.328086][T11756] team_slave_1: left allmulticast mode
[  371.329550][T11756] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  371.331398][T11756] team0: left promiscuous mode
[  371.332683][T11756] team_slave_0: left promiscuous mode
[  371.334262][T11756] team_slave_1: left promiscuous mode
[  371.335806][T11756] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  371.338451][T11756] bridge0: port 3(team0) entered disabled state
[  371.394376][T11756] batman_adv: batadv0: Adding interface: team0
[  371.396224][T11756] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.402640][T11756] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  371.804246][T11747] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  371.806386][T11747] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  371.808387][T11747] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  372.019165][T11766] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1149'.
[  372.247146][T11777] input: syz0 as /devices/virtual/input/input29
[  373.108345][ T5943] Bluetooth: hci4: command 0x0c1a tx timeout
[  373.257291][T11794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1155'.
[  373.359905][T11790] input: syz0 as /devices/virtual/input/input30
[  373.609784][T11799] fuse: Unknown parameter 'fx'
[  373.782843][   T72] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  373.802012][ T5943] Bluetooth: hci1: command 0x0c1a tx timeout
[  373.802037][ T5943] Bluetooth: hci5: command 0x0c1a tx timeout
[  374.069897][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1159'.
[  374.292815][T11841] netlink: 'syz.4.1160': attribute type 1 has an invalid length.
[  374.294714][T11841] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1160'.
[  374.688312][T11855] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  374.969280][T11849] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  374.970962][T11849] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  374.972515][T11849] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  375.086536][T11861] input: syz0 as /devices/virtual/input/input32
[  376.508558][ T5942] Bluetooth: hci4: command 0x0c1a tx timeout
[  376.986405][ T5942] Bluetooth: hci1: command 0x0c1a tx timeout
[  376.986474][ T5943] Bluetooth: hci5: command 0x0c1a tx timeout
[  377.465891][ T1413] ieee802154 phy0 wpan0: encryption failed: -22
[  377.468045][ T1413] ieee802154 phy1 wpan1: encryption failed: -22
[  380.848132][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1168'.
[  381.039218][T11893] team0: entered promiscuous mode
[  381.040631][T11893] team_slave_0: entered promiscuous mode
[  381.042373][T11893] team_slave_1: entered promiscuous mode
[  381.573110][T11883] team0: left promiscuous mode
[  381.574804][T11883] team_slave_0: left promiscuous mode
[  381.576673][T11883] team_slave_1: left promiscuous mode
[  381.682691][T11900] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1172'.
[  381.712214][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1172'.
[  381.720518][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1170'.
[  381.739815][T11909] input: syz0 as /devices/virtual/input/input33
[  381.779203][T11910] syz.7.1173: attempt to access beyond end of device
[  381.779203][T11910] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0
[  381.782630][T11910] FAT-fs (nbd7): unable to read boot sector
[  381.908703][T11915] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  382.609352][T11922] input: syz0 as /devices/virtual/input/input34
[  383.763397][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1181'.
[  384.820576][T11963] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  384.857389][T11965] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1185'.
[  384.860581][T11965] netlink: 'syz.6.1185': attribute type 10 has an invalid length.
[  385.072698][ T7775] Bluetooth: hci2: Frame reassembly failed (-84)
[  385.075094][ T7775] Bluetooth: hci2: Frame reassembly failed (-84)
[  385.512154][T11972] syz.5.1188 (11972): drop_caches: 2
[  385.513824][T11972] syz.5.1188 (11972): drop_caches: 2
[  385.777977][T11978] Bluetooth: hci3: Frame reassembly failed (-84)
[  385.790501][   T74] Bluetooth: hci3: Frame reassembly failed (-84)
[  385.792452][   T74] Bluetooth: hci3: Frame reassembly failed (-84)
[  386.410929][T11984] binder: Unknown parameter 'smackfsroot'
[  386.418678][T11984] ubi: mtd0 is already attached to ubi0
[  387.113495][ T5943] Bluetooth: hci2: Entering manufacturer mode failed (-110)
[  387.113527][T11979] Bluetooth: hci2: command 0xfc11 tx timeout
[  387.831793][ T5943] Bluetooth: hci3: command 0x1003 tx timeout
[  387.831811][ T5942] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  388.032230][T12005] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  388.120997][   T40] audit: type=1800 audit(1733605999.955:277): pid=12007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1197" name="bus" dev="9p" ino=36701709 res=0 errno=0
[  388.479607][T12013] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  388.861136][T12024] overlayfs: failed to resolve 'hash': -2
[  388.868332][T12024] random: crng reseeded on system resumption
[  390.424170][T12059] netlink: 'syz.7.1208': attribute type 10 has an invalid length.
[  390.428093][T12059] bond0: (slave wlan1): Opening slave failed
[  390.440899][T12054] syz.7.1208 (12054): drop_caches: 2
[  391.119262][   T40] audit: type=1326 audit(1733606002.961:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.5.1211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000
[  391.124793][   T40] audit: type=1326 audit(1733606002.961:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.5.1211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000
[  391.131804][   T40] audit: type=1326 audit(1733606002.961:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.5.1211" exe="/syz-executor" sig=0 arch=40000003 syscall=449 compat=1 ip=0xf740e579 code=0x7ffc0000
[  391.138153][T12098] netlink: 'syz.7.1212': attribute type 1 has an invalid length.
[  391.138418][   T40] audit: type=1326 audit(1733606002.961:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.5.1211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000
[  391.140294][T12098] netlink: 'syz.7.1212': attribute type 2 has an invalid length.
[  391.154032][   T40] audit: type=1326 audit(1733606002.961:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.5.1211" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf740e579 code=0x7ffc0000
[  391.159699][   T40] audit: type=1326 audit(1733606002.961:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.5.1211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000
[  391.165342][   T40] audit: type=1326 audit(1733606002.961:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.5.1211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000
[  391.170797][   T40] audit: type=1326 audit(1733606002.961:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.5.1211" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf740e579 code=0x7ffc0000
[  391.176941][   T40] audit: type=1326 audit(1733606002.961:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.5.1211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000
[  391.899482][T12116] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  392.148074][T12124] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  392.150055][T12124] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  392.152972][T12124] vhci_hcd vhci_hcd.0: Device attached
[  392.323713][   T35] vhci_hcd: vhci_device speed not set
[  392.414721][   T35] usb 47-1: new full-speed USB device number 4 using vhci_hcd
[  392.491304][T12130] batman_adv: batadv0: Removing interface: team0
[  392.646568][T12130] bridge_slave_0: left allmulticast mode
[  392.650827][T12130] bridge_slave_0: left promiscuous mode
[  392.661686][T12130] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.689821][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1218'.
[  392.693687][T12130] bridge_slave_1: left allmulticast mode
[  392.699066][T12130] bridge_slave_1: left promiscuous mode
[  392.701548][T12130] bridge0: port 2(bridge_slave_1) entered disabled state
[  392.706581][T12130] bond0: (slave bond_slave_0): Releasing backup interface
[  392.709945][T12130] bond0: (slave bond_slave_1): Releasing backup interface
[  392.714708][T12130] team0: Port device team_slave_0 removed
[  392.719455][T12130] team0: Port device team_slave_1 removed
[  392.721191][T12130] batman_adv: batadv0: Removing interface: batadv_slave_0
[  392.726051][T12130] batman_adv: batadv0: Removing interface: batadv_slave_1
[  392.728865][T12133] team0: Mode changed to "broadcast"
[  392.755040][T12130] vlan0: entered promiscuous mode
[  392.758656][T12130] tipc: Started in network mode
[  392.760392][T12130] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  392.763409][T12130] tipc: Enabled bearer <eth:team0>, priority 6
[  392.847952][T12125] vhci_hcd: connection reset by peer
[  392.849671][   T74] vhci_hcd: stop threads
[  392.851310][   T74] vhci_hcd: release socket
[  392.853082][   T74] vhci_hcd: disconnect device
[  392.855909][T12139] bridge_slave_1: left allmulticast mode
[  392.857415][T12139] bridge_slave_1: left promiscuous mode
[  392.858966][T12139] bridge0: port 2(bridge_slave_1) entered disabled state
[  392.863928][T12139] bridge_slave_0: left allmulticast mode
[  392.865401][T12139] bridge_slave_0: left promiscuous mode
[  392.866833][T12139] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.947350][T12133] syzkaller0: entered promiscuous mode
[  392.948932][T12133] syzkaller0: entered allmulticast mode
[  392.951024][   T74] syzkaller0: tun_net_xmit 48
[  392.978465][T12133] syzkaller0: tun_chr_ioctl cmd 1074025677
[  392.980122][T12133] syzkaller0: Linktype set failed because interface is up
[  393.660483][T12156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1224'.
[  393.667589][   T40] kauditd_printk_skb: 4 callbacks suppressed
[  393.667602][   T40] audit: type=1800 audit(1733606005.515:291): pid=12154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1225" name="bus" dev="9p" ino=36701709 res=0 errno=0
[  393.890883][   T72] tipc: Node number set to 11578026
[  394.368490][T12169] lo speed is unknown, defaulting to 1000
[  394.402154][T12167] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  394.429851][T12169] ebtables: wrong size: *len 80, entries_size 48, replsz 48
[  394.511382][T12172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  394.769653][ T6762] usb 11-1: new high-speed USB device number 9 using dummy_hcd
[  394.920110][ T6762] usb 11-1: Using ep0 maxpacket: 8
[  394.931094][ T6762] usb 11-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  394.934226][ T6762] usb 11-1: config 246 descriptor has 1 excess byte, ignoring
[  394.937186][ T6762] usb 11-1: config 246 has 1 interface, different from the descriptor's value: 42
[  394.940879][ T6762] usb 11-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  394.943934][ T6762] usb 11-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  394.947186][ T6762] usb 11-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  394.951220][ T6762] usb 11-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  394.955363][ T6762] usb 11-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  394.960194][ T6762] usb 11-1: config 246 descriptor has 1 excess byte, ignoring
[  394.962189][ T6762] usb 11-1: config 246 has 1 interface, different from the descriptor's value: 42
[  394.965859][ T6762] usb 11-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  394.968884][ T6762] usb 11-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  394.972581][ T6762] usb 11-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  394.975431][ T6762] usb 11-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  394.978694][ T6762] usb 11-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  394.981174][ T6762] usb 11-1: config 246 descriptor has 1 excess byte, ignoring
[  394.983154][ T6762] usb 11-1: config 246 has 1 interface, different from the descriptor's value: 42
[  394.985561][ T6762] usb 11-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  394.988538][ T6762] usb 11-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  394.991522][ T6762] usb 11-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  394.994638][ T6762] usb 11-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  394.999200][ T6762] usb 11-1: string descriptor 0 read error: -22
[  395.000969][ T6762] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  395.003325][ T6762] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.007591][ T6762] adutux 11-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  395.225493][T12182] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  395.314944][T12187] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  396.054868][T12192] fuse: Unknown parameter 'group_00000000000000000000'
[  396.179483][   T40] audit: type=1326 audit(1733606008.029:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12196 comm="syz.4.1235" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc3579 code=0x0
[  396.786321][T12206] block device autoloading is deprecated and will be removed.
[  397.597504][   T35] vhci_hcd: vhci_device speed not set
[  397.735637][T12218] netlink: 'syz.7.1239': attribute type 10 has an invalid length.
[  398.284437][ T6789] usb 11-1: USB disconnect, device number 9
[  398.547718][T12228] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  398.808701][T12236] No control pipe specified
[  398.861963][T12239] netlink: 'syz.5.1244': attribute type 1 has an invalid length.
[  399.044345][T12244] input: syz0 as /devices/virtual/input/input35
[  399.443903][T12249] lo speed is unknown, defaulting to 1000
[  400.094181][T12264] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1
[  400.336736][ T5942] Bluetooth: hci1: unexpected event for opcode 0x200b
[  400.485837][T12271] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  401.224685][   T40] audit: type=1804 audit(1733606013.084:293): pid=12286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1256" name="/newroot/273/file0/bus" dev="9p" ino=36701709 res=1 errno=0
[  401.585452][T12292] input: syz0 as /devices/virtual/input/input36
[  401.589570][T12290] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1257'.
[  401.915454][T12298] netlink: 'syz.5.1259': attribute type 10 has an invalid length.
[  401.931498][   T35] usb 12-1: new full-speed USB device number 10 using dummy_hcd
[  402.082476][   T35] usb 12-1: config index 0 descriptor too short (expected 25183, got 18)
[  402.084898][   T35] usb 12-1: config 116 has too many interfaces: 121, using maximum allowed: 32
[  402.087399][   T35] usb 12-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config
[  402.090160][   T35] usb 12-1: config 116 has 0 interfaces, different from the descriptor's value: 121
[  402.094075][   T35] usb 12-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice=e9.9b
[  402.096403][   T35] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.098831][   T35] usb 12-1: Product: syz
[  402.099912][   T35] usb 12-1: Manufacturer: syz
[  402.101101][   T35] usb 12-1: SerialNumber: syz
[  402.767142][   T35] usb 12-1: USB disconnect, device number 10
[  402.981377][T12319] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  403.759698][T12335] input: syz0 as /devices/virtual/input/input37
[  404.259431][T12341] syzkaller0: entered promiscuous mode
[  404.264073][T12341] syzkaller0: entered allmulticast mode
[  404.300019][T12341] tun0: tun_chr_ioctl cmd 1074025675
[  404.301460][T12341] tun0: persist enabled
[  404.461534][T12347] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  404.463469][T12347] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  404.465639][T12347] vhci_hcd vhci_hcd.0: Device attached
[  404.615304][T12348] vhci_hcd: connection closed
[  404.616276][   T67] vhci_hcd: stop threads
[  404.618896][   T67] vhci_hcd: release socket
[  404.620073][   T67] vhci_hcd: disconnect device
[  405.033484][T12361] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  406.041431][T12385] input: syz0 as /devices/virtual/input/input38
[  406.500197][T12395] syzkaller0: entered promiscuous mode
[  406.501674][T12395] syzkaller0: entered allmulticast mode
[  406.503715][ T1244] syzkaller0: tun_net_xmit 48
[  406.520476][T12395] syzkaller0: tun_chr_ioctl cmd 1074025677
[  406.522147][T12395] syzkaller0: Linktype set failed because interface is up
[  406.527377][T12395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1283'.
[  406.529648][T12395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1283'.
[  406.620116][T12397] netlink: 'syz.5.1284': attribute type 10 has an invalid length.
[  406.622910][T12397] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1284'.
[  406.627976][T12397] team0: Port device geneve0 added
[  406.633319][T12397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  406.784355][T12412] ucma_write: process 1139 (syz.5.1284) changed security contexts after opening file descriptor, this is not allowed.
[  406.850529][T12419] loop6: detected capacity change from 0 to 524287999
[  406.852504][    C3] blk_print_req_error: 24 callbacks suppressed
[  406.852513][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  406.857948][    C3] buffer_io_error: 24 callbacks suppressed
[  406.857955][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.862170][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  406.865283][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.867848][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  406.870289][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.872933][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  406.875412][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.877510][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  406.879928][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.882067][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  406.884497][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.886634][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  406.889031][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.891245][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  406.893753][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.895725][T12419] ldm_validate_partition_table(): Disk read failed.
[  406.898037][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  406.900481][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.950346][T12422] loop6: detected capacity change from 524287999 to 524287952
[  406.952782][T12419]  loop6: unable to read partition table
[  406.954479][T12419] loop_reread_partitions: partition scan of loop6 (Í¢†¨ÙÇ´8ÝCP'OÈQž=}m”=@4r„(Uk+Z—Ö 4—Ö>˜ìF¼1ã“›ÍÀù‚àÔ™Û1Œ°) failed (rc=-5)
[  407.341503][T12429] netlink: 'syz.5.1288': attribute type 1 has an invalid length.
[  407.343592][T12429] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1288'.
[  407.637251][T12438] xt_CT: You must specify a L4 protocol and not use inversions on it
[  407.642399][ T5942] Bluetooth: hci1: ACL packet too small
[  408.014985][T12446] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  408.216792][T12449] input: syz0 as /devices/virtual/input/input39
[  408.357860][T12452] netlink: 'syz.7.1294': attribute type 10 has an invalid length.
[  409.164346][T12466] vivid-007: disconnect
[  409.218358][T12467] dlm: non-version read from control device 8224
[  409.220660][T12467] dlm: no local IP address has been set
[  409.222487][T12467] dlm: cannot start dlm midcomms -107
[  409.965896][T12467] vivid-007: reconnect
[  410.764994][T12490] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  410.866446][T12492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  411.055032][T12495] input: syz0 as /devices/virtual/input/input40
[  411.136622][ T6762] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  411.283763][ T6762] usb 10-1: Using ep0 maxpacket: 8
[  411.286644][ T6762] usb 10-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  411.288997][ T6762] usb 10-1: config 246 descriptor has 1 excess byte, ignoring
[  411.291003][ T6762] usb 10-1: config 246 has 1 interface, different from the descriptor's value: 42
[  411.293454][ T6762] usb 10-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  411.296491][ T6762] usb 10-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  411.299462][ T6762] usb 10-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  411.302434][ T6762] usb 10-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  411.305851][ T6762] usb 10-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  411.308399][ T6762] usb 10-1: config 246 descriptor has 1 excess byte, ignoring
[  411.310478][ T6762] usb 10-1: config 246 has 1 interface, different from the descriptor's value: 42
[  411.312897][ T6762] usb 10-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  411.316031][ T6762] usb 10-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  411.319028][ T6762] usb 10-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  411.328050][ T6762] usb 10-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  411.331652][ T6762] usb 10-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  411.334327][ T6762] usb 10-1: config 246 descriptor has 1 excess byte, ignoring
[  411.337947][ T6762] usb 10-1: config 246 has 1 interface, different from the descriptor's value: 42
[  411.340545][ T6762] usb 10-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  411.343730][ T6762] usb 10-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  411.346612][ T6762] usb 10-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  411.349515][ T6762] usb 10-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  411.354073][ T6762] usb 10-1: string descriptor 0 read error: -22
[  411.355768][ T6762] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  411.358122][ T6762] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.362309][ T6762] adutux 10-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  411.668840][T12504] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  413.192613][T12528] 9pnet_virtio: no channels available for device syz
[  413.565439][ T6789] usb 10-1: USB disconnect, device number 7
[  414.074860][T12540] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  414.137102][T12543] input: syz0 as /devices/virtual/input/input41
[  414.354023][T12547] netlink: 'syz.7.1319': attribute type 1 has an invalid length.
[  414.356100][T12547] netlink: 'syz.7.1319': attribute type 3 has an invalid length.
[  414.358176][T12547] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1319'.
[  415.128449][   T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  415.186866][T12557] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  416.226665][T12597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  416.320535][ T5943] Bluetooth: hci1: command 0x0c1a tx timeout
[  416.468394][ T6762] usb 12-1: new high-speed USB device number 11 using dummy_hcd
[  416.636047][ T6762] usb 12-1: Using ep0 maxpacket: 8
[  416.638873][ T6762] usb 12-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  416.641315][ T6762] usb 12-1: config 246 descriptor has 1 excess byte, ignoring
[  416.643618][ T6762] usb 12-1: config 246 has 1 interface, different from the descriptor's value: 42
[  416.646276][ T6762] usb 12-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  416.649515][ T6762] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  416.652608][ T6762] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  416.655677][ T6762] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  416.659126][ T6762] usb 12-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  416.661535][ T6762] usb 12-1: config 246 descriptor has 1 excess byte, ignoring
[  416.663540][ T6762] usb 12-1: config 246 has 1 interface, different from the descriptor's value: 42
[  416.665996][ T6762] usb 12-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  416.669073][ T6762] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  416.672071][ T6762] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  416.675032][ T6762] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  416.678368][ T6762] usb 12-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  416.680789][ T6762] usb 12-1: config 246 descriptor has 1 excess byte, ignoring
[  416.682893][ T6762] usb 12-1: config 246 has 1 interface, different from the descriptor's value: 42
[  416.685454][ T6762] usb 12-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  416.688552][ T6762] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  416.691541][ T6762] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  416.694509][ T6762] usb 12-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  416.699321][ T6762] usb 12-1: string descriptor 0 read error: -22
[  416.701242][ T6762] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  416.703639][ T6762] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.707619][ T6762] adutux 12-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  417.014630][T12601] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  418.930332][   T25] usb 12-1: USB disconnect, device number 11
[  421.904973][T12626] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  422.261614][T12639] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  422.808879][T12648] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7)
[  422.810541][T12648] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  422.813261][T12648] vhci_hcd vhci_hcd.0: Device attached
[  423.031182][    T9] vhci_hcd: vhci_device speed not set
[  423.127622][T12659] overlayfs: failed to resolve 'hash': -2
[  423.134436][T12659] random: crng reseeded on system resumption
[  423.337889][    T9] usb 51-1: new full-speed USB device number 2 using vhci_hcd
[  423.863948][T12651] vhci_hcd: connection reset by peer
[  423.865873][   T74] vhci_hcd: stop threads
[  423.874343][   T74] vhci_hcd: release socket
[  423.876089][   T74] vhci_hcd: disconnect device
[  424.165110][T12673] overlayfs: failed to resolve './file0': -2
[  424.919008][T12685] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  425.573822][T12707] netlink: 'syz.5.1349': attribute type 1 has an invalid length.
[  425.577796][T12707] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1349'.
[  426.055538][T12736] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6)
[  426.057341][T12736] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  426.059652][T12736] vhci_hcd vhci_hcd.0: Device attached
[  426.112521][T12740] overlayfs: failed to resolve 'hash': -2
[  426.119382][T12740] random: crng reseeded on system resumption
[  426.257375][ T7111] vhci_hcd: vhci_device speed not set
[  426.527877][ T7111] usb 49-1: new full-speed USB device number 4 using vhci_hcd
[  426.563433][T12738] vhci_hcd: connection reset by peer
[  426.566267][ T1244] vhci_hcd: stop threads
[  426.567828][ T1244] vhci_hcd: release socket
[  426.569474][ T1244] vhci_hcd: disconnect device
[  426.713692][T12745] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  427.280368][T12759] team0: entered promiscuous mode
[  427.281803][T12759] team_slave_0: entered promiscuous mode
[  427.283612][T12759] team_slave_1: entered promiscuous mode
[  427.285317][T12759] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  427.962935][T12751] team0: left promiscuous mode
[  427.964318][T12751] team_slave_0: left promiscuous mode
[  427.965779][T12751] team_slave_1: left promiscuous mode
[  427.967191][T12751] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  428.033463][T12770] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1359'.
[  428.064253][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1359'.
[  428.243028][T12780] overlayfs: failed to resolve './file0': -2
[  428.465859][    T9] vhci_hcd: vhci_device speed not set
[  429.065900][T12785] syz.4.1363: attempt to access beyond end of device
[  429.065900][T12785] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0
[  429.069395][T12785] syz.4.1363: attempt to access beyond end of device
[  429.069395][T12785] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0
[  429.072752][T12785] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  429.075417][T12785] syz.4.1363: attempt to access beyond end of device
[  429.075417][T12785] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0
[  429.079077][T12785] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  429.081681][T12785] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found
[  429.083774][T12785] UDF-fs: Scanning with blocksize 512 failed
[  429.085850][T12785] syz.4.1363: attempt to access beyond end of device
[  429.085850][T12785] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0
[  429.089642][T12785] syz.4.1363: attempt to access beyond end of device
[  429.089642][T12785] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0
[  429.093729][T12785] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  429.096418][T12785] syz.4.1363: attempt to access beyond end of device
[  429.096418][T12785] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0
[  429.099892][T12785] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  429.102399][T12785] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found
[  429.104394][T12785] UDF-fs: Scanning with blocksize 1024 failed
[  429.106495][T12785] syz.4.1363: attempt to access beyond end of device
[  429.106495][T12785] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0
[  429.109987][T12785] syz.4.1363: attempt to access beyond end of device
[  429.109987][T12785] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0
[  429.113336][T12785] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  429.115900][T12785] syz.4.1363: attempt to access beyond end of device
[  429.115900][T12785] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0
[  429.122412][T12785] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  429.125134][T12785] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found
[  429.129044][T12785] UDF-fs: Scanning with blocksize 2048 failed
[  429.133135][T12785] syz.4.1363: attempt to access beyond end of device
[  429.133135][T12785] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0
[  429.136743][T12785] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  429.140318][T12785] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  429.143372][T12785] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found
[  429.145540][T12785] UDF-fs: Scanning with blocksize 4096 failed
[  429.147258][T12785] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1)
[  429.160254][T12785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1363'.
[  429.194923][T12800] overlayfs: failed to resolve 'hash': -2
[  429.201670][T12800] random: crng reseeded on system resumption
[  429.265352][T12804] netlink: 'syz.7.1362': attribute type 1 has an invalid length.
[  429.267656][T12804] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1362'.
[  429.663859][T12829] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  430.045432][T12834] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  430.047257][T12834] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  430.049822][T12834] vhci_hcd vhci_hcd.0: Device attached
[  430.230747][   T25] vhci_hcd: vhci_device speed not set
[  430.528122][   T25] usb 45-1: new full-speed USB device number 3 using vhci_hcd
[  431.322181][T12837] vhci_hcd: connection reset by peer
[  431.323878][   T74] vhci_hcd: stop threads
[  431.325408][   T74] vhci_hcd: release socket
[  431.327032][   T74] vhci_hcd: disconnect device
[  431.435618][T12859] overlayfs: failed to resolve './bus/file0': -2
[  431.622239][ T7111] vhci_hcd: vhci_device speed not set
[  431.824199][T12869] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1374'.
[  431.946473][T12871] ieee802154 phy1 wpan1: encryption failed: -22
[  432.314696][T12878] vivid-007: disconnect
[  432.420951][T12880] dlm: no local IP address has been set
[  432.422865][T12880] dlm: cannot start dlm midcomms -107
[  433.227169][T12880] vivid-007: reconnect
[  433.446394][T12910] netlink: 'syz.6.1379': attribute type 1 has an invalid length.
[  433.449270][T12910] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1379'.
[  434.486163][T12946] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[  434.487938][T12946] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  434.491017][T12946] vhci_hcd vhci_hcd.0: Device attached
[  434.491236][T12945] [U] 
[  434.493360][T12945] [U] 
[  434.494094][T12945] [U] 
[  434.494842][T12945] [U] 
[  434.495620][T12945] [U] 
[  434.495660][T12946] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  434.496341][T12945] [U] 
[  434.499921][T12945] [U] 
[  434.500725][T12945] [U] 
[  434.562372][T12945] [U] 
[  434.563130][T12945] [U] 
[  434.563895][T12945] [U] 
[  434.564627][T12945] [U] 
[  434.565398][T12945] [U] 
[  434.566149][T12945] [U] 
[  434.566907][T12945] [U] 
[  434.567398][T12950] netlink: 'syz.6.1383': attribute type 27 has an invalid length.
[  434.567614][T12945] [U] 
[  434.570914][T12950] hsr_slave_1: left allmulticast mode
[  434.571072][T12945] [U] 
[  434.572374][T12950] vlan2: left promiscuous mode
[  434.573076][T12945] [U] 
[  434.574294][T12950] vlan2: left allmulticast mode
[  434.575074][T12945] [U] 
[  434.577124][T12945] [U] 
[  434.578002][T12945] [U] 
[  434.578754][T12945] [U] 
[  434.579482][T12945] [U] 
[  434.580207][T12945] [U] 
[  434.581065][T12945] [U] 
[  434.581792][T12945] [U] 
[  434.582519][T12945] [U] 
[  434.583248][T12945] [U] 
[  434.583989][T12945] [U] 
[  434.584707][T12945] [U] 
[  434.585421][T12945] [U] 
[  434.585622][T12950] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  434.586124][T12945] [U] 
[  434.588449][T12950] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  434.589242][T12945] [U] 
[  434.591380][T12950] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  434.592102][T12945] [U] 
[  434.594406][T12950] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  434.595133][T12945] [U] 
[  434.598457][T12945] [U] 
[  434.599427][T12945] [U] 
[  434.600284][T12945] [U] 
[  434.601236][T12945] [U] 
[  434.601328][T12950] geneve2: left promiscuous mode
[  434.602053][T12945] [U] 
[  434.603383][T12950] geneve2: left allmulticast mode
[  434.604103][T12945] [U] 
[  434.606222][T12945] [U] 
[  434.606992][T12945] [U] 
[  434.607745][T12945] [U] 
[  434.617364][T12945] [U] 
[  434.618152][T12945] [U] 
[  434.618889][T12945] [U] 
[  434.619621][T12945] [U] 
[  434.620368][T12945] [U] 
[  434.621104][T12945] [U] 
[  434.621833][T12945] [U] 
[  434.622560][T12945] [U] 
[  434.623306][T12945] [U] 
[  434.624055][T12945] [U] 
[  434.624786][T12945] [U] 
[  434.625522][T12945] [U] 
[  434.626271][T12945] [U] 
[  434.627011][T12945] [U] 
[  434.627743][T12945] [U] 
[  434.628467][T12945] [U] 
[  434.631892][T12945] [U] 
[  434.632569][T12945] [U] 
[  434.633309][T12945] [U] 
[  434.634036][T12945] [U] 
[  434.634772][T12945] [U] 
[  434.635497][T12945] [U] 
[  434.636231][T12945] [U] 
[  434.636980][T12945] [U] 
[  434.638200][T12945] [U] 
[  434.638951][T12945] [U] 
[  434.639679][T12945] [U] 
[  434.640417][T12945] [U] 
[  434.641214][T12945] [U] 
[  434.641959][T12945] [U] 
[  434.642688][T12945] [U] 
[  434.643425][T12945] [U] 
[  434.644155][T12945] [U] 
[  434.644894][T12945] [U] 
[  434.645622][T12945] [U] 
[  434.646357][T12945] [U] 
[  434.648027][T12945] [U] 
[  434.648782][T12945] [U] 
[  434.649506][T12945] [U] 
[  434.650244][T12945] [U] 
[  434.650976][T12945] [U] 
[  434.651713][T12945] [U] 
[  434.652441][T12945] [U] 
[  434.653198][T12945] [U] 
[  434.653948][T12945] [U] 
[  434.654680][T12945] [U] 
[  434.655414][T12945] [U] 
[  434.656148][T12945] [U] 
[  434.659025][T12945] [U] 
[  434.659793][T12945] [U] 
[  434.660524][T12945] [U] 
[  434.661281][T12945] [U] 
[  434.662054][T12945] [U] 
[  434.662788][T12945] [U] 
[  434.663531][T12945] [U] 
[  434.664271][T12945] [U] 
[  434.665063][T12945] [U] 
[  434.665803][T12945] [U] 
[  434.666546][T12945] [U] 
[  434.667284][T12945] [U] 
[  434.669301][T12945] [U] 
[  434.670062][T12945] [U] 
[  434.670796][T12945] [U] 
[  434.671523][T12945] [U] 
[  434.672632][T12945] [U] 
[  434.673397][T12945] [U] 
[  434.673412][T12945] [U] 
[  434.673426][T12945] [U] 
[  434.673449][T12945] [U] 
[  434.673463][T12945] [U] 
[  434.677133][T12945] [U] 
[  434.677867][T12945] [U] 
[  434.680414][T12945] [U] 
[  434.681194][T12945] [U] 
[  434.681930][T12945] [U] 
[  434.682655][T12945] [U] 
[  434.685129][T12945] [U] 
[  434.685885][T12945] [U] 
[  434.686624][T12945] [U] 
[  434.687351][T12945] [U] 
[  434.689908][T12945] [U] 
[  434.690663][T12945] [U] 
[  434.691391][T12945] [U] 
[  434.693430][T12951] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1383'.
[  434.776181][    T9] vhci_hcd: vhci_device speed not set
[  434.845890][    T9] usb 47-1: new full-speed USB device number 5 using vhci_hcd
[  434.945852][T12947] vhci_hcd: connection reset by peer
[  434.947641][   T12] vhci_hcd: stop threads
[  434.948888][   T12] vhci_hcd: release socket
[  434.950158][   T12] vhci_hcd: disconnect device
[  435.247392][T12939] [U] 
[  435.561007][T12966] lo speed is unknown, defaulting to 1000
[  435.921839][   T25] vhci_hcd: vhci_device speed not set
[  437.246851][T12993] vivid-007: disconnect
[  437.305756][T12997] dlm: non-version read from control device 8224
[  437.310743][T12998] netlink: 'syz.4.1396': attribute type 10 has an invalid length.
[  437.313473][T12997] dlm: no local IP address has been set
[  437.315827][T12997] dlm: cannot start dlm midcomms -107
[  437.315960][T12998] bond0: (slave wlan1): Opening slave failed
[  437.374217][T12998] syz.4.1396 (12998): drop_caches: 2
[  437.851428][T12997] vivid-007: reconnect
[  438.393041][ T1413] ieee802154 phy1 wpan1: encryption failed: -22
[  438.615510][T13032] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7)
[  438.617239][T13032] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  438.619225][T13032] vhci_hcd vhci_hcd.0: Device attached
[  438.636785][T13032] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  438.803885][ T6126] vhci_hcd: vhci_device speed not set
[  438.903342][ T6126] usb 51-1: new full-speed USB device number 3 using vhci_hcd
[  439.288173][T13035] vhci_hcd: connection reset by peer
[  439.292429][   T12] vhci_hcd: stop threads
[  439.293675][   T12] vhci_hcd: release socket
[  439.295110][   T12] vhci_hcd: disconnect device
[  439.986555][    T9] vhci_hcd: vhci_device speed not set
[  440.135701][T13057] bio_check_eod: 2 callbacks suppressed
[  440.135743][T13057] syz.7.1408: attempt to access beyond end of device
[  440.135743][T13057] nbd7: rw=4096, sector=0, nr_sectors = 1 limit=0
[  440.140829][T13057] XFS (nbd7): SB validate failed with error -5.
[  440.530678][ T5943] Bluetooth: hci2: sending frame failed (-49)
[  440.533938][ T5942] Bluetooth: hci2: Entering manufacturer mode failed (-49)
[  442.314958][T13108] random: crng reseeded on system resumption
[  442.853644][T13119] netlink: 'syz.4.1420': attribute type 10 has an invalid length.
[  442.866255][T13119] batman_adv: batadv0: Adding interface: team0
[  442.868153][T13119] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  442.875963][T13119] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  442.970130][T13116] overlayfs: failed to resolve './bus/file0': -2
[  443.667053][T13134] vivid-007: disconnect
[  443.731384][T13138] dlm: non-version read from control device 8224
[  443.734480][T13138] dlm: no local IP address has been set
[  443.735998][T13138] dlm: cannot start dlm midcomms -107
[  443.973121][ T6126] vhci_hcd: vhci_device speed not set
[  444.202299][T13138] vivid-007: reconnect
[  444.456101][T13151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  444.651826][T13157] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  444.916974][T13162] lo speed is unknown, defaulting to 1000
[  445.858677][ T5942] Bluetooth: hci1: unexpected event for opcode 0x1001
[  446.738012][T13196] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  447.111600][T13200] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  447.926582][T13221] lo speed is unknown, defaulting to 1000
[  448.126427][T13228] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1449'.
[  448.786058][T13242] lo speed is unknown, defaulting to 1000
[  448.787635][T13242] lo speed is unknown, defaulting to 1000
[  448.789243][T13242] lo speed is unknown, defaulting to 1000
[  448.809739][T13242] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  448.830672][T13242] lo speed is unknown, defaulting to 1000
[  448.835425][T13242] lo speed is unknown, defaulting to 1000
[  448.841680][T13242] lo speed is unknown, defaulting to 1000
[  448.846905][T13242] lo speed is unknown, defaulting to 1000
[  449.381259][T13255] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  450.261158][T13277] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  450.692764][T13287] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  450.694476][T13287] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  450.696855][T13287] vhci_hcd vhci_hcd.0: Device attached
[  450.700421][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1463'.
[  450.867236][ T6789] vhci_hcd: vhci_device speed not set
[  450.927070][ T6789] usb 45-1: new full-speed USB device number 4 using vhci_hcd
[  451.133102][T13298] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1466'.
[  451.141417][T13298] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  451.143723][T13298] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  451.145991][T13298] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  451.148246][T13298] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  451.150600][T13298] vxlan0: entered promiscuous mode
[  451.625643][T13288] vhci_hcd: connection reset by peer
[  451.628268][  T100] vhci_hcd: stop threads
[  451.631395][  T100] vhci_hcd: release socket
[  451.632857][  T100] vhci_hcd: disconnect device
[  451.994789][ T6126] libceph: connect (1)[c::]:6789 error -101
[  452.001445][ T6126] libceph: mon0 (1)[c::]:6789 connect error
[  452.005718][ T6126] libceph: connect (1)[c::]:6789 error -101
[  452.008017][ T6126] libceph: mon0 (1)[c::]:6789 connect error
[  452.028117][T13311] ceph: No mds server is up or the cluster is laggy
[  452.190720][T13311] Process accounting resumed
[  453.268017][T13340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1477'.
[  453.782322][T13354] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  453.784011][T13354] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  453.796439][T13354] vhci_hcd vhci_hcd.0: Device attached
[  454.296751][T13356] vhci_hcd: connection closed
[  454.297245][ T7775] vhci_hcd: stop threads
[  454.299733][ T7775] vhci_hcd: release socket
[  454.301706][ T7775] vhci_hcd: disconnect device
[  454.489184][T13370] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1483'.
[  454.501330][T13370] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1483'.
[  454.508995][T13370] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1483'.
[  456.221629][ T6789] vhci_hcd: vhci_device speed not set
[  456.411115][T13415] sp0: Synchronizing with TNC
[  457.781111][T13444] serio: Serial port pts0
[  457.790652][T13445] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2
[  457.794073][T13445] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0
[  457.900853][T13448] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1497'.
[  457.903229][T13448] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1497'.
[  457.905854][T13448] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1497'.
[  457.909075][T13448] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1497'.
[  458.075473][ T6789] usb 11-1: new high-speed USB device number 10 using dummy_hcd
[  458.246192][ T6789] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  458.249184][ T6789] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  458.252017][ T6789] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  458.255468][ T6789] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  458.258083][ T6789] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.260749][ T6789] usb 11-1: config 0 descriptor??
[  458.262878][T13444] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  458.988798][T13439] syz.6.1496 (13439): drop_caches: 2
[  459.595244][T13471] input: syz0 as /devices/virtual/input/input43
[  460.173370][T13477] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  460.703892][T13485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  460.861198][ T6789] usbhid 11-1:0.0: can't add hid device: -71
[  460.876912][ T6789] usbhid 11-1:0.0: probe with driver usbhid failed with error -71
[  460.894902][ T6789] usb 11-1: USB disconnect, device number 10
[  461.252409][T13495] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  462.415431][T13517] input: syz0 as /devices/virtual/input/input44
[  463.117241][T13527] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  463.276298][T13539] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1520'.
[  463.377149][T13543] binder: 13537:13543 ioctl c0306201 20000400 returned -14
[  463.417215][T13544] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  463.419353][T13544] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  463.422234][T13544] vhci_hcd vhci_hcd.0: Device attached
[  463.749441][  T833] vhci_hcd: vhci_device speed not set
[  463.828535][  T833] usb 47-1: new full-speed USB device number 6 using vhci_hcd
[  463.857647][T13549] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  463.991074][T13545] vhci_hcd: connection reset by peer
[  463.993631][   T12] vhci_hcd: stop threads
[  463.994853][   T12] vhci_hcd: release socket
[  463.998057][   T12] vhci_hcd: disconnect device
[  464.035042][T13560] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  464.616007][T13581] input: syz0 as /devices/virtual/input/input45
[  465.068004][T13590] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  465.107868][T13591] siw: device registration error -23
[  465.686088][ T6789] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  465.846064][ T6789] usb 9-1: Using ep0 maxpacket: 16
[  465.854197][ T6789] usb 9-1: config 0 has no interfaces?
[  465.863525][ T6789] usb 9-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=ec.89
[  465.872655][ T6789] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.881681][ T6789] usb 9-1: Product: syz
[  465.883347][ T6789] usb 9-1: Manufacturer: syz
[  465.884688][ T6789] usb 9-1: SerialNumber: syz
[  465.889031][ T6789] usb 9-1: config 0 descriptor??
[  466.355778][T13608] Process accounting resumed
[  466.476018][T13606] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  466.543517][T13621] sp0: Synchronizing with TNC
[  466.566807][T13620] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  466.849627][T13630] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  467.414851][T13640] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  468.510317][ T6789] usb 9-1: USB disconnect, device number 5
[  468.765176][T13660] afs: Unknown parameter '18446744073709551615'
[  468.963406][  T833] vhci_hcd: vhci_device speed not set
[  469.273051][T13663] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  469.311246][T13670] /dev/sg0: Can't lookup blockdev
[  469.375941][T13669] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  470.004702][T13677] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  470.107035][  T833] libceph: connect (1)[c::]:6789 error -101
[  470.108685][  T833] libceph: mon0 (1)[c::]:6789 connect error
[  470.185883][T13686] input: syz0 as /devices/virtual/input/input46
[  470.230775][T13687] syz.6.1551: attempt to access beyond end of device
[  470.230775][T13687] nbd6: rw=4096, sector=0, nr_sectors = 1 limit=0
[  470.292200][T13680] ceph: No mds server is up or the cluster is laggy
[  470.887246][T13700] binder: BINDER_SET_CONTEXT_MGR already set
[  470.888871][T13700] binder: 13696:13700 ioctl 4018620d 200002c0 returned -16
[  470.936637][T13693] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  470.938220][T13693] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  470.940903][T13693] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  470.941371][   T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  470.943171][T13693] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  470.947243][T13693] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  470.950157][T13693] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  471.799517][T13728] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1558'.
[  471.909914][T13739] dccp_close: ABORT with 32 bytes unread
[  471.913422][T13738] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1559'.
[  471.916659][T13738] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1559'.
[  471.957556][T13726] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  477.771457][T13773] input: syz0 as /devices/virtual/input/input47
[  477.941230][T13775] /dev/sg0: Can't lookup blockdev
[  478.707693][T13791] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1568'.
[  479.529015][T13811] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[  479.532828][T13811] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  479.726085][T13816] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  479.727828][T13816] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  479.730120][T13816] vhci_hcd vhci_hcd.0: Device attached
[  479.903980][ T6126] vhci_hcd: vhci_device speed not set
[  479.963876][ T6126] usb 47-1: new full-speed USB device number 7 using vhci_hcd
[  480.334334][T13817] vhci_hcd: connection reset by peer
[  480.336107][ T1244] vhci_hcd: stop threads
[  480.337269][ T1244] vhci_hcd: release socket
[  480.338505][ T1244] vhci_hcd: disconnect device
[  480.913668][T13827] fuse: Unknown parameter '
'
[  480.930048][ T6910] libceph: connect (1)[c::]:6789 error -101
[  480.931630][ T6910] libceph: mon0 (1)[c::]:6789 connect error
[  481.084472][T13829] ceph: No mds server is up or the cluster is laggy
[  481.193661][T13835] Process accounting resumed
[  482.502207][T13858] netlink: 'syz.7.1584': attribute type 10 has an invalid length.
[  482.764920][T13861] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1583'.
[  483.051835][T13865] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1585'.
[  483.863620][T13881] /dev/sg0: Can't lookup blockdev
[  484.901273][T13892] input: syz0 as /devices/virtual/input/input48
[  484.902969][T13892] input: failed to attach handler leds to device input48, error: -6
[  484.923883][ T6762] libceph: connect (1)[c::]:6789 error -101
[  484.925664][ T6762] libceph: mon0 (1)[c::]:6789 connect error
[  485.110261][ T6126] vhci_hcd: vhci_device speed not set
[  485.181152][ T6762] libceph: connect (1)[c::]:6789 error -101
[  485.182829][ T6762] libceph: mon0 (1)[c::]:6789 connect error
[  485.559073][T13892] ceph: No mds server is up or the cluster is laggy
[  485.902512][T13907] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  485.904974][T13903] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1594'.
[  486.792162][T13926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1598'.
[  486.839459][T13923] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  487.497983][T13939] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  487.500306][T13939] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  487.503028][T13939] vhci_hcd vhci_hcd.0: Device attached
[  487.758727][  T833] vhci_hcd: vhci_device speed not set
[  487.950453][T13941] vhci_hcd: connection closed
[  487.950555][ T1143] vhci_hcd: stop threads
[  487.952961][ T1143] vhci_hcd: release socket
[  487.954167][ T1143] vhci_hcd: disconnect device
[  487.968476][  T833] usb 49-1: new full-speed USB device number 5 using vhci_hcd
[  487.971327][  T833] usb 49-1: enqueue for inactive port 0
[  488.048411][  T833] vhci_hcd: vhci_device speed not set
[  489.691366][T13973] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2
[  489.694781][T13973] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0
[  490.167277][T13989] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1610'.
[  490.170231][T13989] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1610'.
[  490.172920][T13989] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1610'.
[  490.175261][T13989] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1610'.
[  490.258690][T13988] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  490.261153][T13992] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1613'.
[  490.307453][  T835] e1000 0000:00:06.0 eth0: Reset adapter
[  490.392329][T13992] sp0: Synchronizing with TNC
[  490.425366][T13992] trusted_key: encrypted_key: insufficient parameters specified
[  490.438171][T13992] ubi0: detaching mtd0
[  490.443061][T13992] ubi0: mtd0 is detached
[  490.670925][T14017] binder: transaction release 40 bad handle 1, ret = -22
[  491.479297][T14028] netlink: 'syz.5.1618': attribute type 10 has an invalid length.
[  491.482283][T14028] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1618'.
[  491.536844][T14030] input: syz0 as /devices/virtual/input/input49
[  491.697617][T14023] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1617'.
[  492.795934][  T835] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  499.752640][ T1413] ieee802154 phy1 wpan1: encryption failed: -22
[  501.829010][T14059] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2
[  501.831891][T14059] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0
[  501.839071][T14061] libceph: resolve '0' (ret=-3): failed
[  501.850689][T14061] lo speed is unknown, defaulting to 1000
[  501.961630][T14061] lo speed is unknown, defaulting to 1000
[  501.995734][T14073] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1623'.
[  501.998093][T14073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1623'.
[  502.001171][T14073] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1623'.
[  502.003472][T14073] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1623'.
[  502.061190][T14076] syz.7.1626 (14076): drop_caches: 2
[  502.372703][T14080] SET target dimension over the limit!
[  502.758306][T14087] input: syz0 as /devices/virtual/input/input50
[  504.128225][T14110] input: syz0 as /devices/virtual/input/input51
[  504.158772][T14111] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  504.180872][   T72] e1000 0000:00:06.0 eth0: Reset adapter
[  504.751029][T14138] vivid-007: disconnect
[  504.803960][T14141] netlink: 'syz.7.1642': attribute type 7 has an invalid length.
[  504.847317][T14143] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  504.985595][T14150] netlink: 352 bytes leftover after parsing attributes in process `syz.7.1643'.
[  505.587467][T14137] vivid-007: reconnect
[  506.388701][   T72] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  515.866911][T14172] udevd[14172]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  522.895138][T14178] overlayfs: failed to clone lowerpath
[  522.953458][T14199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1652'.
[  523.915442][T14221] fuse: Bad value for 'fd'
[  523.987399][T14220] netlink: 'syz.6.1655': attribute type 4 has an invalid length.
[  524.592204][T14245] usb usb7: usbfs: process 14245 (syz.7.1666) did not claim interface 0 before use
[  524.791137][T14256] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1665'.
[  525.545950][T14283] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  525.576278][T14284] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1678'.
[  526.056967][T14292] dvmrp0: entered allmulticast mode
[  526.830303][T14309] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  527.205435][T14319] netlink: 'syz.7.1692': attribute type 3 has an invalid length.
[  527.541587][T14336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1698'.
[  527.826938][T14344] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  528.107362][T14346] binder: BC_ACQUIRE_RESULT not supported
[  528.109091][T14346] binder: 14345:14346 ioctl c0306201 20000580 returned -22
[  528.426871][T14362] input: syz0 as /devices/virtual/input/input54
[  528.630496][T14361] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  528.810508][T14368] autofs4:pid:14368:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4294934529), cmd(0xc0189374)
[  528.814220][T14368] autofs4:pid:14368:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374)
[  529.507411][T14392] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1718'.
[  529.725697][   T40] audit: type=1400 audit(1733606142.144:294): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2F70226F632F7468726561642D73656C662F617474722F63757272656E74 pid=14411 comm="syz.6.1725"
[  530.105941][T14423] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  530.116808][T14427] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1730'.
[  530.533123][T14445] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1736'.
[  530.716158][T14452] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  530.829826][T14463] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1741'.
[  531.020022][T14462] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  531.444594][T14472] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1744'.
[  531.926687][T14497] binder: 14496:14497 ioctl c00c620f 20000340 returned -22
[  532.007710][T14494] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1751'.
[  532.180272][T14508] nftables ruleset with unbound chain
[  532.336472][T14520] netlink: 'syz.7.1760': attribute type 15 has an invalid length.
[  532.339197][T14520] netlink: 666 bytes leftover after parsing attributes in process `syz.7.1760'.
[  532.701264][T14540] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1766'.
[  533.100201][T14558] bridge2: entered promiscuous mode
[  533.231399][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1784'.
[  533.595367][T14606] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  533.934228][T14617] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1799'.
[  534.089004][T14624] input: syz0 as /devices/virtual/input/input55
[  534.257186][T14633] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  535.393399][T14673] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  536.452639][T14723] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  537.056289][T14734] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1843'.
[  537.213054][T14753] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1849'.
[  537.353576][T14767] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1853'.
[  537.392297][T14766] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  537.446260][T14771] usb usb7: usbfs: process 14771 (syz.5.1855) did not claim interface 0 before use
[  537.478775][T14773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1856'.
[  538.371017][ T6762] usb 12-1: new high-speed USB device number 12 using dummy_hcd
[  538.404714][T14794] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1863'.
[  538.551158][ T6762] usb 12-1: Using ep0 maxpacket: 8
[  538.553671][ T6762] usb 12-1: config 0 has no interfaces?
[  538.555124][ T6762] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  538.557568][ T6762] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.560136][ T6762] usb 12-1: config 0 descriptor??
[  538.764082][ T6762] usb 12-1: USB disconnect, device number 12
[  539.411134][T14812] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0
[  539.411622][T14811] IPVS: stopping master sync thread 14812 ...
[  539.622346][T14815] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  540.495881][T14841] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1876'.
[  541.081948][ T6762] usb 11-1: new high-speed USB device number 11 using dummy_hcd
[  541.156751][T14860] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1882'.
[  541.250486][ T6762] usb 11-1: Using ep0 maxpacket: 8
[  541.252993][ T6762] usb 11-1: config 0 has an invalid interface number: 186 but max is 0
[  541.255143][ T6762] usb 11-1: config 0 has no interface number 0
[  541.258177][ T6762] usb 11-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  541.261682][ T6762] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.264960][ T6762] usb 11-1: Product: syz
[  541.267258][ T6762] usb 11-1: Manufacturer: syz
[  541.269667][ T6762] usb 11-1: SerialNumber: syz
[  541.274969][ T6762] usb 11-1: config 0 descriptor??
[  541.278542][ T6762] iowarrior 11-1:0.186: no interrupt-in endpoint found
[  541.487103][ T6762] usb 11-1: USB disconnect, device number 11
[  542.322017][T14913] input: syz0 as /devices/virtual/input/input56
[  543.062638][T14930] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1908'.
[  543.229838][T14939] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  543.602574][T14945] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1913'.
[  543.965496][T14951] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1914'.
[  544.088272][T14967] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1922'.
[  544.090794][T14967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1922'.
[  544.623425][T14981] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1925'.
[  544.629125][T14979] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  544.776308][T14987] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  544.962595][T14989] netlink: 'syz.6.1928': attribute type 1 has an invalid length.
[  544.964566][T14989] netlink: 236 bytes leftover after parsing attributes in process `syz.6.1928'.
[  545.332446][T15009] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1934'.
[  545.632119][T15016] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1935'.
[  545.950304][T15037] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  546.207911][T15055] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  546.229254][T15048] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  546.245041][T15057] tmpfs: Bad value for 'mpol'
[  546.561533][T15064] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1955'.
[  547.407135][T15093] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  548.096380][ T6789] usb 11-1: new full-speed USB device number 12 using dummy_hcd
[  548.247841][ T6789] usb 11-1: config 0 has an invalid interface number: 55 but max is 0
[  548.249974][ T6789] usb 11-1: config 0 has no interface number 0
[  548.251547][ T6789] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  548.254294][ T6789] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  548.257453][ T6789] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  548.260289][ T6789] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64
[  548.263072][ T6789] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  548.266600][ T6789] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  548.268922][ T6789] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.271544][ T6789] usb 11-1: config 0 descriptor??
[  548.273302][T15117] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  548.276134][ T6789] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  548.482624][    C3] ldusb 11-1:0.55: usb_submit_urb failed (-1)
[  548.484561][   T25] usb 11-1: USB disconnect, device number 12
[  548.487076][   T25] ldusb 11-1:0.55: LD USB Device #0 now disconnected
[  548.530926][T15132] netlink: 'syz.4.1980': attribute type 5 has an invalid length.
[  548.786793][T15143] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  548.978482][T15148] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  548.980301][T15148] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  549.011082][T15151] __nla_validate_parse: 3 callbacks suppressed
[  549.011093][T15151] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1988'.
[  549.015065][T15151] netlink: 43 bytes leftover after parsing attributes in process `syz.7.1988'.
[  549.017562][T15151] netlink: 'syz.7.1988': attribute type 6 has an invalid length.
[  549.019720][T15151] netlink: 'syz.7.1988': attribute type 5 has an invalid length.
[  549.022066][T15151] netlink: 43 bytes leftover after parsing attributes in process `syz.7.1988'.
[  549.221534][T15167] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1993'.
[  549.535684][ T6789] usb 11-1: new high-speed USB device number 13 using dummy_hcd
[  549.685621][ T6789] usb 11-1: Using ep0 maxpacket: 16
[  549.688034][ T6789] usb 11-1: config 0 has an invalid interface number: 8 but max is 0
[  549.690210][ T6789] usb 11-1: config 0 has no interface number 0
[  549.691820][ T6789] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  549.694643][ T6789] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  549.698411][ T6789] usb 11-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  549.700853][ T6789] usb 11-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  549.702971][ T6789] usb 11-1: Product: syz
[  549.704081][ T6789] usb 11-1: SerialNumber: syz
[  549.705911][ T6789] usb 11-1: config 0 descriptor??
[  549.708294][ T6789] cm109 11-1:0.8: invalid payload size 0, expected 4
[  549.710528][ T6789] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.8/input/input57
[  549.826540][T15190] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  549.835504][   T35] usb 10-1: new low-speed USB device number 8 using dummy_hcd
[  549.914562][    C3] cm109 11-1:0.8: cm109_urb_ctl_callback: urb status -71
[  549.914637][   T25] usb 11-1: USB disconnect, device number 13
[  549.916438][    C3] cm109 11-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  549.927490][   T25] cm109 11-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  549.996494][   T35] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  549.999199][   T35] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[  550.001518][   T35] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  550.004199][   T35] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  550.006619][   T35] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  550.008955][   T35] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.012393][   T35] hub 10-1:1.0: bad descriptor, ignoring hub
[  550.013918][   T35] hub 10-1:1.0: probe with driver hub failed with error -5
[  550.016515][   T35] cdc_wdm 10-1:1.0: skipping garbage
[  550.017928][   T35] cdc_wdm 10-1:1.0: skipping garbage
[  550.019599][   T35] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  550.021193][   T35] cdc_wdm 10-1:1.0: Unknown control protocol
[  550.034928][T15194] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  550.546690][T15204] input: syz0 as /devices/virtual/input/input58
[  550.851561][T15222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2014'.
[  551.074903][   T35] usb 12-1: new high-speed USB device number 13 using dummy_hcd
[  551.234855][   T35] usb 12-1: Using ep0 maxpacket: 16
[  551.238016][   T35] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  551.241783][   T35] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  551.246613][   T35] usb 12-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  551.249773][   T35] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.254040][   T35] usb 12-1: config 0 descriptor??
[  551.258566][   T35] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input59
[  551.473369][ T6762] usb 12-1: USB disconnect, device number 13
[  551.854989][T15242] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  552.097295][T15250] input: syz0 as /devices/virtual/input/input60
[  552.447554][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2030'.
[  553.247320][T15277] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2034'.
[  553.523681][  T833] usb 11-1: new high-speed USB device number 14 using dummy_hcd
[  553.645128][T15180] cdc_wdm 10-1:1.0: Error autopm - -16
[  553.645237][ T5882] usb 10-1: USB disconnect, device number 8
[  553.673599][  T833] usb 11-1: Using ep0 maxpacket: 8
[  553.676251][  T833] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  553.678788][  T833] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  553.681327][  T833] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  553.684439][  T833] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  553.687819][  T833] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  553.690157][  T833] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.896336][  T833] usb 11-1: GET_CAPABILITIES returned 0
[  553.897838][  T833] usbtmc 11-1:16.0: can't read capabilities
[  553.953160][T15296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2042'.
[  554.023420][ T5882] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  554.100634][T15281] usb 11-1: usbtmc_ioctl_clear_in_halt returned -32
[  554.102761][   T25] usb 11-1: USB disconnect, device number 14
[  554.224213][ T5882] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  554.227177][ T5882] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  554.229803][ T5882] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  554.233294][ T5882] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.243005][T15291] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  554.247472][ T5882] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  554.575083][ T5882] usb 10-1: USB disconnect, device number 9
[  554.828080][T15306] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2044'.
[  555.201092][T15324] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2049'.
[  555.205410][T15328] netlink: 'syz.5.2052': attribute type 9 has an invalid length.
[  555.305583][   T40] audit: type=1800 audit(1733606167.737:295): pid=15343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2058" name="[kvm-gmem]" dev="anon_inodefs" ino=44661 res=0 errno=0
[  555.452480][T15349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2057'.
[  556.385840][T15367] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2064'.
[  556.478514][   T35] kernel write not supported for file /1728/attr/keycreate (pid: 35 comm: kworker/3:0)
[  556.722667][T15385] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  557.451895][ T5882] usb 12-1: new high-speed USB device number 14 using dummy_hcd
[  557.745755][ T5882] usb 12-1: config index 0 descriptor too short (expected 23569, got 27)
[  557.749791][ T5882] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  557.754279][ T5882] usb 12-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  557.757471][ T5882] usb 12-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  557.765128][ T5882] usb 12-1: Manufacturer: syz
[  557.766988][ T5882] usb 12-1: config 0 descriptor??
[  557.821716][ T5882] rc_core: IR keymap rc-hauppauge not found
[  557.823882][ T5882] Registered IR keymap rc-empty
[  557.825999][ T5882] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0
[  557.830114][ T5882] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0/input61
[  557.975430][ T6762] usb 12-1: USB disconnect, device number 14
[  558.338488][T15439] input: syz0 as /devices/virtual/input/input62
[  558.701056][ T6762] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  558.801103][ T5882] usb 12-1: new high-speed USB device number 15 using dummy_hcd
[  558.850979][ T6762] usb 10-1: Using ep0 maxpacket: 8
[  558.853481][ T6762] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  558.855598][ T6762] usb 10-1: config 0 has no interface number 0
[  558.857126][ T6762] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  558.859943][ T6762] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  558.862362][ T6762] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  558.865151][ T6762] usb 10-1: config 0 descriptor??
[  558.867994][ T6762] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  558.970988][ T5882] usb 12-1: Using ep0 maxpacket: 8
[  558.973672][ T5882] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  558.976683][ T5882] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  558.979145][ T5882] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  558.983163][ T5882] usb 12-1: config 0 descriptor??
[  559.074034][   T72] usb 10-1: USB disconnect, device number 10
[  559.247563][ T5882] iowarrior 12-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  559.396191][   T72] usb 12-1: USB disconnect, device number 15
[  559.920507][ T6762] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  560.051145][T15486] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  560.070374][ T6762] usb 10-1: Using ep0 maxpacket: 8
[  560.073465][ T6762] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  560.076798][ T6762] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  560.080058][ T6762] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  560.083466][ T6762] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  560.087797][ T6762] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  560.090909][ T6762] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.363792][ T6762] usb 10-1: GET_CAPABILITIES returned 0
[  560.365672][ T6762] usbtmc 10-1:16.0: can't read capabilities
[  560.572849][   T35] usb 10-1: USB disconnect, device number 11
[  561.388034][T15516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2117'.
[  561.631478][T15525] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  562.312413][T15542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2128'.
[  562.338112][T15550] ax25_connect(): syz.7.2130 uses autobind, please contact jreuter@yaina.de
[  562.861767][T15568] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2136'.
[  562.920501][T15563] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  563.535815][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2141'.
[  563.904350][T15601] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2145'.
[  564.240810][T15594] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  564.729068][T15617] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  565.454300][T15646] input: syz0 as /devices/virtual/input/input63
[  566.383647][T15667] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2169'.
[  566.584049][T15692] input: syz0 as /devices/virtual/input/input64
[  567.164214][T15703] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2180'.
[  568.000532][T15746] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2196'.
[  568.118425][T15742] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  568.996628][T15754] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  569.019440][T15767] input: syz0 as /devices/virtual/input/input65
[  569.320112][T15782] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  569.734395][T15787] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2211'.
[  570.167168][T15797] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  570.818102][T15819] input: syz0 as /devices/virtual/input/input66
[  570.983467][T15830] [U] 
[  570.995702][T15829] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  571.177294][T15842] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  571.828278][   T72] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0
[  571.830227][   T72] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0
[  571.832647][   T72] hid-generic 0000:0003:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  572.836894][T15906] input: syz0 as /devices/virtual/input/input68
[  572.975198][T15888] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2246'.
[  573.183801][   T35] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  573.359216][   T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  573.370549][   T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  573.380657][   T35] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  573.391583][   T35] usb 9-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[  573.399696][   T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.410596][   T35] usb 9-1: config 0 descriptor??
[  573.647430][   T35] usbhid 9-1:0.0: can't add hid device: -71
[  573.650560][   T35] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  573.661441][   T35] usb 9-1: USB disconnect, device number 6
[  573.806106][T15943] input: syz0 as /devices/virtual/input/input69
[  574.012245][T15945] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2268'.
[  574.165492][T15952] binder: 15951:15952 ioctl 541b 0 returned -22
[  574.346983][T15956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2272'.
[  574.857064][T15977] netlink: 172 bytes leftover after parsing attributes in process `syz.7.2273'.
[  575.165913][T16002] input: syz0 as /devices/virtual/input/input70
[  576.081384][T16026] smc: net device bond0 applied user defined pnetid SYZ0
[  576.085065][T16026] smc: net device bond0 erased user defined pnetid SYZ0
[  576.087515][T16026] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ1
[  576.114785][T16032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2302'.
[  576.272914][T16041] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2298'.
[  576.445203][T16039] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2303'.
[  577.064117][T16058] input: syz0 as /devices/virtual/input/input71
[  577.415221][   T40] audit: type=1326 audit(1733606189.848:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16063 comm="syz.7.2311" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x0
[  578.176440][T16083] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  578.644324][T16099] Falling back ldisc for ttyS3.
[  578.716014][T16102] input: syz0 as /devices/virtual/input/input72
[  583.824417][   T44] ==================================================================
[  583.826535][   T44] BUG: KASAN: slab-use-after-free in move_to_new_folio+0x12e/0x700
[  583.828590][   T44] Read of size 8 at addr ffff888022bc6d48 by task kcompactd0/44
[  583.832169][   T44] 
[  583.833126][   T44] CPU: 1 UID: 0 PID: 44 Comm: kcompactd0 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0
[  583.835812][   T44] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  583.838569][   T44] Call Trace:
[  583.839444][   T44]  <TASK>
[  583.840231][   T44]  dump_stack_lvl+0x116/0x1f0
[  583.841467][   T44]  print_report+0xc3/0x620
[  583.842650][   T44]  ? __virt_addr_valid+0x5e/0x590
[  583.843977][   T44]  ? __phys_addr+0xc6/0x150
[  583.845165][   T44]  kasan_report+0xd9/0x110
[  583.846346][   T44]  ? move_to_new_folio+0x12e/0x700
[  583.847690][   T44]  ? move_to_new_folio+0x12e/0x700
[  583.849052][   T44]  kasan_check_range+0xef/0x1a0
[  583.850315][   T44]  move_to_new_folio+0x12e/0x700
[  583.851619][   T44]  migrate_pages_batch+0x200c/0x3150
[  583.853002][   T44]  ? __pfx_compaction_free+0x10/0x10
[  583.854586][   T44]  ? __pfx_migrate_pages_batch+0x10/0x10
[  583.856065][   T44]  migrate_pages_sync+0x109/0x8f0
[  583.857382][   T44]  ? __pfx_compaction_alloc+0x10/0x10
SYZFAIL: failed to recv rpc
[  583.858909][   T44]  ? __pfx_compaction_free+0x10/0x10
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  583.860510][   T44]  ? z3fold_page_isolate+0x23b/0x510
[  583.862034][   T44]  ? rcu_is_watching+0x12/0xc0
[  583.863491][   T44]  ? __pfx_migrate_pages_sync+0x10/0x10
[  583.864959][   T44]  ? __pfx_lock_release+0x10/0x10
[  583.866271][   T44]  ? __pfx_lock_release+0x10/0x10
[  583.867669][   T44]  ? isolate_movable_page+0x3b/0x7f0
[  583.869275][   T44]  ? lock_acquire+0x2f/0xb0
[  583.870680][   T44]  ? isolate_movable_page+0x3b/0x7f0
[  583.872155][   T44]  migrate_pages+0x1a46/0x21f0
[  583.873403][   T44]  ? __pfx_compaction_alloc+0x10/0x10
[  583.874794][   T44]  ? __pfx_compaction_free+0x10/0x10
[  583.876194][   T44]  ? __pfx_migrate_pages+0x10/0x10
[  583.877520][   T44]  ? __pfx_isolate_migratepages_block+0x10/0x10
[  583.879140][   T44]  ? __pfx___might_resched+0x10/0x10
[  583.880541][   T44]  compact_zone+0x1f68/0x4280
[  583.881795][   T44]  ? rcu_is_watching+0x12/0xc0
[  583.883063][   T44]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  583.884472][   T44]  ? trace_irq_enable.constprop.0+0xea/0x140
[  583.886032][   T44]  ? __pfx_compact_zone+0x10/0x10
[  583.887346][   T44]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  583.888787][   T44]  ? __try_to_del_timer_sync+0x116/0x170
[  583.890485][   T44]  ? rcu_is_watching+0x12/0xc0
[  583.892021][   T44]  ? trace_irq_enable.constprop.0+0xea/0x140
[  583.893594][   T44]  compact_node+0x1a2/0x2d0
[  583.894781][   T44]  ? __pfx_compact_node+0x10/0x10
[  583.896112][   T44]  ? __pfx_extfrag_for_order+0x10/0x10
[  583.897534][   T44]  ? rcu_is_watching+0x12/0xc0
[  583.898890][   T44]  kcompactd+0x779/0xdf0
[  583.900025][   T44]  ? __pfx_kcompactd+0x10/0x10
[  583.901294][   T44]  ? __pfx_autoremove_wake_function+0x10/0x10
[  583.902891][   T44]  ? lockdep_hardirqs_on+0x7c/0x110
[  583.904423][   T44]  ? __kthread_parkme+0x148/0x220
[  583.905809][   T44]  ? __pfx_kcompactd+0x10/0x10
[  583.907089][   T44]  kthread+0x2c1/0x3a0
[  583.908166][   T44]  ? _raw_spin_unlock_irq+0x23/0x50
[  583.909615][   T44]  ? __pfx_kthread+0x10/0x10
[  583.910820][   T44]  ret_from_fork+0x45/0x80
[  583.911986][   T44]  ? __pfx_kthread+0x10/0x10
[  583.913284][   T44]  ret_from_fork_asm+0x1a/0x30
[  583.914590][   T44]  </TASK>
[  583.915505][   T44] 
[  583.916142][   T44] Allocated by task 37:
[  583.917226][   T44]  kasan_save_stack+0x33/0x60
[  583.918484][   T44]  kasan_save_track+0x14/0x30
[  583.919717][   T44]  __kasan_slab_alloc+0x89/0x90
[  583.920981][   T44]  kmem_cache_alloc_lru_noprof+0x1c8/0x3b0
[  583.922510][   T44]  shmem_alloc_inode+0x25/0x50
[  583.923694][   T44]  alloc_inode+0x5d/0x230
[  583.924829][   T44]  new_inode+0x22/0x210
[  583.925912][   T44]  shmem_get_inode+0x194/0xf00
[  583.927168][   T44]  shmem_mknod+0x1a8/0x450
[  583.928349][   T44]  vfs_mknod+0x5d7/0x8e0
[  583.929685][   T44]  devtmpfs_work_loop+0x1a8/0x7d0
[  583.931065][   T44]  devtmpfsd+0x4c/0x50
[  583.932138][   T44]  kthread+0x2c1/0x3a0
[  583.933269][   T44]  ret_from_fork+0x45/0x80
[  583.934436][   T44]  ret_from_fork_asm+0x1a/0x30
[  583.935694][   T44] 
[  583.936321][   T44] Freed by task 24:
[  583.937319][   T44]  kasan_save_stack+0x33/0x60
[  583.938651][   T44]  kasan_save_track+0x14/0x30
[  583.940093][   T44]  kasan_save_free_info+0x3b/0x60
[  583.941401][   T44]  __kasan_slab_free+0x51/0x70
[  583.942655][   T44]  kmem_cache_free+0x152/0x4c0
[  583.943913][   T44]  i_callback+0x43/0x70
[  583.944992][   T44]  rcu_core+0x79d/0x14d0
[  583.946257][   T44]  handle_softirqs+0x213/0x8f0
[  583.947539][   T44]  run_ksoftirqd+0x3a/0x60
[  583.948748][   T44]  smpboot_thread_fn+0x661/0xa30
[  583.950034][   T44]  kthread+0x2c1/0x3a0
[  583.951099][   T44]  ret_from_fork+0x45/0x80
[  583.952276][   T44]  ret_from_fork_asm+0x1a/0x30
[  583.953535][   T44] 
[  583.954255][   T44] Last potentially related work creation:
[  583.955732][   T44]  kasan_save_stack+0x33/0x60
[  583.956976][   T44]  __kasan_record_aux_stack+0xba/0xd0
[  583.958384][   T44]  __call_rcu_common.constprop.0+0x99/0x7a0
[  583.959939][   T44]  destroy_inode+0x12c/0x1b0
[  583.961148][   T44]  evict+0x5ed/0x960
[  583.962183][   T44]  iput+0x52a/0x890
[  583.963199][   T44]  do_unlinkat+0x5c3/0x760
[  583.964373][   T44]  __ia32_sys_unlink+0xc4/0x110
[  583.965618][   T44]  __do_fast_syscall_32+0x73/0x120
[  583.966943][   T44]  do_fast_syscall_32+0x32/0x80
[  583.968224][   T44]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  583.969880][   T44] 
[  583.970507][   T44] The buggy address belongs to the object at ffff888022bc6880
[  583.970507][   T44]  which belongs to the cache shmem_inode_cache of size 1544
[  583.974247][   T44] The buggy address is located 1224 bytes inside of
[  583.974247][   T44]  freed 1544-byte region [ffff888022bc6880, ffff888022bc6e88)
[  583.977795][   T44] 
[  583.978486][   T44] The buggy address belongs to the physical page:
[  583.980179][   T44] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888022bc7590 pfn:0x22bc0
[  583.982766][   T44] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  583.984938][   T44] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  583.987109][   T44] page_type: f5(slab)
[  583.988160][   T44] raw: 00fff00000000240 ffff888040489cc0 ffffea00008c4410 ffffea00007b4610
[  583.990363][   T44] raw: ffff888022bc7590 0000000000130002 00000001f5000000 0000000000000000
[  583.992571][   T44] head: 00fff00000000240 ffff888040489cc0 ffffea00008c4410 ffffea00007b4610
[  583.994800][   T44] head: ffff888022bc7590 0000000000130002 00000001f5000000 0000000000000000
[  583.997053][   T44] head: 00fff00000000003 ffffea00008af001 ffffffffffffffff 0000000000000000
[  583.999291][   T44] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  584.001520][   T44] page dumped because: kasan: bad access detected
[  584.003182][   T44] page_owner tracks the page as allocated
[  584.004660][   T44] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 37, tgid 37 (kdevtmpfs), ts 5382902395, free_ts 0
[  584.009696][   T44]  post_alloc_hook+0x2d1/0x350
[  584.010931][   T44]  get_page_from_freelist+0xfce/0x2f80
[  584.012351][   T44]  __alloc_pages_noprof+0x223/0x25b0
[  584.013716][   T44]  alloc_pages_mpol_noprof+0x2c9/0x610
[  584.015127][   T44]  new_slab+0x2c9/0x410
[  584.016227][   T44]  ___slab_alloc+0xd1d/0x16e0
[  584.017448][   T44]  __slab_alloc.constprop.0+0x56/0xb0
[  584.018839][   T44]  kmem_cache_alloc_lru_noprof+0xf0/0x3b0
[  584.020312][   T44]  shmem_alloc_inode+0x25/0x50
[  584.021559][   T44]  alloc_inode+0x5d/0x230
[  584.022696][   T44]  new_inode+0x22/0x210
[  584.023783][   T44]  shmem_get_inode+0x194/0xf00
[  584.025032][   T44]  shmem_mknod+0x1a8/0x450
[  584.026198][   T44]  vfs_mknod+0x5d7/0x8e0
[  584.027307][   T44]  devtmpfs_work_loop+0x1a8/0x7d0
[  584.028609][   T44]  devtmpfsd+0x4c/0x50
[  584.029636][   T44] page_owner free stack trace missing
[  584.030999][   T44] 
[  584.031636][   T44] Memory state around the buggy address:
[  584.033080][   T44]  ffff888022bc6c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  584.035131][   T44]  ffff888022bc6c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  584.037196][   T44] >ffff888022bc6d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  584.039257][   T44]                                               ^
[  584.040932][   T44]  ffff888022bc6d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  584.043015][   T44]  ffff888022bc6e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  584.045076][   T44] ==================================================================
[  584.103623][   T44] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  584.105534][   T44] CPU: 0 UID: 0 PID: 44 Comm: kcompactd0 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0
[  584.108242][   T44] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  584.111042][   T44] Call Trace:
[  584.112031][   T44]  <TASK>
[  584.112801][   T44]  dump_stack_lvl+0x3d/0x1f0
[  584.114060][   T44]  panic+0x71d/0x800
[  584.115140][   T44]  ? __pfx_panic+0x10/0x10
[  584.116341][   T44]  ? rcu_is_watching+0x12/0xc0
[  584.117764][   T44]  ? preempt_schedule_thunk+0x1a/0x30
[  584.119463][   T44]  ? preempt_schedule_common+0x44/0xc0
[  584.120902][   T44]  ? check_panic_on_warn+0x1f/0xb0
[  584.122279][   T44]  check_panic_on_warn+0xab/0xb0
[  584.123584][   T44]  end_report+0x117/0x180
[  584.124711][   T44]  kasan_report+0xe9/0x110
[  584.125885][   T44]  ? move_to_new_folio+0x12e/0x700
[  584.127222][   T44]  ? move_to_new_folio+0x12e/0x700
[  584.128590][   T44]  kasan_check_range+0xef/0x1a0
[  584.129863][   T44]  move_to_new_folio+0x12e/0x700
[  584.131181][   T44]  migrate_pages_batch+0x200c/0x3150
[  584.132660][   T44]  ? __pfx_compaction_free+0x10/0x10
[  584.134003][   T44]  ? __pfx_migrate_pages_batch+0x10/0x10
[  584.135491][   T44]  migrate_pages_sync+0x109/0x8f0
[  584.136837][   T44]  ? __pfx_compaction_alloc+0x10/0x10
[  584.138227][   T44]  ? __pfx_compaction_free+0x10/0x10
[  584.139616][   T44]  ? z3fold_page_isolate+0x23b/0x510
[  584.140985][   T44]  ? rcu_is_watching+0x12/0xc0
[  584.142240][   T44]  ? __pfx_migrate_pages_sync+0x10/0x10
[  584.143695][   T44]  ? __pfx_lock_release+0x10/0x10
[  584.145019][   T44]  ? __pfx_lock_release+0x10/0x10
[  584.146321][   T44]  ? isolate_movable_page+0x3b/0x7f0
[  584.147729][   T44]  ? lock_acquire+0x2f/0xb0
[  584.148957][   T44]  ? isolate_movable_page+0x3b/0x7f0
[  584.150329][   T44]  migrate_pages+0x1a46/0x21f0
[  584.151616][   T44]  ? __pfx_compaction_alloc+0x10/0x10
[  584.153012][   T44]  ? __pfx_compaction_free+0x10/0x10
[  584.154380][   T44]  ? __pfx_migrate_pages+0x10/0x10
[  584.155708][   T44]  ? __pfx_isolate_migratepages_block+0x10/0x10
[  584.157317][   T44]  ? __pfx___might_resched+0x10/0x10
[  584.158697][   T44]  compact_zone+0x1f68/0x4280
[  584.159939][   T44]  ? rcu_is_watching+0x12/0xc0
[  584.161181][   T44]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  584.162587][   T44]  ? trace_irq_enable.constprop.0+0xea/0x140
[  584.164142][   T44]  ? __pfx_compact_zone+0x10/0x10
[  584.165417][   T44]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  584.166800][   T44]  ? __try_to_del_timer_sync+0x116/0x170
[  584.168272][   T44]  ? rcu_is_watching+0x12/0xc0
[  584.169536][   T44]  ? trace_irq_enable.constprop.0+0xea/0x140
[  584.171089][   T44]  compact_node+0x1a2/0x2d0
[  584.172523][   T44]  ? __pfx_compact_node+0x10/0x10
[  584.174246][   T44]  ? __pfx_extfrag_for_order+0x10/0x10
[  584.175684][   T44]  ? rcu_is_watching+0x12/0xc0
[  584.177141][   T44]  kcompactd+0x779/0xdf0
[  584.178593][   T44]  ? __pfx_kcompactd+0x10/0x10
[  584.179968][   T44]  ? __pfx_autoremove_wake_function+0x10/0x10
[  584.181985][   T44]  ? lockdep_hardirqs_on+0x7c/0x110
[  584.183344][   T44]  ? __kthread_parkme+0x148/0x220
[  584.184664][   T44]  ? __pfx_kcompactd+0x10/0x10
[  584.185911][   T44]  kthread+0x2c1/0x3a0
[  584.186982][   T44]  ? _raw_spin_unlock_irq+0x23/0x50
[  584.188351][   T44]  ? __pfx_kthread+0x10/0x10
[  584.189601][   T44]  ret_from_fork+0x45/0x80
[  584.190762][   T44]  ? __pfx_kthread+0x10/0x10
[  584.191976][   T44]  ret_from_fork_asm+0x1a/0x30
[  584.193223][   T44]  </TASK>
[  584.194643][   T44] Kernel Offset: disabled
[  584.195815][   T44] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:16:35  Registers:
info registers vcpu 0

CPU#0
RAX=0000000001d7e5cc RBX=0000000000000000 RCX=ffffffff8b1ae889 RDX=ffffed1005686fee
RSI=ffffffff8bb13780 RDI=ffffffff81701ef9 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20
R8 =0000000000000000 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000044e00
R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901cbd10 R15=0000000000000000
RIP=ffffffff8b1afc6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b400000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000055a5472b1d88 CR3=0000000023adc000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000ffe0c0d0 Opmask01=0000000000000000 Opmask02=000000007fffffff Opmask03=0000000002000001
Opmask04=00000000ffffffdf Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a5472a97a0 000055a5472a7be0
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffff000000ff
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c50df759521120a 737326d36e0d2275
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373e2 73737373435d0773
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3370003133706f00 5452414d535f5400 44455a494c414954 494e495f43455355
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f346963682f6874 6f6f7465756c622f 6c6175747269762f 736563697665642f
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000346963 682f68746f6f7465 756c622f6c617574
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a5472a4e50 000055a01d7d8565 000055a5472a5ff0 000055a01d7d8564
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3278099575521260 327809902f05d955 32780995755203c0 327809902f05d954
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a2433273f397b27 697a787c69303b7e 69305f474f5b647c 69303a2433273f39
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 0000000000000030 3723000676522f00 0000414d1d5f5106
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 0000000000000030 00000006472a2f00 0000414d1d5f5106
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85153995 RDI=ffffffff9a6682c0 RBP=ffffffff9a668280 RSP=ffffc900006b6f08
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552
R12=0000000000000000 R13=0000000000000073 R14=ffffffff85153930 R15=0000000000000000
RIP=ffffffff851539bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b500000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000055a5472b1d88 CR3=000000000db7e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000081819000 Opmask01=0000000000000001 Opmask02=000000003f37ffbf Opmask03=0104100080810010
Opmask04=00000000ffffffdf Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a5472a97a0 000055a5472b7080
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a5472a26c0 000055a5472a97a0
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464646464646464 6464646464646464
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff00000000ff 0000000000ffff00
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c50df759521120a 737326d36e0d2275
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373e2 7373737373737373
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a547297fb0 000055a500696469 6d5f7165735f646e 7300524556495244
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a547297fb0 000055a500696469 6d5f7165735f646e 733d524556495244
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055984714428d 0000559800545954 505f4c584e5f5953 4e00524556495244
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261632f646e756f 732f302e37323a31 2d30312f312d3031 2f30316273752f35
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000031 00000000306d656d 00302d332d696469 6d2d7165732f3364
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000071 000055a01d7e0033 3170003331703000 306d656d702f6b63
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffffffffd 00007fb5ff7fffff ff73ffff77ffdffb 5f007fb5fd7fddee
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a2433273f397b27 697a787c69303b7e 69305f474f5b647c 69303a2433273f39
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 0000000000000030 37236f066c2f6163 00004e4f1d414506
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 0000000000000030 00005506472a4e63 00004e4f1d414506
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000c973fc RBX=0000000000000002 RCX=ffffffff8b1ae889 RDX=ffffed10056c6fee
RSI=ffffffff8bb13780 RDI=ffffffff81701ef9 RBP=ffffed10039df000 RSP=ffffc9000048fe08
R8 =0000000000000000 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=0000000000000001
R12=0000000000000002 R13=ffff88801cef8000 R14=ffffffff901cbd10 R15=0000000000000000
RIP=ffffffff8b1afc6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000055c9a0ce6280 CR3=000000004b12a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008220202 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcbaef3500 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4154414600544549 55510029646c253d 646970282064253a 29287338342e253a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4154414600544549 5551000c41490018 414c550d0541001f 0c0d561d110b001f
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=6b63a83d6b63a83d 6b63a83d6b63a83d 6b63a83d6b63a83d 6b63a83d6b63a83d 6b63a83d6b63a83d 6b63a83d6b63a83d 6b63a83d6b63a83d 6b63a83d6b63a83d
ZMM22=7465ea097465ea09 7465ea097465ea09 7465ea097465ea09 7465ea097465ea09 7465ea097465ea09 7465ea097465ea09 7465ea097465ea09 7465ea097465ea09
ZMM23=908117dd908117dd 908117dd908117dd 908117dd908117dd 908117dd908117dd 908117dd908117dd 908117dd908117dd 908117dd908117dd 908117dd908117dd
ZMM24=935157b7935157b7 935157b7935157b7 935157b7935157b7 935157b7935157b7 935157b7935157b7 935157b7935157b7 935157b7935157b7 935157b7935157b7
ZMM25=37e585ae37e585ae 37e585ae37e585ae 37e585ae37e585ae 37e585ae37e585ae 37e585ae37e585ae 37e585ae37e585ae 37e585ae37e585ae 37e585ae37e585ae
ZMM26=e8ed4355e8ed4355 e8ed4355e8ed4355 e8ed4355e8ed4355 e8ed4355e8ed4355 e8ed4355e8ed4355 e8ed4355e8ed4355 e8ed4355e8ed4355 e8ed4355e8ed4355
ZMM27=081a69f5081a69f5 081a69f5081a69f5 081a69f5081a69f5 081a69f5081a69f5 081a69f5081a69f5 081a69f5081a69f5 081a69f5081a69f5 081a69f5081a69f5
ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0c1500000c150000 0c1500000c150000 0c1500000c150000 0c1500000c150000 0c1500000c150000 0c1500000c150000 0c1500000c150000 0c1500000c150000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=0000000000000004 RCX=dffffc0000000000 RDX=ffff888021180000
RSI=ffffffff84a01888 RDI=0000000000000001 RBP=ffffc9000391f448 RSP=ffffc9000391f308
R8 =0000000000000001 R9 =0000000000000008 R10=0000000000000004 R11=00000000000a2012
R12=ffffffff8bb1e210 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88802b0b7a40
RIP=ffffffff84a0189a RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6905354d00 ffffffff 00c00000
GS =0000 ffff88802b700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000055c9dd6d0000 CR3=000000004b12a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=6b63a83d6b63a83d 6b63a83d6b63a83d 6b63a83d6b63a83d 6b63a83d6b63a83d 6b63a83d6b63a83d 6b63a83d6b63a83d 6b63a83d6b63a83d 6b63a83d6b63a83d
ZMM22=7465ea097465ea09 7465ea097465ea09 7465ea097465ea09 7465ea097465ea09 7465ea097465ea09 7465ea097465ea09 7465ea097465ea09 7465ea097465ea09
ZMM23=908117dd908117dd 908117dd908117dd 908117dd908117dd 908117dd908117dd 908117dd908117dd 908117dd908117dd 908117dd908117dd 908117dd908117dd
ZMM24=935157b7935157b7 935157b7935157b7 935157b7935157b7 935157b7935157b7 935157b7935157b7 935157b7935157b7 935157b7935157b7 935157b7935157b7
ZMM25=37e585ae37e585ae 37e585ae37e585ae 37e585ae37e585ae 37e585ae37e585ae 37e585ae37e585ae 37e585ae37e585ae 37e585ae37e585ae 37e585ae37e585ae
ZMM26=e8ed4355e8ed4355 e8ed4355e8ed4355 e8ed4355e8ed4355 e8ed4355e8ed4355 e8ed4355e8ed4355 e8ed4355e8ed4355 e8ed4355e8ed4355 e8ed4355e8ed4355
ZMM27=081a69f5081a69f5 081a69f5081a69f5 081a69f5081a69f5 081a69f5081a69f5 081a69f5081a69f5 081a69f5081a69f5 081a69f5081a69f5 081a69f5081a69f5
ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0c1500000c150000 0c1500000c150000 0c1500000c150000 0c1500000c150000 0c1500000c150000 0c1500000c150000 0c1500000c150000 0c1500000c150000