last executing test programs:

4m31.280509544s ago: executing program 1 (id=354):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$unix(0x1, 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0)

4m29.375861437s ago: executing program 1 (id=357):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00))
recvmmsg(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x7a81b000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
write$binfmt_aout(r4, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f000010b940)={0x4, [], 0x5, "1cd06e77880b14"})
write$binfmt_aout(r2, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)

4m25.073955147s ago: executing program 1 (id=365):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000080)="0f0d640c6665f20f10ad00000fc7af0a000f201bd11fbaf80c66b840cd3c8466efbafc0cb011eeb800068ee00f20d86635080000000f22d866b9950300000f32660f38826bd3", 0x46}], 0x1, 0x8, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4000004)
unshare(0x2040400)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ptype\x00')
preadv(r4, &(0x7f0000003580)=[{&(0x7f0000000040)=""/21, 0x15}], 0x1, 0x33, 0x8)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4040844)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m20.404864472s ago: executing program 1 (id=371):
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000000c0)={0x2, 0x1, {0x54, 0x86, 0x7ff, {0x9, 0x260}, {0x2, 0x101}, @const={0x6, {0x3, 0x2, 0x18c, 0xf28d}}}, {0x51, 0x2, 0x87, {0x9, 0x2}, {0x2, 0x4}, @period={0x59, 0x5, 0x3, 0x4, 0x3, {0x8, 0x2, 0x4, 0x1}, 0x0, 0x0}}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$ptys(0xc, 0x3, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00m\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r2, &(0x7f0000000f00)=""/4104, 0x1008)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x5f8, 0x348, 0x258, 0xffffffff, 0x438, 0x348, 0x550, 0x550, 0xffffffff, 0x550, 0x550, 0x5, 0x0, {[{{@ipv6={@mcast2, @dev, [], [], 'pimreg0\x00', 'veth0\x00'}, 0x0, 0x210, 0x258, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@remote, @dev, @remote, @mcast2, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @local, @private1, @dev, @private1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}}, @common=@frag={{0x30}, {[], 0x0, 0x0, 0x6}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@loopback, @ipv6=@private0}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @dev, [], [], 'pim6reg1\x00', 'lo\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private}, @ipv4=@local, @port, @icmp_id}}}, {{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'pim6reg\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private0, @ipv4=@dev, @icmp_id}}}, {{@ipv6={@dev, @empty, [], [], 'pimreg1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@loopback, @ipv4=@loopback, @icmp_id, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000001c0)=0x1)
bpf$LINK_DETACH(0x22, &(0x7f0000000080), 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r5=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x2, 0xffff}, {0x9}}}, 0x6c}, 0x1, 0x0, 0x0, 0x54}, 0x0)

4m17.845827169s ago: executing program 1 (id=375):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x80, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0006"], 0x1c}}, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x8048042)

4m15.903937076s ago: executing program 1 (id=382):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50)
socket$kcm(0x10, 0x2, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x608141)
socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15)
setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006})
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040))

4m0.362157913s ago: executing program 32 (id=382):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50)
socket$kcm(0x10, 0x2, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x608141)
socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15)
setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006})
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040))

3m1.750567344s ago: executing program 3 (id=490):
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = dup(r1)
listen(r2, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000480)=ANY=[])
socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe0}}, 0x0)
fsopen(0x0, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x18)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x200008, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}})
sendto$netrom(r2, 0x0, 0x0, 0x20000004, 0x0, 0x0)

2m59.556844157s ago: executing program 3 (id=494):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0xfffffffe}, 0x26})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$sock_bt_hci(r3, 0x400448c9, 0x0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
munlock(&(0x7f0000fed000/0x11000)=nil, 0x11000)

2m51.737078429s ago: executing program 3 (id=503):
r0 = syz_io_uring_setup(0x512d, 0x0, &(0x7f0000000100), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000000), 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0)
io_uring_enter(r0, 0x2e6f, 0x8555, 0x2, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/meminfo\x00', 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x1e, &(0x7f0000000080)=0xff, 0x4)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10)
sendfile(r6, r5, 0x0, 0x20000023893)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4)
ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x12, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f00000000c0)='syzkaller\x00', 0x81, 0x4d, &(0x7f0000000240)=""/77, 0x41100, 0x20, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000002c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x6, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x4, 0x5, 0x6, 0xc}, {0x3, 0x1, 0x4, 0x4}, {0x5, 0x3, 0x1, 0x5}, {0x0, 0x2, 0x9, 0x5}], 0x10, 0x2}, 0x94)

2m50.421757732s ago: executing program 3 (id=505):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}, 0x2}}, 0x10)
r1 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f00000190c0)=[@in6={0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x1}]}, &(0x7f0000000000)=0x10)
getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x6, r2, 'id0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001300010029bd7000fbdbdf25000000", @ANYRES32=r4, @ANYBLOB="86ee01000904000005001100010000002c002b800800030003000000080001", @ANYRES32=r5], 0x54}}, 0x24008844)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2})

2m46.37554614s ago: executing program 3 (id=511):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0))
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2)
read(r2, &(0x7f0000000340)=""/129, 0x81)
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
map_shadow_stack(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3ff)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000060000000d20000000048b84b000000000000000f23000f21f8d618b7d2df84c032b9a00d00000f320f79445c79c4817be6ab10868c2a010c00d82e0fc7b9f21ee6dc6426f3450fc737c4c1f56c8f030000000f073e3e0f08c3"], 0x60})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0xc, 0x7, 0x0, 0x4000000000180, 0x5, 0x10, 0xf1, 0xffffffffffff18c4, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210})
unshare(0x8040480)
r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x400800, 0xff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x10000}, 0x28)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2m41.014966875s ago: executing program 3 (id=517):
ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = creat(&(0x7f0000000200)='./file0\x00', 0x100)
close(r0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ce9c9feb01001800000000000000280000002800000004000000020000000000000c02000000000000000200000d0000000003000000245b0000000000000100000000005f00"], 0x0, 0x44}, 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}, 0x3d, r7})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30040802}, 0x4010811)
r8 = dup(r1)
sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}})

2m25.804273642s ago: executing program 33 (id=517):
ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = creat(&(0x7f0000000200)='./file0\x00', 0x100)
close(r0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ce9c9feb01001800000000000000280000002800000004000000020000000000000c02000000000000000200000d0000000003000000245b0000000000000100000000005f00"], 0x0, 0x44}, 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}, 0x3d, r7})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30040802}, 0x4010811)
r8 = dup(r1)
sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}})

10.999729085s ago: executing program 0 (id=716):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6(0xa, 0x1, 0x8010000000000084)
r5 = syz_open_dev$vim2m(&(0x7f0000000300), 0x41ffffffffffc, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000500)={0x1, @pix_mp={0x8, 0x401, 0x56595559, 0x9, 0x7, [{0x7306, 0x1000}, {0x2, 0x3}, {0x8, 0x39}, {0x1, 0xfffffff8}, {0x15, 0x3}, {0xa, 0x5}, {0x5c, 0xa100000}, {0x40009, 0x1}], 0x9, 0x5, 0x3, 0x2}})
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x90, 0x0, 0xf, 0x200000000c00003, 0x7]}, 0x0)
ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000001070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c61737400"], 0x140}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0)

9.399696429s ago: executing program 0 (id=720):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, 0x0)
chdir(&(0x7f0000000380)='./file1\x00')
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0)
landlock_restrict_self(r3, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

7.211693282s ago: executing program 0 (id=723):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x10200, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000080)={0x0, 0x40})
r2 = socket$netlink(0x10, 0x3, 0x13)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r5 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r5, 0x2, &(0x7f00000000c0)={0x3}, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r5, 0x2, &(0x7f0000000340)={0x3, 0x2b4}, 0x0)
landlock_restrict_self(r5, 0x0)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r3}, 0x10)
r6 = socket$rxrpc(0x21, 0x2, 0xa)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40048c5}, 0x80)
bind$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x800, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x24)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="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", 0x13c}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffee8, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000880)={0xcf1, 0x798f758b, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0)

5.736846022s ago: executing program 0 (id=726):
syz_usb_connect(0x6, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1, 0xae, 0x18, 0x40, 0x19d2, 0x1428, 0x9520, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xfe, [{{0x9, 0x4, 0x93, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0)
symlinkat(&(0x7f0000001040)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00')
r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
write$binfmt_script(r0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r2, 0x89e3, 0x0)
gettid()
openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
r4 = syz_open_dev$video(0x0, 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}})
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18)
prctl$PR_SET_NAME(0xf, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r6}, 0x10)
connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x2, 0xd4, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x67, 0x10, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100, 0x6}, [@selector_unit={0x5, 0x24, 0x5, 0x3, 0x5}, @extension_unit={0x9, 0x24, 0x8, 0x3, 0xc25, 0x5, "db3a"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x202, 0x1, 0x10, 0x6, 0x30, 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x3, 0x6, 0x1000, 0x2f, 0x1c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x7, 0x4}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x1, 0xcb, 0x9, "b31d", "6e1e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0xb, 0x6, {0x7, 0x25, 0x1, 0x0, 0x65, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x6, 0x3, 0x9, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x6, 0x7, 0x80, "a0ca7434a370a70f6b"}, @as_header={0x7, 0x24, 0x1, 0x3, 0xff, 0x6}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xff, 0x3, 0xf7, 0x7, '%'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x88, 0x34, 0x1, {0x7, 0x25, 0x1, 0x0, 0x2, 0x4}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x9, 0x1, 0x5, 0x8, 0x6}, 0x6b, &(0x7f0000000180)={0x5, 0xf, 0x6b, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x0, 0x8, 0x5, 0x68}, @ssp_cap={0x20, 0x10, 0xa, 0x32, 0x5, 0x6, 0xf000, 0x1, [0x3f00, 0x3f3f, 0xff, 0xc000, 0x1fe3f30]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x8, 0x1e, 0x1, 0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x6, 0xf00, 0x0, [0x3f00, 0xc0, 0x3f30, 0xf]}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x4, 0x0, 0x8, [0x0, 0xff00f0]}]}, 0x1, [{0xf9, &(0x7f0000000200)=@string={0xf9, 0x3, "8abf04747746d8b8c379bfc7e1920bea304da834eaebd0988c9fe3ea2c6bdb979b8569f0d809a5ef83fb588bb5bf02fca67beab1c2d69d65df7fed46f1cc2bc7ece1d3640d763d8d3226523d1ce19d52f6a4b11223dd4c66badc5a91f03fc7c91077d5a006c741c53dbdb9fa4b4ac1291344492077a41b493d328917a6298ec9c1cc776ec67ad0a40ccae49b0dbcc96a72fd2cc86b16f0ec90fef397019dc120276e690a5236c17d8bea9a95bb58ea5d66c17963b8e2e67c95c54460898677fb7632833bedbbc4af40bec223c9a37e1e59234d2f4b9e42cb8f8cc968199e2e51c3d01deff855a36b580c4f4b11126a00d05c5726b784cf"}}]})

5.673655563s ago: executing program 4 (id=728):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x20044880, &(0x7f0000000340)={0x11, 0x8100, r1, 0x1, 0x1}, 0x14)

4.971671924s ago: executing program 4 (id=730):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x402, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x7, 0x9, 0x0, 0xb49, 0x9, 0x8, 0x1, 0x3}, 0x0)
r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000200)='0', 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}})
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]})
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000080)=0x800002, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x10, {{@in6=@remote, @in=@broadcast, 0x0, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x2, 0x2}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x800}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast1, 0x3503, 0x3, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@loopback, 0x4d4, 0x33}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0x400}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x0, 0x3, 0x2, 0x0, 0x1}]}]}, 0x23c}}, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e23, 0x200, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8df}}}, 0xa0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0x8}, {0x350, 0x53ae}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb})

3.033297747s ago: executing program 2 (id=735):
msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000)
msgctl$IPC_RMID(0x0, 0x0)

2.689179315s ago: executing program 0 (id=736):
socket$inet_sctp(0x2, 0x5, 0x84)
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10, 0x800)
socket(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
io_setup(0x3ff, &(0x7f0000000500)=<r3=>0x0)
r4 = userfaultfd(0x80001)
io_submit(r3, 0x1, &(0x7f0000003800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0xf8bf, r4, 0x0, 0x0, 0x8, 0x0, 0x2}])
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38)
sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x8000, 0x0, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x8, @mcast2}, {0xa, 0x0, 0x7, @remote}, r6}}, 0x48)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x3c, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x3c}}, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0xa, 0x3, 0x3, @local}, r6}}, 0x48)

2.689090785s ago: executing program 2 (id=737):
r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, ')+'}]}, 0xe)
readv(r0, &(0x7f0000000740)=[{&(0x7f0000000640)=""/223, 0xdf}], 0x10000000000000c0)

2.47460017s ago: executing program 4 (id=738):
r0 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x6, 0x0, 0x0)

1.799448369s ago: executing program 2 (id=739):
r0 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x1, 0xd59f83, 0x7, 0x42, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba3, 0x9, 0x0, {0x8, 0xffffffff}, 0xd0, 0x9}})

1.659397218s ago: executing program 4 (id=740):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
setresuid(0xee01, 0xee01, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001a80)="5c85d5e0e4d6", 0x0, 0x0, 0x0, 0x0, 0x0})

1.629702693s ago: executing program 2 (id=741):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000640)=""/201, 0xc9)

1.495571137s ago: executing program 0 (id=742):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0)
close(r2)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae01, 0x1)
syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfe000/0x400000)=nil)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000080)={0xf000, 0x280000, 0x8})
unshare(0x24020400)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4)
sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESOCT=r5], 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x24000000)
unshare(0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r6 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0xc0045543, 0x0)
socket$kcm(0xa, 0x1, 0x0)
r7 = socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=r7], 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7})
r8 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r8})

1.439919609s ago: executing program 4 (id=743):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x44}, 0x10)

1.375591365s ago: executing program 2 (id=744):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f00000000c0), 0xb9)

1.008638617s ago: executing program 4 (id=745):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000580)={'bond0\x00', {0x2, 0x4e22, @rand_addr=0x64010101}})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={'lo\x00', {0x2, 0x4e23, @rand_addr=0x64000000}})

0s ago: executing program 2 (id=746):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000ec0)=""/4071, 0xfe7}, {&(0x7f0000001ec0)=""/4076, 0xfec}, {&(0x7f0000000700)=""/238, 0xee}, {&(0x7f0000000340)=""/198, 0xc6}, {&(0x7f0000000500)=""/42, 0x2a}], 0x5}, 0x40000100)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)

kernel console output (not intermixed with test programs):

tdevsim1: renamed from eth1
[  100.094886][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  100.109432][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  100.152338][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.159752][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.194942][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.202350][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.241694][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.279108][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.344124][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[  100.390635][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.398040][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.414633][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[  100.468878][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.476250][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.488882][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.496238][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.527688][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.534933][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.741177][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.821995][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[  100.849839][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.897838][  T993] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.905225][  T993] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.969389][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.976815][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.019650][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[  101.116270][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.123794][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.161679][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.219657][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.227028][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.271000][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  101.385121][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.398802][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.590101][ T5849] Bluetooth: hci3: command tx timeout
[  101.600149][ T5849] Bluetooth: hci1: command tx timeout
[  101.607065][ T5854] Bluetooth: hci2: command tx timeout
[  101.613081][ T5855] Bluetooth: hci0: command tx timeout
[  101.662993][ T5854] Bluetooth: hci4: command tx timeout
[  101.775325][ T5835] veth0_vlan: entered promiscuous mode
[  101.811501][ T5833] veth0_vlan: entered promiscuous mode
[  101.862575][ T5833] veth1_vlan: entered promiscuous mode
[  101.874212][ T5835] veth1_vlan: entered promiscuous mode
[  101.955414][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.018761][ T5833] veth0_macvtap: entered promiscuous mode
[  102.056441][ T5833] veth1_macvtap: entered promiscuous mode
[  102.074369][ T5835] veth0_macvtap: entered promiscuous mode
[  102.089074][ T5834] veth0_vlan: entered promiscuous mode
[  102.117374][ T5834] veth1_vlan: entered promiscuous mode
[  102.130834][ T5835] veth1_macvtap: entered promiscuous mode
[  102.169815][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.197071][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.210299][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.248965][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.259099][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.268470][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.277652][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.306305][ T5834] veth0_macvtap: entered promiscuous mode
[  102.326569][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.341559][ T5834] veth1_macvtap: entered promiscuous mode
[  102.358483][ T5837] veth0_vlan: entered promiscuous mode
[  102.395583][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.410017][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.419392][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.430083][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.439477][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.499483][ T5837] veth1_vlan: entered promiscuous mode
[  102.536378][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.549968][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.658571][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.663718][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.670473][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.683638][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.695281][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.705087][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.762557][  T993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.771561][ T5837] veth0_macvtap: entered promiscuous mode
[  102.780813][  T993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.796801][ T5840] veth0_vlan: entered promiscuous mode
[  102.859533][ T5840] veth1_vlan: entered promiscuous mode
[  102.867631][ T5837] veth1_macvtap: entered promiscuous mode
[  102.882565][  T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.897780][  T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.932391][  T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.955383][  T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.051254][  T993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.068078][  T993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.102046][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  103.140541][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.149935][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.163983][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.210055][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.265655][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.295372][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.316128][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.336079][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.378740][ T5840] veth0_macvtap: entered promiscuous mode
[  103.550656][ T5840] veth1_macvtap: entered promiscuous mode
[  103.675293][ T5855] Bluetooth: hci1: command tx timeout
[  103.681826][ T5849] Bluetooth: hci2: command tx timeout
[  103.688414][ T5854] Bluetooth: hci3: command tx timeout
[  103.694470][ T5855] Bluetooth: hci0: command tx timeout
[  103.753855][ T5843] Bluetooth: hci4: command tx timeout
[  104.273554][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  104.533487][ T5961] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢
…D£øUDŒw˜}�z
[  105.053940][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  105.073169][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  105.092138][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  105.634467][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.737144][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.814982][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.847404][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.860673][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.870383][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.956031][  T993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.999695][  T993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.591977][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.784862][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.613455][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  108.778983][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  108.881382][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  109.086194][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  109.095826][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  109.328731][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  109.728572][ T5977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.788752][ T5977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.889511][ T5975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.094166][ T5975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.253972][ T6026] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad)
[  113.261113][ T6026] PKCS7: Only support pkcs7_signedData type
[  113.609386][ T6033] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  116.976878][ T6048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22'.
[  118.966393][ T5843] Bluetooth: Unexpected continuation frame (len 4)
[  122.125702][ T6075] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  124.519694][ T6087] kvm: kvm [6086]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800
[  124.625579][ T6087] kvm: kvm [6086]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800
[  124.718581][ T6087] kvm: kvm [6086]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800
[  127.687377][ T5843] Bluetooth: Unexpected continuation frame (len 4)
[  129.049336][ T6133] random: crng reseeded on system resumption
[  129.341806][  T977] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  129.917693][  T977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  129.932996][  T977] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  129.953439][  T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.999330][  T977] usb 3-1: config 0 descriptor??
[  130.017913][  T977] pwc: Askey VC010 type 2 USB webcam detected.
[  130.025567][ T6150] Zero length message leads to an empty skb
[  130.279153][ T6151] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  130.632089][  T977] pwc: recv_control_msg error -32 req 02 val 2b00
[  130.697630][  T977] pwc: recv_control_msg error -32 req 02 val 2700
[  130.917301][  T977] pwc: recv_control_msg error -32 req 02 val 2c00
[  130.927856][  T977] pwc: recv_control_msg error -32 req 04 val 1000
[  130.952903][  T977] pwc: recv_control_msg error -32 req 04 val 1300
[  131.697449][  T977] pwc: recv_control_msg error -32 req 04 val 1400
[  131.714717][  T977] pwc: recv_control_msg error -32 req 02 val 2000
[  131.741606][  T977] pwc: recv_control_msg error -32 req 02 val 2100
[  131.754563][  T977] pwc: recv_control_msg error -32 req 04 val 1500
[  131.787700][  T977] pwc: recv_control_msg error -32 req 02 val 2500
[  131.955744][  T977] pwc: recv_control_msg error -32 req 02 val 2400
[  131.998865][  T977] pwc: recv_control_msg error -32 req 02 val 2600
[  132.032964][  T977] pwc: recv_control_msg error -32 req 02 val 2900
[  132.649932][  T977] pwc: recv_control_msg error -32 req 02 val 2800
[  133.087665][  T977] pwc: recv_control_msg error -32 req 04 val 1100
[  133.328339][  T977] pwc: Registered as video103.
[  133.381295][  T977] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5
[  134.384057][  T977] usb 3-1: USB disconnect, device number 2
[  134.629236][ T6174] netlink: 'syz.3.49': attribute type 10 has an invalid length.
[  135.984273][ T6174] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  137.292097][ T5843] Bluetooth: Unexpected continuation frame (len 4)
[  138.644269][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  138.651343][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  139.070108][ T6207] tipc: Started in network mode
[  139.096048][ T6207] tipc: Node identity 4ad6255f5d6f, cluster identity 4711
[  139.131092][ T6207] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.139466][ T6208] syzkaller0: entered promiscuous mode
[  139.148115][ T6208] syzkaller0: entered allmulticast mode
[  139.382940][ T5934] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  139.718490][ T6219] tipc: Resetting bearer <eth:syzkaller0>
[  139.792994][ T6204] tipc: Resetting bearer <eth:syzkaller0>
[  139.802906][ T6217] io-wq is not configured for unbound workers
[  139.851797][ T6204] tipc: Disabling bearer <eth:syzkaller0>
[  139.892848][ T5934] usb 4-1: Using ep0 maxpacket: 32
[  139.901017][ T5934] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  139.915938][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  139.962859][ T5934] usb 4-1: config 0 has no interface number 0
[  139.981301][ T5934] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  140.045372][ T5934] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  140.056292][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.126415][ T5934] usb 4-1: config 0 descriptor??
[  140.154848][ T5934] usbhid 4-1:0.1: couldn't find an input interrupt endpoint
[  140.520046][ T5843] Bluetooth: Unexpected continuation frame (len 4)
[  141.699736][ T6232] Can't find ip_set type has
[  143.638144][ T1169] usb 4-1: USB disconnect, device number 2
[  145.598967][ T5843] Bluetooth: Unexpected continuation frame (len 4)
[  146.188951][ T6263] trusted_key: syz.2.69 sent an empty control message without MSG_MORE.
[  149.596105][ T6290] netlink: 'syz.0.76': attribute type 1 has an invalid length.
[  150.429086][ T6288] sctp: failed to load transform for md5: -2
[  150.617576][ T5855] Bluetooth: hci4: command 0x0405 tx timeout
[  152.234214][ T5843] Bluetooth: Unexpected continuation frame (len 4)
[  152.243323][ T5934] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  152.760982][ T6317] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  153.832930][ T5934] usb 2-1: unable to get BOS descriptor or descriptor too short
[  154.405208][ T5934] usb 2-1: config 6 has an invalid interface number: 77 but max is 0
[  154.413724][ T5934] usb 2-1: config 6 has no interface number 0
[  154.420184][ T5934] usb 2-1: config 6 interface 77 has no altsetting 0
[  154.437825][ T5934] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=af.fb
[  154.447641][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.448210][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.84'.
[  154.457133][ T5934] usb 2-1: Product: syz
[  154.457239][ T5934] usb 2-1: Manufacturer: syz
[  154.457320][ T5934] usb 2-1: SerialNumber: syz
[  154.564241][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.84'.
[  154.600919][ T5934] usb 2-1: can't set config #6, error -71
[  154.703363][ T5934] usb 2-1: USB disconnect, device number 2
[  155.595965][ T6338] netlink: 104 bytes leftover after parsing attributes in process `syz.1.86'.
[  158.783845][ T6344] overlayfs: upper fs does not support tmpfile.
[  159.764617][ T6362] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  160.449959][ T5953] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  160.614936][ T5953] usb 3-1: Using ep0 maxpacket: 8
[  160.757217][ T5953] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  160.811222][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.874700][ T5953] usb 3-1: Product: syz
[  160.893305][ T5953] usb 3-1: Manufacturer: syz
[  160.928787][ T5953] usb 3-1: SerialNumber: syz
[  161.203140][ T5953] usb 3-1: config 0 descriptor??
[  161.382910][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  161.543032][   T10] usb 5-1: Using ep0 maxpacket: 16
[  161.567532][ T6380] kvm: MWAIT instruction emulated as NOP!
[  161.587891][   T10] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  161.621497][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  161.673927][   T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  161.712608][ T5953] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  162.466646][ T6384] tmpfs: Bad value for 'nr_inodes'
[  162.561765][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.570421][   T10] usb 5-1: Product: syz
[  162.575006][   T10] usb 5-1: Manufacturer: syz
[  162.579841][   T10] usb 5-1: SerialNumber: syz
[  162.712986][ T5953] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  162.745924][ T5953] usb 3-1: USB disconnect, device number 3
[  162.897659][   T10] usb 5-1: 0:2 : does not exist
[  162.995025][ T6399] Bluetooth: MGMT ver 1.23
[  163.726879][   T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  163.808952][   T10] usb 5-1: USB disconnect, device number 2
[  163.812914][ T5206] udevd[5206]: worker [5847] terminated by signal 33 (Unknown signal 33)
[  163.851505][ T5206] udevd[5206]: worker [5847] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1'
[  164.636652][ T6173] udevd[6173]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  164.708174][ T6412] netlink: 36 bytes leftover after parsing attributes in process `syz.1.105'.
[  166.229179][ T6423] netlink: 'syz.2.111': attribute type 1 has an invalid length.
[  166.717907][ T6423] 8021q: adding VLAN 0 to HW filter on device bond1
[  167.188197][ T6425] bond1: (slave veth0_to_bond): making interface the new active one
[  167.357371][ T6425] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  167.402881][   T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  167.461802][ T6434] capability: warning: `syz.0.112' uses 32-bit capabilities (legacy support in use)
[  167.543602][ T6434] netlink: 'syz.0.112': attribute type 9 has an invalid length.
[  167.552124][ T6434] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.112'.
[  167.692782][   T10] usb 4-1: Using ep0 maxpacket: 8
[  167.824225][   T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  167.917604][   T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  167.957953][   T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  167.971836][   T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  167.986196][   T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  168.023729][ T6437] warning: `syz.4.114' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  168.862932][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.260145][   T10] usb 4-1: usb_control_msg returned -32
[  169.265179][ T6432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.266560][   T10] usbtmc 4-1:16.0: can't read capabilities
[  169.290881][ T6432] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.677594][  T977] usb 4-1: USB disconnect, device number 3
[  170.578332][ T6447] syz.2.117 (6447) used greatest stack depth: 19976 bytes left
[  177.852071][ T6498] openvswitch: netlink: IP tunnel dst address not specified
[  178.087905][ T6508] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  186.149993][ T6563] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  188.673677][ T6576] syz.3.151 uses obsolete (PF_INET,SOCK_PACKET)
[  189.253008][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'.
[  191.527871][ T6591] binder: 6585:6591 ioctl 4018620d 0 returned -22
[  192.518378][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.527827][ T6608] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.545672][ T6608] bridge0: entered allmulticast mode
[  193.284215][ T6609] usb usb7: usbfs: process 6609 (syz.1.159) did not claim interface 0 before use
[  199.089393][ T1169] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  199.310508][ T1169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.323805][ T1169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.337043][ T6653] netlink: 68 bytes leftover after parsing attributes in process `syz.1.166'.
[  199.347889][ T1169] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00
[  199.374718][ T1169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.463832][ T1169] usb 3-1: config 0 descriptor??
[  200.277105][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  200.283779][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  200.348679][ T1169] usbhid 3-1:0.0: can't add hid device: -71
[  200.385019][ T1169] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  200.466696][ T1169] usb 3-1: USB disconnect, device number 4
[  201.848271][  T977] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[  202.598169][  T977] usb 2-1: unable to get BOS descriptor or descriptor too short
[  202.606242][ T6680] trusted_key: encrypted_key: insufficient parameters specified
[  202.618421][  T977] usb 2-1: unable to read config index 0 descriptor/start: -71
[  202.631469][  T977] usb 2-1: can't read configurations, error -71
[  206.035519][ T6692] ptrace attach of "./syz-executor exec"[5833] was attempted by "./syz-executor exec"[6692]
[  208.341307][ T5855] Bluetooth: Unexpected continuation frame (len 4)
[  211.873301][ T6725] tipc: Can't bind to reserved service type 1
[  212.072337][ T6732] netlink: 52 bytes leftover after parsing attributes in process `syz.4.185'.
[  214.544857][ T6745] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1
[  214.567663][   T30] audit: type=1804 audit(1754407325.862:2): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.189" name="/newroot/41/file0" dev="tmpfs" ino=238 res=1 errno=0
[  214.598912][ T6745] ref_ctr increment failed for inode: 0xee offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807ed62800
[  215.840929][ T6752] xt_hashlimit: max too large, truncated to 1048576
[  216.996235][ T6758] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  217.646669][ T5156] Bluetooth: hci1: command 0x0406 tx timeout
[  217.646704][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  217.646831][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  217.653119][ T5156] Bluetooth: hci0: command 0x0406 tx timeout
[  217.991106][ T6761] binder: BINDER_SET_CONTEXT_MGR already set
[  217.999175][ T6761] binder: 6755:6761 ioctl 4018620d 200000000040 returned -16
[  218.376045][ T6760] usb usb8: usbfs: process 6760 (syz.3.195) did not claim interface 0 before use
[  220.311814][ T6776] netlink: 52 bytes leftover after parsing attributes in process `syz.3.198'.
[  222.429471][ T5925] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  222.603022][ T5925] usb 3-1: Using ep0 maxpacket: 32
[  222.614800][ T5925] usb 3-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config
[  222.654069][ T5925] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  222.673099][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.691002][ T5925] usb 3-1: Product: syz
[  222.705291][ T5925] usb 3-1: Manufacturer: syz
[  222.714579][ T5925] usb 3-1: SerialNumber: syz
[  222.789220][ T6804] syz_tun: entered allmulticast mode
[  222.813040][  T977] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  222.827567][ T5925] usb 3-1: config 0 descriptor??
[  223.077089][ T5925] cdc_ether 3-1:0.0: probe with driver cdc_ether failed with error -22
[  223.178739][ T5925] usb 3-1: unsupported MDLM descriptors
[  223.196707][  T977] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  223.274376][  T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.395813][  T977] usb 5-1: Product: syz
[  223.443600][  T977] usb 5-1: Manufacturer: syz
[  223.485291][  T977] usb 5-1: SerialNumber: syz
[  223.706091][  T977] usb 5-1: config 0 descriptor??
[  224.209694][   T10] usb 3-1: USB disconnect, device number 5
[  224.390076][  T977] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  226.056267][ T6822] random: crng reseeded on system resumption
[  228.355083][  T977] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  228.430343][  T977] usb 5-1: USB disconnect, device number 3
[  230.572097][ T6843] capability: warning: `syz.4.213' uses deprecated v2 capabilities in a way that may be insecure
[  237.026949][ T6860] input: syz1 as /devices/virtual/input/input9
[  240.873145][ T6898] trusted_key: encrypted_key: insufficient parameters specified
[  240.995338][ T6898] overlayfs: missing 'lowerdir'
[  242.477522][ T6913] overlayfs: failed to resolve './file0': -2
[  244.672924][   T10] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  244.953297][   T10] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  244.962567][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.702811][   T10] usb 4-1: Product: syz
[  245.707119][   T10] usb 4-1: Manufacturer: syz
[  245.711767][   T10] usb 4-1: SerialNumber: syz
[  245.736775][   T10] usb 4-1: config 0 descriptor??
[  245.853557][ T6927] random: crng reseeded on system resumption
[  246.456516][   T10] airspy 4-1:0.0: usb_control_msg() failed -71 request 09
[  246.473209][   T10] airspy 4-1:0.0: Could not detect board
[  246.491089][   T10] airspy 4-1:0.0: probe with driver airspy failed with error -71
[  246.568210][   T10] usb 4-1: USB disconnect, device number 4
[  246.686990][ T6934] 8021q: adding VLAN 0 to HW filter on device bond0
[  246.969200][ T6934] bond0: (slave rose0): Enslaving as an active interface with an up link
[  250.222759][ T6956] sctp: [Deprecated]: syz.4.241 (pid 6956) Use of int in max_burst socket option deprecated.
[  250.222759][ T6956] Use struct sctp_assoc_value instead
[  258.617055][ T7018] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  258.786349][ T7021] netlink: 32 bytes leftover after parsing attributes in process `syz.2.254'.
[  262.237277][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  262.244873][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  263.523559][ T7057] tipc: New replicast peer: 255.255.255.255
[  263.554798][ T7057] tipc: Enabled bearer <udp:syz2>, priority 10
[  263.744614][ T7057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.262'.
[  265.130792][   T10] tipc: Node number set to 398009695
[  268.784367][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  268.955562][    T9] usb 3-1: Using ep0 maxpacket: 8
[  268.997410][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  269.037739][    T9] usb 3-1: config 7 has an invalid interface number: 6 but max is 0
[  269.083848][    T9] usb 3-1: config 7 has no interface number 0
[  269.090061][    T9] usb 3-1: No eUSB2 isoc ep 15 companion for config 7 interface 6 altsetting 254
[  269.122744][    T9] usb 3-1: config 7 interface 6 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  269.151840][    T9] usb 3-1: config 7 interface 6 has no altsetting 0
[  269.238627][ T7098] ksmbd: Unknown IPC event: 4, ignore.
[  269.707861][    T9] usb 3-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=30.9e
[  269.722916][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.731042][    T9] usb 3-1: Product: syz
[  269.915951][    T9] usb 3-1: Manufacturer: syz
[  269.921344][    T9] usb 3-1: SerialNumber: syz
[  269.994461][ T7094] overlay: filesystem on ./bus not supported
[  270.124387][ T7104] hub 8-0:1.0: USB hub found
[  270.133328][ T7104] hub 8-0:1.0: 1 port detected
[  270.716413][ T7085] loop2: detected capacity change from 0 to 7
[  270.918973][ T7085] Dev loop2: unable to read RDB block 7
[  270.956804][ T7085]  loop2: AHDI p1 p2
[  271.018523][ T7085] loop2: partition table partially beyond EOD, truncated
[  271.056070][ T7085] loop2: p1 size 4244635647 extends beyond EOD, truncated
[  271.742240][    T9] option 3-1:7.6: GSM modem (1-port) converter detected
[  271.885104][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.274'.
[  271.954864][ T5989] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  271.963033][ T5843] Bluetooth: Unexpected continuation frame (len 4)
[  272.146941][    T9] usb 3-1: USB disconnect, device number 6
[  272.172994][ T5989] usb 2-1: Using ep0 maxpacket: 8
[  272.181698][    T9] option 3-1:7.6: device disconnected
[  272.395874][ T5989] usb 2-1: config 162 has an invalid interface number: 3 but max is 0
[  272.496938][ T6173] udevd[6173]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  272.528888][ T5989] usb 2-1: config 162 has no interface number 0
[  272.575709][ T5989] usb 2-1: config 162 interface 3 has no altsetting 0
[  272.608049][ T5989] usb 2-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23
[  272.663304][ T5989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.710949][ T5989] usb 2-1: Product: syz
[  272.730820][ T5989] usb 2-1: Manufacturer: syz
[  272.774436][ T5989] usb 2-1: SerialNumber: syz
[  272.940369][ T7132] process 'syz.3.277' launched '/dev/fd/6' with NULL argv: empty string added
[  273.453205][ T5989] usb 2-1: USB disconnect, device number 5
[  274.915975][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'.
[  275.307459][ T7148] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  276.753761][ T7165] 9pnet_fd: Insufficient options for proto=fd
[  276.888040][ T7161] =======================================================
[  276.888040][ T7161] WARNING: The mand mount option has been deprecated and
[  276.888040][ T7161]          and is ignored by this kernel. Remove the mand
[  276.888040][ T7161]          option from the mount to silence this warning.
[  276.888040][ T7161] =======================================================
[  276.923797][    C0] vkms_vblank_simulate: vblank timer overrun
[  277.005903][ T7161] tmpfs: Bad value for 'usrquota_block_hardlimit'
[  277.157081][ T7173] 8021q: adding VLAN 0 to HW filter on device bond1
[  277.379958][ T7178] random: crng reseeded on system resumption
[  278.518998][  T977] libceph: connect (1)[c::]:6789 error -101
[  278.526286][  T977] libceph: mon0 (1)[c::]:6789 connect error
[  278.608504][ T7182] ceph: No mds server is up or the cluster is laggy
[  279.031667][ T5953] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  279.596220][ T5953] usb 2-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config
[  279.625006][ T5953] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  279.975468][ T5953] usb 2-1: config 1 has no interface number 0
[  280.024841][ T5953] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  280.260315][ T5953] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  280.871177][ T5953] usb 2-1: string descriptor 0 read error: -71
[  280.919316][ T5953] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  280.992874][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.082999][ T5953] usb 2-1: can't set config #1, error -71
[  282.137146][ T5953] usb 2-1: USB disconnect, device number 6
[  285.139356][ T5843] Bluetooth: Unexpected continuation frame (len 4)
[  287.467674][ T7256] binder: 7248:7256 unknown command 0
[  287.473646][ T7256] binder: 7248:7256 ioctl c0306201 200000000080 returned -22
[  290.758131][ T7263] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  299.480426][ T7326] binder: 7319:7326 ioctl 40046205 0 returned -22
[  301.578438][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.326'.
[  304.335282][   T30] audit: type=1326 audit(1754407415.652:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a0f8eb69 code=0x7ffc0000
[  304.406132][   T30] audit: type=1326 audit(1754407415.662:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a0f8eb69 code=0x7ffc0000
[  305.797571][   T30] audit: type=1326 audit(1754407415.672:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10a0f8eb69 code=0x7ffc0000
[  305.825875][   T30] audit: type=1326 audit(1754407415.672:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a0f8eb69 code=0x7ffc0000
[  306.405881][   T30] audit: type=1326 audit(1754407415.672:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a0f8eb69 code=0x7ffc0000
[  306.488173][   T30] audit: type=1326 audit(1754407415.672:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f10a0f8eb69 code=0x7ffc0000
[  306.649996][   T30] audit: type=1326 audit(1754407415.672:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a0f8eb69 code=0x7ffc0000
[  306.824516][   T30] audit: type=1326 audit(1754407415.672:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a0f8eb69 code=0x7ffc0000
[  306.848849][   T30] audit: type=1326 audit(1754407415.672:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10a0f8eb69 code=0x7ffc0000
[  306.872245][   T30] audit: type=1326 audit(1754407415.672:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a0f8eb69 code=0x7ffc0000
[  308.028526][ T7393] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  308.105507][ T7393] syzkaller0: entered promiscuous mode
[  308.123071][ T7393] syzkaller0: entered allmulticast mode
[  308.160493][ T7392] tipc: Resetting bearer <eth:syzkaller0>
[  308.850623][ T5843] Bluetooth: Unexpected continuation frame (len 4)
[  309.173631][ T7392] tipc: Disabling bearer <eth:syzkaller0>
[  309.408737][ T7408] netlink: 'syz.1.343': attribute type 4 has an invalid length.
[  309.417298][ T7408] netlink: 209028 bytes leftover after parsing attributes in process `syz.1.343'.
[  311.112870][ T5934] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  311.222795][ T7423] NILFS (nullb0): couldn't find nilfs on the device
[  311.490593][ T5934] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  311.733328][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.748897][ T5934] usb 4-1: Product: syz
[  311.754460][ T5934] usb 4-1: Manufacturer: syz
[  311.759516][ T5934] usb 4-1: SerialNumber: syz
[  312.284451][ T5934] usb 4-1: config 0 descriptor??
[  312.857837][ T5934] airspy 4-1:0.0: usb_control_msg() failed -71 request 09
[  313.617463][ T5934] airspy 4-1:0.0: Could not detect board
[  313.630410][ T7445] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  313.889101][ T5934] airspy 4-1:0.0: probe with driver airspy failed with error -71
[  314.073804][ T5934] usb 4-1: USB disconnect, device number 5
[  314.874340][ T5849] Bluetooth: hci4: command 0x0405 tx timeout
[  315.274156][ T7456] syz.1.354: attempt to access beyond end of device
[  315.274156][ T7456] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0
[  315.289969][ T7456] syz.1.354: attempt to access beyond end of device
[  315.289969][ T7456] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0
[  315.303870][ T7456] Mount JFS Failure: -5
[  315.712483][ T7446] ÿÿÿÿÿÿÇ(
¯J: renamed from lo (while UP)
[  316.056489][ T5843] Bluetooth: Unexpected continuation frame (len 4)
[  319.446225][ T7482] genirq: Flags mismatch irq 5. 00200000 (comedi_parport) vs. 00200000 (pcl812)
[  323.157602][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  323.183132][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  324.855731][ T7514] netlink: 52 bytes leftover after parsing attributes in process `syz.0.368'.
[  326.228642][ T5843] Bluetooth: Unexpected continuation frame (len 4)
[  328.548748][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.377'.
[  329.551950][ T7565] netlink: 852 bytes leftover after parsing attributes in process `syz.0.378'.
[  332.623426][ T7581] bpq0: entered allmulticast mode
[  334.419702][ T7592] comedi comedi0: pcl711: I/O port conflict (0x2,16)
[  337.669891][ T7607] snd_dummy snd_dummy.0: control 3:4:-2:syz0:2147483647 is already present
[  337.900918][ T7607] syz.3.393 (7607) used greatest stack depth: 16688 bytes left
[  338.121151][ T7611] netlink: 'syz.0.392': attribute type 10 has an invalid length.
[  338.171092][ T7611] netlink: 40 bytes leftover after parsing attributes in process `syz.0.392'.
[  338.381522][ T7618] loop6: detected capacity change from 0 to 7
[  339.027873][ T7611] team0: entered promiscuous mode
[  339.893935][ T7611] team_slave_0: entered promiscuous mode
[  339.985058][ T7611] team_slave_1: entered promiscuous mode
[  339.993670][ T7611] team0: entered allmulticast mode
[  340.004513][ T7611] team_slave_0: entered allmulticast mode
[  340.012378][ T7611] team_slave_1: entered allmulticast mode
[  340.034908][ T7611] bridge0: port 3(team0) entered blocking state
[  340.042587][ T7611] bridge0: port 3(team0) entered disabled state
[  340.515419][ T7618] Dev loop6: unable to read RDB block 7
[  340.521164][ T7618]  loop6: unable to read partition table
[  340.561079][ T7618] loop6: partition table beyond EOD, truncated
[  340.634868][ T7618] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  341.329597][   T30] kauditd_printk_skb: 21 callbacks suppressed
[  341.329647][   T30] audit: type=1326 audit(1754407452.222:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7615 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32d8eb69 code=0x7ffc0000
[  341.581452][   T30] audit: type=1326 audit(1754407452.222:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7615 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32d8eb69 code=0x7ffc0000
[  341.623522][   T30] audit: type=1326 audit(1754407452.222:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7615 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b32d8eb69 code=0x7ffc0000
[  341.789843][   T30] audit: type=1326 audit(1754407452.222:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7615 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32d8eb69 code=0x7ffc0000
[  342.440641][ T7647] tmpfs: Bad value for 'nr_blocks'
[  342.809041][   T30] audit: type=1326 audit(1754407452.222:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7615 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b32d90a87 code=0x7ffc0000
[  342.846043][   T30] audit: type=1326 audit(1754407452.222:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7615 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2b32d909fc code=0x7ffc0000
[  342.868398][   T30] audit: type=1326 audit(1754407452.222:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7615 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2b32d90934 code=0x7ffc0000
[  342.896408][   T30] audit: type=1326 audit(1754407452.222:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7615 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2b32d90934 code=0x7ffc0000
[  342.917905][   T30] audit: type=1326 audit(1754407452.222:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7615 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2b32d8d7ca code=0x7ffc0000
[  342.939725][   T30] audit: type=1326 audit(1754407452.222:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7615 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32d8eb69 code=0x7ffc0000
[  343.283360][ T5843] Bluetooth: Unexpected continuation frame (len 4)
[  345.064093][ T7662] netlink: 'syz.4.403': attribute type 1 has an invalid length.
[  345.072442][ T7662] netlink: 144 bytes leftover after parsing attributes in process `syz.4.403'.
[  345.081748][ T7662] netlink: 'syz.4.403': attribute type 1 has an invalid length.
[  345.089537][ T7662] netlink: 'syz.4.403': attribute type 2 has an invalid length.
[  345.097589][ T7662] netlink: 64 bytes leftover after parsing attributes in process `syz.4.403'.
[  346.143003][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.406'.
[  347.382786][ T5989] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  347.717214][ T5989] usb 3-1: Using ep0 maxpacket: 8
[  347.796606][ T5989] usb 3-1: config index 0 descriptor too short (expected 28277, got 36)
[  347.896573][ T7685] netlink: 'syz.4.408': attribute type 1 has an invalid length.
[  348.813085][ T5989] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  348.824481][ T5989] usb 3-1: config 0 has no interfaces?
[  348.830147][ T5989] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  348.953042][ T7687] netlink: 'syz.0.410': attribute type 1 has an invalid length.
[  349.642100][ T5989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.836093][ T5989] usb 3-1: config 0 descriptor??
[  349.836598][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  349.851888][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  349.863168][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  349.872509][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  349.883350][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  351.547848][ T5843] Bluetooth: Unexpected continuation frame (len 4)
[  351.982940][ T5843] Bluetooth: hci5: command tx timeout
[  352.088955][ T5840] syz_tun (unregistering): left allmulticast mode
[  352.296706][ T5989] usb 3-1: can't set config #0, error -71
[  352.554455][ T5989] usb 3-1: USB disconnect, device number 7
[  353.457843][ T6710] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.787810][ T7715] netlink: 'syz.2.416': attribute type 10 has an invalid length.
[  354.092865][ T5843] Bluetooth: hci5: command tx timeout
[  354.420845][ T6710] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.477181][ T7715] hsr0: entered promiscuous mode
[  354.498833][ T7715] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  354.532189][ T7715] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  354.563516][ T7715] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  354.658819][ T6710] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.306105][ T6710] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.142839][ T5843] Bluetooth: hci5: command tx timeout
[  356.686730][ T7737] Smack: duplicate mount options
[  357.184949][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.421'.
[  358.222796][ T5843] Bluetooth: hci5: command tx timeout
[  359.374213][ T7689] chnl_net:caif_netlink_parms(): no params data found
[  360.111981][ T6710] bridge_slave_1: left allmulticast mode
[  360.149828][ T6710] bridge_slave_1: left promiscuous mode
[  360.194255][ T6710] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.270257][ T6710] bridge_slave_0: left allmulticast mode
[  360.317695][ T6710] bridge_slave_0: left promiscuous mode
[  360.454856][ T6710] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.795705][ T7785] netlink: 24 bytes leftover after parsing attributes in process `syz.4.431'.
[  368.304922][ T7792] sd 0:0:1:0: device reset
[  369.940912][ T6710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  369.957508][ T6710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  369.968881][ T6710] bond0 (unregistering): Released all slaves
[  370.760712][ T7689] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.775999][ T7689] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.784657][ T7689] bridge_slave_0: entered allmulticast mode
[  370.823460][   T24] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  371.502579][ T7689] bridge_slave_0: entered promiscuous mode
[  372.995497][   T24] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  373.032902][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.115718][   T24] usb 3-1: Product: syz
[  373.120630][   T24] usb 3-1: Manufacturer: syz
[  373.185938][   T24] usb 3-1: SerialNumber: syz
[  373.673636][   T24] usb 3-1: config 0 descriptor??
[  373.690648][   T24] usb 3-1: can't set config #0, error -71
[  374.414393][   T24] usb 3-1: USB disconnect, device number 8
[  374.447282][ T7689] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.533855][ T7689] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.979690][ T7689] bridge_slave_1: entered allmulticast mode
[  375.079382][ T7689] bridge_slave_1: entered promiscuous mode
[  375.203465][ T7836] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  375.457969][ T7689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  375.504225][ T7820] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢
…D£øUDŒw˜}�zR3âëp(@Ož>ÆÀ–PÛç'
[  375.523002][ T7820] CPU: 0 UID: 0 PID: 7820 Comm: syz.0.441 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  375.523025][ T7820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  375.523041][ T7820] Call Trace:
[  375.523050][ T7820]  <TASK>
[  375.523058][ T7820]  dump_stack_lvl+0x189/0x250
[  375.523084][ T7820]  ? __pfx_dump_stack_lvl+0x10/0x10
[  375.523103][ T7820]  ? __pfx__printk+0x10/0x10
[  375.523124][ T7820]  ? kernfs_path_from_node+0x2c/0x260
[  375.523144][ T7820]  ? kernfs_path_from_node+0x2c/0x260
[  375.523162][ T7820]  ? kernfs_path_from_node+0x2c/0x260
[  375.523183][ T7820]  ? kernfs_path_from_node+0x22c/0x260
[  375.523201][ T7820]  ? kernfs_path_from_node+0x2c/0x260
[  375.523222][ T7820]  sysfs_warn_dup+0x8e/0xa0
[  375.523240][ T7820]  sysfs_do_create_link_sd+0xc0/0x110
[  375.523261][ T7820]  device_add_class_symlinks+0x1cf/0x240
[  375.523289][ T7820]  device_add+0x475/0xb50
[  375.523316][ T7820]  wiphy_register+0x199a/0x26b0
[  375.523351][ T7820]  ? __pfx_wiphy_register+0x10/0x10
[  375.523371][ T7820]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  375.523399][ T7820]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  375.523426][ T7820]  ieee80211_register_hw+0x33e1/0x4120
[  375.523563][ T7820]  ? ieee80211_register_hw+0x1471/0x4120
[  375.523596][ T7820]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  375.523625][ T7820]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  375.523659][ T7820]  ? __hrtimer_setup+0x187/0x210
[  375.523675][ T7820]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  375.523711][ T7820]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  375.523778][ T7820]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  375.523816][ T7820]  ? hwsim_new_radio_nl+0xe8d/0x1b10
[  375.523856][ T7820]  hwsim_new_radio_nl+0xea4/0x1b10
[  375.523912][ T7820]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  375.523949][ T7820]  ? irqentry_exit+0x74/0x90
[  375.523973][ T7820]  ? lockdep_hardirqs_on+0x9c/0x150
[  375.524006][ T7820]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  375.524051][ T7820]  genl_family_rcv_msg_doit+0x215/0x300
[  375.524087][ T7820]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  375.524124][ T7820]  ? ns_capable+0x8a/0xf0
[  375.524151][ T7820]  ? __sanitizer_cov_trace_pc+0x11/0x70
[  375.524190][ T7820]  genl_rcv_msg+0x60e/0x790
[  375.524223][ T7820]  ? __pfx_genl_rcv_msg+0x10/0x10
[  375.524246][ T7820]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  375.524297][ T7820]  netlink_rcv_skb+0x205/0x470
[  375.524331][ T7820]  ? __pfx_genl_rcv_msg+0x10/0x10
[  375.524357][ T7820]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  375.524385][ T7820]  ? lock_acquire+0x175/0x360
[  375.524427][ T7820]  ? down_read+0x1ad/0x2e0
[  375.524468][ T7820]  genl_rcv+0x28/0x40
[  375.524490][ T7820]  netlink_unicast+0x75c/0x8e0
[  375.524534][ T7820]  netlink_sendmsg+0x805/0xb30
[  375.524579][ T7820]  ? __pfx_netlink_sendmsg+0x10/0x10
[  375.524624][ T7820]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  375.524646][ T7820]  ? __pfx_netlink_sendmsg+0x10/0x10
[  375.524681][ T7820]  __sock_sendmsg+0x21c/0x270
[  375.524713][ T7820]  ____sys_sendmsg+0x505/0x830
[  375.524756][ T7820]  ? __pfx_____sys_sendmsg+0x10/0x10
[  375.524803][ T7820]  ? import_iovec+0x74/0xa0
[  375.524840][ T7820]  ___sys_sendmsg+0x21f/0x2a0
[  375.524880][ T7820]  ? __pfx____sys_sendmsg+0x10/0x10
[  375.524961][ T7820]  ? __fget_files+0x2a/0x420
[  375.524986][ T7820]  ? __fget_files+0x3a0/0x420
[  375.525024][ T7820]  __x64_sys_sendmsg+0x19b/0x260
[  375.525058][ T7820]  ? schedule+0x165/0x360
[  375.525081][ T7820]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  375.525131][ T7820]  ? rcu_is_watching+0x15/0xb0
[  375.525162][ T7820]  ? do_syscall_64+0xbe/0x3b0
[  375.525193][ T7820]  do_syscall_64+0xfa/0x3b0
[  375.525220][ T7820]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.525242][ T7820]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  375.525264][ T7820]  ? clear_bhb_loop+0x60/0xb0
[  375.525297][ T7820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.525319][ T7820] RIP: 0033:0x7f3c9a78eb69
[  375.525350][ T7820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  375.525370][ T7820] RSP: 002b:00007f3c9b539038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  375.525393][ T7820] RAX: ffffffffffffffda RBX: 00007f3c9a9b6160 RCX: 00007f3c9a78eb69
[  375.525410][ T7820] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000005
[  375.525425][ T7820] RBP: 00007f3c9a811df1 R08: 0000000000000000 R09: 0000000000000000
[  375.525439][ T7820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  375.525459][ T7820] R13: 0000000000000000 R14: 00007f3c9a9b6160 R15: 00007fff05b69498
[  375.525495][ T7820]  </TASK>
[  376.322560][ T7689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  377.766707][ T7689] team0: Port device team_slave_0 added
[  377.776829][ T7689] team0: Port device team_slave_1 added
[  377.888823][ T7869] netlink: 'syz.4.449': attribute type 10 has an invalid length.
[  377.897044][ T7869] netlink: 40 bytes leftover after parsing attributes in process `syz.4.449'.
[  378.258172][ T6710] hsr_slave_0: left promiscuous mode
[  378.264521][ T6710] hsr_slave_1: left promiscuous mode
[  378.287006][ T6710] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  378.315678][ T6710] batman_adv: batadv0: Removing interface: batadv_slave_0
[  378.431607][ T6710] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  378.491857][ T6710] batman_adv: batadv0: Removing interface: batadv_slave_1
[  378.572916][   T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  378.753386][   T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  378.761844][ T6710] veth1_macvtap: left promiscuous mode
[  378.800423][ T6710] veth0_macvtap: left promiscuous mode
[  378.816327][   T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  378.820705][ T6710] veth1_vlan: left promiscuous mode
[  378.945288][ T6710] veth0_vlan: left promiscuous mode
[  378.978639][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.087962][   T24] usb 1-1: Product: syz
[  379.092260][   T24] usb 1-1: Manufacturer: syz
[  379.113731][   T24] usb 1-1: SerialNumber: syz
[  380.518884][   T24] cdc_ncm 1-1:1.0: bind() failure
[  380.629423][   T24] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71
[  380.666614][   T24] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71
[  380.738084][   T24] usbtest 1-1:1.1: probe with driver usbtest failed with error -71
[  380.790185][   T24] usb 1-1: USB disconnect, device number 2
[  383.794326][ T6710] team0 (unregistering): Port device team_slave_1 removed
[  383.868592][ T6710] team0 (unregistering): Port device team_slave_0 removed
[  384.392065][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  384.398631][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  384.634018][ T7869] dummy0: entered promiscuous mode
[  384.641836][ T7869] bridge0: port 3(dummy0) entered blocking state
[  384.663492][ T7869] bridge0: port 3(dummy0) entered disabled state
[  384.671077][ T7869] dummy0: entered allmulticast mode
[  385.459982][ T7869] bridge0: port 3(dummy0) entered blocking state
[  385.466686][ T7869] bridge0: port 3(dummy0) entered forwarding state
[  386.022366][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_0
[  386.065728][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.232819][ T7689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  386.297570][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_1
[  386.333498][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.366016][ T7689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  388.190036][ T7944] Bluetooth: MGMT ver 1.23
[  388.410055][ T7689] hsr_slave_0: entered promiscuous mode
[  388.467764][ T7689] hsr_slave_1: entered promiscuous mode
[  388.475775][ T7689] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  388.494211][ T7689] Cannot create hsr debugfs directory
[  389.962797][ T7965] random: crng reseeded on system resumption
[  391.660504][ T5911] libceph: connect (1)[c::]:6789 error -101
[  391.667291][ T5911] libceph: mon0 (1)[c::]:6789 connect error
[  391.949060][ T5911] libceph: connect (1)[c::]:6789 error -101
[  392.258309][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  392.266287][ T7969] ceph: No mds server is up or the cluster is laggy
[  392.299522][ T5911] libceph: mon0 (1)[c::]:6789 connect error
[  392.452728][    T9] usb 5-1: Using ep0 maxpacket: 32
[  392.533391][    T9] usb 5-1: config 0 has an invalid interface number: 151 but max is 0
[  392.541741][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  392.610570][    T9] usb 5-1: config 0 has no interface number 0
[  392.645220][    T9] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 528
[  392.875057][    T9] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  392.907256][    T9] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  392.936432][    T9] usb 5-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=ad.d6
[  392.947232][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.000929][    T9] usb 5-1: Product: syz
[  393.024887][    T9] usb 5-1: Manufacturer: syz
[  393.046449][    T9] usb 5-1: SerialNumber: syz
[  393.077089][    T9] usb 5-1: config 0 descriptor??
[  393.116864][ T7981] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  393.170711][    T9] ftdi_sio 5-1:0.151: FTDI USB Serial Device converter detected
[  393.211986][    T9] ftdi_sio ttyUSB0: unknown device type: 0xadd6
[  393.307224][ T7689] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  394.276318][ T7689] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  394.818630][ T7689] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  394.850113][ T7689] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  395.202610][ T5843] Bluetooth: hci0: unexpected event for opcode 0x2031
[  396.089732][ T7689] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.281758][ T5911] usb 5-1: USB disconnect, device number 4
[  396.297322][ T5911] ftdi_sio 5-1:0.151: device disconnected
[  396.330162][ T7689] 8021q: adding VLAN 0 to HW filter on device team0
[  396.614730][ T6710] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.622086][ T6710] bridge0: port 1(bridge_slave_0) entered forwarding state
[  396.851494][ T6710] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.858895][ T6710] bridge0: port 2(bridge_slave_1) entered forwarding state
[  397.421503][ T8051] syz.4.482: attempt to access beyond end of device
[  397.421503][ T8051] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0
[  397.435309][ T8051] (syz.4.482,8051,0):ocfs2_get_sector:1714 ERROR: status = -5
[  397.443404][ T8051] (syz.4.482,8051,0):ocfs2_sb_probe:753 ERROR: status = -5
[  397.454652][ T8051] (syz.4.482,8051,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  397.463655][ T8051] (syz.4.482,8051,0):ocfs2_fill_super:1177 ERROR: status = -5
[  399.145050][ T7689] 8021q: adding VLAN 0 to HW filter on device batadv0
[  401.485169][ T8074] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  401.494109][ T8074] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  401.579981][ T8074] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  401.623534][ T8074] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  401.690695][ T8074] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  401.701072][ T8074] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  401.758590][ T8074] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  401.767860][ T8074] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  401.862422][ T8074] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  401.927342][ T8074] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  401.952051][ T7689] veth0_vlan: entered promiscuous mode
[  401.981288][ T8074] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  402.010785][ T7689] veth1_vlan: entered promiscuous mode
[  402.320642][ T7689] veth0_macvtap: entered promiscuous mode
[  402.379865][ T7689] veth1_macvtap: entered promiscuous mode
[  402.483684][ T5911] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  402.591311][ T7689] batman_adv: batadv0: Interface activated: batadv_slave_0
[  402.766197][ T5911] usb 1-1: config 150 has an invalid interface number: 204 but max is 1
[  402.787333][ T5911] usb 1-1: config 150 has no interface number 0
[  402.811608][ T5911] usb 1-1: config 150 interface 204 has no altsetting 0
[  403.451693][ T5843] Bluetooth: hci0: command 0x0406 tx timeout
[  403.584990][ T5843] Bluetooth: hci3: command 0x0406 tx timeout
[  403.664995][ T5911] usb 1-1: config 150 interface 1 has no altsetting 0
[  403.674534][ T5911] usb 1-1: string descriptor 0 read error: -71
[  403.682146][ T5911] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  403.692670][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.717716][ T5911] usb 1-1: can't set config #150, error -71
[  403.722987][ T7689] batman_adv: batadv0: Interface activated: batadv_slave_1
[  403.726083][ T5911] usb 1-1: USB disconnect, device number 3
[  403.749683][ T5843] Bluetooth: hci1: command 0x0406 tx timeout
[  403.776903][ T7689] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  403.849566][ T5843] Bluetooth: hci2: command 0x0406 tx timeout
[  403.858265][ T7689] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  404.186855][ T5843] Bluetooth: hci5: command 0x0405 tx timeout
[  404.392148][ T7689] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  404.401085][ T7689] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  404.485902][ T8108] netlink: 52 bytes leftover after parsing attributes in process `syz.2.491'.
[  405.533036][ T5843] Bluetooth: hci0: command 0x0406 tx timeout
[  405.668155][ T5843] Bluetooth: hci3: command 0x0406 tx timeout
[  405.822811][ T5843] Bluetooth: hci1: command 0x0406 tx timeout
[  405.973057][ T5843] Bluetooth: hci2: command 0x0406 tx timeout
[  406.246442][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'.
[  406.257727][ T8126] vcan0: entered promiscuous mode
[  406.262913][ T8126] vcan0: entered allmulticast mode
[  406.432782][ T5843] Bluetooth: hci5: command 0x0405 tx timeout
[  407.902958][ T8139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.497'.
[  408.462865][ T5849] Bluetooth: hci5: command 0x0405 tx timeout
[  410.046188][ T8145] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  410.052720][ T8145] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  410.059250][ T8145] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  410.067238][ T8145] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  410.989515][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  411.007781][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  411.017912][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  411.037353][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  411.052948][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  411.173421][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.501'.
[  411.983109][ T5843] Bluetooth: hci0: command 0x0406 tx timeout
[  412.063095][ T5843] Bluetooth: hci1: command 0x0406 tx timeout
[  412.069346][ T5843] Bluetooth: hci3: command 0x0406 tx timeout
[  412.143112][ T5843] Bluetooth: hci2: command 0x0406 tx timeout
[  413.114116][ T5843] Bluetooth: hci4: command tx timeout
[  415.189792][ T8183] netlink: 52 bytes leftover after parsing attributes in process `syz.3.505'.
[  415.767681][ T5849] Bluetooth: hci4: command tx timeout
[  416.038052][   T37] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.421095][ T8198] /dev/nullb0: Can't open blockdev
[  417.855337][ T5849] Bluetooth: hci4: command tx timeout
[  418.274734][   T37] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.541151][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'.
[  420.042797][ T5849] Bluetooth: hci4: command tx timeout
[  420.261628][   T37] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.777307][   T37] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.102865][    T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  423.149093][    T9] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  423.342061][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.371831][ T8156] chnl_net:caif_netlink_parms(): no params data found
[  423.381184][    T9] usb 1-1: Product: syz
[  423.402341][    T9] usb 1-1: Manufacturer: syz
[  423.563228][ T8247] netlink: 16 bytes leftover after parsing attributes in process `syz.4.516'.
[  423.582826][ T8247] netlink: 92 bytes leftover after parsing attributes in process `syz.4.516'.
[  423.992761][    T9] usb 1-1: SerialNumber: syz
[  424.003067][   T37] bridge_slave_1: left allmulticast mode
[  424.015177][   T37] bridge_slave_1: left promiscuous mode
[  424.041705][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.053554][    T9] usb 1-1: config 0 descriptor??
[  424.146151][   T37] bridge_slave_0: left allmulticast mode
[  424.151898][   T37] bridge_slave_0: left promiscuous mode
[  424.252951][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.282266][    T9] airspy 1-1:0.0: usb_control_msg() failed -71 request 09
[  424.333269][    T9] airspy 1-1:0.0: Could not detect board
[  424.355083][    T9] airspy 1-1:0.0: probe with driver airspy failed with error -71
[  424.400559][    T9] usb 1-1: USB disconnect, device number 4
[  431.584221][ T8279] netlink: 40 bytes leftover after parsing attributes in process `syz.2.521'.
[  432.386656][ T8285] netlink: 16 bytes leftover after parsing attributes in process `syz.2.521'.
[  435.511071][ T8304] netlink: 68 bytes leftover after parsing attributes in process `syz.4.527'.
[  439.082235][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  439.098670][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  439.110305][   T37] bond0 (unregistering): Released all slaves
[  439.461762][ T8322] tmpfs: Bad value for 'mpol'
[  439.468151][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.531'.
[  440.652125][   T37] hsr_slave_0: left promiscuous mode
[  440.743090][   T37] hsr_slave_1: left promiscuous mode
[  440.751468][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  440.944738][ T8335] netlink: 32 bytes leftover after parsing attributes in process `syz.4.534'.
[  440.953837][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[  440.961854][ T8335] netlink: 32 bytes leftover after parsing attributes in process `syz.4.534'.
[  441.769295][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  441.956872][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[  442.174488][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  442.185470][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  442.194750][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  442.215028][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  442.253014][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  442.603109][   T37] veth1_macvtap: left promiscuous mode
[  442.608771][   T37] veth0_macvtap: left promiscuous mode
[  442.631972][   T37] veth1_vlan: left promiscuous mode
[  442.670634][ T8358] binder: 8352:8358 ioctl 400c620e 0 returned -14
[  442.804848][   T37] veth0_vlan: left promiscuous mode
[  443.810740][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  443.810762][   T30] audit: type=1326 audit(1754407555.142:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8363 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9a78eb69 code=0x7ffc0000
[  443.858358][   T30] audit: type=1326 audit(1754407555.182:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8363 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f3c9a78eb69 code=0x7ffc0000
[  443.884831][   T30] audit: type=1326 audit(1754407555.182:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8363 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9a78eb69 code=0x7ffc0000
[  443.907360][   T30] audit: type=1326 audit(1754407555.182:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8363 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3c9a78eb69 code=0x7ffc0000
[  443.931536][   T30] audit: type=1326 audit(1754407555.182:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8363 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9a78eb69 code=0x7ffc0000
[  443.960035][   T30] audit: type=1326 audit(1754407555.182:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8363 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9a78eb69 code=0x7ffc0000
[  444.046968][   T30] audit: type=1326 audit(1754407555.182:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8363 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f3c9a78eb69 code=0x7ffc0000
[  444.099724][   T30] audit: type=1326 audit(1754407555.182:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8363 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9a78eb69 code=0x7ffc0000
[  444.126403][   T30] audit: type=1326 audit(1754407555.182:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8363 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9a78eb69 code=0x7ffc0000
[  444.171085][   T30] audit: type=1326 audit(1754407555.182:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8363 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c9a78eb69 code=0x7ffc0000
[  444.384166][ T5843] Bluetooth: hci5: command tx timeout
[  445.561970][   T37] team0 (unregistering): Port device team_slave_1 removed
[  445.628762][   T37] team0 (unregistering): Port device team_slave_0 removed
[  445.830535][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  445.837277][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  446.249168][ T8156] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.318444][ T8156] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.333052][ T8156] bridge_slave_0: entered allmulticast mode
[  446.341224][ T8156] bridge_slave_0: entered promiscuous mode
[  446.383500][ T8156] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.390755][ T8156] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.448530][ T8156] bridge_slave_1: entered allmulticast mode
[  446.467232][ T5843] Bluetooth: hci5: command tx timeout
[  446.690749][ T8156] bridge_slave_1: entered promiscuous mode
[  446.772933][ T8382] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.542'.
[  447.257538][ T8374] netlink: 52 bytes leftover after parsing attributes in process `syz.4.541'.
[  447.546697][ T8156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  447.560391][ T8156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  448.540973][ T8156] team0: Port device team_slave_0 added
[  448.547259][ T5849] Bluetooth: hci5: command tx timeout
[  448.684086][ T8403] Bluetooth: hci0: load_link_keys: too big key_count value 2816
[  449.274935][ T5849] Bluetooth: hci2: command 0x1003 tx timeout
[  449.303898][ T5843] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  450.632850][ T5843] Bluetooth: hci5: command tx timeout
[  451.131590][ T8156] team0: Port device team_slave_1 added
[  451.450888][ T8409] batadv1: entered promiscuous mode
[  451.539090][ T8156] batman_adv: batadv0: Adding interface: batadv_slave_0
[  451.562667][ T8156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  451.633404][ T8156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  451.681932][ T8156] batman_adv: batadv0: Adding interface: batadv_slave_1
[  451.702783][ T8156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  452.040658][ T8156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  452.125210][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  452.130957][   T30] audit: type=1326 audit(1754407563.452:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8423 comm="syz.2.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8918eb69 code=0x7ffc0000
[  452.311414][ T8426] block nbd4: shutting down sockets
[  452.370326][   T30] audit: type=1326 audit(1754407563.522:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8423 comm="syz.2.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8918eb69 code=0x7ffc0000
[  452.433612][   T30] audit: type=1326 audit(1754407563.602:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8423 comm="syz.2.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3b8918eb69 code=0x7ffc0000
[  452.456712][   T30] audit: type=1326 audit(1754407563.602:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8423 comm="syz.2.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8918eb69 code=0x7ffc0000
[  452.479895][   T30] audit: type=1326 audit(1754407563.602:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8423 comm="syz.2.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8918eb69 code=0x7ffc0000
[  452.503214][   T30] audit: type=1326 audit(1754407563.772:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8423 comm="syz.2.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f3b8918eb69 code=0x7ffc0000
[  452.525992][   T30] audit: type=1326 audit(1754407563.772:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8423 comm="syz.2.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8918eb69 code=0x7ffc0000
[  452.550041][   T30] audit: type=1326 audit(1754407563.772:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8423 comm="syz.2.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8918eb69 code=0x7ffc0000
[  452.669521][   T30] audit: type=1326 audit(1754407563.772:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8423 comm="syz.2.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3b8918eb69 code=0x7ffc0000
[  452.886035][   T30] audit: type=1326 audit(1754407563.772:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8423 comm="syz.2.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8918eb69 code=0x7ffc0000
[  452.924609][ T8424] overlayfs: failed to resolve './file1': -2
[  453.331788][ T8156] hsr_slave_0: entered promiscuous mode
[  453.339374][ T8156] hsr_slave_1: entered promiscuous mode
[  453.392734][ T8156] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  453.623495][ T8156] Cannot create hsr debugfs directory
[  455.403572][ T1105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.799499][ T1105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.319219][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'.
[  458.335834][ T1105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.383814][ T8465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.559'.
[  458.602067][ T8461] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  458.757535][ T8470] tmpfs: Bad value for 'mpol'
[  459.857966][ T8345] chnl_net:caif_netlink_parms(): no params data found
[  461.754640][ T1105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.220132][ T8503] netlink: 'syz.2.567': attribute type 1 has an invalid length.
[  464.305396][ T8345] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.353522][ T8345] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.374289][ T8345] bridge_slave_0: entered allmulticast mode
[  464.417965][ T8345] bridge_slave_0: entered promiscuous mode
[  464.624432][ T8345] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.631701][ T8345] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.659883][ T8345] bridge_slave_1: entered allmulticast mode
[  464.668311][ T8345] bridge_slave_1: entered promiscuous mode
[  468.117647][ T8345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  468.153981][ T8345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  468.445510][ T8345] team0: Port device team_slave_0 added
[  468.484082][ T8345] team0: Port device team_slave_1 added
[  468.559344][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  468.570929][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  468.580429][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  468.590009][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  468.599510][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  468.768757][ T1105] bridge_slave_1: left allmulticast mode
[  469.392060][ T1105] bridge_slave_1: left promiscuous mode
[  469.468324][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state
[  469.563372][ T1105] bridge_slave_0: left allmulticast mode
[  469.569536][ T1105] bridge_slave_0: left promiscuous mode
[  469.607232][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.702938][ T5849] Bluetooth: hci2: command tx timeout
[  472.471343][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  472.493800][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  472.508783][ T1105] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  472.524687][ T1105] bond0 (unregistering): Released all slaves
[  472.675113][ T8570] netlink: 6 bytes leftover after parsing attributes in process `syz.4.578'.
[  472.685883][ T8570] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  472.812972][ T5849] Bluetooth: hci2: command tx timeout
[  472.834234][ T8345] batman_adv: batadv0: Adding interface: batadv_slave_0
[  472.841714][ T8345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  472.918204][ T8345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  472.953525][ T8345] batman_adv: batadv0: Adding interface: batadv_slave_1
[  472.960829][ T8345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  473.082882][ T8345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  473.325891][ T8587] syz.4.581: attempt to access beyond end of device
[  473.325891][ T8587] loop4: rw=2048, sector=2, nr_sectors = 1 limit=0
[  473.340569][ T8587] hfsplus: unable to find HFS+ superblock
[  473.499648][ T8588] netlink: 32 bytes leftover after parsing attributes in process `syz.0.582'.
[  474.863371][ T5849] Bluetooth: hci2: command tx timeout
[  475.894006][ T5849] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  476.300258][ T8345] hsr_slave_0: entered promiscuous mode
[  476.319443][ T5911] hid (null): invalid report_size -1358781365
[  476.327581][ T8345] hsr_slave_1: entered promiscuous mode
[  476.352441][ T8345] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  476.364677][ T5911] hid-generic 0001:0009:0001.0001: unknown main item tag 0x3
[  476.374046][ T8345] Cannot create hsr debugfs directory
[  476.393962][ T5911] hid-generic 0001:0009:0001.0001: unknown main item tag 0x6
[  476.417267][ T1105] hsr_slave_0: left promiscuous mode
[  476.422453][ T5911] hid-generic 0001:0009:0001.0001: invalid report_size -1358781365
[  476.431146][ T5911] hid-generic 0001:0009:0001.0001: item 0 4 1 7 parsing failed
[  476.440701][ T1105] hsr_slave_1: left promiscuous mode
[  476.450176][ T5911] hid-generic 0001:0009:0001.0001: probe with driver hid-generic failed with error -22
[  476.461705][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  476.495351][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0
[  476.553529][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  476.561884][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1
[  476.652324][ T1105] veth1_macvtap: left promiscuous mode
[  476.672741][ T1105] veth0_macvtap: left promiscuous mode
[  476.682970][ T1105] veth1_vlan: left promiscuous mode
[  476.702998][ T1105] veth0_vlan: left promiscuous mode
[  476.942936][ T5849] Bluetooth: hci2: command tx timeout
[  483.469237][ T1105] team0 (unregistering): Port device team_slave_1 removed
[  483.579317][ T1105] team0 (unregistering): Port device team_slave_0 removed
[  484.410280][ T5849] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  486.537405][ T8633] vlan2: entered promiscuous mode
[  486.544098][ T8633] bond0: entered promiscuous mode
[  486.549490][ T8633] bond_slave_0: entered promiscuous mode
[  486.556362][ T8633] bond_slave_1: entered promiscuous mode
[  490.343176][ T5911] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  490.653102][ T5911] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  490.687961][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.752843][ T5911] usb 1-1: Product: syz
[  490.773742][ T8689] delete_channel: no stack
[  490.781531][ T5911] usb 1-1: Manufacturer: syz
[  490.793500][ T5911] usb 1-1: SerialNumber: syz
[  490.834912][ T5911] usb 1-1: config 0 descriptor??
[  491.096392][ T5849] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  491.107981][ T1105] bridge_slave_1: left allmulticast mode
[  491.148108][ T1105] bridge_slave_1: left promiscuous mode
[  491.162858][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state
[  491.189689][ T5911] airspy 1-1:0.0: usb_control_msg() failed -71 request 09
[  491.275787][ T5911] airspy 1-1:0.0: Could not detect board
[  491.309415][ T1105] bridge_slave_0: left allmulticast mode
[  491.372201][ T5911] airspy 1-1:0.0: probe with driver airspy failed with error -71
[  491.380411][ T1105] bridge_slave_0: left promiscuous mode
[  491.380711][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state
[  491.626780][ T5911] usb 1-1: USB disconnect, device number 5
[  492.137070][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  492.294897][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  493.156336][ T1105] bond0 (unregistering): Released all slaves
[  493.352938][ T8549] chnl_net:caif_netlink_parms(): no params data found
[  493.505649][ T8345] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  494.556168][ T1105] hsr_slave_0: left promiscuous mode
[  494.794165][ T1105] hsr_slave_1: left promiscuous mode
[  494.800919][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0
[  494.838945][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1
[  495.782887][  T977] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  496.062915][  T977] usb 1-1: Using ep0 maxpacket: 8
[  496.086362][  T977] usb 1-1: unable to read config index 0 descriptor/start: -61
[  496.106912][  T977] usb 1-1: can't read configurations, error -61
[  496.168080][ T1105] team0 (unregistering): Port device team_slave_1 removed
[  496.245385][ T1105] team0 (unregistering): Port device team_slave_0 removed
[  496.330859][  T977] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  496.875851][  T977] usb 1-1: Using ep0 maxpacket: 8
[  496.895269][  T977] usb 1-1: unable to read config index 0 descriptor/start: -61
[  496.903348][  T977] usb 1-1: can't read configurations, error -61
[  496.922007][  T977] usb usb1-port1: attempt power cycle
[  497.089513][ T8345] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  497.134313][ T8743] orangefs_mount: mount request failed with -4
[  497.193962][ T8345] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  497.242364][ T8345] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  497.285185][  T977] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  497.341519][  T977] usb 1-1: Using ep0 maxpacket: 8
[  497.362399][  T977] usb 1-1: unable to read config index 0 descriptor/start: -61
[  497.394002][  T977] usb 1-1: can't read configurations, error -61
[  497.476102][   T30] kauditd_printk_skb: 70 callbacks suppressed
[  497.476122][   T30] audit: type=1326 audit(1754407608.802:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8757 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8918eb69 code=0x7ffc0000
[  497.532823][  T977] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  497.563971][  T977] usb 1-1: Using ep0 maxpacket: 8
[  497.571522][  T977] usb 1-1: unable to read config index 0 descriptor/start: -61
[  497.579474][  T977] usb 1-1: can't read configurations, error -61
[  497.596710][  T977] usb usb1-port1: unable to enumerate USB device
[  497.701597][   T30] audit: type=1326 audit(1754407608.802:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8757 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8918eb69 code=0x7ffc0000
[  497.812093][   T30] audit: type=1326 audit(1754407608.802:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8757 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f3b8918eb69 code=0x7ffc0000
[  497.851838][   T30] audit: type=1326 audit(1754407608.802:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8757 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8918eb69 code=0x7ffc0000
[  497.860563][ T5954] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  497.887333][   T30] audit: type=1326 audit(1754407608.802:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8757 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8918eb69 code=0x7ffc0000
[  497.903804][ T8549] bridge0: port 1(bridge_slave_0) entered blocking state
[  497.939503][ T8767] mmap: syz.2.613 (8767) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  498.029337][ T8549] bridge0: port 1(bridge_slave_0) entered disabled state
[  498.029360][   T30] audit: type=1326 audit(1754407608.802:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8757 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3b8918eb69 code=0x7ffc0000
[  498.037973][ T8549] bridge_slave_0: entered allmulticast mode
[  498.107827][ T8549] bridge_slave_0: entered promiscuous mode
[  498.141544][ T8770] pim6reg: entered allmulticast mode
[  498.171278][   T30] audit: type=1326 audit(1754407608.802:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8757 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8918eb69 code=0x7ffc0000
[  498.180653][ T8549] bridge0: port 2(bridge_slave_1) entered blocking state
[  498.217311][ T5954] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  498.227036][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.244434][ T8549] bridge0: port 2(bridge_slave_1) entered disabled state
[  498.524625][ T8775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'.
[  498.626713][   T30] audit: type=1326 audit(1754407608.802:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8757 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8918eb69 code=0x7ffc0000
[  498.650973][ T8549] bridge_slave_1: entered allmulticast mode
[  498.712676][ T5954] usb 5-1: Product: syz
[  498.732806][ T5954] usb 5-1: Manufacturer: syz
[  498.752808][ T5954] usb 5-1: SerialNumber: syz
[  498.784692][ T8549] bridge_slave_1: entered promiscuous mode
[  498.792480][ T5954] usb 5-1: config 0 descriptor??
[  498.839916][ T8767] pim6reg: left allmulticast mode
[  498.845672][   T30] audit: type=1326 audit(1754407608.802:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8757 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3b8918eb69 code=0x7ffc0000
[  499.012788][ T5954] airspy 5-1:0.0: usb_control_msg() failed -71 request 09
[  499.034926][ T5954] airspy 5-1:0.0: Could not detect board
[  499.052946][   T30] audit: type=1326 audit(1754407608.812:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8757 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8918eb69 code=0x7ffc0000
[  499.057367][ T5954] airspy 5-1:0.0: probe with driver airspy failed with error -71
[  499.182881][ T5954] usb 5-1: USB disconnect, device number 5
[  499.398157][ T8549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  499.440098][ T8549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  499.807935][ T8549] team0: Port device team_slave_0 added
[  499.993824][ T8789] smk_cipso_doi:692 cipso add rc = -17
[  501.064260][ T8549] team0: Port device team_slave_1 added
[  502.175401][ T8549] batman_adv: batadv0: Adding interface: batadv_slave_0
[  502.219258][ T8549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  502.293073][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  502.304514][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  502.312886][ T8549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  502.324347][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  502.398336][ T8810] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  502.411057][ T8810] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0'
[  502.728464][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  502.743613][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  503.046090][ T8811] Falling back ldisc for ttyprintk.
[  503.294463][ T8549] batman_adv: batadv0: Adding interface: batadv_slave_1
[  503.370373][ T8549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  503.734188][ T8549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  504.072899][ T8815] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  504.081316][ T8815] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  504.092634][ T8815] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  504.100704][ T8815] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  504.517913][ T8549] hsr_slave_0: entered promiscuous mode
[  504.574885][ T8549] hsr_slave_1: entered promiscuous mode
[  504.692958][ T8549] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  504.813507][ T8549] Cannot create hsr debugfs directory
[  504.944166][ T5849] Bluetooth: hci4: command tx timeout
[  506.404546][ T8824] ip6gretap1: entered allmulticast mode
[  507.023805][ T5849] Bluetooth: hci4: command tx timeout
[  507.270093][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  507.389446][ T8844] veth0_virt_wifi: renamed from veth0_macvtap
[  507.412490][ T8844] netlink: 68 bytes leftover after parsing attributes in process `syz.2.627'.
[  507.461408][ T8844] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check.
[  508.911596][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.629'.
[  508.923862][ T8872] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  508.932690][ T8872] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  509.104707][ T5849] Bluetooth: hci4: command tx timeout
[  509.405330][ T8871] bridge0: port 2(bridge_slave_1) entered disabled state
[  509.415193][ T8871] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.269447][ T5843] Bluetooth: hci4: command tx timeout
[  512.007052][ T1105] Bluetooth: hci5: Frame reassembly failed (-84)
[  512.611473][ T8895] xt_CT: You must specify a L4 protocol and not use inversions on it
[  513.343177][ T5843] Bluetooth: hci5: command 0x1003 tx timeout
[  513.358348][ T5849] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  514.564589][ T8902] geneve1: entered allmulticast mode
[  516.421717][ T8805] chnl_net:caif_netlink_parms(): no params data found
[  516.686280][ T8918] No source specified
[  516.712468][ T8918] /dev/nullb0: Can't open blockdev
[  517.315904][ T8905] block nbd0: not configured, cannot reconfigure
[  517.600712][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.637'.
[  517.609957][ T8917] veth1_to_hsr: entered promiscuous mode
[  517.703816][ T1166] bridge_slave_1: left allmulticast mode
[  517.709761][ T1166] bridge_slave_1: left promiscuous mode
[  517.716933][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.054863][ T1166] bridge_slave_0: left allmulticast mode
[  518.060679][ T1166] bridge_slave_0: left promiscuous mode
[  518.394193][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.805822][ T8929] netlink: 32 bytes leftover after parsing attributes in process `syz.2.639'.
[  519.623189][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  519.641783][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  519.657732][    T9] libceph: connect (1)[c::]:6789 error -101
[  519.673214][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  519.695857][ T1166] bond0 (unregistering): Released all slaves
[  519.893610][ T8936] ceph: No mds server is up or the cluster is laggy
[  520.301170][ T1166] hsr_slave_0: left promiscuous mode
[  520.403702][ T1166] hsr_slave_1: left promiscuous mode
[  521.252810][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0
[  521.383355][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1
[  522.088462][ T1166] team0 (unregistering): Port device team_slave_1 removed
[  522.157292][ T1166] team0 (unregistering): Port device team_slave_0 removed
[  522.823041][ T8956] sp0: Synchronizing with TNC
[  522.856315][ T8953] [U] è
[  523.077806][ T8805] bridge0: port 1(bridge_slave_0) entered blocking state
[  523.106363][ T8805] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.120667][ T8805] bridge_slave_0: entered allmulticast mode
[  523.275101][ T8805] bridge_slave_0: entered promiscuous mode
[  523.355028][ T8805] bridge0: port 2(bridge_slave_1) entered blocking state
[  523.414608][ T8962] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request
[  524.307228][ T8805] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.337240][ T8805] bridge_slave_1: entered allmulticast mode
[  524.390701][ T8805] bridge_slave_1: entered promiscuous mode
[  524.865786][   T30] kauditd_printk_skb: 30 callbacks suppressed
[  524.865807][   T30] audit: type=1326 audit(1754407636.192:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8967 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  525.238691][   T30] audit: type=1326 audit(1754407636.192:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8967 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  525.350920][   T30] audit: type=1326 audit(1754407636.202:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8967 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  525.630933][   T30] audit: type=1326 audit(1754407636.202:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8967 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  525.696571][   T30] audit: type=1326 audit(1754407636.202:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8967 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  525.933701][   T30] audit: type=1326 audit(1754407636.202:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8967 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  526.044387][   T30] audit: type=1326 audit(1754407636.202:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8967 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  526.396763][ T8805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  526.971290][   T30] audit: type=1326 audit(1754407636.202:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8967 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  526.997921][ T8805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  527.206447][   T30] audit: type=1326 audit(1754407636.202:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8967 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  527.277460][   T30] audit: type=1326 audit(1754407636.202:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8967 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  528.135578][ T8805] team0: Port device team_slave_0 added
[  528.181867][ T8805] team0: Port device team_slave_1 added
[  528.231422][ T9001] netlink: 32 bytes leftover after parsing attributes in process `syz.0.651'.
[  528.714087][ T8805] batman_adv: batadv0: Adding interface: batadv_slave_0
[  528.730863][ T8805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  529.482744][ T8805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  529.537156][ T8805] batman_adv: batadv0: Adding interface: batadv_slave_1
[  529.634579][ T8805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  529.749456][ T8805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  530.317944][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  530.368658][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  530.389267][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  530.408682][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  530.417294][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  530.977655][ T8805] hsr_slave_0: entered promiscuous mode
[  530.985010][ T8805] hsr_slave_1: entered promiscuous mode
[  530.992106][ T8805] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  531.103696][ T8805] Cannot create hsr debugfs directory
[  531.195596][ T9031] /dev/nullb0: Can't open blockdev
[  531.513870][ T6111] Bluetooth: hci6: Frame reassembly failed (-84)
[  532.462764][ T5849] Bluetooth: hci5: command tx timeout
[  533.422836][ T5843] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  533.423189][ T5849] Bluetooth: hci6: command 0x1003 tx timeout
[  534.543110][ T5843] Bluetooth: hci5: command tx timeout
[  535.578988][ T9056] netlink: 32 bytes leftover after parsing attributes in process `syz.4.663'.
[  535.587139][ T9058] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  536.463656][ T9065] netlink: 64 bytes leftover after parsing attributes in process `syz.0.664'.
[  537.279214][ T5843] Bluetooth: hci5: command tx timeout
[  539.015386][ T9075] netlink: 56 bytes leftover after parsing attributes in process `syz.0.666'.
[  539.344003][ T5849] Bluetooth: hci5: command tx timeout
[  539.774679][ T9086] netlink: 36 bytes leftover after parsing attributes in process `syz.2.670'.
[  540.530033][ T9012] chnl_net:caif_netlink_parms(): no params data found
[  540.993399][ T9093] netlink: 'syz.2.670': attribute type 10 has an invalid length.
[  541.763838][ T9093] 8021q: adding VLAN 0 to HW filter on device batadv0
[  541.771876][ T9093] batadv0: entered promiscuous mode
[  541.778125][ T9093] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  541.837768][ T9094] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  541.847998][ T9094] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  541.858062][ T9094] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  541.867143][ T9094] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  541.873753][ T9094] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  541.887602][ T9094] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  541.894024][   T13] bridge_slave_1: left allmulticast mode
[  541.899915][   T13] bridge_slave_1: left promiscuous mode
[  541.908362][ T9094] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  541.917026][ T9094] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  541.935041][ T9094] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  541.943329][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.660337][   T13] bridge_slave_0: left allmulticast mode
[  542.712298][   T13] bridge_slave_0: left promiscuous mode
[  542.734598][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  543.879452][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  543.963358][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout
[  543.963665][ T5849] Bluetooth: hci1: command 0x0406 tx timeout
[  543.969622][ T5843] Bluetooth: hci3: command 0x0406 tx timeout
[  544.037148][ T5843] Bluetooth: hci0: command 0x0406 tx timeout
[  544.059346][ T5849] Bluetooth: hci5: command 0x0c1a tx timeout
[  544.226587][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  544.414590][   T13] bond0 (unregistering): Released all slaves
[  544.721110][   T13] hsr_slave_0: left promiscuous mode
[  544.746725][   T13] hsr_slave_1: left promiscuous mode
[  544.760046][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  544.790961][ T9121] netlink: 52 bytes leftover after parsing attributes in process `syz.2.675'.
[  544.802080][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  546.092945][ T9113] Bluetooth: hci4: command 0x0c1a tx timeout
[  546.168283][ T9113] Bluetooth: hci5: command 0x0c1a tx timeout
[  546.245801][   T13] team0 (unregistering): Port device team_slave_1 removed
[  546.316096][   T13] team0 (unregistering): Port device team_slave_0 removed
[  547.764187][ T9012] bridge0: port 1(bridge_slave_0) entered blocking state
[  547.781056][ T9012] bridge0: port 1(bridge_slave_0) entered disabled state
[  547.788652][ T9012] bridge_slave_0: entered allmulticast mode
[  547.796812][ T9012] bridge_slave_0: entered promiscuous mode
[  547.808518][ T8805] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  547.848605][ T9012] bridge0: port 2(bridge_slave_1) entered blocking state
[  547.958594][ T9012] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.972307][ T9012] bridge_slave_1: entered allmulticast mode
[  547.981210][ T9012] bridge_slave_1: entered promiscuous mode
[  548.794037][ T9113] Bluetooth: hci4: command 0x0c1a tx timeout
[  548.800329][ T9113] Bluetooth: hci5: command 0x0c1a tx timeout
[  548.971144][ T8805] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  549.905297][ T8805] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  552.126595][ T9012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  552.145943][ T8805] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  552.235235][ T9012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  552.742696][ T9169] input: syz1 as /devices/virtual/input/input14
[  553.272747][    T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  553.572830][    T9] usb 3-1: device descriptor read/64, error -71
[  553.647132][ T9012] team0: Port device team_slave_0 added
[  554.025350][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  554.025409][   T30] audit: type=1804 audit(1754407666.362:217): pid=9184 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.685" name="/newroot/180/file0" dev="tmpfs" ino=974 res=1 errno=0
[  554.532655][    T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  555.059818][ T9012] team0: Port device team_slave_1 added
[  555.074173][    T9] usb 3-1: device descriptor read/64, error -71
[  555.163226][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.686'.
[  555.712723][    T9] usb usb3-port1: attempt power cycle
[  556.063004][    T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  556.315874][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.689'.
[  556.340398][ T9012] batman_adv: batadv0: Adding interface: batadv_slave_0
[  556.352850][    T9] usb 3-1: device not accepting address 11, error -71
[  556.364701][ T9012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  556.393529][ T9012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  556.425412][ T9198] netlink: 52 bytes leftover after parsing attributes in process `syz.0.688'.
[  556.475700][ T9200] netlink: 20 bytes leftover after parsing attributes in process `syz.2.689'.
[  556.511100][ T9012] batman_adv: batadv0: Adding interface: batadv_slave_1
[  556.526067][ T9012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  556.557241][ T9012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  557.604489][ T9012] hsr_slave_0: entered promiscuous mode
[  557.611466][ T9012] hsr_slave_1: entered promiscuous mode
[  557.715781][ T9012] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  557.760674][ T9012] Cannot create hsr debugfs directory
[  558.132674][   T30] audit: type=1326 audit(1754407670.292:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9204 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  558.244527][   T30] audit: type=1326 audit(1754407670.292:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9204 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  558.286412][ T9208] pim6reg: entered allmulticast mode
[  558.382926][   T30] audit: type=1326 audit(1754407670.292:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9204 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  558.451457][ T9207] pim6reg: left allmulticast mode
[  558.657494][   T30] audit: type=1326 audit(1754407670.292:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9204 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  559.390408][   T30] audit: type=1326 audit(1754407670.292:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9204 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  559.502793][   T30] audit: type=1326 audit(1754407670.292:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9204 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc587790a87 code=0x7ffc0000
[  559.529311][   T30] audit: type=1326 audit(1754407670.292:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9204 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc5877909fc code=0x7ffc0000
[  559.641253][   T30] audit: type=1326 audit(1754407670.292:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9204 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc587790934 code=0x7ffc0000
[  559.732732][ T5954] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  559.772284][   T30] audit: type=1326 audit(1754407670.292:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9204 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc587790934 code=0x7ffc0000
[  559.932849][   T30] audit: type=1326 audit(1754407670.292:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9204 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc58778d7ca code=0x7ffc0000
[  559.972729][ T5954] usb 1-1: Using ep0 maxpacket: 16
[  560.005921][ T5954] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  560.023003][ T5954] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  560.045334][   T30] audit: type=1326 audit(1754407670.292:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9204 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  560.083802][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  560.122688][ T5954] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  560.136001][   T30] audit: type=1326 audit(1754407670.292:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9204 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  560.158496][   T30] audit: type=1326 audit(1754407670.292:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9204 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  560.182762][ T5954] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  560.192041][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.200334][ T5954] usb 1-1: Product: syz
[  560.204753][   T30] audit: type=1326 audit(1754407670.302:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9204 comm="syz.4.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  560.242724][ T5954] usb 1-1: Manufacturer: syz
[  560.304346][ T5954] usb 1-1: SerialNumber: syz
[  560.367906][ T5954] usb 1-1: config 0 descriptor??
[  560.522679][ T5954] rc_core: IR keymap rc-xbox-dvd not found
[  561.383883][ T5954] Registered IR keymap rc-empty
[  561.392319][ T5954] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  561.411653][ T5954] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15
[  561.464461][ T5954] usb 1-1: USB disconnect, device number 10
[  561.470585][    C1] xbox_remote 1-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[  561.896864][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  561.908196][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  561.945914][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  561.964080][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  561.973337][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  562.091548][ T9233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.699'.
[  562.101697][ T9235] netlink: 52 bytes leftover after parsing attributes in process `syz.4.698'.
[  562.704190][ T5849] Bluetooth: hci5: command 0x0c1a tx timeout
[  564.066491][ T5854] Bluetooth: hci2: command tx timeout
[  564.306936][    T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  564.575505][    T9] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  565.132718][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.203959][    T9] usb 5-1: Product: syz
[  565.208295][    T9] usb 5-1: Manufacturer: syz
[  565.218430][    T9] usb 5-1: SerialNumber: syz
[  565.243320][    T9] usb 5-1: config 0 descriptor??
[  565.918823][    T9] airspy 5-1:0.0: usb_control_msg() failed -71 request 09
[  565.949471][    T9] airspy 5-1:0.0: Could not detect board
[  565.955466][    T9] airspy 5-1:0.0: probe with driver airspy failed with error -71
[  565.990031][    T9] usb 5-1: USB disconnect, device number 6
[  566.142984][ T5854] Bluetooth: hci2: command tx timeout
[  566.201409][ T9262] netlink: 'syz.0.706': attribute type 1 has an invalid length.
[  566.209463][ T9262] netlink: 224 bytes leftover after parsing attributes in process `syz.0.706'.
[  566.713084][ T5854] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  566.961620][ T9265] xt_CT: No such helper "snmp"
[  567.239593][ T9228] chnl_net:caif_netlink_parms(): no params data found
[  568.101510][ T9012] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  568.140922][ T9012] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  568.222897][ T5854] Bluetooth: hci2: command tx timeout
[  568.282986][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  568.283008][   T30] audit: type=1326 audit(1754407680.612:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9280 comm="syz.4.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  568.393042][   T30] audit: type=1326 audit(1754407680.612:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9280 comm="syz.4.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  568.414922][    C1] vkms_vblank_simulate: vblank timer overrun
[  568.595662][   T30] audit: type=1326 audit(1754407680.612:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9280 comm="syz.4.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  569.050760][ T9012] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  569.449789][ T9297] netlink: 'syz.0.710': attribute type 1 has an invalid length.
[  569.761220][   T30] audit: type=1326 audit(1754407680.612:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9280 comm="syz.4.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  569.823905][   T30] audit: type=1326 audit(1754407680.612:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9280 comm="syz.4.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  569.846804][   T30] audit: type=1326 audit(1754407680.612:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9280 comm="syz.4.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  569.869450][   T30] audit: type=1326 audit(1754407680.612:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9280 comm="syz.4.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  569.873988][ T9012] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  569.925854][   T30] audit: type=1326 audit(1754407680.612:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9280 comm="syz.4.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  569.951933][   T30] audit: type=1326 audit(1754407680.612:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9280 comm="syz.4.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  569.979506][   T30] audit: type=1326 audit(1754407680.612:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9280 comm="syz.4.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fc58778eb69 code=0x7ffc0000
[  570.019238][ T9295] lo speed is unknown, defaulting to 1000
[  570.025482][ T9295] lo speed is unknown, defaulting to 1000
[  570.033723][ T9295] lo speed is unknown, defaulting to 1000
[  570.045798][ T9295] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  570.061013][ T9295] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  570.153343][ T9295] lo speed is unknown, defaulting to 1000
[  570.268763][ T9295] lo speed is unknown, defaulting to 1000
[  570.282980][   T13] bridge_slave_1: left allmulticast mode
[  570.343649][ T5854] Bluetooth: hci2: command tx timeout
[  570.669714][   T13] bridge_slave_1: left promiscuous mode
[  570.730319][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  570.867964][   T13] bridge_slave_0: left allmulticast mode
[  570.878007][   T13] bridge_slave_0: left promiscuous mode
[  570.887972][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  571.013785][ T5924] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  571.183034][ T5924] usb 3-1: Using ep0 maxpacket: 32
[  571.190401][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  571.212912][ T5924] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  571.229468][ T5924] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  571.248962][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  571.279571][ T5924] usb 3-1: Product: syz
[  571.288734][ T5924] usb 3-1: Manufacturer: syz
[  571.297873][ T5924] usb 3-1: SerialNumber: syz
[  571.320583][ T5924] usb 3-1: config 0 descriptor??
[  571.393663][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  571.492186][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  571.547145][   T13] bond0 (unregistering): Released all slaves
[  571.596178][ T9228] bridge0: port 1(bridge_slave_0) entered blocking state
[  571.605042][ T9305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  571.614802][ T9305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  571.626989][ T9228] bridge0: port 1(bridge_slave_0) entered disabled state
[  571.636804][ T9228] bridge_slave_0: entered allmulticast mode
[  571.644417][ T9228] bridge_slave_0: entered promiscuous mode
[  571.652153][ T9295] lo speed is unknown, defaulting to 1000
[  571.660802][ T9295] lo speed is unknown, defaulting to 1000
[  571.669086][ T9295] lo speed is unknown, defaulting to 1000
[  571.676487][ T9295] lo speed is unknown, defaulting to 1000
[  571.840015][ T9292] pim6reg: entered allmulticast mode
[  571.894608][   T13] hsr_slave_0: left promiscuous mode
[  572.819039][   T13] hsr_slave_1: left promiscuous mode
[  572.833462][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  572.850410][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  573.061298][ T9316] netlink: 68 bytes leftover after parsing attributes in process `syz.0.713'.
[  574.028100][ T5989] usb 3-1: USB disconnect, device number 13
[  574.386586][ T9324] netlink: 108 bytes leftover after parsing attributes in process `syz.0.716'.
[  574.396644][ T9324] netlink: 108 bytes leftover after parsing attributes in process `syz.0.716'.
[  574.406304][ T9324] netlink: 108 bytes leftover after parsing attributes in process `syz.0.716'.
[  574.764540][   T13] team0 (unregistering): Port device team_slave_1 removed
[  575.370690][   T13] team0 (unregistering): Port device team_slave_0 removed
[  575.661826][ T9309] pim6reg: left allmulticast mode
[  575.682867][    T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  575.715813][ T9228] bridge0: port 2(bridge_slave_1) entered blocking state
[  575.725004][ T9228] bridge0: port 2(bridge_slave_1) entered disabled state
[  575.732268][ T9228] bridge_slave_1: entered allmulticast mode
[  575.740526][ T9228] bridge_slave_1: entered promiscuous mode
[  575.851443][ T9228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  575.855208][    T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  575.884540][ T9228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  575.919348][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.970092][    T9] usb 3-1: config 0 descriptor??
[  576.058058][    T9] cp210x 3-1:0.0: cp210x converter detected
[  576.183908][ T9228] team0: Port device team_slave_0 added
[  576.532503][ T9228] team0: Port device team_slave_1 added
[  576.668220][ T5854] Bluetooth: hci1: unexpected event for opcode 0x080c
[  577.811070][ T9228] batman_adv: batadv0: Adding interface: batadv_slave_0
[  577.822742][ T9228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  577.879315][ T9228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  577.905431][ T9228] batman_adv: batadv0: Adding interface: batadv_slave_1
[  577.919247][ T9228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  577.969175][ T9228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  578.039441][ T9338] comedi comedi0: aio_iiro_16: I/O port conflict (0xc,8)
[  578.686776][    T9] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71
[  579.255733][    T9] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71
[  579.263696][    T9] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  579.311157][    T9] usb 3-1: cp210x converter now attached to ttyUSB0
[  579.326501][    T9] usb 3-1: USB disconnect, device number 14
[  579.338522][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  579.348582][    T9] cp210x 3-1:0.0: device disconnected
[  579.473422][ T9012] 8021q: adding VLAN 0 to HW filter on device bond0
[  579.509885][ T9228] hsr_slave_0: entered promiscuous mode
[  579.523854][ T9228] hsr_slave_1: entered promiscuous mode
[  579.530516][ T9228] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  579.557153][ T9228] Cannot create hsr debugfs directory
[  579.748310][ T9012] 8021q: adding VLAN 0 to HW filter on device team0
[  580.454447][ T6707] bridge0: port 1(bridge_slave_0) entered blocking state
[  580.461916][ T6707] bridge0: port 1(bridge_slave_0) entered forwarding state
[  581.207902][ T5954] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  581.280218][ T6707] bridge0: port 2(bridge_slave_1) entered blocking state
[  581.287501][ T6707] bridge0: port 2(bridge_slave_1) entered forwarding state
[  581.380389][ T5954] usb 1-1: not running at top speed; connect to a high speed hub
[  581.387745][ T5954] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  581.387780][ T5954] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  581.387802][ T5954] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  581.387841][ T5954] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  581.394108][ T5954] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  581.394147][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.394170][ T5954] usb 1-1: Product: syz
[  581.394188][ T5954] usb 1-1: Manufacturer: syz
[  581.394205][ T5954] usb 1-1: SerialNumber: syz
[  581.945670][ T5954] usb 1-1: 0:2 : does not exist
[  581.995571][ T5954] usb 1-1: USB disconnect, device number 11
[  582.057173][ T8703] udevd[8703]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  583.429972][ T9228] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  583.495728][ T9228] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  583.539374][ T9228] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  583.622926][ T9012] 8021q: adding VLAN 0 to HW filter on device batadv0
[  583.640341][ T9228] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  585.291889][ T9228] 8021q: adding VLAN 0 to HW filter on device bond0
[  585.401930][ T9228] 8021q: adding VLAN 0 to HW filter on device team0
[  585.414876][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  585.422205][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  585.487142][ T9423] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI
[  585.499111][ T9423] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007]
[  585.508716][ T9423] CPU: 1 UID: 0 PID: 9423 Comm: modprobe Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  585.518479][ T9423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  585.519086][ T9424] netlink: 60 bytes leftover after parsing attributes in process `syz.2.746'.
[  585.528571][ T9423] RIP: 0010:percpu_ref_get_many+0x8d/0x140
[  585.528618][ T9423] Code: 01 48 c7 c7 00 2b 98 8b be 4b 03 00 00 48 c7 c2 40 2b 98 8b e8 54 b8 75 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 b4 60 f7 ff 49 8b 07 a8 03 75 62
[  585.528637][ T9423] RSP: 0018:ffffc90003ddf6f8 EFLAGS: 00010206
[  585.569646][ T9423] RAX: 000000001fffe000 RBX: ffffffff8228abc9 RCX: 107ebd343501e300
[  585.577728][ T9423] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffffffff8be1b9e0
[  585.585844][ T9423] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff8228abc9
[  585.593864][ T9423] R10: dffffc0000000000 R11: ffffed100eb54464 R12: dffffc0000000000
[  585.602061][ T9423] R13: ffff8880b873b3c0 R14: 0000000000000001 R15: 00000000ffff0000
[  585.610166][ T9423] FS:  0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000
[  585.619404][ T9423] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  585.626126][ T9423] CR2: 00007fe39323fe9c CR3: 0000000075e52000 CR4: 00000000003526f0
[  585.631627][ T9228] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  585.634664][ T9423] Call Trace:
[  585.634682][ T9423]  <TASK>
[  585.634698][ T9423]  refill_obj_stock+0x254/0x850
[  585.656374][ T9423]  ? refill_obj_stock+0x116/0x850
[  585.661453][ T9423]  __memcg_slab_free_hook+0x127/0x3d0
[  585.662578][ T9228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  585.666882][ T9423]  ? unlink_anon_vmas+0x2cc/0x670
[  585.682393][ T9423]  kmem_cache_free+0x223/0x400
[  585.687200][ T9423]  unlink_anon_vmas+0x2cc/0x670
[  585.692104][ T9423]  free_pgtables+0x7bf/0xaf0
[  585.696754][ T9423]  ? __pfx_free_pgtables+0x10/0x10
[  585.701923][ T9423]  ? __pfx_down_write+0x10/0x10
[  585.706814][ T9423]  ? __mas_set_range+0x12f/0x3c0
[  585.711865][ T9423]  exit_mmap+0x444/0xb50
[  585.716152][ T9423]  ? uprobe_clear_state+0x20f/0x290
[  585.721647][ T9423]  ? __pfx_exit_mmap+0x10/0x10
[  585.726432][ T9423]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  585.732172][ T9423]  ? __pfx_exit_aio+0x10/0x10
[  585.736870][ T9423]  ? uprobe_clear_state+0x274/0x290
[  585.742084][ T9423]  ? mm_update_next_owner+0xa7/0x870
[  585.747496][ T9423]  __mmput+0x118/0x410
[  585.751590][ T9423]  exit_mm+0x1da/0x2c0
[  585.755685][ T9423]  ? __pfx_exit_mm+0x10/0x10
[  585.760467][ T9423]  ? hrtimer_try_to_cancel+0x3d9/0x420
[  585.766305][ T9423]  ? rcu_is_watching+0x15/0xb0
[  585.771097][ T9423]  do_exit+0x648/0x22e0
[  585.775281][ T9423]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  585.780869][ T9423]  ? __pfx_do_exit+0x10/0x10
[  585.785483][ T9423]  ? _raw_spin_unlock_irq+0x23/0x50
[  585.790782][ T9423]  ? lockdep_hardirqs_on+0x9c/0x150
[  585.796085][ T9423]  do_group_exit+0x21c/0x2d0
[  585.800718][ T9423]  __x64_sys_exit_group+0x3f/0x40
[  585.805898][ T9423]  x64_sys_call+0x21ba/0x21c0
[  585.810694][ T9423]  do_syscall_64+0xfa/0x3b0
[  585.815330][ T9423]  ? lockdep_hardirqs_on+0x9c/0x150
[  585.820824][ T9423]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.827025][ T9423]  ? clear_bhb_loop+0x60/0xb0
[  585.832105][ T9423]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.838101][ T9423] RIP: 0033:0x7fe39339e6c5
[  585.842667][ T9423] Code: Unable to access opcode bytes at 0x7fe39339e69b.
[  585.849795][ T9423] RSP: 002b:00007ffd7ecc1738 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7
[  585.858246][ T9423] RAX: ffffffffffffffda RBX: 00007fe39349ffe8 RCX: 00007fe39339e6c5
[  585.866335][ T9423] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001
[  585.874327][ T9423] RBP: 0000000000000001 R08: 00007ffd7ecc16c8 R09: 0000000000000000
[  585.882405][ T9423] R10: 00007ffd7ecc1560 R11: 0000000000000202 R12: 0000000000000000
[  585.890408][ T9423] R13: 0000000000000001 R14: 00007fe39349e680 R15: 00007fe3934a0000
[  585.898674][ T9423]  </TASK>
[  585.901721][ T9423] Modules linked in:
[  585.907131][ T9423] ---[ end trace 0000000000000000 ]---
[  585.912929][ T9423] RIP: 0010:percpu_ref_get_many+0x8d/0x140
[  585.918978][ T9423] Code: 01 48 c7 c7 00 2b 98 8b be 4b 03 00 00 48 c7 c2 40 2b 98 8b e8 54 b8 75 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 b4 60 f7 ff 49 8b 07 a8 03 75 62
[  585.939222][ T9423] RSP: 0018:ffffc90003ddf6f8 EFLAGS: 00010206
[  585.945780][ T9423] RAX: 000000001fffe000 RBX: ffffffff8228abc9 RCX: 107ebd343501e300
[  585.954083][ T9423] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffffffff8be1b9e0
[  585.962709][ T9423] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff8228abc9
[  585.970821][ T9423] R10: dffffc0000000000 R11: ffffed100eb54464 R12: dffffc0000000000
[  585.979746][ T9423] R13: ffff8880b873b3c0 R14: 0000000000000001 R15: 00000000ffff0000
[  585.988621][ T9423] FS:  0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000
[  585.998318][ T9423] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  586.005003][ T9423] CR2: 00007fe39323fe9c CR3: 0000000075e52000 CR4: 00000000003526f0
[  586.013178][ T9423] Kernel panic - not syncing: Fatal exception
[  586.019734][ T9423] Kernel Offset: disabled
[  586.024091][ T9423] Rebooting in 86400 seconds..