last executing test programs:

19.525542252s ago: executing program 1 (id=3603):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x100, &(0x7f0000006680))
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "f8c7bf42b4a49208508fb58eea12a22f56cccd34055917727b84ddf27d6f6be1", "18c5ab55d3cc09964d353a5ed707b64ab7156162d9447d058681add1d686fa77", "ff6a69228ea521bb3a125e45e6dd9fdd4ad168be84911344e350f02d6c60f665", "fcc9485b4741a6f591ec9390e354ae3a8b0553ee84e5f4b300545b63749b1a71", "2641ec0ab1e0bdaebcd40410244c1946218887460f230f087b6175be9163cf04", "42f859eb87f20ee59082b748", 0xfff80000, 0x7, 0x2089, 0xffff, 0x6}})
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_ifreq(r1, 0x89b1, &(0x7f0000000280)={'gretap0\x00', @ifru_mtu=0x401})
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=@newtaction={0x88c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x8, 0x2, 0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x80083314)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20003)
fstatfs(r5, &(0x7f0000000180)=""/153)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000240)=0x4, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x2000, 0x800, &(0x7f0000150000/0x2000)=nil)

17.177727459s ago: executing program 2 (id=3609):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x10000008, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x4, 0x2, 0x13, 0x2}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="021300000200"/16], 0x10}}, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x1000000, 0x0, 0x34343459}})
setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f00000001c0)=0x101, 0x4)
r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r6, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}})
close_range(r4, 0xffffffffffffffff, 0x0)
openat$rdma_cm(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0)

17.169862195s ago: executing program 1 (id=3610):
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, &(0x7f0000000180))
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00')
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000003800), 0x8002, 0x0)
pwritev(r0, 0x0, 0x0, 0x2be97d8a, 0x401)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa10000000000000701"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81)
write$sndseq(r1, &(0x7f00000001c0)=[{0x1e, 0xfe, 0x8, 0x0, @tick=0x1000000, {}, {0xfe}, @result={0x1, 0x7fff}}], 0x1c)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
pipe(&(0x7f0000000580)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, 0x0, 0xfffffecc)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}})

16.229905242s ago: executing program 2 (id=3612):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
open(0x0, 0x14507f, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000001000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = socket$inet(0x2, 0x3, 0x6)
connect$inet(r0, &(0x7f0000000080)={0x2, 0xfffe, @remote}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
lstat(0x0, &(0x7f0000000440))
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
creat(&(0x7f0000000340)='./file0/file0\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x0)

15.689696643s ago: executing program 3 (id=3613):
r0 = getpid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
ioctl$USBDEVFS_CONNECTINFO(r2, 0x80045520, &(0x7f0000002a40))
capset(&(0x7f0000000080)={0x20080522, r0}, &(0x7f0000000040)={0xffffffff, 0x10, 0x4df8, 0x0, 0x1})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4)
bind$inet(r3, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x1, 0x8000, 0x5, 0xfe, {{0x17, 0x4, 0x2, 0x17, 0x5c, 0x68, 0x0, 0xc, 0x29, 0x0, @remote, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x71, 0x1, 0x1, [{@multicast1, 0xfffffffe}, {@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @end, @ssrr={0x89, 0x13, 0x71, [@dev={0xac, 0x14, 0x14, 0x2e}, @loopback, @multicast1, @empty]}, @ssrr={0x89, 0x13, 0x37, [@multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}]}}}}})
sendto$inet(r3, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb)
close(0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001400000000d08000240000000030c00048005000100690000000c00038005000100430000000900f28996e77a30000000000900020073797a320000000014007e317dc9a914760d00000000000000"], 0x94}}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

15.66079818s ago: executing program 1 (id=3614):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$l2tp(0x2, 0x2, 0x73)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}}, 0x48800)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e08003950"], 0x15)
r2 = dup(r1)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[], 0xb0)
r3 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x236, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, 0x0)
listen(r3, 0x5)
setsockopt(r4, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
sendmmsg(r4, &(0x7f0000002980), 0x400000000000239, 0x0)
close_range(0xffffffffffffffff, r2, 0x0)

15.416219873s ago: executing program 0 (id=3615):
unshare(0x8000000)
r0 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]})
socket$pppoe(0x18, 0x1, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x7, 0x24080)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc1105511, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 'syz1\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
connect$inet(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x200, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

15.351987264s ago: executing program 2 (id=3616):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x0, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d", 0x63, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a")
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0)
sendfile(r4, r4, 0x0, 0x40008)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r6}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b100000850000000f000000950000000000000062319a634de31a0d537ef187a35b5511521ef070af4faa3a5589ce30bcaa1e37a8b4fd0f639f37ff9f5bdd296794f27fdaacb57c2abfded31a81d8ada065e9c54f8ab70426e589e0f3ba0bd3adb814ff089a60edb6a38c2450fc3d649434200d147ac3a0365bf16e12a6fcdeda39082461aebc31b23ed0f890405274f96ba6552fd8d7b00a2ce539d4d45ca61d9f03d0"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xa9, &(0x7f0000000340)=""/169, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

14.730955482s ago: executing program 1 (id=3617):
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a45322, &(0x7f00000000c0))
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x2a, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @jmp={0x5, 0x1, 0x2, 0x9, 0x0, 0x50, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x7}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x1, 0x4e, &(0x7f0000000500)=""/78, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x1, 0x5, 0x2, 0x30f}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[0xffffffffffffffff], &(0x7f0000000600)=[{0x4, 0x1, 0xc, 0x6}, {0x5, 0x4, 0x0, 0x9}, {0x0, 0x4, 0xa, 0x6}, {0x3, 0x2, 0x5, 0x6}], 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000300)='cachefiles_coherency\x00', r2}, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r4=>0x0})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6}]}, 0x24}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="3400004013000d000000000096b7be1d1ddde6da9e0000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100005800c0004800800010000000000"], 0x34}}, 0x0)
r10 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
listen(r10, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "0718cb", 0x0, "c500"}}}}}}, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, 0x41, 0x300, 0x70bd26, 0x25dfdbff, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x10)

14.658258977s ago: executing program 1 (id=3618):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00')
read(r1, &(0x7f0000001a00)=""/177, 0xb1)
socket$inet6(0xa, 0x5, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x40000)
sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x40, 0xa, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x40}}, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$update(0x2, r3, 0x0, 0x0)
r4 = openat$cdrom(0xffffff9c, &(0x7f0000000180), 0x34700, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000004f0001"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x91)
ioctl$CDROM_GET_MCN(r4, 0x5311, &(0x7f00000001c0))
keyctl$instantiate(0xc, r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="6e6577206563727970746673560e9b76737465643a245c2d382a252e2a24015e20303030303030303030303030303030303030303700"], 0x36, 0xfffffffffffffffd)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004680)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x27}}]}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0x3}]}, 0x68}}, 0x0)

14.647685404s ago: executing program 3 (id=3619):
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
getpid()
socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x15a)
chdir(0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000103c0)={0x0, r2}, 0xfffffffffffffeb9)
r3 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}, {&(0x7f0000010100)=""/81, 0x51}, {&(0x7f0000010180)=""/72, 0x48}, {&(0x7f0000010200)=""/160, 0xa0}, {&(0x7f0000010380)=""/47, 0x2f}], 0x6)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xd2, 0x0, 0x0)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000340)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0xfffffffe}, {0x0}, &(0x7f00000007c0)}}], 0x48}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, 0x0, 0x0)
r6 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f905, 0x8002, '\x00', @p_u16=&(0x7f00000010c0)=0xa5b}})

14.472821059s ago: executing program 0 (id=3620):
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1b, 0x13, &(0x7f0000000340)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x0, 0x104)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019480)={0x8, 0x1c29, &(0x7f0000019440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r1, &(0x7f0000000200), 0x10)
r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
dup3(r2, r4, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
madvise(&(0x7f0000d38000/0x3000)=nil, 0x3000, 0xe)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
shutdown(r5, 0x1)
recvmmsg(r5, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xfffffffffffffc93}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x15, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000f7c000/0x3000)=nil, 0x3000, 0x14)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000019380), 0x107000, 0x0)

14.419362023s ago: executing program 2 (id=3621):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
open(0x0, 0x14507f, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000001000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = socket$inet(0x2, 0x3, 0x6)
connect$inet(r0, &(0x7f0000000080)={0x2, 0xfffe, @remote}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
lstat(0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
creat(&(0x7f0000000340)='./file0/file0\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x0)

13.309939435s ago: executing program 2 (id=3622):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
open(0x0, 0x14507f, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = socket$inet(0x2, 0x3, 0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
lstat(0x0, &(0x7f0000000440))
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
creat(&(0x7f0000000340)='./file0/file0\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x0)

12.921768886s ago: executing program 3 (id=3623):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r1, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000)
r2 = socket$netlink(0x10, 0x3, 0xc)
syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
preadv(r3, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/152, 0x98}], 0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x40, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x48)
bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB])
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x60, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14}}, 0xdc}}, 0x0)

12.862812324s ago: executing program 0 (id=3624):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
open(0x0, 0x14507f, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000001000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = socket$inet(0x2, 0x3, 0x6)
connect$inet(r0, &(0x7f0000000080)={0x2, 0xfffe, @remote}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
lstat(0x0, &(0x7f0000000440))
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
creat(&(0x7f0000000340)='./file0/file0\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x0)

12.31969981s ago: executing program 2 (id=3625):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x68, r0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x68}}, 0x0)
process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000180)='{', 0x1, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000001dc0)="d57b8008f963", 0x6, 0x40041, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000400)=0x63f, 0x4)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000180)={@desc={0x1, 0x0, @desc3}})
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, 0x0, 0x0)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x101b81, 0x11}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000006c0), 0x12)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)

11.413282117s ago: executing program 0 (id=3626):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x244, r2, 0x1, 0x0, 0x0, {0x9}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0xfc, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x54}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0xfffffffffffffe0c}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "5e015a5a1652e4bca65fb72b950488d59fdd5f04da"}}, @TIPC_NLA_NODE_ID={0x44, 0x3, "d87459a29e99a8d4060acaffef1864f7351afd42919581ea788d9bcc93dbc7ff2ab89f0045ae20639d5e6e61896864c470ce8d527a5942350d0f70031ec3ec65"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x244}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
lstat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x1108000, &(0x7f00000007c0)={[{}, {@metacopy_on}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@seclabel}, {@uid_eq={'uid', 0x3d, r4}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@uid_gt={'uid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'root'}}]})
bind$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0xf8, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x10, 0x40, 0x2, 0x9, {{0x11, 0x4, 0x1, 0x6, 0x44, 0x65, 0x0, 0x6, 0x2f, 0x0, @loopback, @empty, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @rr={0x7, 0x27, 0xe, [@empty, @private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @multicast1, @multicast1, @local, @remote]}]}}}}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000001500)='kmem_cache_free\x00'}, 0x10)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
timer_create(0xb, &(0x7f0000000200)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000380))
timer_gettime(0x0, &(0x7f0000000040))
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@loopback, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}}, 0x0)
sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x8b}, @noop]}}}], 0x38}, 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

11.412903529s ago: executing program 1 (id=3627):
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffd4a)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000940), 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x4, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900", <r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", r4})
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, 0x0)
syz_open_procfs(0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000045c0)={0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000004640)={0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000a00))
splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0)
mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x8012, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x33}})

2.006039401s ago: executing program 3 (id=3629):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x41)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='ext4_mb_release_group_pa\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_emit_ethernet(0x0, 0x0, 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449})
socket$pppoe(0x18, 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f", @ANYRES32=r1, @ANYBLOB="1b905b5d471028fc0e82781f6e35c8032ef515329df8c2c5579b3b3b40bfea586eafed140d3c5f648a77f32dfc1414235f2d02bf2b74029687821d706e56c404b2031b755a16ca6509c1fc30fbafa94983595c4527e6eb17b523e6a4a7de7f0b8b4b20dfdef1560d4bfc98beafe3ef399e6567d0a827ea8478a77e03e32c10c9fceaccd5fa6d50eebe6465c0d3dcba632d4d0630231c8c9c2eaee76abfa0ac66cc92f647eadc8cf6ef39f1bb07fc143b6528a1d672d1df"], 0x44}, 0x1, 0x2000000000000000}, 0x0)

1.999319357s ago: executing program 0 (id=3636):
r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041})
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x1, 0x7}, {}, {0x3, 0x7}, {}, {0xfff}, {0x4, 0xfffffffc}, {0x0, 0x3}], 0x4}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
gettid()
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
close(0xffffffffffffffff)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f0000000640))
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0), 0x81, 0x0)
write$rfkill(r4, &(0x7f0000000000)={0x5, 0x2, 0x3}, 0x8)
prctl$PR_SET_THP_DISABLE(0x41, 0x0)

1.12420964s ago: executing program 0 (id=3630):
socket$alg(0x26, 0x5, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r4}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040))
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
rt_sigaction(0x1f, 0x0, &(0x7f0000004280)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000042c0))
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4004054)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f5"], 0x80}}, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
writev(r7, &(0x7f0000000000)=[{0x0}], 0x1)
close(r5)

1.013640944s ago: executing program 3 (id=3632):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000660800000000000002000000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xb, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x81}}]}, 0x38}}, 0x0)
kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000001180))
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r6, 0x5008, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, 0x0, 0x0)
ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f00000000c0))

0s ago: executing program 3 (id=3633):
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000704000/0x4000)=nil, 0x4000}})
openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100))
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60df1d0000140600fe804c746d12b5421d8a00000000000000cfed00000000bbfe800000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000380)="66b9800000c00f326635001000000f300f005d003667660fc7705f67f3f2f0f71f660fe56b00260f22120f235364363636f30f099a3f00230166b91902000066b84d37350f66ba000000000f30", 0x4d}], 0x1, 0x41629dd270dd5d61, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000980)=@newtaction={0x60, 0x30, 0x36eac49ec043b62f, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x3, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES64=r3])
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042)
write$binfmt_aout(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad0000abfa"], 0x125)
openat$pfkey(0xffffff9c, &(0x7f0000000300), 0x24c01, 0x0)

kernel console output (not intermixed with test programs):

bridge0: port 2(bridge_slave_1) entered forwarding state
[  504.542071][T15501] 8021q: adding VLAN 0 to HW filter on device batadv0
[  504.577055][T15501] veth0_vlan: entered promiscuous mode
[  504.583880][T15501] veth1_vlan: entered promiscuous mode
[  504.604976][T15501] veth0_macvtap: entered promiscuous mode
[  504.611127][T15501] veth1_macvtap: entered promiscuous mode
[  504.622620][T15501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  504.626274][T15501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.630066][T15501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  504.633829][T15501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.637396][T15501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  504.640108][T15501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.643930][T15501] batman_adv: batadv0: Interface activated: batadv_slave_0
[  504.649982][T15501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  504.652909][T15501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.656177][T15501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  504.660801][T15501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.664140][T15501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  504.668491][T15501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.672645][T15501] batman_adv: batadv0: Interface activated: batadv_slave_1
[  504.680979][T15501] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  504.684240][T15501] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  504.687858][T15501] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  504.690662][T15501] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  504.736810][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  504.739890][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  504.766186][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  504.770799][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  504.941482][T15549] fuse: Invalid rootmode
[  505.228578][ T4779] Bluetooth: hci8: command tx timeout
[  505.418929][T15553] lo speed is unknown, defaulting to 1000
[  505.454839][T15553] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2713'.
[  505.628401][   T62] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  505.776533][   T62] usb 6-1: Using ep0 maxpacket: 16
[  505.780058][   T62] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  505.784007][   T62] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  505.788317][   T62] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  505.792085][   T62] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  505.795136][   T62] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.799630][   T62] usb 6-1: config 0 descriptor??
[  506.210040][   T62] HID 045e:07da: Invalid code 65791 type 1
[  506.215835][   T62] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:045E:07DA.0012/input/input25
[  506.224583][   T62] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  506.406922][T15551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  506.409465][T15551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  506.413632][T15551] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  506.416964][T15551] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  506.421123][ T5466] usb 6-1: USB disconnect, device number 26
[  506.986873][T15574] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  507.061722][T15577] fuse: Invalid rootmode
[  507.266782][T15582] fuse: Bad value for 'fd'
[  507.306757][ T4779] Bluetooth: hci8: command tx timeout
[  507.533810][T15584] lo speed is unknown, defaulting to 1000
[  507.706651][ T4779] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0
[  507.711762][ T4779] Bluetooth: hci7: Injecting HCI hardware error event
[  507.716128][ T4779] Bluetooth: hci7: hardware error 0x00
[  507.961588][T15591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  507.964906][T15591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  507.968011][T15591] bond0 (unregistering): Released all slaves
[  508.440257][T15597] fuse: Invalid rootmode
[  508.486567][   T62] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  508.636601][   T62] usb 6-1: Using ep0 maxpacket: 8
[  508.645810][   T62] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  508.650501][   T62] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  508.654374][   T62] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  508.657922][   T62] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  508.662270][   T62] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  508.664853][   T62] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.876057][   T62] usb 6-1: GET_CAPABILITIES returned 0
[  508.878148][   T62] usbtmc 6-1:16.0: can't read capabilities
[  509.386609][ T5360] Bluetooth: hci8: command tx timeout
[  509.786817][ T4779] Bluetooth: hci7: Opcode 0x0c03 failed: -110
[  509.824050][T15614] lo speed is unknown, defaulting to 1000
[  509.864840][T15614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2732'.
[  509.986663][ T5347] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  510.136736][ T5347] usb 5-1: Using ep0 maxpacket: 8
[  510.146897][ T5347] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  510.148819][ T5347] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  510.151739][ T5347] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  510.154808][ T5347] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  510.157852][ T5347] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  510.163291][ T5347] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  510.165539][ T5347] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  510.169026][ T5347] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  510.172042][ T5347] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  510.174999][ T5347] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  510.178638][ T5347] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  510.180570][ T5347] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  510.183442][ T5347] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  510.186818][ T5347] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  510.189588][ T5347] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  510.194532][ T5347] usb 5-1: string descriptor 0 read error: -22
[  510.196289][ T5347] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  510.199742][ T5347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.217275][ T5347] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux1
[  510.387714][ T5347] usb 6-1: USB disconnect, device number 27
[  510.425429][   T62] usb 5-1: USB disconnect, device number 32
[  510.938859][T15643] fuse: Unknown parameter 'user_id00000000000000000000'
[  511.058670][T15646] fuse: Bad value for 'fd'
[  511.083235][T15649] fuse: Bad value for 'fd'
[  511.466769][ T4779] Bluetooth: hci8: command tx timeout
[  513.010680][T15657] fuse: Invalid rootmode
[  513.291074][T15659] lo speed is unknown, defaulting to 1000
[  513.317503][T15659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2741'.
[  513.605615][T15664] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2742'.
[  513.661075][T15666] netlink: 'syz.2.2743': attribute type 1 has an invalid length.
[  513.670123][T15666] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  513.719574][T15667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2743'.
[  514.358349][T15676] fuse: Unknown parameter 'user_id00000000000000000000'
[  514.411871][T15679] fuse: Unknown parameter '0x000000000000000c'
[  516.348228][T15687] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2750'.
[  517.120846][T15686] lo speed is unknown, defaulting to 1000
[  517.126667][T15693] bridge_slave_1: left allmulticast mode
[  517.128564][T15693] bridge_slave_1: left promiscuous mode
[  517.130562][T15693] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.555059][T15710] fuse: Bad value for 'rootmode'
[  519.023723][ T5360] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  519.030724][ T5360] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  519.034415][ T5360] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  519.038023][ T5360] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  519.041737][ T5360] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  519.044149][ T5360] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  519.078318][T15722] lo speed is unknown, defaulting to 1000
[  519.134581][T15722] chnl_net:caif_netlink_parms(): no params data found
[  519.232609][T15722] bridge0: port 1(bridge_slave_0) entered blocking state
[  519.234909][T15722] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.237610][T15722] bridge_slave_0: entered allmulticast mode
[  519.239714][T15722] bridge_slave_0: entered promiscuous mode
[  519.242525][T15722] bridge0: port 2(bridge_slave_1) entered blocking state
[  519.244446][T15722] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.246359][T15722] bridge_slave_1: entered allmulticast mode
[  519.249461][T15722] bridge_slave_1: entered promiscuous mode
[  519.279114][T15722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  519.283842][T15722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  519.315878][T15722] team0: Port device team_slave_0 added
[  519.320887][T15722] team0: Port device team_slave_1 added
[  519.356668][T15722] batman_adv: batadv0: Adding interface: batadv_slave_0
[  519.358599][T15722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.365484][T15722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  519.370647][T15722] batman_adv: batadv0: Adding interface: batadv_slave_1
[  519.372525][T15722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.379433][T15722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  519.460198][T15722] hsr_slave_0: entered promiscuous mode
[  519.463467][T15722] hsr_slave_1: entered promiscuous mode
[  519.477258][T15722] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  519.479434][T15722] Cannot create hsr debugfs directory
[  519.648318][T15731] fuse: Bad value for 'fd'
[  519.733523][T15733] lo speed is unknown, defaulting to 1000
[  519.769632][T15733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2761'.
[  520.090977][T15742] syzkaller0: entered promiscuous mode
[  520.092673][T15742] syzkaller0: entered allmulticast mode
[  521.066705][ T5360] Bluetooth: hci9: command tx timeout
[  521.338889][T15755] fuse: Bad value for 'rootmode'
[  521.567552][T15758] fuse: Bad value for 'rootmode'
[  522.733314][T15722] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  522.748060][T15722] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  522.752967][T15722] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  522.762966][T15722] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  522.814171][T15722] 8021q: adding VLAN 0 to HW filter on device bond0
[  522.821863][T15722] 8021q: adding VLAN 0 to HW filter on device team0
[  522.826104][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state
[  522.828015][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state
[  522.833578][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.835476][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state
[  522.864348][T15722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  522.982821][T15722] 8021q: adding VLAN 0 to HW filter on device batadv0
[  523.006260][T15722] veth0_vlan: entered promiscuous mode
[  523.015928][T15722] veth1_vlan: entered promiscuous mode
[  523.036819][T15722] veth0_macvtap: entered promiscuous mode
[  523.040044][T15722] veth1_macvtap: entered promiscuous mode
[  523.046234][T15722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  523.049174][T15722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.052509][T15722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  523.056212][T15722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.059684][T15722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  523.063143][T15722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.067126][T15722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  523.071045][T15722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.075129][T15722] batman_adv: batadv0: Interface activated: batadv_slave_0
[  523.080060][T15722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  523.082933][T15722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.085509][T15722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  523.090791][T15722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.093473][T15722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  523.096201][T15722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.099079][T15722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  523.101862][T15722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.105335][T15722] batman_adv: batadv0: Interface activated: batadv_slave_1
[  523.111846][T15722] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  523.114301][T15722] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  523.117004][T15722] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  523.119353][T15722] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  523.147385][ T5360] Bluetooth: hci9: command tx timeout
[  523.365387][T15767] lo speed is unknown, defaulting to 1000
[  523.377036][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  523.379705][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  523.392797][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  523.395549][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  523.400275][T15770] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2770'.
[  523.465505][T15775] lo speed is unknown, defaulting to 1000
[  523.592867][T15776] fuse: Bad value for 'fd'
[  523.728961][T15783] netlink: zone id is out of range
[  523.731622][T15783] netlink: zone id is out of range
[  523.736294][T15783] netlink: set zone limit has 4 unknown bytes
[  524.715226][T15791] overlay: ./bus is not a directory
[  525.235095][ T5360] Bluetooth: hci9: command tx timeout
[  525.823140][T15801] fuse: Bad value for 'rootmode'
[  526.014386][T15778] syz.3.2760 (15778) used greatest stack depth: 20192 bytes left
[  527.009619][T15814] fuse: Unknown parameter 'use00000000000000000000'
[  527.308016][ T5360] Bluetooth: hci9: command tx timeout
[  527.657087][T15827] fuse: Invalid rootmode
[  528.162770][T15838] overlay: ./bus is not a directory
[  529.099942][T15845] fuse: Bad value for 'fd'
[  529.176537][ T5347] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  529.326522][ T5347] usb 7-1: Using ep0 maxpacket: 32
[  529.329238][ T5347] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[  529.331470][ T5347] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  529.333737][ T5347] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[  529.336147][ T5347] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  529.338905][ T5347] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  529.341493][ T5347] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  529.344849][ T5347] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  529.349830][ T5347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.354525][ T5347] usb 7-1: config 0 descriptor??
[  529.566177][ T5347] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  529.570087][ T5347] usb 7-1: USB disconnect, device number 23
[  529.573397][ T5347] usblp0: removed
[  529.942648][T15859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2793'.
[  529.948199][T15859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2793'.
[  529.954649][T15859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2793'.
[  530.026791][ T5347] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  530.186703][ T5347] usb 7-1: Using ep0 maxpacket: 32
[  530.189431][ T5347] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[  530.192474][ T5347] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  530.194802][ T5347] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[  530.198997][ T5347] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  530.202150][ T5347] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  530.205663][ T5347] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  530.210432][ T5347] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  530.213682][ T5347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.218478][ T5347] usb 7-1: config 0 descriptor??
[  530.432826][ T5347] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  530.991462][ T5347] usb 7-1: USB disconnect, device number 24
[  530.993958][ T5347] usblp0: removed
[  531.125727][T15874] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2797'.
[  531.292213][T15884] fuse: Unknown parameter 'use00000000000000000000'
[  531.531209][   T45] bridge_slave_1: left allmulticast mode
[  531.533188][   T45] bridge_slave_1: left promiscuous mode
[  531.535302][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  531.551551][   T45] bridge_slave_0: left allmulticast mode
[  531.553211][   T45] bridge_slave_0: left promiscuous mode
[  531.554787][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  531.782042][T15890] fuse: Invalid rootmode
[  532.158477][   T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  532.163938][   T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  532.300513][   T45] bond0 (unregistering): Released all slaves
[  532.405521][T15895] Bluetooth: MGMT ver 1.23
[  532.407112][   T45] tipc: Disabling bearer <udp:syz2>
[  532.413586][   T45] tipc: Left network mode
[  532.742969][T15902] fuse: Bad value for 'fd'
[  533.049651][   T45] hsr_slave_0: left promiscuous mode
[  533.052439][   T45] hsr_slave_1: left promiscuous mode
[  533.058851][   T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  533.060990][   T45] batman_adv: batadv0: Removing interface: batadv_slave_0
[  533.064645][   T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  533.079729][   T45] batman_adv: batadv0: Removing interface: batadv_slave_1
[  533.195973][   T45] veth1_macvtap: left promiscuous mode
[  533.197550][   T45] veth0_macvtap: left promiscuous mode
[  533.342515][T15878] syz.3.2797 (15878) used greatest stack depth: 18512 bytes left
[  533.345508][T15907] fuse: Unknown parameter '0x000000000000000c'
[  534.337372][   T45] team0 (unregistering): Port device team_slave_1 removed
[  534.412579][ T5347] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  534.516360][   T45] team0 (unregistering): Port device team_slave_0 removed
[  534.573017][ T5347] usb 5-1: Using ep0 maxpacket: 32
[  534.599244][ T5347] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  534.602201][ T5347] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  534.606179][ T5347] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  534.622069][ T5347] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  534.627411][ T5347] usb 5-1: config 0 interface 0 has no altsetting 0
[  534.631631][ T5347] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  534.634864][ T5347] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  534.638227][ T5347] usb 5-1: Product: syz
[  534.639693][ T5347] usb 5-1: Manufacturer: syz
[  534.641330][ T5347] usb 5-1: SerialNumber: syz
[  534.645115][ T5347] usb 5-1: config 0 descriptor??
[  534.649143][ T5347] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  534.653047][ T5347] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  535.218156][ T5347] usb 5-1: USB disconnect, device number 33
[  535.220627][ T5347] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  535.579407][T15923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2811'.
[  535.597328][T15920] fuse: Unknown parameter 'use00000000000000000000'
[  535.870817][T15922] lo speed is unknown, defaulting to 1000
[  535.908024][ T5360] Bluetooth: hci8: unexpected Set CIG Parameters response data
[  535.977420][T15936] lo speed is unknown, defaulting to 1000
[  536.008456][T15936] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2814'.
[  537.122880][T15953] fuse: Bad value for 'rootmode'
[  537.133070][T15954] fuse: Unknown parameter '0x000000000000000c'
[  537.406719][T15957] fuse: Unknown parameter '0x000000000000000c'
[  538.913793][T15961] lo speed is unknown, defaulting to 1000
[  538.949345][T15961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2821'.
[  539.136224][T15967] fuse: Bad value for 'fd'
[  539.271443][T15973] lo speed is unknown, defaulting to 1000
[  539.300233][T15974] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2823'.
[  539.692888][T15986] vlan2: entered allmulticast mode
[  539.694288][T15986] vlan1: entered allmulticast mode
[  539.695709][T15986] veth0_vlan: entered allmulticast mode
[  539.740050][T15986] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.874533][T15995] fuse: Unknown parameter 'user_i00000000000000000000'
[  539.943441][T15986] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  539.948232][ T5360] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0
[  539.951734][ T5360] Bluetooth: hci8: Injecting HCI hardware error event
[  539.956929][ T5360] Bluetooth: hci8: hardware error 0x00
[  539.960742][T15986] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  540.049925][T15986] veth0_vlan: left allmulticast mode
[  540.062924][T15986] vlan1: left allmulticast mode
[  540.111020][T15986] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.114192][T15986] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.118113][T15986] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.121196][T15986] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.168898][T15990] bridge_slave_0: left allmulticast mode
[  540.170536][T15990] bridge_slave_0: left promiscuous mode
[  540.172149][T15990] bridge0: port 1(bridge_slave_0) entered disabled state
[  540.188794][T15990] bond0: (slave bond_slave_0): Releasing backup interface
[  540.192266][T15990] bond0: (slave bond_slave_1): Releasing backup interface
[  540.201414][T15990] team0: Port device team_slave_0 removed
[  540.209444][T15990] team0: Port device team_slave_1 removed
[  540.211541][T15990] batman_adv: batadv0: Removing interface: batadv_slave_0
[  540.214345][T15990] batman_adv: batadv0: Removing interface: batadv_slave_1
[  540.363013][T16001] fuse: Unknown parameter '0x000000000000000c'
[  541.464788][T16007] fuse: Unknown parameter '0x000000000000000c'
[  542.026650][ T5360] Bluetooth: hci8: Opcode 0x0c03 failed: -110
[  542.255710][T16009] lo speed is unknown, defaulting to 1000
[  542.287396][T16013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2832'.
[  542.669047][T16018] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2834'.
[  542.722626][T16030] lo speed is unknown, defaulting to 1000
[  542.742835][T16030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2836'.
[  542.999512][T16036] lo speed is unknown, defaulting to 1000
[  543.032791][T16037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2837'.
[  543.727681][T16050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2840'.
[  543.757846][T16050] lo speed is unknown, defaulting to 1000
[  543.893231][T16053] lo speed is unknown, defaulting to 1000
[  544.250017][T16066] fuse: Unknown parameter 'fd0x000000000000000c'
[  544.279168][T16068] fuse: Unknown parameter 'user_i00000000000000000000'
[  544.603083][T16071] lo speed is unknown, defaulting to 1000
[  544.624853][T16071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2846'.
[  544.840397][T16077] lo speed is unknown, defaulting to 1000
[  544.867323][T16077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2847'.
[  544.881852][T16080] lo speed is unknown, defaulting to 1000
[  544.920841][T16084] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2848'.
[  545.201089][T16089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2849'.
[  545.232164][T16089] lo speed is unknown, defaulting to 1000
[  545.583000][T16097] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2850'.
[  546.454436][T16102] lo speed is unknown, defaulting to 1000
[  547.473208][T16117] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  547.478407][T16115] lo speed is unknown, defaulting to 1000
[  547.517212][T16115] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2855'.
[  547.630616][T16123] fuse: Unknown parameter '0x000000000000000c'
[  547.743831][T16126] lo speed is unknown, defaulting to 1000
[  547.783213][T16126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2858'.
[  547.839455][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2859'.
[  547.862746][T16131] lo speed is unknown, defaulting to 1000
[  548.635882][T16148] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2863'.
[  549.004514][T16151] lo speed is unknown, defaulting to 1000
[  550.111101][T16163] lo speed is unknown, defaulting to 1000
[  550.135083][T16164] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2866'.
[  550.340937][T16171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2868'.
[  550.379644][T16171] lo speed is unknown, defaulting to 1000
[  550.823418][T16179] lo speed is unknown, defaulting to 1000
[  550.880659][T16178] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2870'.
[  551.816723][ T1298] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  551.913334][T16196] lo speed is unknown, defaulting to 1000
[  551.942558][T16196] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2875'.
[  551.975470][ T1298] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  551.979633][ T1298] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  551.983192][ T1298] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  551.986375][ T1298] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  551.990443][ T1298] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  551.995676][ T1298] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  551.998899][ T1298] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  552.001127][ T1298] usb 5-1: Product: syz
[  552.002189][ T1298] usb 5-1: Manufacturer: syz
[  552.008411][ T1298] cdc_wdm 5-1:1.0: skipping garbage
[  552.010461][ T1298] cdc_wdm 5-1:1.0: skipping garbage
[  552.019314][ T1298] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  552.021783][ T1298] cdc_wdm 5-1:1.0: Unknown control protocol
[  552.382111][    C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  552.382574][ T1298] usb 5-1: USB disconnect, device number 34
[  552.384564][    C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  552.388839][    C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  552.395030][T16187] cdc_wdm 5-1:1.0: Tx URB error: -19
[  553.228345][T16214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2878'.
[  553.239610][T16214] lo speed is unknown, defaulting to 1000
[  553.347634][T16220] lo speed is unknown, defaulting to 1000
[  553.374418][T16220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2880'.
[  553.732748][T16223] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2879'.
[  553.865710][T16234] syzkaller0: entered allmulticast mode
[  553.918927][T16236] lo speed is unknown, defaulting to 1000
[  553.950081][T16237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2882'.
[  554.061125][T16243] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  554.062873][T16243] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  554.065241][T16243] vhci_hcd vhci_hcd.0: Device attached
[  554.069164][T16244] usbip_core: unknown command
[  554.070405][T16244] vhci_hcd: unknown pdu 0
[  554.071624][T16244] usbip_core: unknown command
[  554.073001][   T65] vhci_hcd: stop threads
[  554.074475][   T65] vhci_hcd: release socket
[  554.075703][   T65] vhci_hcd: disconnect device
[  554.125956][T16247] lo speed is unknown, defaulting to 1000
[  554.466088][T16257] lo speed is unknown, defaulting to 1000
[  554.481311][T16254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2887'.
[  554.501034][T16254] lo speed is unknown, defaulting to 1000
[  554.518237][T16259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2889'.
[  555.575795][T16278] lo speed is unknown, defaulting to 1000
[  555.593730][T16280] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2894'.
[  556.148896][T16284] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2893'.
[  556.272849][T16296] overlay: ./bus is not a directory
[  557.540944][T16302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2899'.
[  557.565582][T16300] lo speed is unknown, defaulting to 1000
[  557.769182][T16305] fuse: Unknown parameter 'user_i00000000000000000000'
[  557.963955][T16309] lo speed is unknown, defaulting to 1000
[  557.989240][T16309] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2901'.
[  558.228452][T16316] lo speed is unknown, defaulting to 1000
[  558.815796][T16327] lo speed is unknown, defaulting to 1000
[  558.858584][T16328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2904'.
[  559.134765][T16338] overlay: ./bus is not a directory
[  559.555783][T16343] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2907'.
[  559.825850][T16346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2908'.
[  559.846251][T16346] lo speed is unknown, defaulting to 1000
[  560.038962][T16350] fuse: Unknown parameter 'user_i00000000000000000000'
[  560.593402][T16354] lo speed is unknown, defaulting to 1000
[  560.617122][T16356] lo speed is unknown, defaulting to 1000
[  560.655486][T16357] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2910'.
[  561.716478][   T62] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  561.813657][T16375] lo speed is unknown, defaulting to 1000
[  561.851516][T16375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2915'.
[  561.867019][   T62] usb 7-1: Using ep0 maxpacket: 32
[  561.869675][   T62] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  561.872560][   T62] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  561.875297][   T62] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  561.878134][   T62] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.881162][   T62] usb 7-1: config 0 descriptor??
[  562.216955][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  562.288504][   T62] usbhid 7-1:0.0: can't add hid device: -71
[  562.290202][   T62] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  562.292973][   T62] usb 7-1: USB disconnect, device number 25
[  562.680612][T16390] fuse: Unknown parameter 'user_i00000000000000000000'
[  562.991927][T16394] lo speed is unknown, defaulting to 1000
[  563.188471][T16399] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2919'.
[  563.532410][T16406] lo speed is unknown, defaulting to 1000
[  563.571754][T16409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2922'.
[  564.849195][T16419] lo speed is unknown, defaulting to 1000
[  564.881514][T16419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2925'.
[  565.047251][T16424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2926'.
[  565.092091][T16424] lo speed is unknown, defaulting to 1000
[  565.222801][T16433] lo speed is unknown, defaulting to 1000
[  565.513653][T16442] lo speed is unknown, defaulting to 1000
[  565.542644][T16442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2931'.
[  565.623421][ T5360] Bluetooth: Wrong link type (-22)
[  565.709114][T16440] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2930'.
[  565.841465][T16456] lo speed is unknown, defaulting to 1000
[  565.866193][T16456] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2934'.
[  566.091142][T16465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2936'.
[  566.443156][T16465] lo speed is unknown, defaulting to 1000
[  566.588162][T16472] fuse: Unknown parameter 'user_id00000000000000000000'
[  567.071686][T16475] lo speed is unknown, defaulting to 1000
[  568.190750][T16495] lo speed is unknown, defaulting to 1000
[  568.237626][T16495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2943'.
[  568.371141][T16503] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  568.402948][T16503] kvm: pic: non byte read
[  568.408591][T16503] kvm: pic: level sensitive irq not supported
[  568.410298][T16503] kvm: pic: non byte read
[  568.416206][T16503] kvm: pic: level sensitive irq not supported
[  568.416891][T16503] kvm: pic: non byte read
[  568.421159][T16503] kvm: pic: level sensitive irq not supported
[  568.421426][T16503] kvm: pic: non byte read
[  568.620511][T16509] lo speed is unknown, defaulting to 1000
[  568.643525][T16510] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2945'.
[  568.941471][T16514] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2946'.
[  569.033908][T16519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2947'.
[  569.053478][T16519] lo speed is unknown, defaulting to 1000
[  569.541515][T16527] lo speed is unknown, defaulting to 1000
[  570.587777][T16545] lo speed is unknown, defaulting to 1000
[  570.622175][T16545] __nla_validate_parse: 1 callbacks suppressed
[  570.622186][T16545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2953'.
[  570.819210][T16551] lo speed is unknown, defaulting to 1000
[  570.844947][T16551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2955'.
[  571.039255][T16559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2956'.
[  571.052325][T16559] lo speed is unknown, defaulting to 1000
[  571.466217][T16573] kvm: pic: single mode not supported
[  571.473658][T16573] kvm: pic: non byte write
[  571.478533][T16573] kvm: pic: non byte write
[  571.486098][T16573] kvm: pic: non byte write
[  571.491876][T16573] kvm: pic: non byte write
[  571.493312][T16573] kvm: pic: single mode not supported
[  571.493321][T16573] kvm: pic: level sensitive irq not supported
[  571.504032][T16573] kvm: pic: non byte write
[  571.512330][T16573] kvm: pic: non byte write
[  571.535280][T16573] kvm: pic: non byte read
[  571.587345][T16573] kvm: pic: single mode not supported
[  571.746858][T16567] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2957'.
[  572.114619][T16584] fuse: Unknown parameter 'group_id00000000000000000000'
[  572.561721][T16592] fuse: Bad value for 'rootmode'
[  572.991568][T16597] fuse: Bad value for 'fd'
[  573.294154][T16601] fuse: Unknown parameter 'user_id00000000000000000000'
[  574.015464][T16603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2967'.
[  574.033832][T16603] lo speed is unknown, defaulting to 1000
[  574.258353][T16611] lo speed is unknown, defaulting to 1000
[  574.281250][T16611] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2969'.
[  574.482601][T16616] lo speed is unknown, defaulting to 1000
[  574.518411][ T4779] Bluetooth: hci6: command 0x0406 tx timeout
[  574.523517][T16618] lo speed is unknown, defaulting to 1000
[  574.546025][T16618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2971'.
[  574.549876][T16619] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2970'.
[  574.945536][T16640] fuse: Invalid rootmode
[  574.990200][T16639] fuse: Unknown parameter 'fd0x000000000000000c'
[  575.119416][T16637] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2973'.
[  575.347776][T16644] lo speed is unknown, defaulting to 1000
[  575.372985][T16644] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2976'.
[  576.118028][T16655] fuse: Unknown parameter 'user_id00000000000000000000'
[  576.456101][T16657] binder: 16656:16657 ioctl c0306201 0 returned -14
[  576.459324][T16657] binder: BINDER_SET_CONTEXT_MGR already set
[  576.461602][T16657] binder: 16656:16657 ioctl 4018620d 20000040 returned -16
[  577.494212][T16670] lo speed is unknown, defaulting to 1000
[  577.523631][T16670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2983'.
[  578.104759][T16677] fuse: Bad value for 'user_id'
[  578.106897][T16677] fuse: Bad value for 'user_id'
[  578.242506][T16684] fuse: Bad value for 'rootmode'
[  578.466527][T16689] fuse: Unknown parameter 'user_id00000000000000000000'
[  579.375843][T16692] fuse: Invalid rootmode
[  580.015044][T16695] fuse: Unknown parameter 'fd0x000000000000000c'
[  580.050735][T16697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2991'.
[  580.075976][T16697] lo speed is unknown, defaulting to 1000
[  580.330821][T16710] lo speed is unknown, defaulting to 1000
[  580.358388][T16710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2994'.
[  580.567755][T16721] fuse: Bad value for 'user_id'
[  580.569227][T16721] fuse: Bad value for 'user_id'
[  581.325747][T16724] fuse: Unknown parameter 'user_id00000000000000000000'
[  582.165228][T16732] fuse: Unknown parameter 'use00000000000000000000'
[  582.315958][T16734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3000'.
[  582.334009][T16734] lo speed is unknown, defaulting to 1000
[  582.443557][T16738] lo speed is unknown, defaulting to 1000
[  582.480413][T16739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3001'.
[  582.855589][T16744] fuse: Bad value for 'fd'
[  583.540404][T16759] fuse: Invalid rootmode
[  583.564646][T16760] fuse: Unknown parameter 'fd0x000000000000000c'
[  584.055350][T16769] fuse: Bad value for 'user_id'
[  584.057301][T16769] fuse: Bad value for 'user_id'
[  585.220395][T16771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3009'.
[  585.236818][T16771] lo speed is unknown, defaulting to 1000
[  585.335859][T16775] lo speed is unknown, defaulting to 1000
[  585.370493][T16775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3010'.
[  585.611190][T16784] fuse: Bad value for 'fd'
[  585.816254][T16792] fuse: Bad value for 'fd'
[  585.968627][T16800] fuse: Unknown parameter 'use00000000000000000000'
[  587.440022][T16806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3018'.
[  587.459901][T16806] lo speed is unknown, defaulting to 1000
[  587.600856][T16812] fuse: Bad value for 'rootmode'
[  587.872008][T16824] lo speed is unknown, defaulting to 1000
[  587.906697][T16824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3022'.
[  588.179664][T16833] fuse: Bad value for 'fd'
[  589.480171][T16840] fuse: Bad value for 'fd'
[  590.924437][T16849] fuse: Unknown parameter 'use00000000000000000000'
[  591.547484][T16859] binder_alloc: 16858: binder_alloc_buf, no vma
[  591.615135][T16862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3032'.
[  591.632408][T16862] lo speed is unknown, defaulting to 1000
[  592.185692][T16876] fuse: Bad value for 'rootmode'
[  593.904260][T16890] fuse: Bad value for 'fd'
[  593.961355][T16893] lo speed is unknown, defaulting to 1000
[  593.991632][T16893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3040'.
[  594.013353][T16897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3041'.
[  594.031472][T16897] lo speed is unknown, defaulting to 1000
[  594.201810][T16907] lo speed is unknown, defaulting to 1000
[  594.224039][T16907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3043'.
[  594.577142][T16918] fuse: Unknown parameter 'user_i00000000000000000000'
[  595.478953][T16921] fuse: Unknown parameter '0x000000000000000c'
[  595.827906][T16924] lo speed is unknown, defaulting to 1000
[  595.865486][T16926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3047'.
[  596.282505][T16938] lo speed is unknown, defaulting to 1000
[  596.310235][T16938] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3050'.
[  596.359972][T16939] fuse: Bad value for 'fd'
[  596.504298][T16945] lo speed is unknown, defaulting to 1000
[  596.536902][T16945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3051'.
[  596.877215][T16964] fuse: Bad value for 'rootmode'
[  597.850930][T16969] fuse: Bad value for 'fd'
[  598.188606][T16973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3057'.
[  598.210827][T16973] lo speed is unknown, defaulting to 1000
[  598.675392][T16981] lo speed is unknown, defaulting to 1000
[  598.709470][T16981] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3060'.
[  598.762251][T16986] fuse: Unknown parameter 'user_i00000000000000000000'
[  600.077879][T16997] lo speed is unknown, defaulting to 1000
[  600.108917][T16997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3063'.
[  600.356286][T17006] fuse: Unknown parameter '0x000000000000000c'
[  600.468737][T17007] fuse: Unknown parameter '0x000000000000000c'
[  600.569527][T17009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3066'.
[  600.586353][T17009] lo speed is unknown, defaulting to 1000
[  600.723637][T17014] fuse: Bad value for 'fd'
[  601.025095][T17017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  601.029494][T17017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  601.033459][T17017] bond0 (unregistering): Released all slaves
[  601.722168][T17020] lo speed is unknown, defaulting to 1000
[  601.754861][T17020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3069'.
[  602.288545][T17040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3075'.
[  602.309410][T17040] lo speed is unknown, defaulting to 1000
[  602.573316][T17046] fuse: Unknown parameter 'user_i00000000000000000000'
[  602.789975][T17055] fuse: Unknown parameter '0x000000000000000c'
[  604.200949][T17060] lo speed is unknown, defaulting to 1000
[  604.229231][T17061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3080'.
[  604.391080][T17066] lo speed is unknown, defaulting to 1000
[  604.448942][T17066] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3081'.
[  604.460749][T17075] binder_alloc: 17074: binder_alloc_buf, no vma
[  604.510491][T17079] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3079'.
[  604.551494][T17078] bridge_slave_0: left allmulticast mode
[  604.556719][T17078] bridge_slave_0: left promiscuous mode
[  604.568893][T17078] bridge0: port 1(bridge_slave_0) entered disabled state
[  604.576294][T17078] bridge_slave_1: left allmulticast mode
[  604.581554][T17078] bridge_slave_1: left promiscuous mode
[  604.583811][T17078] bridge0: port 2(bridge_slave_1) entered disabled state
[  604.638645][T17078] team0: Port device team_slave_0 removed
[  604.642366][T17078] team0: Port device team_slave_1 removed
[  604.644590][T17078] batman_adv: batadv0: Removing interface: batadv_slave_0
[  604.657105][T17078] batman_adv: batadv0: Removing interface: batadv_slave_1
[  604.660401][T17078] vlan2: left promiscuous mode
[  604.662175][T17078] bridge0: port 3(vlan2) entered disabled state
[  604.671303][T17082] fuse: Bad value for 'fd'
[  604.768597][T17084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3085'.
[  604.791876][T17084] lo speed is unknown, defaulting to 1000
[  604.856295][T17087] Process accounting resumed
[  605.073971][T17092] fuse: Unknown parameter 'user_id00000000000000000000'
[  605.188452][T17094] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  605.340798][T17098] mkiss: ax0: crc mode is auto.
[  606.736954][T17115] lo speed is unknown, defaulting to 1000
[  606.758861][T17116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3092'.
[  606.985963][T17123] lo speed is unknown, defaulting to 1000
[  607.026073][T17123] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3094'.
[  607.299387][T17131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3095'.
[  607.335034][T17131] lo speed is unknown, defaulting to 1000
[  607.764912][T17142] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3097'.
[  608.655136][T17145] netlink: 'syz.0.3098': attribute type 2 has an invalid length.
[  608.659385][T17145] netlink: 723 bytes leftover after parsing attributes in process `syz.0.3098'.
[  608.704506][T17150] fuse: Bad value for 'fd'
[  608.748890][T17150] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.3100'.
[  608.750764][T17151] lo speed is unknown, defaulting to 1000
[  608.759198][T17147] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  608.788924][T17147] kvm: pic: level sensitive irq not supported
[  608.789667][T17147] kvm: pic: non byte read
[  608.795106][T17147] kvm: pic: level sensitive irq not supported
[  608.795624][T17147] kvm: pic: non byte read
[  608.831679][T17147] kvm: pic: level sensitive irq not supported
[  608.831934][T17147] kvm: pic: non byte read
[  608.835546][T17147] kvm: pic: level sensitive irq not supported
[  608.835918][T17147] kvm: pic: non byte read
[  608.901423][T17156] fuse: Unknown parameter 'user_id00000000000000000000'
[  609.342118][T17162] lo speed is unknown, defaulting to 1000
[  609.381402][T17162] __nla_validate_parse: 1 callbacks suppressed
[  609.381418][T17162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3103'.
[  609.683477][T17171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3105'.
[  609.696185][T17171] lo speed is unknown, defaulting to 1000
[  610.346649][ T4779] Bluetooth: hci5: command 0x0406 tx timeout
[  610.615962][T17185] fuse: Bad value for 'fd'
[  611.416679][   T62] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  611.551617][T17196] fuse: Unknown parameter 'user_i00000000000000000000'
[  611.567898][   T62] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  611.570941][   T62] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  611.573379][   T62] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  611.577017][   T62] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  611.579546][   T62] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  611.582526][   T62] usb 6-1: config 0 descriptor??
[  611.997304][   T62] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving
[  612.002073][   T62] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  612.189215][T17199] fuse: Unknown parameter '0x000000000000000c'
[  612.264246][T17193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  612.269976][T17193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  612.275621][ T5466] usb 6-1: USB disconnect, device number 28
[  614.023831][T17224] fuse: Unknown parameter 'user_id00000000000000000000'
[  614.093967][T17228] fuse: Invalid rootmode
[  614.962684][T17237] netfs: Couldn't get user pages (rc=-14)
[  615.198539][T17240] fuse: Unknown parameter 'user_i00000000000000000000'
[  615.546630][ T5466] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  615.716539][ T5466] usb 6-1: Using ep0 maxpacket: 16
[  615.719387][ T5466] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  615.722235][ T5466] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  615.726039][ T5466] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  615.729243][ T5466] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.732964][ T5466] usb 6-1: config 0 descriptor??
[  615.737039][ T5466] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  615.959916][   T62] usb 6-1: USB disconnect, device number 29
[  616.708626][T17249] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3128'.
[  616.760658][T17250] hub 6-0:1.0: USB hub found
[  616.762460][T17250] hub 6-0:1.0: 1 port detected
[  616.960809][T17253] lo speed is unknown, defaulting to 1000
[  616.988583][T17253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3130'.
[  617.509548][T17264] mkiss: ax0: crc mode is auto.
[  618.103699][T17269] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3133'.
[  618.914505][T17277] lo speed is unknown, defaulting to 1000
[  618.940992][T17277] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3135'.
[  621.079804][T17290] delete_channel: no stack
[  621.258476][T17305] lo speed is unknown, defaulting to 1000
[  621.645632][T17314] mkiss: ax0: crc mode is auto.
[  622.153935][T17322] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3144'.
[  622.168683][T17324] kvm: pic: level sensitive irq not supported
[  622.168888][T17324] kvm: pic: non byte read
[  622.172803][T17324] kvm: pic: level sensitive irq not supported
[  622.173091][T17324] kvm: pic: non byte read
[  622.198047][T17329] fuse: Unknown parameter 'user_i00000000000000000000'
[  623.146625][ T5360] Bluetooth: hci9: command tx timeout
[  623.157262][T15545] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  623.319049][T15545] usb 5-1: Using ep0 maxpacket: 16
[  623.327980][T15545] usb 5-1: config 0 has no interfaces?
[  623.331482][T15545] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  623.334539][T15545] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.337278][T15545] usb 5-1: Product: syz
[  623.338730][T15545] usb 5-1: Manufacturer: syz
[  623.340373][T15545] usb 5-1: SerialNumber: syz
[  623.343814][T15545] usb 5-1: config 0 descriptor??
[  623.631161][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  624.019430][ T5466] usb 5-1: USB disconnect, device number 35
[  626.314455][T17391] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3161'.
[  626.557798][T17395] 9pnet_virtio: no channels available for device syz
[  626.826936][T17398] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3167'.
[  626.829672][T17398] bridge_slave_1: left allmulticast mode
[  626.831230][T17398] bridge_slave_1: left promiscuous mode
[  626.832908][T17398] bridge0: port 2(bridge_slave_1) entered disabled state
[  626.874977][T17398] bridge_slave_0: left allmulticast mode
[  626.877501][T17398] bridge_slave_0: left promiscuous mode
[  626.879785][T17398] bridge0: port 1(bridge_slave_0) entered disabled state
[  626.987597][T17401] ptrace attach of "/syz-executor exec"[15501] was attempted by "/syz-executor exec"[17401]
[  627.342045][T17411] fuse: Unknown parameter 'user_id00000000000000000000'
[  630.016959][T17427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3174'.
[  630.045621][T17424] lo speed is unknown, defaulting to 1000
[  630.658435][T17441] lo speed is unknown, defaulting to 1000
[  630.691795][T17441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3178'.
[  631.452862][T17456] fuse: Unknown parameter 'user_id00000000000000000000'
[  631.668245][T17459] binder: 17457:17459 ioctl c0306201 20000680 returned -14
[  631.763032][T17464] overlayfs: failed to resolve './file1': -2
[  633.165773][   T39] audit: type=1326 audit(1729462581.864:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17474 comm="syz.0.3188" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x0
[  635.036670][T15545] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  635.206598][T15545] usb 7-1: Using ep0 maxpacket: 32
[  635.228296][T15545] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  635.235265][T15545] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  635.244717][T15545] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  635.269420][T15545] usb 7-1: Product: syz
[  635.270652][T15545] usb 7-1: Manufacturer: syz
[  635.271853][T15545] usb 7-1: SerialNumber: syz
[  635.298704][T15545] usb 7-1: config 0 descriptor??
[  635.316967][T17502] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  635.461996][T17518] fuse: Unknown parameter 'user_id00000000000000000000'
[  635.523041][T15545] usb 7-1: USB disconnect, device number 26
[  635.746738][T17502] fuse: Unknown parameter '�0x0000000000000007'
[  635.750978][T17502] fuse: Bad value for 'fd'
[  635.807472][T17521] lo speed is unknown, defaulting to 1000
[  635.839568][T17521] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3198'.
[  636.687749][ T2791] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  636.912667][ T2791] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  636.918438][ T2791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  636.922261][ T2791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  636.926666][ T2791] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  636.931210][ T2791] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  636.934516][ T2791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  636.951860][T17539] syz.3.3202: attempt to access beyond end of device
[  636.951860][T17539] nbd3: rw=2048, sector=2, nr_sectors = 2 limit=0
[  636.956503][T17539] hfsplus: unable to find HFS+ superblock
[  636.990566][ T2791] usb 7-1: config 0 descriptor??
[  636.999058][T17530] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  637.471510][ T2791] plantronics 0003:047F:FFFF.0014: unknown main item tag 0xd
[  637.476229][ T2791] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving
[  637.491585][ T2791] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  637.606565][ T5387] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  637.671158][T17552] overlayfs: failed to resolve './file1': -2
[  637.776640][ T5387] usb 5-1: Using ep0 maxpacket: 16
[  637.778952][ T1298] usb 7-1: USB disconnect, device number 27
[  637.787867][ T5387] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  637.791661][ T5387] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  637.801503][ T5387] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  637.809926][ T5387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  637.821230][ T5387] usb 5-1: config 0 descriptor??
[  637.830938][ T5387] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  638.165783][ T1298] usb 5-1: USB disconnect, device number 36
[  638.369175][T17557] lo speed is unknown, defaulting to 1000
[  638.406241][T17557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3207'.
[  639.073780][T17571] netlink: 'syz.2.3212': attribute type 7 has an invalid length.
[  639.076008][T17571] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3212'.
[  639.137850][T17571] netlink: 'syz.2.3212': attribute type 3 has an invalid length.
[  639.140199][T17571] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3212'.
[  642.780761][T17611] netlink: 'syz.2.3222': attribute type 9 has an invalid length.
[  642.783408][T17611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3222'.
[  643.866509][ T5360] Bluetooth: hci9: command tx timeout
[  646.256490][ T1298] psmouse serio8: Failed to reset mouse on : -5
[  650.056681][ T1298] misc userio: Buffer overflowed, userio client isn't keeping up
[  651.113840][ T1298] input: PS/2 Generic Mouse as /devices/serio8/input/input27
[  651.213715][T17706] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  651.254063][T17706] kvm: pic: non byte read
[  651.326608][ T1298] psmouse serio8: Failed to enable mouse on 
[  651.404546][T17711] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3248'.
[  651.415367][T17711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3248'.
[  651.472727][T17715] fuse: Unknown parameter 'fd0x0000000000000005'
[  651.511458][T17711] digital: digital_start_poll: Unknown protocol
[  651.832814][T17726] fuse: Unknown parameter '0x000000000000000b'
[  652.694555][T17747] fuse: Unknown parameter 'user_i00000000000000000000'
[  653.011301][T17753] syz.0.3254: attempt to access beyond end of device
[  653.011301][T17753] nbd0: rw=2048, sector=2, nr_sectors = 1 limit=0
[  653.017414][T17753] hfsplus: unable to find HFS+ superblock
[  656.575271][ T1129] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.576326][T17792] netlink: 'syz.2.3266': attribute type 1 has an invalid length.
[  656.699254][ T1129] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.722478][T17796] infiniband syz2: set down
[  656.723883][T17796] infiniband syz2: added ipvlan0
[  656.757391][T17796] RDS/IB: syz2: added
[  656.758904][T17796] smc: adding ib device syz2 with port count 1
[  656.761192][T17796] smc:    ib device syz2 port 1 has pnetid 
[  656.787314][ T1129] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.802231][ T4779] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  656.810267][ T4779] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  656.812910][ T4779] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  656.815818][ T4779] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  656.817956][ T4779] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  656.820022][ T4779] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  656.842371][T17799] lo speed is unknown, defaulting to 1000
[  656.863257][T17797] fuse: Unknown parameter 'user_i00000000000000000000'
[  656.888678][ T1129] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  657.013632][ T1129] bridge_slave_1: left allmulticast mode
[  657.015519][ T1129] bridge_slave_1: left promiscuous mode
[  657.022503][ T1129] bridge0: port 2(bridge_slave_1) entered disabled state
[  657.036837][ T1129] bridge_slave_0: left allmulticast mode
[  657.039110][ T1129] bridge_slave_0: left promiscuous mode
[  657.045588][ T1129] bridge0: port 1(bridge_slave_0) entered disabled state
[  657.504515][ T1129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  657.511574][ T1129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  657.517317][ T1129] bond0 (unregistering): Released all slaves
[  657.524195][ T1129] bond1 (unregistering): Released all slaves
[  657.685650][T17799] chnl_net:caif_netlink_parms(): no params data found
[  657.890430][T17799] bridge0: port 1(bridge_slave_0) entered blocking state
[  657.892352][T17799] bridge0: port 1(bridge_slave_0) entered disabled state
[  657.894214][T17799] bridge_slave_0: entered allmulticast mode
[  657.896209][T17799] bridge_slave_0: entered promiscuous mode
[  657.916536][T17799] bridge0: port 2(bridge_slave_1) entered blocking state
[  657.918455][T17799] bridge0: port 2(bridge_slave_1) entered disabled state
[  657.920459][T17799] bridge_slave_1: entered allmulticast mode
[  657.922636][T17799] bridge_slave_1: entered promiscuous mode
[  658.014029][T17799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  658.026659][T17799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  658.085614][T17799] team0: Port device team_slave_0 added
[  658.099323][T17799] team0: Port device team_slave_1 added
[  658.187745][T17799] batman_adv: batadv0: Adding interface: batadv_slave_0
[  658.190719][T17799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  658.199962][T17799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  658.206601][T17799] batman_adv: batadv0: Adding interface: batadv_slave_1
[  658.209161][T17799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  658.220142][T17799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  658.332258][T17799] hsr_slave_0: entered promiscuous mode
[  658.339469][T17799] hsr_slave_1: entered promiscuous mode
[  658.344371][T17799] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  658.348264][T17799] Cannot create hsr debugfs directory
[  658.538594][ T1129] hsr_slave_0: left promiscuous mode
[  658.544749][ T1129] hsr_slave_1: left promiscuous mode
[  658.557227][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_0
[  658.567304][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  658.575747][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_1
[  658.679499][ T1129] veth1_macvtap: left promiscuous mode
[  658.681381][ T1129] veth0_macvtap: left promiscuous mode
[  658.683258][ T1129] veth1_vlan: left promiscuous mode
[  658.684906][ T1129] veth0_vlan: left promiscuous mode
[  658.842092][ T4779] Bluetooth: hci9: command tx timeout
[  660.233342][ T1129] team0 (unregistering): Port device team_slave_1 removed
[  660.381001][ T1129] team0 (unregistering): Port device team_slave_0 removed
[  660.920037][ T4779] Bluetooth: hci9: command tx timeout
[  661.952581][ T5360] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  661.955787][ T5360] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  661.960449][ T5360] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  661.965034][ T5360] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  661.970746][ T5360] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  661.974190][ T5360] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  662.006695][T17859] lo speed is unknown, defaulting to 1000
[  662.333253][T17859] chnl_net:caif_netlink_parms(): no params data found
[  662.421613][T17859] bridge0: port 1(bridge_slave_0) entered blocking state
[  662.424402][T17859] bridge0: port 1(bridge_slave_0) entered disabled state
[  662.427702][T17859] bridge_slave_0: entered allmulticast mode
[  662.431813][T17859] bridge_slave_0: entered promiscuous mode
[  662.435815][T17859] bridge0: port 2(bridge_slave_1) entered blocking state
[  662.439012][T17859] bridge0: port 2(bridge_slave_1) entered disabled state
[  662.441616][T17859] bridge_slave_1: entered allmulticast mode
[  662.444554][T17859] bridge_slave_1: entered promiscuous mode
[  662.499839][ T1129] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.550525][T17859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  662.555896][T17859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  662.601569][T17859] team0: Port device team_slave_0 added
[  662.619225][ T1129] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.630274][T17859] team0: Port device team_slave_1 added
[  662.703337][ T1129] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.732342][T17799] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  662.736235][T17799] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  662.741102][T17859] batman_adv: batadv0: Adding interface: batadv_slave_0
[  662.743378][T17859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  662.751548][T17859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  662.754781][T17799] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  662.760822][T17859] batman_adv: batadv0: Adding interface: batadv_slave_1
[  662.763028][T17859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  662.770073][T17859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  662.773479][T17799] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  662.870266][T17859] hsr_slave_0: entered promiscuous mode
[  662.872520][T17859] hsr_slave_1: entered promiscuous mode
[  662.875739][T17859] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  662.882889][T17859] Cannot create hsr debugfs directory
[  662.996693][ T5360] Bluetooth: hci9: command tx timeout
[  663.313823][T17898] fuse: Unknown parameter 'fd0x000000000000000c'
[  663.703577][ T1129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  663.711869][ T1129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  663.716929][ T1129] bond0 (unregistering): Released all slaves
[  663.744667][T17799] 8021q: adding VLAN 0 to HW filter on device bond0
[  663.755845][T17799] 8021q: adding VLAN 0 to HW filter on device team0
[  663.814414][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  663.816837][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  663.820294][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[  663.822671][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[  663.852719][ T1129] tipc: Left network mode
[  664.039206][ T5360] Bluetooth: hci7: command tx timeout
[  664.153078][T17799] 8021q: adding VLAN 0 to HW filter on device batadv0
[  664.165049][ T1129] hsr_slave_0: left promiscuous mode
[  664.170164][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  664.173230][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_0
[  664.180023][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  664.182004][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_1
[  664.300302][ T1129] veth1_macvtap: left promiscuous mode
[  664.302151][ T1129] veth0_macvtap: left allmulticast mode
[  664.304261][ T1129] veth0_macvtap: left promiscuous mode
[  665.066615][ T5360] Bluetooth: hci9: command tx timeout
[  665.460566][ T1129] team0 (unregistering): Port device team_slave_1 removed
[  665.609457][ T1129] team0 (unregistering): Port device team_slave_0 removed
[  666.106597][ T5360] Bluetooth: hci7: command tx timeout
[  666.823567][T17799] veth0_vlan: entered promiscuous mode
[  666.888110][T17799] veth1_vlan: entered promiscuous mode
[  666.910745][T17859] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  666.923328][T17859] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  666.926871][T17859] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  666.939452][T17859] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  666.984278][T17799] veth0_macvtap: entered promiscuous mode
[  666.992994][T17799] veth1_macvtap: entered promiscuous mode
[  667.010034][T17799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  667.013784][T17799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  667.021388][T17799] batman_adv: batadv0: Interface activated: batadv_slave_0
[  667.031958][T17799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  667.035251][T17799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  667.041268][T17799] batman_adv: batadv0: Interface activated: batadv_slave_1
[  667.051257][T17799] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  667.054555][T17799] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  667.060210][T17799] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  667.063259][T17799] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  667.122903][T17859] 8021q: adding VLAN 0 to HW filter on device bond0
[  667.154237][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  667.165632][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  667.189508][T17859] 8021q: adding VLAN 0 to HW filter on device team0
[  667.200754][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  667.203012][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.203383][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  667.205951][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  667.244839][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.247399][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state
[  667.423310][T17859] 8021q: adding VLAN 0 to HW filter on device batadv0
[  667.492720][T17859] veth0_vlan: entered promiscuous mode
[  667.509330][T17859] veth1_vlan: entered promiscuous mode
[  667.546960][T17859] veth0_macvtap: entered promiscuous mode
[  667.555886][T17859] veth1_macvtap: entered promiscuous mode
[  667.578531][T17859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  667.581926][T17859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  667.585644][T17859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  667.593253][T17859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  667.601782][T17859] batman_adv: batadv0: Interface activated: batadv_slave_0
[  667.610715][T17859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  667.613401][T17859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  667.615912][T17859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  667.619977][T17859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  667.628178][T17859] batman_adv: batadv0: Interface activated: batadv_slave_1
[  667.634386][T17859] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  667.645453][T17859] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  667.650845][T17859] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  667.657274][T17859] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  667.730122][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  667.735627][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  667.773614][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  667.775741][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  667.949474][ T5360] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:201'
[  667.952384][   T39] audit: type=1326 audit(1729462616.654:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17942 comm="syz.1.3275" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x0
[  667.960407][ T5360] CPU: 2 UID: 0 PID: 5360 Comm: kworker/u33:7 Not tainted 6.12.0-rc3-syzkaller-00454-gdb87114dcf13 #0
[  667.964133][ T5360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  667.967584][ T5360] Workqueue: hci7 hci_rx_work
[  667.969338][ T5360] Call Trace:
[  667.970571][ T5360]  <TASK>
[  667.971634][ T5360]  dump_stack_lvl+0x16c/0x1f0
[  667.973511][ T5360]  sysfs_warn_dup+0x7f/0xa0
[  667.975240][ T5360]  sysfs_create_dir_ns+0x24d/0x2b0
[  667.977211][ T5360]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  667.979394][ T5360]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  667.981596][ T5360]  ? kobject_add_internal+0x12d/0x990
[  667.983561][ T5360]  ? do_raw_spin_unlock+0x172/0x230
[  667.985572][ T5360]  kobject_add_internal+0x2c8/0x990
[  667.987461][ T5360]  kobject_add+0x16f/0x240
[  667.989100][ T5360]  ? __pfx_kobject_add+0x10/0x10
[  667.990982][ T5360]  ? class_to_subsys+0x3e/0x160
[  667.992873][ T5360]  ? do_raw_spin_unlock+0x172/0x230
[  667.994820][ T5360]  ? kobject_put+0xab/0x5a0
[  667.996421][ T5360]  device_add+0x289/0x1a70
[  667.998140][ T5360]  ? __pfx_dev_set_name+0x10/0x10
[  668.000026][ T5360]  ? __pfx_device_add+0x10/0x10
[  668.001633][ T5360]  ? mgmt_send_event_skb+0x2f2/0x460
[  668.003459][ T5360]  hci_conn_add_sysfs+0x17e/0x230
[  668.005091][ T5360]  le_conn_complete_evt+0xfc7/0x1cf0
[  668.006955][ T5360]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  668.008914][ T5360]  ? trace_contention_end+0xea/0x140
[  668.010810][ T5360]  ? __mutex_lock+0x1a6/0x9c0
[  668.012264][ T5360]  hci_le_conn_complete_evt+0x23c/0x370
[  668.014083][ T5360]  hci_le_meta_evt+0x2e2/0x5d0
[  668.015645][ T5360]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  668.017114][ T5360]  hci_event_packet+0x666/0x1190
[  668.018701][ T5360]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  668.020433][ T5360]  ? __pfx_hci_event_packet+0x10/0x10
[  668.022331][ T5360]  ? mark_held_locks+0x9f/0xe0
[  668.024068][ T5360]  ? kcov_remote_start+0x3cf/0x6e0
[  668.026101][ T5360]  ? lockdep_hardirqs_on+0x7c/0x110
[  668.028302][ T5360]  hci_rx_work+0x2c6/0x16c0
[  668.030580][ T5360]  ? lock_acquire+0x2f/0xb0
[  668.032431][ T5360]  ? process_one_work+0x8bb/0x1b30
[  668.034205][ T5360]  process_one_work+0x958/0x1b30
[  668.035926][ T5360]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  668.037845][ T5360]  ? __pfx_process_one_work+0x10/0x10
[  668.039773][ T5360]  ? assign_work+0x1a0/0x250
[  668.041412][ T5360]  worker_thread+0x6c8/0xf00
[  668.043050][ T5360]  ? __kthread_parkme+0x148/0x220
[  668.045109][ T5360]  ? __pfx_worker_thread+0x10/0x10
[  668.046914][ T5360]  kthread+0x2c1/0x3a0
[  668.048322][ T5360]  ? _raw_spin_unlock_irq+0x23/0x50
[  668.050589][ T5360]  ? __pfx_kthread+0x10/0x10
[  668.052691][ T5360]  ret_from_fork+0x45/0x80
[  668.054884][ T5360]  ? __pfx_kthread+0x10/0x10
[  668.056811][ T5360]  ret_from_fork_asm+0x1a/0x30
[  668.058532][ T5360]  </TASK>
[  668.064634][ T5360] kobject: kobject_add_internal failed for hci7:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  668.070008][ T5360] Bluetooth: hci7: failed to register connection device
[  668.186672][ T4779] Bluetooth: hci7: command tx timeout
[  668.404963][T17951] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0
[  668.454617][T17954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3284'.
[  669.496706][T14521] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  669.783111][T14521] usb 6-1: Using ep0 maxpacket: 8
[  669.836714][T14521] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  669.845146][T14521] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  669.847995][T14521] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  669.851460][T14521] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  669.856547][T14521] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  669.860044][T14521] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  669.864270][T14521] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  670.113173][T14521] usb 6-1: GET_CAPABILITIES returned 0
[  670.116132][T14521] usbtmc 6-1:16.0: can't read capabilities
[  670.266523][ T4779] Bluetooth: hci7: command tx timeout
[  670.420104][   T25] usb 6-1: USB disconnect, device number 30
[  670.436675][T17978] usbtmc 6-1:16.0: usb_control_msg returned -71
[  673.556821][T18047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3301'.
[  673.590150][T18047] 8021q: adding VLAN 0 to HW filter on device team1
[  673.957777][T18046] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3302'.
[  674.278639][ T4779] Bluetooth: hci7: command 0x0406 tx timeout
[  676.102949][T18080] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  676.815987][T18096] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3311'.
[  677.956552][ T5347] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  678.116744][ T5347] usb 7-1: Using ep0 maxpacket: 32
[  678.119925][ T5347] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  678.122975][ T5347] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  678.136428][ T5347] usb 7-1: New USB device found, idVendor=056e, idProduct=0009, bcdDevice= 0.00
[  678.143210][T18111] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3313'.
[  678.145801][ T5347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  678.152125][ T5347] usb 7-1: config 0 descriptor??
[  678.386552][T18110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  678.401606][T18110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  678.432040][T18110] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3314'.
[  678.445599][ T5347] usbhid 7-1:0.0: can't add hid device: -71
[  678.447469][ T5347] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  678.460737][ T5347] usb 7-1: USB disconnect, device number 28
[  681.786542][ T5466] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  681.937884][ T5466] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  681.940312][ T5466] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  681.943255][ T5466] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  681.949861][ T5466] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  681.956319][ T5466] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  681.960337][ T5466] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  681.963415][ T5466] usb 7-1: Product: syz
[  681.965024][ T5466] usb 7-1: Manufacturer: syz
[  681.970999][ T5466] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[  682.177940][T18383] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3323'.
[  682.181298][T18383] openvswitch: netlink: Tunnel attr 8192 out of range max 16
[  682.411176][ T5347] usb 7-1: USB disconnect, device number 29
[  682.646611][   T62] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  682.796498][   T62] usb 6-1: Using ep0 maxpacket: 32
[  682.800422][   T62] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  682.803333][   T62] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  682.807310][   T62] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  682.811236][   T62] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  682.815693][   T62] usb 6-1: config 0 interface 0 has no altsetting 0
[  682.819961][   T62] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  682.823021][   T62] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  682.826052][   T62] usb 6-1: Product: syz
[  682.827615][   T62] usb 6-1: Manufacturer: syz
[  682.829204][   T62] usb 6-1: SerialNumber: syz
[  682.832168][   T62] usb 6-1: config 0 descriptor??
[  682.837701][   T62] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  682.841528][   T62] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  683.603721][   T62] usb 6-1: USB disconnect, device number 31
[  683.608049][   T62] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  683.657642][T18409] hub 2-0:1.0: USB hub found
[  683.659803][T18409] hub 2-0:1.0: 6 ports detected
[  683.846517][T15546] usb 2-1: new high-speed USB device number 9 using ehci-pci
[  684.031844][T15546] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  684.035667][T15546] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  684.040358][T15546] usb 2-1: Product: QEMU USB Tablet
[  684.042876][T15546] usb 2-1: Manufacturer: QEMU
[  684.044698][T15546] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[  684.072625][T15546] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0015/input/input30
[  684.091398][T15546] hid-generic 0003:0627:0001.0015: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0
[  685.077167][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  688.433405][T18450] syz.2.3339: attempt to access beyond end of device
[  688.433405][T18450] nbd2: rw=2048, sector=2, nr_sectors = 2 limit=0
[  688.441052][T18450] hfsplus: unable to find HFS+ superblock
[  688.840405][T18462] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "&@"
[  689.074369][T18469] lo speed is unknown, defaulting to 1000
[  689.166281][T18470] fuse: Unknown parameter 'fd0x000000000000000c'
[  689.437462][T18457] netlink: 'syz.0.3341': attribute type 3 has an invalid length.
[  689.440358][T18457] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3341'.
[  689.598326][T18475] lo speed is unknown, defaulting to 1000
[  689.627724][T18477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3346'.
[  691.033505][T18491] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3349'.
[  692.278001][T18504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3352'.
[  692.284570][T18504] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  692.296215][T18504] batman_adv: batadv0: Removing interface: batadv_slave_0
[  692.342940][T18504] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  692.344958][T18504] batman_adv: batadv0: Removing interface: batadv_slave_1
[  692.886555][T18507] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  692.888876][T18507] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  692.902166][T18507] vhci_hcd vhci_hcd.0: Device attached
[  693.076917][ T5347] vhci_hcd: vhci_device speed not set
[  693.136953][ T5347] usb 13-1: new full-speed USB device number 5 using vhci_hcd
[  693.310589][T18511] vhci_hcd: connection reset by peer
[  693.312825][   T12] vhci_hcd: stop threads
[  693.314170][   T12] vhci_hcd: release socket
[  693.323013][   T12] vhci_hcd: disconnect device
[  693.530260][T18520] lo speed is unknown, defaulting to 1000
[  693.852994][T18521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3355'.
[  694.426669][T18529] tipc: Started in network mode
[  694.428715][T18529] tipc: Node identity f7, cluster identity 4711
[  694.431417][T18529] tipc: Node number set to 247
[  694.486883][T18523] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3356'.
[  694.489574][T18523] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3356'.
[  694.492065][T18523] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3356'.
[  694.494564][T18523] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3356'.
[  694.936508][T15545] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  695.346539][T15545] usb 5-1: Using ep0 maxpacket: 32
[  695.349740][T15545] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  695.353070][T15545] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  695.356067][T15545] usb 5-1: New USB device found, idVendor=056e, idProduct=0009, bcdDevice= 0.00
[  695.359496][T15545] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.418256][T15545] usb 5-1: config 0 descriptor??
[  695.890042][T18536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  696.347885][T18536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  697.892007][T18536] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3359'.
[  698.066770][T15545] usbhid 5-1:0.0: can't add hid device: -71
[  698.076632][T15545] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  698.108529][T15545] usb 5-1: USB disconnect, device number 37
[  698.168894][T18541] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3362'.
[  698.207344][T18569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3366'.
[  698.258043][ T5347] vhci_hcd: vhci_device speed not set
[  698.887283][T18584] lo speed is unknown, defaulting to 1000
[  698.896231][T18585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3370'.
[  700.859103][T18597] fuse: Bad value for 'fd'
[  703.446603][T15545] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  703.802133][T18623] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3377'.
[  703.857651][T15545] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  703.862234][T15545] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  703.896572][T15545] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  703.906719][T15545] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  704.015910][T18617] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  704.027789][T15545] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  704.297164][T18632] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3381'.
[  704.300272][T18632] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3381'.
[  705.388240][T18637] tipc: Started in network mode
[  705.389921][T18637] tipc: Node identity f7, cluster identity 4711
[  705.391900][T18637] tipc: Node number set to 247
[  705.629543][T18643] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  705.966521][   T30] usb 5-1: USB disconnect, device number 38
[  707.249066][T18667] fuse: Unknown parameter '0x000000000000000c'
[  708.165373][T18673] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3392'.
[  708.179845][T18677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3393'.
[  709.270729][T18688] bridge0: port 2(bridge_slave_1) entered disabled state
[  709.273860][T18688] bridge0: port 1(bridge_slave_0) entered disabled state
[  709.279181][T18688] bridge0: entered allmulticast mode
[  709.553308][T18696] binder: 18695:18696 ioctl c0306201 200003c0 returned -22
[  709.781890][T18697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  710.066508][ T5387] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  710.216614][ T5387] usb 7-1: Using ep0 maxpacket: 8
[  710.225686][ T5387] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  710.228291][ T5387] usb 7-1: config 246 descriptor has 1 excess byte, ignoring
[  710.236868][ T5387] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42
[  710.239489][ T5387] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  710.262328][ T5387] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  710.265262][ T5387] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  710.284414][ T5387] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  710.286901][ T5387] usb 7-1: config 246 descriptor has 1 excess byte, ignoring
[  710.289025][ T5387] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42
[  710.292161][ T5387] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  710.305543][ T5387] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  710.309363][ T5387] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  710.313810][ T5387] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  710.319239][ T5387] usb 7-1: config 246 descriptor has 1 excess byte, ignoring
[  710.322152][ T5387] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42
[  710.324569][ T5387] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  710.342758][ T5387] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  710.345648][ T5387] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  710.359760][ T5387] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  710.362302][ T5387] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.364374][ T5387] usb 7-1: Product: syz
[  710.365473][ T5387] usb 7-1: Manufacturer: syz
[  710.377076][ T5387] usb 7-1: SerialNumber: syz
[  711.711516][ T5387] adutux 7-1:246.0: interrupt endpoints not found
[  711.741058][ T5387] usb 7-1: USB disconnect, device number 30
[  712.015991][T18714] fuse: Unknown parameter '0x000000000000000c'
[  714.418244][T18737] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3406'.
[  716.878596][T18765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  717.077950][T18773] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  717.264145][T18771] fuse: Unknown parameter '0x000000000000000c'
[  717.476627][ T1298] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  717.631426][ T1298] usb 5-1: Using ep0 maxpacket: 8
[  717.765870][ T1298] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  717.786506][ T1298] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[  717.788451][ T1298] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[  717.791331][ T1298] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  717.794510][ T1298] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  717.807006][ T1298] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  717.826491][ T1298] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  717.828646][ T1298] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[  717.830886][ T1298] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[  717.833274][ T1298] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  717.836258][ T1298] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  717.847128][ T1298] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  717.858668][ T1298] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  717.860898][ T1298] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[  717.862940][ T1298] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[  717.865309][ T1298] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  717.883229][ T1298] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  717.893546][ T1298] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  717.903663][ T1298] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  717.906179][ T1298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  717.908457][ T1298] usb 5-1: Product: syz
[  717.909592][ T1298] usb 5-1: Manufacturer: syz
[  717.910809][ T1298] usb 5-1: SerialNumber: syz
[  717.919346][    T9] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  718.089508][    T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  718.093217][    T9] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  718.096860][    T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  718.099728][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  718.119455][T18779] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  718.124253][    T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  719.596840][ T1298] adutux 5-1:246.0: interrupt endpoints not found
[  719.601236][ T1298] usb 5-1: USB disconnect, device number 39
[  720.068909][   T62] usb 7-1: USB disconnect, device number 31
[  720.129758][ T4779] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:201'
[  720.133041][ T4779] CPU: 2 UID: 0 PID: 4779 Comm: kworker/u33:1 Not tainted 6.12.0-rc3-syzkaller-00454-gdb87114dcf13 #0
[  720.136286][ T4779] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  720.139299][ T4779] Workqueue: hci7 hci_rx_work
[  720.140635][ T4779] Call Trace:
[  720.141579][ T4779]  <TASK>
[  720.142415][ T4779]  dump_stack_lvl+0x16c/0x1f0
[  720.144099][ T4779]  sysfs_warn_dup+0x7f/0xa0
[  720.145869][ T4779]  sysfs_create_dir_ns+0x24d/0x2b0
[  720.147208][ T4779]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  720.148796][ T4779]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  720.150370][ T4779]  ? kobject_add_internal+0x12d/0x990
[  720.151762][ T4779]  ? do_raw_spin_unlock+0x172/0x230
[  720.153472][ T4779]  kobject_add_internal+0x2c8/0x990
[  720.154821][ T4779]  kobject_add+0x16f/0x240
[  720.155981][ T4779]  ? __pfx_kobject_add+0x10/0x10
[  720.157303][ T4779]  ? class_to_subsys+0x3e/0x160
[  720.158659][ T4779]  ? do_raw_spin_unlock+0x172/0x230
[  720.159988][ T4779]  ? kobject_put+0xab/0x5a0
[  720.161480][ T4779]  device_add+0x289/0x1a70
[  720.162880][ T4779]  ? __pfx_dev_set_name+0x10/0x10
[  720.164574][ T4779]  ? __pfx_device_add+0x10/0x10
[  720.166044][ T4779]  ? mgmt_send_event_skb+0x2f2/0x460
[  720.167653][ T4779]  hci_conn_add_sysfs+0x17e/0x230
[  720.169387][ T4779]  le_conn_complete_evt+0xfc7/0x1cf0
[  720.170803][ T4779]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  720.172282][ T4779]  ? trace_contention_end+0xea/0x140
[  720.174435][ T4779]  ? __mutex_lock+0x1a6/0x9c0
[  720.176189][ T4779]  hci_le_enh_conn_complete_evt+0x23d/0x380
[  720.178364][ T4779]  ? skb_pull_data+0x166/0x210
[  720.180135][ T4779]  hci_le_meta_evt+0x2e2/0x5d0
[  720.181932][ T4779]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  720.184355][ T4779]  hci_event_packet+0x666/0x1190
[  720.186181][ T4779]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  720.188119][ T4779]  ? __pfx_hci_event_packet+0x10/0x10
[  720.190281][ T4779]  ? mark_held_locks+0x9f/0xe0
[  720.192312][ T4779]  ? kcov_remote_start+0x3cf/0x6e0
[  720.194327][ T4779]  ? lockdep_hardirqs_on+0x7c/0x110
[  720.196259][ T4779]  hci_rx_work+0x2c6/0x16c0
[  720.197942][ T4779]  ? lock_acquire+0x2f/0xb0
[  720.199609][ T4779]  ? process_one_work+0x8bb/0x1b30
[  720.201501][ T4779]  process_one_work+0x958/0x1b30
[  720.203307][ T4779]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  720.205377][ T4779]  ? __pfx_process_one_work+0x10/0x10
[  720.207880][ T4779]  ? assign_work+0x1a0/0x250
[  720.209603][ T4779]  worker_thread+0x6c8/0xf00
[  720.211315][ T4779]  ? __pfx_worker_thread+0x10/0x10
[  720.213168][ T4779]  kthread+0x2c1/0x3a0
[  720.214683][ T4779]  ? _raw_spin_unlock_irq+0x23/0x50
[  720.216589][ T4779]  ? __pfx_kthread+0x10/0x10
[  720.218320][ T4779]  ret_from_fork+0x45/0x80
[  720.219887][ T4779]  ? __pfx_kthread+0x10/0x10
[  720.221608][ T4779]  ret_from_fork_asm+0x1a/0x30
[  720.223449][ T4779]  </TASK>
[  720.240224][ T4779] kobject: kobject_add_internal failed for hci7:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  720.245306][ T4779] Bluetooth: hci7: failed to register connection device
[  721.440204][T18805] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3422'.
[  722.266930][ T4779] Bluetooth: hci7: command 0x0406 tx timeout
[  723.403592][T18819] usb 2-1: USB disconnect, device number 9
[  723.589346][T18825] hub 2-0:1.0: USB hub found
[  723.590944][T18825] hub 2-0:1.0: 6 ports detected
[  723.611925][T18828] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3425'.
[  723.766560][   T62] usb 2-1: new high-speed USB device number 10 using ehci-pci
[  723.993549][   T62] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  724.000074][   T62] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  724.007117][   T62] usb 2-1: Product: QEMU USB Tablet
[  724.011279][   T62] usb 2-1: Manufacturer: QEMU
[  724.015006][   T62] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[  724.036289][   T62] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0016/input/input31
[  724.269946][   T62] hid-generic 0003:0627:0001.0016: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0
[  725.222434][T18839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  725.770048][T18849] netlink: 'syz.2.3430': attribute type 9 has an invalid length.
[  725.772724][T18849] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3430'.
[  725.811324][T18849] netlink: 'syz.2.3430': attribute type 9 has an invalid length.
[  725.814332][T18849] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3430'.
[  728.029610][T18884] tipc: Enabled bearer <udp:s>, priority 10
[  729.587584][   T39] audit: type=1326 audit(1729462678.294:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18891 comm="syz.3.3439" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x0
[  730.201613][T18904] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13)
[  730.203931][T18904] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  730.216544][T18904] vhci_hcd vhci_hcd.0: Device attached
[  730.223575][T18904] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(15)
[  730.225871][T18904] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  730.228879][T18904] vhci_hcd vhci_hcd.0: Device attached
[  730.396574][   T30] vhci_hcd: vhci_device speed not set
[  730.456503][   T30] usb 15-1: new full-speed USB device number 7 using vhci_hcd
[  730.955635][T18905] vhci_hcd: connection reset by peer
[  730.957939][   T11] vhci_hcd: stop threads
[  730.959444][   T11] vhci_hcd: release socket
[  730.962546][T18909] vhci_hcd: connection closed
[  730.963158][   T11] vhci_hcd: disconnect device
[  730.981416][   T11] vhci_hcd: stop threads
[  730.982828][   T11] vhci_hcd: release socket
[  730.984295][   T11] vhci_hcd: disconnect device
[  732.283157][T18935] rdma_rxe: rxe_newlink: failed to add lo
[  733.266098][    C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  733.898321][T18953] ./file0: Can't lookup blockdev
[  735.617164][   T30] vhci_hcd: vhci_device speed not set
[  736.111323][T18975] fuse: Unknown parameter 'group_i00000000000000000000'
[  737.931085][T18990] ./file0: Can't lookup blockdev
[  739.897826][T19011] block nbd1: shutting down sockets
[  741.684797][T19027] tipc: Enabled bearer <udp:s>, priority 10
[  742.142817][T19030] fuse: Unknown parameter 'group_id00000000000000000000'
[  742.272499][T19032] netlink: 'syz.1.3474': attribute type 9 has an invalid length.
[  742.274785][T19032] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3474'.
[  742.309900][T19032] netlink: 'syz.1.3474': attribute type 9 has an invalid length.
[  742.315501][T19032] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3474'.
[  743.536898][T19038] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  743.540060][T19038] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  743.543185][T19038] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  743.546360][T19038] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  743.558972][T19038] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  743.561338][T19038] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  743.563706][T19038] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  743.566047][T19038] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  743.573412][T19038] geneve2: entered promiscuous mode
[  743.575521][T19038] geneve2: entered allmulticast mode
[  744.158908][T19049] veth1_macvtap: left promiscuous mode
[  744.160720][T19049] veth1_macvtap: entered promiscuous mode
[  744.162652][T19049] veth1_macvtap: entered allmulticast mode
[  745.444072][T19057] fuse: Unknown parameter 'fd0x000000000000000c'
[  745.742613][T19059] input: syz0 as /devices/virtual/input/input32
[  746.509414][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  747.735307][T19078] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3486'.
[  749.728855][T19106] fuse: Unknown parameter 'fd0x000000000000000c'
[  751.055309][T19111] bridge0: port 2(bridge_slave_1) entered disabled state
[  751.058464][T19111] bridge0: port 1(bridge_slave_0) entered disabled state
[  751.062472][T19111] bridge0: entered allmulticast mode
[  751.764351][T19120] syzkaller0: entered promiscuous mode
[  751.766512][T19120] syzkaller0: entered allmulticast mode
[  751.852094][T19122] program syz.1.3495 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  753.100076][T19132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3498'.
[  753.110940][T19132] netlink: 173 bytes leftover after parsing attributes in process `syz.2.3498'.
[  755.433293][T19138] netlink: 'syz.3.3499': attribute type 7 has an invalid length.
[  755.436109][T19138] netlink: 'syz.3.3499': attribute type 8 has an invalid length.
[  756.076200][T19151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3501'.
[  756.825205][T19167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3504'.
[  756.883111][T19165] veth1_macvtap: left promiscuous mode
[  756.885126][T19165] veth1_macvtap: entered promiscuous mode
[  756.887441][T19165] veth1_macvtap: entered allmulticast mode
[  758.255505][T19179] loop6: detected capacity change from 0 to 524287999
[  758.261483][    C1] blk_print_req_error: 26 callbacks suppressed
[  758.261499][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  758.267066][    C1] buffer_io_error: 26 callbacks suppressed
[  758.267079][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  758.273671][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  758.277079][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  758.280347][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  758.283780][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  758.296477][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  758.299122][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  758.301897][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  758.305210][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  758.309409][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  758.312291][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  758.314972][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  758.318389][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  758.321915][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  758.325269][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  758.328223][T19179] ldm_validate_partition_table(): Disk read failed.
[  758.331196][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  758.333603][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  758.336458][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  758.338893][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  758.341213][T19179] Dev loop6: unable to read RDB block 0
[  758.357712][T19179]  loop6: unable to read partition table
[  758.359339][T19179] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  759.076511][ T5347] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  759.257709][ T5347] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  759.260284][ T5347] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  759.262801][ T5347] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  759.269577][ T5347] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  759.271938][ T5347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  759.274026][ T5347] usb 6-1: Product: syz
[  759.275128][ T5347] usb 6-1: Manufacturer: syz
[  759.276529][ T5347] usb 6-1: SerialNumber: syz
[  759.484397][ T5347] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  759.694896][ T5466] usb 6-1: USB disconnect, device number 32
[  759.895201][T19197] usblp0: removed
[  760.160317][T19205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3514'.
[  760.554294][T19216] fuse: Bad value for 'user_id'
[  760.556093][T19216] fuse: Bad value for 'user_id'
[  760.706677][ T5466] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  760.866609][ T5466] usb 6-1: Using ep0 maxpacket: 32
[  760.874695][ T5466] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  760.880559][ T5466] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  760.883835][ T5466] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  760.886779][ T5466] usb 6-1: Product: syz
[  760.888392][ T5466] usb 6-1: Manufacturer: syz
[  760.890119][ T5466] usb 6-1: SerialNumber: syz
[  760.893199][ T5466] usb 6-1: config 0 descriptor??
[  760.895719][T19213] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  761.241095][T19223] virtio-fs: tag <(null)> not found
[  761.356075][ T5347] usb 6-1: USB disconnect, device number 33
[  774.338599][T19358] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  774.342324][T19358] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  774.345332][T19358] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  775.780054][T19374] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  775.782592][T19374] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  775.785625][T19374] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  776.806621][T19383] libceph: resolve '.
[  776.806621][T19383] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[  776.806621][T19383] ' (ret=-3): failed
[  776.818512][T19383] No control pipe specified
[  777.749352][T19388] fuse: Bad value for 'fd'
[  779.306504][T19385] Bluetooth: hci9: command 0x0406 tx timeout
[  780.278513][T19415] syzkaller0: entered promiscuous mode
[  780.280305][T19415] syzkaller0: entered allmulticast mode
[  780.381676][T19416] program syz.3.3563 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  780.628209][T19420] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13)
[  780.630013][T19420] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  780.636060][T19420] vhci_hcd vhci_hcd.0: Device attached
[  780.649642][T19420] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(15)
[  780.651902][T19420] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  780.662469][T19420] vhci_hcd vhci_hcd.0: Device attached
[  780.674246][T19420] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(17)
[  780.676573][T19420] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  780.688566][T19420] vhci_hcd vhci_hcd.0: Device attached
[  780.699935][T19420] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(19)
[  780.702180][T19420] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  780.717702][T19420] vhci_hcd vhci_hcd.0: Device attached
[  780.871795][   T30] vhci_hcd: vhci_device speed not set
[  780.936561][   T30] usb 17-1: new full-speed USB device number 6 using vhci_hcd
[  781.418212][T19428] vhci_hcd: connection closed
[  781.418295][T19426] vhci_hcd: connection closed
[  781.420345][T19421] vhci_hcd: connection reset by peer
[  781.423951][T19424] vhci_hcd: connection closed
[  781.433082][ T1096] vhci_hcd: stop threads
[  781.436348][ T1096] vhci_hcd: release socket
[  781.439454][ T1096] vhci_hcd: disconnect device
[  781.455137][ T1096] vhci_hcd: stop threads
[  781.457434][ T1096] vhci_hcd: release socket
[  781.459322][ T1096] vhci_hcd: disconnect device
[  781.491793][ T1096] vhci_hcd: stop threads
[  781.493165][ T1096] vhci_hcd: release socket
[  781.494623][ T1096] vhci_hcd: disconnect device
[  781.502756][ T1096] vhci_hcd: stop threads
[  781.504120][ T1096] vhci_hcd: release socket
[  781.505653][ T1096] vhci_hcd: disconnect device
[  781.957645][ T1298] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  782.106705][ T1298] usb 6-1: Using ep0 maxpacket: 8
[  782.110214][ T1298] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  782.113575][ T1298] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  782.116355][ T1298] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  782.119453][ T1298] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  782.122754][ T1298] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  782.125080][ T1298] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  782.334775][ T1298] usb 6-1: usb_control_msg returned -32
[  782.336674][ T1298] usbtmc 6-1:16.0: can't read capabilities
[  784.426648][T19385] Bluetooth: hci7: command 0x0406 tx timeout
[  784.685832][   T62] usb 6-1: USB disconnect, device number 34
[  785.393366][T19457] fuse: Bad value for 'fd'
[  786.036520][   T30] vhci_hcd: vhci_device speed not set
[  786.067331][   T39] audit: type=1326 audit(1729462734.774:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19466 comm="syz.3.3573" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x0
[  788.692154][T19492] veth1_macvtap: entered allmulticast mode
[  788.738400][T19493] fuse: Bad value for 'fd'
[  790.325076][T19509] can0: slcan on ttyS3.
[  791.218164][T19506] can0 (unregistered): slcan off ttyS3.
[  791.387951][T19523] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3582'.
[  792.307174][T19543] input: syz0 as /devices/virtual/input/input33
[  794.487960][T19559] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  794.996197][ T5228] kernel write not supported for file /cpu/0/msr (pid: 5228 comm: kworker/3:3)
[  795.297140][T19570] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0002 with DS=0x7
[  795.302557][T19570] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3594'.
[  795.305896][T19570] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  795.310837][ T4779] Bluetooth: hci7: unexpected event for opcode 0x041b
[  795.367299][T19571] 9pnet_fd: Insufficient options for proto=fd
[  795.537403][ T1075] sr 2:0:0:0: [sr0] tag#2 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  795.540926][ T1075] sr 2:0:0:0: [sr0] tag#2 Sense Key : Illegal Request [current] 
[  795.543779][ T1075] sr 2:0:0:0: [sr0] tag#2 Add. Sense: Invalid command operation code
[  795.547278][ T1075] sr 2:0:0:0: [sr0] tag#2 CDB: Write(10) 2a 00 00 00 00 00 00 00 04 00
[  795.550327][ T1075] blk_print_req_error: 7 callbacks suppressed
[  795.550340][ T1075] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 0
[  795.557058][ T1075] buffer_io_error: 7 callbacks suppressed
[  795.562250][ T1075] Buffer I/O error on dev sr0, logical block 0, lost async page write
[  795.567510][ T1075] Buffer I/O error on dev sr0, logical block 1, lost async page write
[  796.534191][T19580] lo speed is unknown, defaulting to 1000
[  797.787056][T19385] Bluetooth: hci10: sending frame failed (-49)
[  797.796765][ T4779] Bluetooth: hci10: Opcode 0x1003 failed: -49
[  797.902410][T19605] loop6: detected capacity change from 0 to 524287999
[  797.907007][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  797.909466][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  797.911696][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  797.914200][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  797.917392][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  797.919781][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  797.921995][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  797.924367][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  797.929534][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  797.931912][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  797.934396][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  797.937074][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  797.940456][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  797.943366][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  797.946763][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  797.949463][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  797.952394][T19605] ldm_validate_partition_table(): Disk read failed.
[  797.966647][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  797.970660][T19605] Dev loop6: unable to read RDB block 0
[  797.978566][T19605]  loop6: unable to read partition table
[  797.980286][T19605] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  798.225781][T19609] random: crng reseeded on system resumption
[  799.683013][T19627] input: syz0 as /devices/virtual/input/input34
[  801.448302][T19650] overlay: ./bus is not a directory
[  802.230970][   T39] audit: type=1326 audit(1729462750.934:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19660 comm="syz.0.3615" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x0
[  803.052105][T19678] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  803.244371][T19683] netlink: 'syz.0.3620': attribute type 21 has an invalid length.
[  804.697260][T19688] overlayfs: failed to resolve './file0': -2
[  805.028547][T19696] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3623'.
[  806.429152][T15545] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  806.576596][T15545] usb 5-1: Using ep0 maxpacket: 16
[  806.583839][T15545] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  806.587681][T15545] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  806.590901][T15545] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  806.593931][T15545] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  806.601114][T15545] usb 5-1: config 0 descriptor??
[  806.813928][T19706] netlink: 264 bytes leftover after parsing attributes in process `syz.0.3626'.
[  807.127898][T19706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3626'.
[  807.202245][T19714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  807.208132][T19714] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  807.217799][T15545] hid (null): unknown global tag 0xe
[  807.219613][T15545] hid (null): bogus close delimiter
[  807.220982][T15545] hid (null): unknown global tag 0xd
[  807.229218][T15545] hid-generic 0003:0158:0100.0017: unknown main item tag 0x1
[  807.231234][T15545] hid-generic 0003:0158:0100.0017: unexpected long global item
[  807.233418][T15545] hid-generic 0003:0158:0100.0017: probe with driver hid-generic failed with error -22
[  807.439975][T15545] usb 5-1: USB disconnect, device number 40
[  807.949033][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  815.803315][T19385] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  815.811029][T19385] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  815.815576][T19385] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  815.867070][T19385] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  815.872687][T19385] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  815.875615][T19385] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  815.895786][T19733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3629'.
[  815.943016][T19730] lo speed is unknown, defaulting to 1000
[  816.143053][T19730] chnl_net:caif_netlink_parms(): no params data found
[  816.213953][T19730] bridge0: port 1(bridge_slave_0) entered blocking state
[  816.217639][T19730] bridge0: port 1(bridge_slave_0) entered disabled state
[  816.220335][T19730] bridge_slave_0: entered allmulticast mode
[  816.223437][T19730] bridge_slave_0: entered promiscuous mode
[  816.227559][T19730] bridge0: port 2(bridge_slave_1) entered blocking state
[  816.230204][T19730] bridge0: port 2(bridge_slave_1) entered disabled state
[  816.232958][T19730] bridge_slave_1: entered allmulticast mode
[  816.236080][T19730] bridge_slave_1: entered promiscuous mode
[  816.260534][T19730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  816.265941][T19730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  816.312666][T19730] team0: Port device team_slave_0 added
[  816.318157][T19730] team0: Port device team_slave_1 added
[  816.358989][T19730] batman_adv: batadv0: Adding interface: batadv_slave_0
[  816.361443][T19730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  816.369740][T19730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  816.374723][T19730] batman_adv: batadv0: Adding interface: batadv_slave_1
[  816.378143][T19730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  816.387324][T19730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  816.425374][T19730] hsr_slave_0: entered promiscuous mode
[  816.432238][T19730] hsr_slave_1: entered promiscuous mode
[  816.434432][T19730] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  816.436753][T19730] Cannot create hsr debugfs directory
[  816.733009][T19385] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  816.740293][T19385] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  816.758335][T19385] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  816.767229][T19385] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  816.770839][T19385] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  816.773474][T19385] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  817.259168][T19749] lo speed is unknown, defaulting to 1000
[  817.510861][T19730] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  817.530133][T19730] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  817.553742][T19730] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  817.596185][T19730] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  817.623242][   T44] page: refcount:2 mapcount:0 mapping:0000000000000000 index:0x5e1 pfn:0x681f1
[  817.624779][   T77] list_add corruption. next->prev should be prev (ffffe8ffac22fe20), but was ffff88804898b800. (next=ffff8880486e3400).
[  817.626131][   T44] flags: 0x4fff00000010001(locked|reclaim|node=1|zone=1|lastcpupid=0x7ff)
[  817.626160][   T44] raw: 04fff00000010001 ffffc900006af5e0 ffffc900006af5e0 ffffffff8b5d55e2
[  817.626175][   T44] raw: 00000000000005e1 0000000000000000 00000002ffffffff 0000000000000000
[  817.626185][   T44] page dumped because: VM_BUG_ON_PAGE(!((__builtin_constant_p(PAGE_CLAIMED) && __builtin_constant_p((uintptr_t)(&page->private) != (uintptr_t)((void *)0)) && (uintptr_t)(&page->private) != (uintptr_t)((void *)0) && __builtin_constant_p(*(const unsigned long *)(&page->private))) ? const_test_bit(PAGE_CLAIMED, &page->private) : _test_bit(PAGE_CLAIMED, &page->private)))
[  817.626208][   T44] page_owner tracks the page as allocated
[  817.630019][   T77] ------------[ cut here ]------------
[  817.654393][   T77] kernel BUG at lib/list_debug.c:29!
[  817.655774][   T77] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI
[  817.657781][   T77] CPU: 0 UID: 0 PID: 77 Comm: kworker/u32:4 Not tainted 6.12.0-rc3-syzkaller-00454-gdb87114dcf13 #0
[  817.660963][   T44] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12800(GFP_NOWAIT|__GFP_NORETRY), pid 113, tgid 113 (kswapd1), ts 817334228692, free_ts 807172307596
[  817.662550][   T77] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  817.669723][   T77] Workqueue: zswap1 compact_page_work
[  817.671138][   T77] RIP: 0010:__list_add_valid_or_report+0xa9/0x100
[  817.672836][   T77] Code: 2e b1 8b e8 e9 80 de fc 90 0f 0b 48 c7 c7 c0 2e b1 8b e8 da 80 de fc 90 0f 0b 48 89 d9 48 c7 c7 20 2f b1 8b e8 c8 80 de fc 90 <0f> 0b 48 89 f1 48 c7 c7 a0 2f b1 8b 48 89 de e8 b3 80 de fc 90 0f
[  817.677963][   T44]  post_alloc_hook+0x2d1/0x350
[  817.678494][   T77] RSP: 0018:ffffc90000e2fc00 EFLAGS: 00010282
[  817.679932][   T44]  get_page_from_freelist+0x101e/0x3070
[  817.679949][   T44]  __alloc_pages_noprof+0x223/0x25a0
[  817.681928][   T77] 
[  817.683815][   T44]  alloc_pages_mpol_noprof+0x2c9/0x610
[  817.685196][   T77] RAX: 0000000000000075 RBX: ffff8880486e3400 RCX: ffffffff816ccbd9
[  817.685833][   T44]  z3fold_zpool_malloc+0x853/0x14f0
[  817.687746][   T77] RDX: 0000000000000000 RSI: ffffffff816d72a6 RDI: 0000000000000005
[  817.687762][   T77] RBP: ffff8880681f1000 R08: 0000000000000005 R09: 0000000000000000
[  817.687772][   T77] R10: 0000000000000002 R11: 000000000000029d R12: 0000000000000000
[  817.687782][   T77] R13: ffff8880681f1008 R14: ffff8880681f1000 R15: ffffea0001a07c40
[  817.687793][   T77] FS:  0000000000000000(0000) GS:ffff88802b400000(0000) knlGS:0000000000000000
[  817.687820][   T77] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  817.690506][T19730] 8021q: adding VLAN 0 to HW filter on device bond0
[  817.691674][   T77] CR2: 00000000f717a2b0 CR3: 0000000027cc2000 CR4: 0000000000352ef0
[  817.711633][   T77] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  817.714314][   T77] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  817.716980][   T77] Call Trace:
[  817.718119][   T77]  <TASK>
[  817.719130][   T77]  ? die+0x31/0x80
[  817.720376][   T77]  ? do_trap+0x232/0x430
[  817.721834][   T77]  ? __list_add_valid_or_report+0xa9/0x100
[  817.723813][   T77]  ? __list_add_valid_or_report+0xa9/0x100
[  817.725790][   T77]  ? do_error_trap+0xf4/0x230
[  817.727410][   T77]  ? __list_add_valid_or_report+0xa9/0x100
[  817.729630][   T77]  ? handle_invalid_op+0x34/0x40
[  817.731411][   T77]  ? __list_add_valid_or_report+0xa9/0x100
[  817.733232][   T77]  ? exc_invalid_op+0x2e/0x50
[  817.734836][   T77]  ? asm_exc_invalid_op+0x1a/0x20
[  817.736638][   T77]  ? __wake_up_klogd.part.0+0x99/0xf0
[  817.738485][   T77]  ? vprintk+0x86/0xa0
[  817.739878][   T77]  ? __list_add_valid_or_report+0xa9/0x100
[  817.741852][   T77]  do_compact_page+0x10b9/0x25d0
[  817.743527][   T77]  ? lock_acquire+0x2f/0xb0
[  817.745088][   T77]  ? process_one_work+0x8bb/0x1b30
[  817.746854][   T77]  process_one_work+0x958/0x1b30
[  817.748632][   T77]  ? __pfx_compact_page_work+0x10/0x10
[  817.750476][   T77]  ? __pfx_process_one_work+0x10/0x10
[  817.752300][   T77]  ? assign_work+0x1a0/0x250
[  817.753907][   T77]  worker_thread+0x6c8/0xf00
[  817.755569][   T77]  ? __pfx_worker_thread+0x10/0x10
[  817.757337][   T77]  kthread+0x2c1/0x3a0
[  817.758740][   T77]  ? _raw_spin_unlock_irq+0x23/0x50
[  817.760491][   T77]  ? __pfx_kthread+0x10/0x10
[  817.762073][   T77]  ret_from_fork+0x45/0x80
[  817.763600][   T77]  ? __pfx_kthread+0x10/0x10
[  817.765192][   T77]  ret_from_fork_asm+0x1a/0x30
[  817.766823][   T77]  </TASK>
[  817.767876][   T77] Modules linked in:
[  817.769385][   T77] ---[ end trace 0000000000000000 ]---
[  817.771221][   T77] RIP: 0010:__list_add_valid_or_report+0xa9/0x100
[  817.773636][   T77] Code: 2e b1 8b e8 e9 80 de fc 90 0f 0b 48 c7 c7 c0 2e b1 8b e8 da 80 de fc 90 0f 0b 48 89 d9 48 c7 c7 20 2f b1 8b e8 c8 80 de fc 90 <0f> 0b 48 89 f1 48 c7 c7 a0 2f b1 8b 48 89 de e8 b3 80 de fc 90 0f
[  817.780135][   T77] RSP: 0018:ffffc90000e2fc00 EFLAGS: 00010282
[  817.782203][   T77] RAX: 0000000000000075 RBX: ffff8880486e3400 RCX: ffffffff816ccbd9
[  817.784852][   T77] RDX: 0000000000000000 RSI: ffffffff816d72a6 RDI: 0000000000000005
[  817.787556][   T77] RBP: ffff8880681f1000 R08: 0000000000000005 R09: 0000000000000000
[  817.790249][   T77] R10: 0000000000000002 R11: 000000000000029d R12: 0000000000000000
[  817.792933][   T77] R13: ffff8880681f1008 R14: ffff8880681f1000 R15: ffffea0001a07c40
[  817.795522][   T77] FS:  0000000000000000(0000) GS:ffff88802b400000(0000) knlGS:0000000000000000
[  817.798498][   T77] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  817.800818][   T77] CR2: 00000000f717a2b0 CR3: 0000000027cc2000 CR4: 0000000000352ef0
[  817.803478][   T77] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  817.806247][   T77] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  817.808995][   T77] Kernel panic - not syncing: Fatal exception
[  817.811719][   T77] Kernel Offset: disabled
[  817.813207][   T77] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:19:26  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8503ecc5 RDI=ffffffff9a640260 RBP=ffffffff9a640220 RSP=ffffc90000e2f520
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6b726f776b203a43
R12=0000000000000000 R13=0000000000000037 R14=ffffffff8503ec60 R15=0000000000000000
RIP=ffffffff8503ecef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b400000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f717a2b0 CR3=0000000027cc2000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f743bff4
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000002fdabac RBX=0000000000000001 RCX=ffffffff8b139ef9 RDX=ffffed10056a7026
RSI=ffffffff8bb12d20 RDI=ffffffff8164177c RBP=ffffed10036e9910 RSP=ffffc90000477e08
R8 =0000000000000000 R9 =ffffed10056a7025 R10=ffff88802b53812b R11=0000000000000001
R12=0000000000000001 R13=ffff88801b74c880 R14=ffffffff901ce5c8 R15=0000000000000000
RIP=ffffffff8b13b2df RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b500000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000020022000 CR3=000000000db7c000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000004 RBX=0000000000000000 RCX=0000000000000000 RDX=dffffc0000000000
RSI=0000000000000004 RDI=ffff88804ababec0 RBP=ffff88804ababec0 RSP=ffffc90002b87c90
R8 =0000000000000004 R9 =0000000000000100 R10=0000000000000005 R11=00000000000a201e
R12=ffffffffffffffff R13=ffff88804ababec0 R14=0000000000000000 R15=0000000000000100
RIP=ffffffff84880721 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f72f0690 CR3=000000001a8e2000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 000000ff00000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=0000000000000003 RCX=1ffffffff203a317 RDX=ffff88801f76c880
RSI=ffffffff813c5884 RDI=ffffffff813c5871 RBP=ffff888021cfb808 RSP=ffffc90000e1eba0
R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff901ce5cf R11=0000000000000000
R12=0000000000000003 R13=0000000000000003 R14=ffff88802b73fdc0 R15=ffffed100439f701
RIP=ffffffff813c5886 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fd666a09440 CR3=000000000db7c000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d51fceeea811fe44 ea596977b6984dc1
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 aacebf9183959167 b0754818792b3eb8
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2b2e23532c7b0c95 838d6dcf2d51a3a8
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 624f8918688a23a6 ab44419f13175ccd
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003380
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01f02117aaaa0000 10aaaaaa000001f0
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 41b2000021ede9ec 2d6a000001f02309
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ad90000001f021ea 01f021d000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 175610aa00000000 aaaaaaaa99580000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 628373c6d1ca9ec5 ee4f47514de5a0e3
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d7b1a003aad46f10 c811e80f5df7ef79
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000