last executing test programs:

11.686786656s ago: executing program 3 (id=1097):
socket$nl_route(0x10, 0x3, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'trusted:', 0x20, 0x40}, 0x32, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

11.633486972s ago: executing program 3 (id=1098):
socket$inet_udplite(0x2, 0x2, 0x88)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r1, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0)
ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) (async)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
read$FUSE(r3, &(0x7f0000001340)={0x2020}, 0x2020) (async)
read$FUSE(r3, &(0x7f0000001340)={0x2020}, 0x2020)
timer_create(0x6, &(0x7f0000000140)={0x0, 0x21, 0x2, @thr={&(0x7f0000000100)="050ded150a88e425957e42be71c32d36db361c4223f5f69de3de69e17324c679ed5f484f02cd9ca6664758461cff980e328091bafb5ea1c80fc4e7", &(0x7f00000003c0)="86c7a2abc6fe370cdb0274162240ee9a5918854d04ee4a829be291829d944388d55dae8e151e2136672eeb52dfec3d7acfb0bd9e37486b3253e8630195dca1a4f977f9ccf25f9e1cdbf3bf3dca4b2d01aa5087e8347e8254aee2eaadf10d178bbc9355282ab01502d861420c71a9c3161686bb8b684c95b968777bc92a16d5089fadd97b847e2da1119f4bb9ee15b432f5cd1821b79f64744c8fb3e46955cc87117cbc12e7f3562358e12b234afe33319430661ba214216c0d33d5ad16020f64063d3e3e1c71"}}, &(0x7f0000000180)=<r5=>0x0)
timer_settime(r5, 0x1, &(0x7f00000004c0)={{0x77359400}}, &(0x7f0000000500))
syz_io_uring_setup(0x2de1, &(0x7f0000000540)={0x0, 0x0, 0x10101, 0x0, 0x29d}, &(0x7f0000000080), &(0x7f0000000000)) (async)
r6 = syz_io_uring_setup(0x2de1, &(0x7f0000000540)={0x0, 0x0, 0x10101, 0x0, 0x29d}, &(0x7f0000000080), &(0x7f0000000000)=<r7=>0x0)
syz_io_uring_setup(0x5c2, &(0x7f0000000200), &(0x7f0000000300), &(0x7f0000000380)) (async)
syz_io_uring_setup(0x5c2, &(0x7f0000000200), &(0x7f0000000300)=<r8=>0x0, &(0x7f0000000380))
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
gettid() (async)
gettid()
listen(0xffffffffffffffff, 0x0)
accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r9 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_pts(r9, 0x0)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async)
r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r11, r10, &(0x7f0000002080)=0x64, 0x23b) (async)
sendfile(r11, r10, &(0x7f0000002080)=0x64, 0x23b)
syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4})
io_uring_enter(r6, 0x381b, 0x0, 0x0, 0x0, 0x0) (async)
io_uring_enter(r6, 0x381b, 0x0, 0x0, 0x0, 0x0)

10.873636564s ago: executing program 2 (id=1102):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
writev(r0, &(0x7f0000006f40)=[{&(0x7f0000005e40)="63bf13071c2990e6d37e032ac24418382bc73f832d750db16c688b68398725cdc4250407f8d6ebaea82e4c90b15f3600efa74301ad51c7eb1cc6d717285983a876ec613405f24ca320dec72acb7f86dc9bef6a2721c8006aa341f7fc755e68643286a969e028b0296b8aa4bf401686cc0450aa93937f07fa6f0d7ead18597b01a9c148097804c16eed88c98a3da8c3f0b2ac790f19805d3d2993e30413cdd558de3209d1d40e7967cc5a80319517b28a6e53098dd532e05ca992ff4eb3ba5f6d1bfdf52334d57bc703e68a24301e43c931eae01dae92911bcb8ae69eefed9808e0335e4e96ed8547c660042f6bc22a44233b97b68b2902da798e98ccf12e50a45ccc0c861022a35c2c70f72770b7780152fce8e79c23c61df9885303f245ab8bf8b828a128732a75f2945712ddc60569db289ae83980a68eca262e62d14803e01d216a00b185e57eb0f5f3fb2e1b33a5c229f86ce50e926ce54622f6342dcb3020ff7474a1691e02b8ffa7b0c178c0ab2ff2f83ea1849ac3d88b3fefda209ffdda00097982ec80dfb66e8e75a3a20dcfd2d25e75fbc836eebbc1585fa4b92ea21ffa594bd79c78d1c9c70e1da6a348af3587a4a0121d23b808721c6ab517ad1447853e81ab6c1230aa95249042afd0d84a57b58d70521fac6c681700d3b7e3fa1cd909c74aaca1b7502d1c49dbba94c80bdea60956007c1654f391f559f5a3b530e7e3f2e7b575b0f1effc4aab4f4d90acb14ea24f2608fcc0d6ba7f8281dcbdbc77c94cd04fb58b68de0fd21586cf83f262c3105ea9ceea64ac866ccc80a6083dd47154caacd13072479d49f89bd4a7163d145a3d3d296bdbeeac3de1bc439765d531149676f566ebe871e53a4c65f6f85f82a1e9ae1b8b6b4468e138e74584d134faf1158c3242f1241bf04e10218ea51e01b7cb4ad79da68e86b6cf274b84bc34076367476c56cc82eb24df2a95ca9189217a13d7061c13c0c4837c0e077a35def184c9c3478e42ad315d803ce4b264f118d101b367813d29423ce9beb0799a92612e9232c00d3536f355a996a896a695e82347a7e9ca4b33313017b01373fb15af7a17cf674970d525260d0c8012083975b825c8121e43f03daf040abc688da2d58277cbee0be34afbeb9dc54b0ea79c9578de616b81154f7dffbfae8fafb751b159fde4f0944a69dcf12ef7c5c943d58bfc7ecd864bbe0b138e78483f307322c3247ce19955dcd2161df559be95934ebdce375c93eeef3eec632ae5d75dae2001aa1414240d20c25745a73d5020ac6b1c3371bb1bfd681f87ec3952f13eaf101eb33cb0c887939a8ab5d203cd0eaeb4a0ed72fab4519cef782051aa5bb5c905fdc2e432dabf1cbb7185fc3cba376c2d1c930863871f19829c0b7d1f3abfb26d6b9bbd82931df0cb9fe6dff78d834cf9085cf6c8207bce8e96980ed839c79000e0c0bfc079b3925950d8d35f6048fa9fb5c2973a8870bb8c3fdb3ebb21c79747bb212537f8bcb46781805ed5e306c0433045d597785a74fb4bcea381c067e7b163df247f19bbae329958ba53769b8e5d5a075a7afa4588db5e36e7d2acf5b126c772b1f47d773bbb56bfdec5d9ece1c2c5134b84de592c9752999fd2177b0d5d9a8d1dede8fccdff1001e9f969cac071306053e2ff88baa62f23c64e468ef51ec0e7e042ec8d44066980880dfa087bc36a5cf0661ca47640d86b72159b33e4dfc8376367619f390dd4b36cb7a153144ba7e77100bd4504849ca96d42c08c6b661f31203ba579443573eb1c9faee0ddb32436e594203aac76826e0e2b7b4ab7535c70a4631eedfebab276c2a3a2cb51b27af497c5dd8c7356ddcce7dbd99526ec247e85dec9cb1eedeac017236d85b9b019bdd48cb835e6f7a46b3f0f4e7d992171c27896a4ad916850f4654b1766fdd0d4ab870e4964eee062b009cdc671b03ed772d7c2c36a1bae026c4267e4b52f27dfec3ac313c068786a5ac99b2e678fb7453dde398fc2a42782ef5feae0be17a2d579ef896ffe4b4afecfb078a9201b71cb2e44447749f296985e1a8b188963801a3eb4678daa995895e2c8c83e6d2b3fe8e63d8abcf8778c5ecdc430ab2f81a1ad0093f65650de2671ff9844154f7416f6bbfc950edd075bca44e7bd626df7889a90ed3b390e98cc22ac3e0ede5ef0fb6761e6ae1cb3d4362c5572db392afe5841cf6a59b4bbdd76db04201e596cd04e745f267185f947e4dcd908a11246c3437f2de10dfee34dbbf968e052e21ff3244bd64067aaa80186de8362cc929a76a27e688b9812723b27005ecc9e13a867de90936c00c1dcbe3eb936106915c11165006ead5f327ff75a894127632f7cfceb4805243280c728eaf9c92fada1eeaabffd1ad4569404bdeff526711f52c8707b82faf809441e30e4a3b8232613387d767926a83e8aff2550cc7f30c781caaf2bf3cc3232dfc865ef1773a7a2b51f30f052346a1be4e88fc925fd9fdbacb88c1c2fcbee7cf32450ef285af9020ed5c1a4764a9efb1ec884377f90922d4c588bb86f7bd3d9c97e15024cabba381759215a5757c7025292f4aca29e6a0d0f1d0ac78fa437ccf8eec9b22a47bbc2726db87836e65fe4b6897ee48e491bc92e7eade275a06887864218c0a616078e32c0d3185a316b60a2571f83f5ecafde174aeed31223cbaa86102ded9dc3026f69645ae1d228594a8d35329c0ba011eaff3cae35e4864d762a516ce11ba16494e9e82c15a91d91dc6867bfcd5538d97e2a3b101c8175b07804256c0de35b718885509844270908426d32ff9395ac86ea98c37655e850e86ca9a5ad28bd0fe7157cb1f18f172e9046f24741d04ae10ed50944d7752d316dfadd880f12b984e8809ac45b61951f545d7a3f6e4ebed8d3a22229478dd3ba8e1545105e1d959a1cabb6afd9a6f624e2618462d7aae41474f8a542990a4195e284fbca1f527967cf153c90bfb8c7239b8d1dd7143ab1c38bd111e683ae33327b6ec2bee4482875077e362606487362dba2961f0e3b6de425e5ec22bb3a7a41df8814768d4bd867c8e80815a230a27d7c7f65638708f2bee15bdb3ab3ce41f999de43d41a0e7513422430c2802e63c6944b5a780c664afbf347b4dd0d78ece9853c8569ed9d51b8056c19a1dd8f840d0ec2eb3f4d6c6cb0f98530ec2e29d7940aca1e2c71b8caa5169cabaa2977c496b01beba0003769e5721791789d3a943b60110d1b323b9a7a8eb0c4b404d48f018802ff9a7705382aa33a480b3fdd5b8d28997cab241207e2fee7daa09fc1b37bf818156a612b9dc6619e7566dacc732956c12aea52ee1d8cb72918d533ec3eacb0c66c8b94444f19437bcec8acef83b69f8eb16dc63d95abc599a7d28bfaf8d12d993647f664d9bba253d7c2de76c3463ca420ab215ae6271c3c3f0e7d13924244321a082230ea4374d70612dd31d4d949756e2e16b150ae8054c993b2e9b4a1de5068c2b8a85791dd70a2dea5f5cecb4e1a8e7238b27c518a260788f668a958492793a5ede28a00961db60875efb24fb794d3182deb2f6f1f63ea8bce005131de970051c87c59db8f16d959e00dfe110dda6c58821bd8ce795cffbe8e46572618c978cde8877474f8b9ecd4d086493f7a8c286ba85b60aab3298ae14f67e764d096cb7b3fb9be8ecc97ab51f588119be7a1bdc3921e3a84dcdd5067f5f2fa036f49096cbb9dd02c61c06eef4b601daca68e4e7b9d4dc93799de3f292a410ed8141ace20bc8515684de8c3ee5f5eb487e772aa95648bfef6665903b068d59ba5a7c007f756066f5b1fc27ed819bea874c63ffd3a5a9c97b959b168c6caa5547067674c8369c774dc7f923a4d42e61c300fa00f4d0ae11d5e101496a9261958aa6de4399daea597a1377748c3c270a989e05e9d21f1c64952e99f325838176d2ecf1cf85a211faa11cafa9d9e5a10faeb10226c1a5f3e909b00c0d9598843d3925c675378becc17cc162e3a0c367a2fdd629e32656a393f7ae0125bc9635593570265cb75d8150b5a30e416b80a27fcf12fefc23d34095fd52a7741d5c8b91ec1b6d342bdfafc03ad9c6d56eda18a", 0xb42}], 0x1)
r1 = openat$sr(0xffffff9c, &(0x7f0000000000), 0x224000, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000009c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
ioperm(0x0, 0x1, 0x6)
sysinfo(&(0x7f0000000000)=""/158)
sendmmsg$inet(r3, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001e80)="9fd4401ad6bb42ca03300f6782df379f727dc8b1f5711de1c1a30e8b5af5b6d0857a27ce87d5a3", 0x27}, {&(0x7f0000001ec0)="82e47a72d6a70a4f407820a8029e275d7f7d49f6a950d961a4a3467da3c42756d05f896f570bdf2614b5430b8ec77440486528", 0x33}, {&(0x7f0000001f00)="e3ccb467d5c1eb8c68e2456e594b981073badab17e671cf59daa44f59747c93b5c058f57d8ef037e3f8a7601f16ddf392703da44480fa3f8ce19849d63496981a2cae45b364d36be3c4230658dfd12cb9f8bb41bee2d0daa7b3256e6ad0317356f43f6243297b2511946829fc0eb15b932d3f3ad31289c1d8654df61929e9ebfcc31dc17eafac77e4960be112c6d05045d40cd530e056fea60aa751b495a08e4ce35a7d3bbe31bdf1acedbeb7748da68206e1151b8939de7a8447d8533ba4707946dbdf35edf4d708dd960c0d981ceba6bb33b9e97e41c96ec0127d95632", 0xde}], 0x3}}], 0x1, 0x0)
accept4$alg(r1, 0x0, 0x0, 0x81000)

10.773418108s ago: executing program 2 (id=1103):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000170a010400b88caa858f8c97490004000900020073797a3000000000487174dd272044850e7200174745beda47c47a79a860c1565d2c9ab188"], 0x20}}, 0x0)

10.771535516s ago: executing program 2 (id=1104):
r0 = socket$inet6(0xa, 0x2, 0x3a)
r1 = dup(r0)
bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)
syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="1770e6b83fb8bbbbbbbbbbbb86dd6012000800083a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa81009078027b0000bccb8a"], 0x0)
socket$inet6(0xa, 0x2, 0x3a) (async)
dup(r0) (async)
bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="1770e6b83fb8bbbbbbbbbbbb86dd6012000800083a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa81009078027b0000bccb8a"], 0x0) (async)

10.663618701s ago: executing program 2 (id=1105):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYRES16=r1, @ANYRES8, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r2, 0x0)
write$FUSE_LK(r3, &(0x7f00000002c0)={0x28, 0xfffffffffffffffe, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28)
read$FUSE(r3, &(0x7f0000001ac0)={0x2020}, 0x2020)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
splice(r5, 0x0, r4, 0x0, 0x1, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000001240)=[@text32={0x20, &(0x7f0000000800)="c4c1a01520b9810000400f32660f1c4180c4e2ad9c0bb8980000000f23d00f21f8352000000c0f23f8f0fe41fb8fe9a001e60f01d1b9800000c00f3235010000000f300f01cb", 0x46}], 0x1, 0x28, 0x0, 0xfffffffffffffd96)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {}, {0x5000, 0xdddd0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0xf000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, 0xddfdffdb, 0x0, 0x0, 0x14213b, 0x0, 0xc6026c0b08ab7d0b, 0x0, [0x0, 0x8, 0x1, 0xfffffffffffffffb]})
socket$inet6(0xa, 0x800, 0x6)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r4, 0x20, &(0x7f0000000400)={&(0x7f00000003c0)=""/59, 0x3b, <r9=>0x0, &(0x7f0000000580)=""/201, 0xc9}}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$MSR(&(0x7f00000001c0), 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10)
fcntl$setpipe(r4, 0x407, 0x100000)
close_range(r4, 0xffffffffffffffff, 0x0)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff)
mount$binderfs(0x0, &(0x7f0000000180)='./binderfs2\x00', &(0x7f00000000c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="6d61783d30303030303030303030303030303030303030303030302c00e4d7417c04b5fe8da50f893d2abea267d5c16dea87a92184cd3f8994b5f265041b054e9a09602d215aad98fc776f5b533f066b2e"])

10.333972212s ago: executing program 2 (id=1106):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
io_uring_setup(0x4da2, &(0x7f00000002c0))
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x129082, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a00010000000000000000001c"], 0x24}}, 0x0)

10.154101221s ago: executing program 3 (id=1108):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x504, 0x360, 0x25, 0x148, 0x0, 0x60, 0x470, 0x2a8, 0x2a8, 0x470, 0x2a8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xffffffff, 0xff000000, 'rose0\x00', 'veth1\x00', {0xff}, {}, 0x73, 0x2, 0x4e}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0xe, 0x8, 0x9, '\x00', 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x7f00, 0x6]}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x2}, {0x0, [], 0x0, 0x2}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x560)

10.153701457s ago: executing program 3 (id=1109):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x2, 0x1, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x2, 0x5, 0x8, 0x9}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
socket(0xa, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYRESDEC], 0x230}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000018c0)=ANY=[@ANYBLOB="020a20057ce0a3f500000000ffdbdf25020013000300000027bd70000235000102001300f51c00f18605d2082840772c"], 0x30}}, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x101, 0x4, 0x4, 0x8000, 0x5, 0x9, 0x1}, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200))
r4 = syz_io_uring_setup(0x24fa, &(0x7f0000000300)={0x0, 0xa9ce, 0x10100, 0x100}, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x27b6, &(0x7f0000000480)={0x0, 0x7f, 0x20, 0x23, 0x0, 0x0, r4}, &(0x7f0000000240), &(0x7f0000000140)=<r5=>0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x1, 0x7})
write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)

9.492916546s ago: executing program 2 (id=1112):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) (async)
r1 = openat$dsp(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)) (async)
read$dsp(r1, &(0x7f0000000340)=""/71, 0x47) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) (async)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x1, 0x1}, 0x6)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d24", @ANYBLOB="f7", @ANYRESOCT], 0x0) (async)
r3 = syz_io_uring_setup(0xd2, &(0x7f00000003c0), 0x0, &(0x7f0000000080))
io_uring_enter(r3, 0x47ba, 0x95ff, 0x3900000000000000, 0x0, 0x0) (async)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, <r5=>0x0})
ptrace(0x8, r5)
fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) (async)
read$FUSE(r4, &(0x7f0000000500)={0x2020}, 0x2020) (async)
mq_open(&(0x7f0000000140)='xlxsw_sp_acl_tcam_vregi{n_g\x18\'\x89\xb2\xc6zate_\x7f\x00\x00\x00\x00\x00\x00\x00\x00', 0x1, 0x31, &(0x7f0000000100)={0x22, 0x83ac, 0xfffffff8, 0xa530}) (async)
write(r2, &(0x7f0000000340)="07000000010000", 0x7) (async)
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) (async)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0)
pwritev(r6, 0x0, 0x0, 0x3000, 0x0)

9.233439921s ago: executing program 3 (id=1113):
pipe(&(0x7f0000000580)={<r0=>0xffffffffffffffff}) (async)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x80803, 0x83)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/vlan/vlan0\x00')
readv(r4, &(0x7f0000001340)=[{&(0x7f0000000340)=""/4096, 0x1000}, {0x0}], 0x2) (async)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x20}, 0x1, 0x0, 0x0, 0x4085}, 0x4) (async, rerun: 64)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (rerun: 64)
mkdir(&(0x7f0000000300)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async, rerun: 32)
r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r7=>r6}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{0xfffffffc}, {}, {0x0, 0x3}]}}) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) (async, rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64)
ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000100)) (async)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)

9.173853894s ago: executing program 3 (id=1114):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000003dc0)=""/102400, 0xfffffffffffffd2d)
userfaultfd(0x1)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r4, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "edd0961fcbe3a714699b769277aa362003e40900661e12bcca7f88cd6d07f3648c21a4b612af05000000a25b96f8fffffffffffffffe700a13056afd600927"}, 0x60)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x5)
recvmsg(r4, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYRES16=r4], &(0x7f0000001200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, <r6=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80800, 0x0, <r7=>0xffffffffffffffff})
ioctl$BLKFLSBUF(r7, 0x1261, &(0x7f0000000240)=0x1f44)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x21, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18010000", @ANYRES16=r8, @ANYBLOB="010027bd7000fcdbdf250100000014000180080003000300000008000400", @ANYRESOCT=r5, @ANYBLOB="04000300ac00028054000180080001000300000008000100060000000800010000000000080001000700000008000100080000000800010007000000080001000200000008000100020000000800010002000000080001000800000024000180080001000300000008000100020000000800010000000000080001000000000014000180080001000200000008000100030000001c000180080001000000000008000100140000000800010001000000040003003800028034000180080001000500000008000100050000000800010006000000080001000800000008000100080000000800010002000000040003"], 0x118}, 0x1, 0x0, 0x0, 0x804}, 0x4050)
openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x6002, 0x0)

5.002772507s ago: executing program 0 (id=1132):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0xa0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_IE_ASSOC_RESP={0x2b, 0x80, [@prep={0x83, 0x25, {{0x0, 0x1}, 0xd0, 0x8, @device_b, 0x80000001, @value=@broadcast, 0x3ff, 0x80000001, @device_b, 0x7}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0xa0}}, 0x0)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$DVD_WRITE_STRUCT(r3, 0x5392, &(0x7f0000000d40)=@bca={0x3, 0xbc, "dc9abf26244d9bf65d42284949551d402472497c713e87741488cad71323d9b351a1a74c279a03459d4b33060184023dacfc41dbdc7433b43a28c2f2a7b64188f562de72cf586e4f51e40156f12574e140f7055d8dbecce81b5b2cfcb91f81d963afbc147a2fde78bf305a028f3cced79e460f7738d167d59e96325e80cc867e11e12038bfe4502e856ec2022719b35797fd74c4752d6e567a58e356dde4dec6c57dd9b192005733103a2ec9cb9e6e7c0b2f6cc5f647e963353a4f4c"})

4.892051869s ago: executing program 0 (id=1133):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd3, 0xaf, 0x1, 0x20, 0x17cc, 0x1010, 0x4072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x9, 0xb}}]}}]}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
stat(&(0x7f00000001c0)='./file0\x00', 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = eventfd2(0x0, 0x80001)
r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000380), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f0000000480)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x81, 0x3a, '}\x8cc\xe5@\x16\xb6\xd6+\x1f\xe0\xcc\xae\xf2/7N\xb4is\x13l\b\xca8\x9b\xb6\xce\xfeb/\xd3\xac\xa7\x82]\xb6[I8\xca\x96\xfe\b\x05\xa0)\x93\xb1)\xb3\x1b\xa2Y\x8f\'xD\x13l\x1c\xe0\xf8\xc3,\x06\xd4ze]Pyc\r\x04A\xeaH\xabS6\x06\xeeB\xb4f0\xe0\xa1', 0x3a, '!', 0x3a, './file0'}, 0x81)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0xc, 0x2, r3})
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6b2e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x7}]})
openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.573348678s ago: executing program 0 (id=1134):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r1, 0x0)
r2 = dup(r0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180), 0x0)
io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mount$binder(0x0, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={[{@stats}]})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
sendfile(r4, r5, 0x0, 0x100800001)
mount$binder(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100), 0x800, &(0x7f0000000380)={[{@max={'max', 0x3d, 0x3}}, {@stats}, {@stats}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x2}}], [{@smackfsroot={'smackfsroot', 0x3d, '/proc/partitions\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_gt={'fowner>', 0xee01}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@pcr={'pcr', 0x3d, 0x26}}, {@subj_role}, {@obj_type}, {@seclabel}, {@dont_measure}, {@dont_measure}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18070000001007000000000000958d70002fdfd535000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
ioctl$TIOCMBIS(0xffffffffffffffff, 0x541e, &(0x7f0000000040))
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r7, r6, 0x0, 0x23d)
unshare(0x22020600)

2.749684815s ago: executing program 0 (id=1135):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_rdma(&(0x7f0000000200), &(0x7f0000000240)='./cgroup\x00', &(0x7f00000002c0), 0x1000000, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532302c74696d656f75743d3078303030303030303066666666666466392c004c4f30e6145fe89c520fc866fd334662d3"])
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chroot(&(0x7f0000000040)='./file0\x00')
umount2(&(0x7f0000000000)='./file0\x00', 0x1)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
socket$igmp6(0xa, 0x3, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa0, 0x30, 0x1, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_ct={0x40, 0x2, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0x7f, &(0x7f0000000280)=ANY=[], 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
times(&(0x7f00000001c0))
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r3, 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
dup3(r5, r4, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f00004b0000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x9)

1.793626675s ago: executing program 0 (id=1140):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6", 0x3)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000240)={0x3, 0x0, 0x9, 0x20, 0xe9, &(0x7f0000000800)})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x8e, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r5, r1, &(0x7f0000002080)=0x64, 0x23b)
accept4(r1, 0x0, 0x0, 0x0)
r6 = socket$inet(0x2, 0x3, 0x14)
setsockopt$inet_msfilter(r6, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1)
getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000040)={<r7=>0x0, @local, @local}, &(0x7f0000000740)=0xc)
r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f0000000280)={0x4000001, 0x4})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r9=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000003c0)={r9, <r10=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}})
r11 = socket(0x10, 0x3, 0x0)
r12 = openat$cachefiles(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
read$FUSE(r12, 0x0, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8}]}}]}, 0x38}}, 0x0)

1.203601679s ago: executing program 1 (id=1143):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
io_setup(0x9, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000340)="e25b51ae7029d1d2cba228009b5ea3897388d5930a687d37177389380eacee7d330ef7c1b6bfda3137cdd1e18838d39efd2956868b680d7aec324bee9365b1c379fe3221d4d52dcd", 0x48, 0x226d}])
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10)
pwritev2(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0)
r4 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_getsetattr(r4, 0x0, 0x0)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
io_setup(0x7, &(0x7f0000000040)=<r6=>0x0)
close_range(r5, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0)
io_submit(r6, 0x1, &(0x7f0000000480)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}])
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000c00)={@local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x7, 0x14, 0x66, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x7}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x2, {{0x4, 0x2, 0x83, 0x3, 0x0, 0x2, 0x6}, 0x2, {0x7, 0x4, 0x0, 0x1e, 0x0, 0x0, 0x2, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0xc1, 0x0)

814.133467ms ago: executing program 0 (id=1144):
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x8340})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000940)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0xc3, &(0x7f0000000400)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r4}, 0x10)
close(0xffffffffffffffff)
syz_clone(0x811e5400, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
syz_clone(0x0, &(0x7f00000001c0)="47ea99f95c0023c8252be9962885", 0xe, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000800)="31c553bd68b31648faaccb10e91a4de46c3418f81a40f74a30562c0c21f07270e8309f9a4c30ed91543428edf6ee3c1e1689af87cca4a171b35172432850d7f3743411d8f56f1fe0ae7d6ffaf63f8c5f9e2546c14b99f530827f62f51d15b0384dfc2cc1620b2f271eef68c4ecad4ea29f6ada49b9f419590ed03c062536f2b5df41b8c6cb53c70a05dd4a6cff28da439d7231f292c4826a54d2e00fb96999cb4cab1eb8861a1c5252c73f5a755888f887a3c359789e42cef38c18a2e28b1ab070a878da9d9a2bf3034fca707624")
r5 = socket$inet6(0xa, 0x6, 0x2)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRES16=r4, @ANYRES64=0x0], 0x0)
r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0xd0882)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="000000000000000000000000000000000000000f38bb23dd23f44100000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff010000001d00000000000000000065727370616e3000000000000000000062726964676530000000000000000000b43b24af61af8e2f000000000000000065716c00000000000000000000000000ffffffffffff000000000000aaaaaaaaaa000000000000000000a000000010010000380100006d61726b5f6d00000000000000000000000000000000000000000000000000000c0000000400000001000000000100006e666c6f670000000000000000000000000000000000000000000000000000004c0000006d8000000900090000000000b80eba8ec4468a0538ee0eed5dd9119d918668afa6c019b085be3837595dc113ccf27499f7202a2b59394b2619bcf57ec99b9abb99943198532b0b7bdd0f61e5726564697265637400000000000000000000000000000000000000000000000004000000fdffffff"]}, 0x218)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='rxrpc_rx_abort\x00'}, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x44800)
r8 = syz_open_dev$I2C(&(0x7f0000000900), 0xd9, 0x18500)
ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000001100)={&(0x7f0000000400)=[{0x7ff, 0x2010, 0x0, 0x0}, {0x2, 0x0, 0x0, 0x0}], 0x2})
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)

183.960339ms ago: executing program 1 (id=1145):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x0, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8400, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0xc0844123, &(0x7f0000000080))
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x0, 0x0, 0x0, {0x1}}], {0x14}}, 0x3c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a9a0000080027"], 0x44}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x5}, 0x10)
getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170000014000280080004000104000005000a000100000008000a00", @ANYRES32=r6], 0x4c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='@'], 0x85}}, 0x0)

103.655487ms ago: executing program 1 (id=1146):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) (async)
socket$qrtr(0x2a, 0x2, 0x0) (async)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$igmp6(0xa, 0x3, 0x2) (async)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)={0x10001}, 0x8) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xfd}, "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"}, 0x101) (async)
flock(r0, 0x1f) (async)
r4 = socket$inet(0x2, 0x3, 0x5) (async)
r5 = getpgid(0x0)
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000240)={r5, 0x1, 0x420}) (async)
io_uring_enter(r3, 0x5018, 0x2ce2, 0x10, &(0x7f0000000280)={[0x9, 0x1]}, 0x8) (async)
socket$inet6(0xa, 0x3, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x2, [@union={0xa, 0x6, 0x0, 0x5, 0x0, 0x100, [{0x0, 0x3, 0x80000000}, {0x6, 0x0, 0x7}, {0xd, 0x5, 0x9}, {0x4, 0x5, 0x1}, {0x2, 0x0, 0x6}, {0x4, 0x3, 0x1}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @struct={0x9, 0x3, 0x0, 0x4, 0x1, 0x0, [{0x8, 0x4, 0x3ff}, {0xa, 0x4, 0x3}, {0xd, 0x4, 0xb}]}, @func={0x10, 0x0, 0x0, 0xc, 0x2}, @var={0x4, 0x0, 0x0, 0xe, 0x5, 0x2}, @struct={0x8, 0x2, 0x0, 0x4, 0x0, 0x5a, [{0xf, 0x0, 0x644b}, {0xa, 0x4}]}, @enum={0x3, 0x1, 0x0, 0x6, 0x4, [{0xf, 0x4}]}]}}, &(0x7f00000003c0)=""/192, 0xfe, 0xc0, 0x0, 0x3c, 0x0, @void, @value}, 0x28)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r1, 0x10000000)
syz_io_uring_submit(0x0, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x0, 0x1, &(0x7f00000004c0)="8ee26124d9322a9fe0c0a0774b67fd1a155b7f9a6db90df2378a7d917013ed2d1e6ca8a544c7ec5ad128ac4bb0a4c4ad0c5c506114d50bcd5132320e710e69a7de3c2bbc2c0b2f373372d10724e23f08c113755de76838ee4070cbaf4fd429528295e285b27d062b8f39e8b0a6b8e9c86d985f0c0d6c51650e5a4b8169d24b33", 0x6, 0x0, 0x0, {0x2}})
sched_setaffinity(r5, 0x8, &(0x7f0000000580)=0x740e)
r7 = socket$phonet_pipe(0x23, 0x5, 0x2)
sendto$phonet(r7, &(0x7f00000005c0)="3116952df3cae54757c73e3014e42731424d7fe161c75977a994a91c48ce0f2e9358b50107b832a30c334af6783365f897e890c60cb586f1cd3e70954533e26d31df17467fa74ddaf464a66ca8aa3d408cbe4e126b06a516f3d7e14c6780d4ac399b2faa6959888793f66e912d9722447650992da4e22bb448df4e14573d3bcb5ea68b2a", 0x84, 0x0, &(0x7f0000000680)={0x23, 0x4, 0x5, 0x8}, 0x10)
ptrace$setopts(0x4206, r5, 0x3, 0x2eace7980856a5a4) (async)
mmap$xdp(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x8010, r2, 0x0) (async)
ioctl$MON_IOCX_GET(r2, 0x400c9206, &(0x7f0000000800)={&(0x7f00000006c0), &(0x7f0000000700)=""/232, 0xe8}) (async, rerun: 32)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000840)=<r8=>0x0) (rerun: 32)
sendmsg$nfc_llcp(r2, &(0x7f0000001f40)={&(0x7f0000000880)={0x27, r8, 0x0, 0x1, 0x57, 0x6, "504844e55be091f5a64cd544f7b0d826428e02adf45f7c94feb9cd5575bf0bf016a7cd6827148a8a5be78fad53e3cd987f387da62e64e0b46d9339f0d19bc4", 0x24}, 0x58, &(0x7f0000001e40)=[{&(0x7f0000000900)="bf68f79e0b4f9a34bb1470768d42f721f0e472149d9d896e91a3eb1d09bde5249ef790d6ab0b706209c27ef113aa83ce689129229f5de93923cfc6f2944f3767fdef2bec798ea63b69a662ee18f6d5df620918fdfa0943f1b09986f3cc187fd35b1f40e4dcb864b6c6c743c1d8450deabcbe5e4bf3337ee17eb4e7b3c0d22f996cdd6f0abb4496b59181cf35ee2c618cbd84021a931c4600938fed66d1231d163109e3c2a7584bef92427d0fd7dc466ae5811b6c6fff2d5a9da49e28d513b37b44259b34477121", 0xc7}, {&(0x7f0000000a00)="a1a8ca7c039e1d00c3890c5c57582330a1be44c4ebc5f8fd6959e63c326326aec9ef6d0133ef90abf622f3fc2cd8ee7eaee79784c0a1de30680501bd84494a550e260d9876043855ae2b817881794c029417c468375bc85c8c1d52de2a48bda40ef1c21fb1bc05ea5e10aa58450c91b42bd8799a3d793dfabec144e3d339d25074a81d489716b61147682845ec4cc793156e501860532b4396f6d751db992aba290feb9335e781d0a67222142147741663a2ddaa9389b860c34e7b1e64161cf3b7c6d73aa1ff57b0b2b8e90a526beed34e146609e15e486a1ef78879008e53554c94d73cd75e19ea296e1b2e", 0xec}, {&(0x7f0000000b00)="82149f3a819044b4bb166882188fa1d085b52083452d0f556c5a2d4df5d612d5852a28516e721b07d888d263bb8ad7eb3f815a090fc202704b9d6f1a18642d780c935a7c5f45004db9aea2a82b9b970ed7bf6c565fd6ba9515ffded55106c92ea636a01bb3e54c4930068651c3078427406110abc22104b03d1b970d6985f7b0e4b8997c1e07406a58ce2ca82990c2b2c0180c8de72e77690f9583aea59e633c42d71b51e310577faeaf52b8c279a8613709a2b1473950379d58349461c06d3c", 0xc0}, {&(0x7f0000000bc0)="cdd1b7d4de11a6527e92762a0af308764c6078fc1ae28262ac645788e6e2e64c150ea29eef829d2c478f45bb1151c2670a3c", 0x32}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="fe66b38d4b31b4d1afe87f8b25a88a853ca1147a433e256aaea037aa82623170749dd8b78ed3df25e4632ca82b3c82d3c47cc68f45e9c983cc0e0af2dddeb569d0e942bcb744bbcbb4dacd45ddab32a09cec", 0x52}, {&(0x7f0000001c80)="efbc49c49d83357231b9a012adc4a407dc68c6df960488ebe436277df4a0a7674b4757b8077a7364d5287f438969d3a85c9ef0577a2aaf167e5e47bd8432268aa19d31f354bd0962bd2f222fab4233e8347d468d8287cdac490ab574dea900943816", 0x62}, {&(0x7f0000001d00)="ea38efe7ca9e8708ad69bd27784da04f6514aff823304ef1da47006ce635b2d97bd4bfa829710656ff1db5bba2a8b17889952ddb6b7d9a270cd97576eeccbf25eb45140485bbcde0430721eb25efd3c825f71cd15cafd4f7dda0081237851d90ffac378aaf1e4b24e115e796256110eaf3e24ccee7e6f63581caa2283476c33e9b22bd10e7d895a5cffcb6e38a6a7d475b7fa91fe2e14354c9f1f819e6f16d5ce71569b8b229aa3e85ac674dcbc304dd00b1ac8ef4cc01b2bf8f3b44d6be1a84f554ec6955b9e9a6bc717837ff6cbc010e697e966dfc", 0xd6}, {&(0x7f0000001e00)='\n-', 0x2}], 0x9, &(0x7f0000001ec0)={0x70, 0x102, 0x1, "1d5c073a4c963340363723dd5f73d2111895ccefd3e204e0ef155cc32c10f4e6b60dff9a36317ca2e2e83e904bd33bc162de75588796d640cd77d19fbb7c8fdd21fa8506cd5e7a2f8b3ad87d9e5047976ff9816d1507e9143c7d88e5b14b9261624c964f"}, 0x70, 0x44}, 0x20000) (async)
ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000001f80)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000002000)={'batadv0\x00', <r9=>0x0})
sendmsg$nl_route_sched_retired(r0, &(0x7f0000002200)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002040)=@deltclass={0x148, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xf, 0x5}, {0xfff2, 0xffe0}, {0xfff1, 0x10}}, [@c_cbq={{0x8}, {0x14, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x3, 0x2, 0xd8e, 0x400, 0x1, 0x35d}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x4}}}, @c_atm={{0x8}, {0x64, 0x2, [@TCA_ATM_HDR={0x1e, 0x3, "bc9da8579ac19be4780140f9538ee9865d744be28dea831d564d"}, @TCA_ATM_HDR={0x36, 0x3, "87d1f677ee516b7d8d50fe0239130f488426a4ff51cfec959c95acc07ff2daa3e2b5eb5c956b9b092ad2ef67c0710a63e0cf"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xa, 0xffc8}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x5}}}, @c_cbq={{0x8}, {0x4c, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x10, 0xfff2}, 0x461d, 0x1}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x18, 0x2, 0x4, 0x20, 0x61a, 0x0, 0x800, 0x1bf}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x7, 0x8, 0x5, 0x9, 0x2ce8, 0x18}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xd, 0x10}, 0x200, 0x5f}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x4}}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000000}, 0xc008)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$MON_IOCX_GETX(r2, 0x400c920a, &(0x7f00000022c0)={&(0x7f0000002240), &(0x7f0000002280)=""/12, 0xc})
mkdirat(r3, &(0x7f0000002300)='./file0\x00', 0x10)

98.237205ms ago: executing program 1 (id=1147):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x504, 0x360, 0x25, 0x148, 0x0, 0x60, 0x470, 0x2a8, 0x2a8, 0x470, 0x2a8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xffffffff, 0xff000000, 'rose0\x00', 'veth1\x00', {0xff}, {}, 0x73, 0x2, 0x4e}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0xe, 0x8, 0x9, '\x00', 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000, 0x6]}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x2}, {0x0, [], 0x0, 0x2}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x560)

43.225844ms ago: executing program 1 (id=1148):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0180a24e", @ANYRES32, @ANYBLOB="40000280"], 0x5c}, 0x1, 0xf000}, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={'veth1_to_bridge\x00', {0x2, 0x4e22, @multicast1}})
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r4, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000300))
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0})
r6 = dup(r5)
ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x0, r6})
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000)
preadv(r4, &(0x7f0000000340)=[{&(0x7f00000006c0)=""/185, 0xb9}], 0x1, 0xc, 0x3ffc0)
close_range(r3, 0xffffffffffffffff, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x11, r7, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000180)=0xb0000)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000540)={'syztnl0\x00', <r8=>0x0, 0x7, 0x10, 0x8, 0xd, {{0x2f, 0x4, 0x1, 0x34, 0xbc, 0x67, 0x0, 0x9, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x37, 0x0, [{0x1, 0x8, "e7b571b621f9"}, {0x0, 0x2}, {0x7, 0x10, "31dba34b0dae3138b1a5c8e2ccbd"}, {0x0, 0x2}, {0x7, 0xf, "8da2c8a9a623f3015e020a3d06"}, {0x2, 0x6, "6d1cd428"}]}, @timestamp={0x44, 0x14, 0xb7, 0x0, 0x4, [0x3, 0x2, 0x0, 0xc4f0]}, @ssrr={0x89, 0x23, 0xc, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @local]}, @noop, @noop, @cipso={0x86, 0x38, 0x3, [{0x1, 0xf, "bf3051f6b6bd39d8336e34071c"}, {0x6, 0xf, "2f1267b39fa9ec70dcf30ef6d9"}, {0x7, 0x2}, {0x7, 0x12, "2820b7a9abc0eca29680a443996fae43"}]}]}}}}})
sendto$packet(r5, &(0x7f0000000200)="ac008ec7d2933c4d8ee843943b34196791db0ca99c001162cab6723a919ec78cfd70cbd4c1bfa908e356b14283875b5c50d717a1f796222ac233ff2e6f3ca01f4263efff0a626169be2ae5c094a23e88061acc0590526d359be2b8abb74ab77fe857c6", 0x63, 0x804, &(0x7f0000000100)={0x11, 0x18, r8, 0x1, 0x7, 0x6, @multicast}, 0x14)

0s ago: executing program 1 (id=1149):
r0 = eventfd2(0x0, 0x0)
r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x3c}}, 0x0)
syz_usb_disconnect(r1)
r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000e80)=ANY=[], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, <r6=>0x0], &(0x7f0000000240), 0x0, 0x3, 0x0, 0x0, r5})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000000)={0x0, r6, r5})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
close(r7)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@map=r7, r8, 0x2f, 0x2014, 0x4, @value}, 0x20)
getsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000040), &(0x7f00000001c0)=0x4)
syz_usb_disconnect(r3)
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

r after parsing attributes in process `syz.1.328'.
[   86.224402][ T6831] netlink: 'syz.1.328': attribute type 18 has an invalid length.
[   86.235814][ T6831] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   86.235855][ T6831] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   86.235871][ T6831] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   86.235886][ T6831] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   86.236300][ T6831] vxlan0: entered promiscuous mode
[   86.734610][ T6805] vivid-007: reconnect
[   86.849130][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'.
[   86.920574][ T5343] Bluetooth: hci4: command tx timeout
[   87.058310][ T6870] fuse: Unknown parameter '+�ccV��U��i`N*���M�'
[   87.212929][ T6877] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   87.215282][ T6877] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   87.265674][ T6877] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   87.268879][ T6877] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   87.291196][ T6877] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   87.293393][ T6877] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[   87.337493][ T6877] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   87.340395][ T6877] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[   87.411167][ T6893] netlink: 'syz.3.337': attribute type 49 has an invalid length.
[   87.580758][ T6909] input: syz0 as /devices/virtual/input/input10
[   88.336215][ T6931] input: syz0 as /devices/virtual/input/input11
[   88.922148][ T6941] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 !
[   89.006087][ T6944] netlink: 64 bytes leftover after parsing attributes in process `syz.0.347'.
[   89.303152][ T6946] random: crng reseeded on system resumption
[   89.804477][   T39] audit: type=1326 audit(1729746642.404:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6949 comm="syz.0.349" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x0
[   89.857469][ T6952] overlay: Unknown parameter 'dont_appraise'
[   90.172299][ T6965] tipc: Can't bind to reserved service type 2
[   90.257339][ T6967] xt_CT: You must specify a L4 protocol and not use inversions on it
[   90.320050][   T39] audit: type=1326 audit(1729746642.924:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6968 comm="syz.2.354" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf746e579 code=0x0
[   90.706494][ T6980] vivid-000: =================  START STATUS  =================
[   90.708717][ T6980] vivid-000: Radio HW Seek Mode: Bounded
[   90.710287][ T6980] vivid-000: Radio Programmable HW Seek: false
[   90.711960][ T6980] vivid-000: RDS Rx I/O Mode: Block I/O
[   90.713738][ T6980] vivid-000: Generate RBDS Instead of RDS: false
[   90.715453][ T6980] vivid-000: RDS Reception: true
[   90.716919][ T6980] vivid-000: RDS Program Type: 0 inactive
[   90.718570][ T6980] vivid-000: RDS PS Name:  inactive
[   90.720001][ T6980] vivid-000: RDS Radio Text:  inactive
[   90.721514][ T6980] vivid-000: RDS Traffic Announcement: false inactive
[   90.723379][ T6980] vivid-000: RDS Traffic Program: false inactive
[   90.725161][ T6980] vivid-000: RDS Music: false inactive
[   90.726725][ T6980] vivid-000: ==================  END STATUS  ==================
[   90.997845][ T5497] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   91.160185][ T5497] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   91.164100][ T5497] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.166968][ T5497] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.178558][ T5497] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   91.189096][ T5497] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   91.192258][ T5497] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   91.195054][ T5497] usb 5-1: Manufacturer: syz
[   91.196160][ T7006] xt_CT: You must specify a L4 protocol and not use inversions on it
[   91.198151][ T5497] usb 5-1: config 0 descriptor??
[   91.366115][   T39] audit: type=1326 audit(1729746643.964:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.3.363" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x0
[   91.633409][ T5497] usbhid 5-1:0.0: can't add hid device: -71
[   91.635095][ T5497] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   91.639271][ T5497] usb 5-1: USB disconnect, device number 5
[   91.649120][ T7032] netlink: 80 bytes leftover after parsing attributes in process `syz.1.367'.
[   91.655462][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'.
[   91.666445][ T7032] vlan2: entered allmulticast mode
[   91.669871][ T7032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.367'.
[   92.122813][ T7085] xt_CT: You must specify a L4 protocol and not use inversions on it
[   92.137912][ T5497] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   92.299354][ T5497] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.303251][ T5497] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.306706][ T5497] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   92.313698][ T5497] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   92.316962][ T5497] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.321291][ T5497] usb 6-1: config 0 descriptor??
[   92.633344][ T7110] netlink: 20 bytes leftover after parsing attributes in process `syz.2.379'.
[   92.741074][ T5497] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[   92.743395][ T5497] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[   92.752157][ T5497] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   92.764566][ T5497] usb 6-1: USB disconnect, device number 6
[   92.833377][ T7120] team0: entered allmulticast mode
[   92.834781][ T7120] team_slave_0: entered allmulticast mode
[   92.836374][ T7120] team_slave_1: entered allmulticast mode
[   92.839746][ T7120] pim6reg: entered allmulticast mode
[   92.842353][ T7120] pim6reg: left allmulticast mode
[   92.843726][ T7120] team0: left allmulticast mode
[   92.844998][ T7120] team_slave_0: left allmulticast mode
[   92.846429][ T7120] team_slave_1: left allmulticast mode
[   92.930188][ T7122] xt_CT: You must specify a L4 protocol and not use inversions on it
[   93.515835][ T7151] fuse: Unknown parameter '��d'
[   93.750023][ T7164] wireguard0: entered promiscuous mode
[   93.751698][ T7164] wireguard0: entered allmulticast mode
[   93.871919][ T7168] xt_CT: You must specify a L4 protocol and not use inversions on it
[   94.027364][ T7170] netlink: 4272 bytes leftover after parsing attributes in process `syz.0.395'.
[   94.240344][ T7188] netlink: 84 bytes leftover after parsing attributes in process `syz.2.399'.
[   94.243412][ T7188] veth0_vlan: left promiscuous mode
[   94.245130][ T7188] veth0_vlan: entered allmulticast mode
[   94.247726][ T7188] veth0_vlan: entered promiscuous mode
[   94.354096][ T7206] xt_CT: You must specify a L4 protocol and not use inversions on it
[   94.399012][ T7212] mmap: syz.0.403 (7212): VmData 37531648 exceed data ulimit 65536. Update limits or use boot option ignore_rlimit_data.
[   94.631545][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'.
[   94.636048][ T7219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.408'.
[   94.643917][ T7219] binder: 7218:7219 ioctl c0306201 200003c0 returned -22
[   94.720117][ T7228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.410'.
[   94.737834][ T5497] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   94.859429][ T7233] netlink: 180 bytes leftover after parsing attributes in process `syz.3.412'.
[   94.892665][ T7236] xt_CT: You must specify a L4 protocol and not use inversions on it
[   94.917936][ T5497] usb 6-1: Using ep0 maxpacket: 32
[   94.924201][ T5497] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[   94.928429][ T5497] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[   94.930793][ T5497] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.933045][ T5497] usb 6-1: Product: syz
[   94.934227][ T5497] usb 6-1: Manufacturer: syz
[   94.935455][ T5497] usb 6-1: SerialNumber: syz
[   94.940814][ T5497] usb 6-1: config 0 descriptor??
[   94.942574][ T7214] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   94.947001][ T5497] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[   95.151259][  T981] usb 6-1: USB disconnect, device number 7
[   95.324301][ T7251] vivid-002: =================  START STATUS  =================
[   95.327157][ T7251] vivid-002: Radio HW Seek Mode: Bounded
[   95.329602][ T7251] vivid-002: Radio Programmable HW Seek: false
[   95.331858][ T7251] vivid-002: RDS Rx I/O Mode: Block I/O
[   95.333883][ T7251] vivid-002: Generate RBDS Instead of RDS: false
[   95.335918][ T7251] vivid-002: RDS Reception: true
[   95.337246][ T7251] vivid-002: RDS Program Type: 0 inactive
[   95.339157][ T7251] vivid-002: RDS PS Name:  inactive
[   95.340545][ T7251] vivid-002: RDS Radio Text:  inactive
[   95.341980][ T7251] vivid-002: RDS Traffic Announcement: false inactive
[   95.343955][ T7251] vivid-002: RDS Traffic Program: false inactive
[   95.345643][ T7251] vivid-002: RDS Music: false inactive
[   95.347092][ T7251] vivid-002: ==================  END STATUS  ==================
[   95.505650][ T7257] fuse: Bad value for 'group_id'
[   95.505668][ T7257] fuse: Bad value for 'group_id'
[   95.551906][ T7261] xt_CT: You must specify a L4 protocol and not use inversions on it
[   95.791073][ T7265] FAT-fs (sr0): bogus number of reserved sectors
[   95.791106][ T7265] FAT-fs (sr0): Can't find a valid FAT filesystem
[   95.835508][ T7267] ip_vti0: entered promiscuous mode
[   95.835574][ T7267] vlan3: entered promiscuous mode
[   95.838371][ T7267] ip_vti0: left promiscuous mode
[   95.841680][ T7263] sd 0:0:0:0: PR command failed: 1026
[   95.849653][ T7263] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[   95.849671][ T7263] sd 0:0:0:0: Add. Sense: Invalid command operation code
[   95.950236][ T7274] xt_CT: You must specify a L4 protocol and not use inversions on it
[   96.071622][ T7280] Cannot find add_set index 0 as target
[   96.296341][ T7284] syz.2.425: attempt to access beyond end of device
[   96.296341][ T7284] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0
[   96.305409][ T7284] SQUASHFS error: Failed to read block 0x0: -5
[   96.317322][ T7284] unable to read squashfs_super_block
[   96.379623][ T7288] bridge_slave_1: left allmulticast mode
[   96.381196][ T7288] bridge_slave_1: left promiscuous mode
[   96.382812][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.388963][ T7288] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[   96.419532][ T7291] netlink: 'syz.1.431': attribute type 20 has an invalid length.
[   96.514273][   T39] audit: type=1400 audit(1729746649.114:98): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE61616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[   96.574848][ T7309] xt_CT: You must specify a L4 protocol and not use inversions on it
[   96.671086][ T7317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.713615][ T7328] __nla_validate_parse: 1 callbacks suppressed
[   96.713626][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'.
[   96.719019][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'.
[   96.722701][ T7327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.443'.
[   96.743715][ T7327] random: crng reseeded on system resumption
[   96.922476][ T7332] xt_CT: You must specify a L4 protocol and not use inversions on it
[   97.386352][ T7336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.432236][ T7340] Cannot find add_set index 0 as target
[   97.668840][ T5384] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[   97.828031][ T5384] usb 8-1: Using ep0 maxpacket: 8
[   97.861692][ T5384] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[   97.864480][ T5384] usb 8-1: config 246 descriptor has 1 excess byte, ignoring
[   97.866678][ T5384] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42
[   97.869346][ T5384] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[   97.872515][ T5384] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[   97.876259][ T5384] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[   97.879582][ T5384] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   97.886779][ T5384] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[   97.890073][ T5384] usb 8-1: config 246 descriptor has 1 excess byte, ignoring
[   97.892008][ T5384] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42
[   97.894766][ T5384] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[   97.897841][   T35] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   97.898049][ T5384] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[   97.902790][ T5384] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[   97.905919][ T5384] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   97.910618][ T5384] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[   97.913078][ T5384] usb 8-1: config 246 descriptor has 1 excess byte, ignoring
[   97.915060][ T5384] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42
[   97.917658][ T5384] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[   97.920903][ T5384] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[   97.923845][ T5384] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[   97.926818][ T5384] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   97.933810][ T7352] can0: slcan on pts0.
[   97.936330][ T5384] usb 8-1: string descriptor 0 read error: -22
[   97.938731][ T5384] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   97.941082][ T5384] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.950828][ T5384] adutux 8-1:246.0: ADU100  now attached to /dev/usb/adutux0
[   98.018670][ T7352] can0 (unregistered): slcan off pts0.
[   98.060667][   T35] usb 5-1: config 0 has no interfaces?
[   98.062137][   T35] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   98.064486][   T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.068823][   T35] usb 5-1: config 0 descriptor??
[   98.327106][  T981] usb 8-1: USB disconnect, device number 6
[   98.436312][   T35] usb 5-1: USB disconnect, device number 6
[   98.835391][ T7375] xt_CT: You must specify a L4 protocol and not use inversions on it
[   99.540435][ T7404] hub 2-0:1.0: USB hub found
[   99.544138][ T7404] hub 2-0:1.0: 2 ports detected
[   99.892101][ T7412] netlink: 'syz.3.462': attribute type 1 has an invalid length.
[   99.906656][ T7412] overlay: Unknown parameter 'dont_appraise'
[   99.985482][ T7420] xt_CT: You must specify a L4 protocol and not use inversions on it
[  100.995522][ T7437] netlink: 28 bytes leftover after parsing attributes in process `syz.3.469'.
[  101.270515][ T7454] xt_CT: You must specify a L4 protocol and not use inversions on it
[  101.594499][   T39] audit: type=1326 audit(1729746654.194:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.1.485" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000
[  101.607099][   T39] audit: type=1326 audit(1729746654.194:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.1.485" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000
[  101.935034][ T7485] netlink: 1076 bytes leftover after parsing attributes in process `syz.1.487'.
[  102.079750][ T7488] hub 2-0:1.0: USB hub found
[  102.094168][ T7488] hub 2-0:1.0: 2 ports detected
[  103.043286][ T7536] xt_CT: You must specify a L4 protocol and not use inversions on it
[  103.280768][ T7543] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  103.422254][ T7550] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  104.332337][ T7565] overlay: ./file0 is not a directory
[  105.079426][ T7588] xt_CT: You must specify a L4 protocol and not use inversions on it
[  105.106130][ T7590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.154803][ T7590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.511448][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.499'.
[  105.603290][ T7603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.501'.
[  105.646260][ T7605] netlink: 'syz.3.502': attribute type 1 has an invalid length.
[  105.650010][ T7605] netlink: 'syz.3.502': attribute type 2 has an invalid length.
[  105.654981][   T39] audit: type=1326 audit(1729746658.254:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.3.502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000
[  105.669042][   T39] audit: type=1326 audit(1729746658.254:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.3.502" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f66579 code=0x7ffc0000
[  105.675723][   T39] audit: type=1326 audit(1729746658.254:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.3.502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000
[  105.682350][   T39] audit: type=1326 audit(1729746658.254:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.3.502" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f66579 code=0x7ffc0000
[  105.687860][   T39] audit: type=1326 audit(1729746658.254:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.3.502" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f66579 code=0x7ffc0000
[  105.693570][   T39] audit: type=1326 audit(1729746658.254:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.3.502" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f66579 code=0x7ffc0000
[  105.699319][   T39] audit: type=1326 audit(1729746658.254:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.3.502" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f66579 code=0x7ffc0000
[  105.704648][   T39] audit: type=1326 audit(1729746658.254:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.3.502" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f66579 code=0x7ffc0000
[  105.887881][ T5395] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  106.040074][ T5395] usb 8-1: config 0 has no interfaces?
[  106.042334][ T5395] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  106.045193][ T5395] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.050264][ T5395] usb 8-1: config 0 descriptor??
[  106.111518][ T7617] input: syz1 as /devices/virtual/input/input12
[  106.144248][ T7617] netlink: 'syz.2.505': attribute type 1 has an invalid length.
[  106.150524][ T7617] netlink: 224 bytes leftover after parsing attributes in process `syz.2.505'.
[  106.174748][ T7617] 8021q: adding VLAN 0 to HW filter on device bond1
[  106.246273][ T7621] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  106.277359][ T5497] usb 8-1: USB disconnect, device number 7
[  106.412452][ T7625] xt_CT: You must specify a L4 protocol and not use inversions on it
[  106.859116][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.513'.
[  107.117931][ T5382] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  107.277851][ T5382] usb 8-1: Using ep0 maxpacket: 32
[  107.280439][ T5382] usb 8-1: config index 0 descriptor too short (expected 156, got 27)
[  107.282565][ T5382] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  107.285462][ T5382] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  107.288617][ T5382] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  107.291991][ T5382] usb 8-1: config 0 interface 0 has no altsetting 0
[  107.295193][ T5382] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  107.297693][ T5382] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  107.300287][ T5382] usb 8-1: Product: syz
[  107.301515][ T5382] usb 8-1: Manufacturer: syz
[  107.302856][ T5382] usb 8-1: SerialNumber: syz
[  107.305738][ T5382] usb 8-1: config 0 descriptor??
[  107.313007][ T5382] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  107.316927][ T5382] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  107.549553][ T7665] xt_CT: You must specify a L4 protocol and not use inversions on it
[  107.707932][ T5382] usb 5-1: new low-speed USB device number 7 using dummy_hcd
[  107.767880][ T1252] usb 8-1: USB disconnect, device number 8
[  107.770931][ T1252] ldusb 8-1:0.0: LD USB Device #0 now disconnected
[  107.860911][ T5382] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 16, setting to 8
[  107.863829][ T5382] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x82 is Bulk; changing to Interrupt
[  107.866457][ T5382] usb 5-1: config 1 interface 0 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  107.873747][ T5382] usb 5-1: config 1 interface 0 has no altsetting 0
[  107.880479][ T5382] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  107.885149][ T5382] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.890223][ T5382] usb 5-1: Product: ј
[  107.891648][ T5382] usb 5-1: Manufacturer: ѕ
[  107.893149][ T5382] usb 5-1: SerialNumber: А
[  107.897643][ T7663] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  107.900196][ T7663] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  107.902153][ T7663] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  108.160458][ T7683] netlink: 24 bytes leftover after parsing attributes in process `syz.2.519'.
[  108.416193][   T39] kauditd_printk_skb: 55 callbacks suppressed
[  108.416204][   T39] audit: type=1800 audit(1729746661.014:164): pid=7663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.516" name="/bsg" dev="devtmpfs" ino=705 res=0 errno=0
[  108.435179][ T7690] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  108.451000][ T7690] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -1
[  108.531970][ T6928] syz_tun (unregistering): left allmulticast mode
[  108.590210][   T39] audit: type=1107 audit(1729746661.194:165): pid=7699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='C��idT�r�a���x�L��a1_3���M��|�EMz���-N��S��n8��k�e��8����yN3��<Lvn'
[  108.632365][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'.
[  108.681178][   T39] audit: type=1326 audit(1729746661.284:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.3.524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000
[  108.689736][   T39] audit: type=1326 audit(1729746661.284:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.3.524" exe="/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf7f66579 code=0x7ffc0000
[  108.712336][   T39] audit: type=1326 audit(1729746661.284:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.3.524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000
[  108.719701][   T39] audit: type=1326 audit(1729746661.284:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.3.524" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f66579 code=0x7ffc0000
[  108.726902][   T39] audit: type=1326 audit(1729746661.284:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.3.524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000
[  108.736441][   T39] audit: type=1326 audit(1729746661.284:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.3.524" exe="/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7f66579 code=0x7ffc0000
[  108.742769][   T39] audit: type=1326 audit(1729746661.284:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.3.524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000
[  108.748295][   T39] audit: type=1326 audit(1729746661.284:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.3.524" exe="/syz-executor" sig=0 arch=40000003 syscall=324 compat=1 ip=0xf7f66579 code=0x7ffc0000
[  108.862495][ T1100] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.946849][ T5382] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[  108.953497][ T5382] usb 5-1: USB disconnect, device number 7
[  108.994649][ T7723] sctp: [Deprecated]: syz.0.527 (pid 7723) Use of struct sctp_assoc_value in delayed_ack socket option.
[  108.994649][ T7723] Use struct sctp_sack_info instead
[  108.995322][ T1100] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.017303][ T4784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  109.021950][ T4784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  109.026470][ T4784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  109.030653][ T4784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  109.030679][ T7722] netlink: 'syz.3.525': attribute type 2 has an invalid length.
[  109.037342][ T4784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  109.038732][ T7727] 9pnet_fd: Insufficient options for proto=fd
[  109.038934][ T7722] : entered promiscuous mode
[  109.040510][ T4784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  109.052011][ T5343] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  109.054133][ T5343] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  109.056143][ T5343] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  109.059699][ T5343] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  109.062061][ T5343] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  109.064295][ T5343] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  109.109536][ T1100] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.208682][ T1100] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.296617][ T1100] bridge_slave_1: left allmulticast mode
[  109.299131][ T1100] bridge_slave_1: left promiscuous mode
[  109.301039][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.305358][ T1100] bridge_slave_0: left allmulticast mode
[  109.307232][ T1100] bridge_slave_0: left promiscuous mode
[  109.309460][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.546978][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  109.552180][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  109.562339][ T1100] bond0 (unregistering): Released all slaves
[  109.651572][ T1100] bond1 (unregistering): Released all slaves
[  109.664328][ T7724] chnl_net:caif_netlink_parms(): no params data found
[  109.700126][ T7737] netlink: 'syz.3.530': attribute type 10 has an invalid length.
[  109.725233][ T7737] batman_adv: batadv0: Adding interface: team0
[  109.726970][ T7737] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.734191][ T7737] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  109.737368][ T7738] netlink: 'syz.3.530': attribute type 10 has an invalid length.
[  109.749340][ T1100] IPVS: stopping master sync thread 5501 ...
[  109.859040][ T7724] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.862780][ T7724] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.864778][ T7724] bridge_slave_0: entered allmulticast mode
[  109.866888][ T7724] bridge_slave_0: entered promiscuous mode
[  109.869620][ T7724] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.871555][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.873458][ T7724] bridge_slave_1: entered allmulticast mode
[  109.875536][ T7724] bridge_slave_1: entered promiscuous mode
[  109.911621][ T7724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.916356][ T7724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.948492][ T7724] team0: Port device team_slave_0 added
[  109.961742][ T7724] team0: Port device team_slave_1 added
[  109.975858][ T1100] hsr_slave_0: left promiscuous mode
[  109.977544][ T1100] hsr_slave_1: left promiscuous mode
[  109.979718][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.982025][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.985924][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  109.988222][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.005578][ T1100] veth1_macvtap: left promiscuous mode
[  110.007103][ T1100] veth0_macvtap: left promiscuous mode
[  110.009441][ T1100] veth1_vlan: left promiscuous mode
[  110.010946][ T1100] veth0_vlan: left promiscuous mode
[  110.071457][ T1100] pimreg (unregistering): left allmulticast mode
[  110.155517][ T7764] netlink: 56 bytes leftover after parsing attributes in process `syz.3.533'.
[  110.158374][ T7764] netlink: 'syz.3.533': attribute type 5 has an invalid length.
[  110.160447][ T7764] netlink: 44 bytes leftover after parsing attributes in process `syz.3.533'.
[  110.532465][ T7777] xt_CT: You must specify a L4 protocol and not use inversions on it
[  110.633383][ T1100] team0 (unregistering): Port device team_slave_1 removed
[  110.714741][ T1100] team0 (unregistering): Port device team_slave_0 removed
[  111.100660][ T5384] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  111.158932][ T4784] Bluetooth: hci0: command tx timeout
[  111.164844][ T5343] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  111.167833][ T4784] Bluetooth: hci2: command 0x1003 tx timeout
[  111.271824][ T5384] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.276007][ T5384] usb 8-1: config 0 has no interfaces?
[  111.277512][ T5384] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  111.280173][ T5384] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.291325][ T5384] usb 8-1: config 0 descriptor??
[  111.546819][ T7724] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.571281][ T7724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.577662][ T7724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.630098][ T7793] 9pnet_virtio: no channels available for device syz
[  111.655933][ T7724] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.660246][ T7791] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  111.665345][ T7724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.666730][ T7790] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  111.677850][ T7724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.932921][ T7724] hsr_slave_0: entered promiscuous mode
[  111.936343][ T7724] hsr_slave_1: entered promiscuous mode
[  111.956798][ T7724] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  111.960362][ T7724] Cannot create hsr debugfs directory
[  112.375288][ T7810] ./file0: Can't lookup blockdev
[  112.378130][ T7811] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0
[  112.531057][ T7815] netlink: 338 bytes leftover after parsing attributes in process `syz.1.544'.
[  112.882196][ T7724] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  112.900013][ T7724] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  112.903132][ T7724] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  112.972920][ T7724] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  113.103183][ T7724] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.117722][ T7724] 8021q: adding VLAN 0 to HW filter on device team0
[  113.122422][ T7226] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.124369][ T7226] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.132361][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.134221][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.220724][ T7724] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.235837][ T7724] veth0_vlan: entered promiscuous mode
[  113.237873][ T5343] Bluetooth: hci0: command tx timeout
[  113.244566][ T7724] veth1_vlan: entered promiscuous mode
[  113.259650][ T7724] veth0_macvtap: entered promiscuous mode
[  113.264024][ T7724] veth1_macvtap: entered promiscuous mode
[  113.272317][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.275094][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.277625][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.280945][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.284250][ T7724] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.288598][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.291307][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.293915][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.296809][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.300610][ T7724] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.308157][ T7724] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.310420][ T7724] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.312619][ T7724] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.314872][ T7724] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.336895][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.339858][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.349714][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.351845][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.400837][ T7853] xt_CT: You must specify a L4 protocol and not use inversions on it
[  113.649728][ T5384] usb 8-1: string descriptor 0 read error: -71
[  113.658749][ T5384] usb 8-1: USB disconnect, device number 9
[  113.869709][ T7874] netlink: 24 bytes leftover after parsing attributes in process `syz.1.550'.
[  114.711917][ T7902] xt_CT: You must specify a L4 protocol and not use inversions on it
[  114.787733][ T7908] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0
[  114.794196][ T7906] ./file0: Can't lookup blockdev
[  114.873778][ T7913] team0: entered promiscuous mode
[  114.875195][ T7913] team_slave_0: entered promiscuous mode
[  114.885647][ T7913] team_slave_1: entered promiscuous mode
[  114.888499][ T7913] team0: left promiscuous mode
[  114.890373][ T7913] team_slave_0: left promiscuous mode
[  114.891938][ T7913] team_slave_1: left promiscuous mode
[  115.065564][ T7918] netlink: 24 bytes leftover after parsing attributes in process `syz.2.560'.
[  115.196858][ T7927] can: request_module (can-proto-4) failed.
[  115.317920][ T5343] Bluetooth: hci0: command tx timeout
[  115.330408][ T7933] xt_CT: You must specify a L4 protocol and not use inversions on it
[  115.331366][ T7932] syz.0.564[7932] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  115.333600][ T7932] syz.0.564[7932] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  115.336603][ T7932] syz.0.564[7932] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  115.348159][ T7932] netlink: 'syz.0.564': attribute type 10 has an invalid length.
[  115.352979][ T7932] netlink: 40 bytes leftover after parsing attributes in process `syz.0.564'.
[  115.357436][ T7932] bridge0: port 3(syz_tun) entered blocking state
[  115.359464][ T7932] bridge0: port 3(syz_tun) entered disabled state
[  115.362036][ T7932] syz_tun: entered allmulticast mode
[  115.364215][ T7932] syz_tun: entered promiscuous mode
[  115.365907][ T7932] bridge0: port 3(syz_tun) entered blocking state
[  115.368626][ T7932] bridge0: port 3(syz_tun) entered forwarding state
[  115.489203][ T7943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.570'.
[  115.499727][ T7943] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  115.530148][ T7944] netlink: 'syz.3.566': attribute type 1 has an invalid length.
[  115.605312][ T7948] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  115.611220][ T7948] overlayfs: failed to set xattr on upper
[  115.613313][ T7948] overlayfs: ...falling back to redirect_dir=nofollow.
[  115.616365][ T7948] overlayfs: ...falling back to index=off.
[  115.618875][ T7951] input: syz0 as /devices/virtual/input/input13
[  115.623095][ T7948] overlayfs: ...falling back to uuid=null.
[  115.790701][ T7960] xt_CT: You must specify a L4 protocol and not use inversions on it
[  115.867003][   T39] kauditd_printk_skb: 1 callbacks suppressed
[  115.867065][   T39] audit: type=1800 audit(1729746668.464:175): pid=7963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.577" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  115.966483][ T7969] overlayfs: failed to resolve './file0': -2
[  116.090297][ T7976] tmpfs: Unknown parameter 'nr_'
[  116.825480][ T7988] tipc: Failed to obtain node identity
[  116.826951][ T7988] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  116.831001][ T7987] tipc: Started in network mode
[  116.832241][ T7987] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  116.833975][ T7987] tipc: Enabled bearer <eth:ipvlan0>, priority 0
[  116.970404][ T7993] xt_CT: You must specify a L4 protocol and not use inversions on it
[  117.041717][ T7994] netlink: 'syz.2.585': attribute type 2 has an invalid length.
[  117.052693][ T7994] : entered promiscuous mode
[  117.063382][ T8002] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.589'.
[  117.398097][ T5343] Bluetooth: hci0: command tx timeout
[  117.476207][ T8014] Context (ID=0x0) not attached to queue pair (handle=0x2:0x0)
[  117.769118][ T8028] xt_CT: You must specify a L4 protocol and not use inversions on it
[  117.829076][  T831] tipc: Node number set to 10136234
[  117.883078][ T8034] ntfs3(sr0): Primary boot signature is not NTFS.
[  117.889030][ T8034] ntfs3(sr0): try to read out of volume at offset 0xf800
[  117.902333][ T8034] input: syz0 as /devices/virtual/input/input14
[  118.077895][ T5384] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  118.228401][ T5384] usb 5-1: Using ep0 maxpacket: 8
[  118.238108][ T5384] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  118.248620][ T5384] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  118.251708][ T5384] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  118.255026][ T5384] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  118.258242][ T5384] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  118.262007][ T5384] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  118.264538][ T5384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.466283][ T8058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.603'.
[  119.477951][ T5343] Bluetooth: hci0: command tx timeout
[  119.812261][ T8068] xt_CT: You must specify a L4 protocol and not use inversions on it
[  119.832779][ T8066] ieee802154 phy1 wpan1: encryption failed: -22
[  120.097880][    T8] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  120.219610][ T8083] netfs: Couldn't get user pages (rc=-14)
[  120.257937][    T8] usb 7-1: Using ep0 maxpacket: 8
[  120.262245][    T8] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  120.264785][    T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  120.267293][    T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  120.269919][    T8] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  120.273652][    T8] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  120.278054][    T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.436214][ T8114] overlayfs: failed to get index nlink (file1/bus, err=-61)
[  120.486764][    T8] usb 7-1: usb_control_msg returned -32
[  120.488413][    T8] usbtmc 7-1:16.0: can't read capabilities
[  120.594266][ T5385] usb 7-1: USB disconnect, device number 16
[  120.709057][ T5384] usb 5-1: usb_control_msg returned -71
[  120.711037][ T5384] usbtmc 5-1:16.0: can't read capabilities
[  120.724699][ T5384] usb 5-1: USB disconnect, device number 8
[  120.758527][ T1286] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  120.809853][ T8135] xt_CT: You must specify a L4 protocol and not use inversions on it
[  120.839273][ T8134] netlink: 'syz.2.615': attribute type 3 has an invalid length.
[  120.843360][ T8134] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.615'.
[  120.929187][ T1286] usb 6-1: config 0 has an invalid interface number: 118 but max is 0
[  120.931350][ T1286] usb 6-1: config 0 has no interface number 0
[  120.934328][ T1286] usb 6-1: New USB device found, idVendor=0856, idProduct=ac33, bcdDevice= 0.f8
[  120.936547][ T1286] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.939430][ T1286] usb 6-1: Product: syz
[  120.940973][ T1286] usb 6-1: Manufacturer: syz
[  120.942632][ T1286] usb 6-1: SerialNumber: syz
[  120.945873][ T1286] usb 6-1: config 0 descriptor??
[  120.950567][ T1286] ftdi_sio 6-1:0.118: FTDI USB Serial Device converter detected
[  120.953328][ T1286] usb 6-1: Detected SIO
[  120.956559][ T1286] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  120.988407][ T8148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.619'.
[  120.991425][ T8148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.619'.
[  121.021400][ T8153] hsr0: entered promiscuous mode
[  121.153717][ T5497] usb 6-1: USB disconnect, device number 8
[  121.160651][ T5497] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  121.164378][ T5497] ftdi_sio 6-1:0.118: device disconnected
[  121.228076][    T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  121.387895][    T8] usb 5-1: Using ep0 maxpacket: 32
[  121.428872][ T8146] netlink: 'syz.0.617': attribute type 4 has an invalid length.
[  121.800862][ T8164] cgroup: Invalid name
[  121.901103][ T8168] xt_CT: You must specify a L4 protocol and not use inversions on it
[  121.932685][ T8170] netlink: 'syz.1.626': attribute type 1 has an invalid length.
[  121.938966][ T8170] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.626'.
[  122.002849][ T8171] hpfs: Bad magic ... probably not HPFS
[  122.022783][   T39] audit: type=1326 audit(1729746674.624:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.2.621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7fc00000
[  122.606288][ T8173] 9pnet_fd: Insufficient options for proto=fd
[  123.228462][ T8180] netlink: 40 bytes leftover after parsing attributes in process `syz.1.629'.
[  123.856833][    T8] usb 5-1: unable to get BOS descriptor or descriptor too short
[  123.870253][    T8] usb 5-1: unable to read config index 0 descriptor/start: -71
[  123.872806][    T8] usb 5-1: can't read configurations, error -71
[  124.000583][ T8185] overlayfs: missing 'lowerdir'
[  124.487937][    T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  125.087317][    T8] usb 5-1: device descriptor read/64, error -71
[  125.199824][    T8] usb usb5-port1: attempt power cycle
[  125.252803][ T8206] xt_CT: You must specify a L4 protocol and not use inversions on it
[  125.348491][ T8209] can0: slcan on ptm0.
[  125.538000][ T4784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  125.538521][    T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  125.541722][ T4784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  125.546606][ T4784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  125.550425][ T4784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  125.556649][ T4784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  125.562117][ T4784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  125.568416][    T8] usb 5-1: device descriptor read/8, error -71
[  125.681672][ T8220] chnl_net:caif_netlink_parms(): no params data found
[  125.701201][ T4784] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  125.703759][ T4784] CPU: 2 UID: 0 PID: 4784 Comm: kworker/u33:1 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0
[  125.706495][ T4784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  125.709159][ T4784] Workqueue: hci0 hci_rx_work
[  125.710357][ T4784] Call Trace:
[  125.711211][ T4784]  <TASK>
[  125.711976][ T4784]  dump_stack_lvl+0x16c/0x1f0
[  125.713169][ T4784]  sysfs_warn_dup+0x7f/0xa0
[  125.714338][ T4784]  sysfs_create_dir_ns+0x24d/0x2b0
[  125.715635][ T4784]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  125.717068][ T4784]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  125.718412][ T4784]  ? kobject_add_internal+0x12d/0x990
[  125.719776][ T4784]  ? do_raw_spin_unlock+0x172/0x230
[  125.721102][ T4784]  kobject_add_internal+0x2c8/0x990
[  125.722402][ T4784]  kobject_add+0x16f/0x240
[  125.723520][ T4784]  ? __pfx_kobject_add+0x10/0x10
[  125.724802][ T4784]  ? class_to_subsys+0x3e/0x160
[  125.725995][ T4784]  ? do_raw_spin_unlock+0x172/0x230
[  125.727335][ T4784]  ? kobject_put+0xab/0x5a0
[  125.728485][ T4784]  device_add+0x289/0x1a70
[  125.729620][ T4784]  ? __pfx_dev_set_name+0x10/0x10
[  125.730908][ T4784]  ? __pfx_device_add+0x10/0x10
[  125.732142][ T4784]  ? mgmt_send_event_skb+0x2f2/0x460
[  125.733483][ T4784]  hci_conn_add_sysfs+0x17e/0x230
[  125.734774][ T4784]  le_conn_complete_evt+0xfc7/0x1cf0
[  125.736088][ T4784]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  125.737544][ T4784]  ? trace_contention_end+0xea/0x140
[  125.738925][ T4784]  ? __mutex_lock+0x1a6/0x9c0
[  125.740114][ T4784]  hci_le_enh_conn_complete_evt+0x23d/0x380
[  125.741604][ T4784]  ? skb_pull_data+0x166/0x210
[  125.742848][ T4784]  hci_le_meta_evt+0x2e2/0x5d0
[  125.744082][ T4784]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  125.745699][ T4784]  hci_event_packet+0x666/0x1190
[  125.746962][ T4784]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  125.748383][ T4784]  ? __pfx_hci_event_packet+0x10/0x10
[  125.749703][ T4784]  ? mark_held_locks+0x9f/0xe0
[  125.750926][ T4784]  ? kcov_remote_start+0x3cf/0x6e0
[  125.752218][ T4784]  ? lockdep_hardirqs_on+0x7c/0x110
[  125.753524][ T4784]  hci_rx_work+0x2c6/0x16c0
[  125.754703][ T4784]  ? lock_acquire+0x2f/0xb0
[  125.755857][ T4784]  ? process_one_work+0x8bb/0x1b30
[  125.757221][ T4784]  process_one_work+0x958/0x1b30
[  125.758486][ T4784]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  125.759899][ T4784]  ? __pfx_process_one_work+0x10/0x10
[  125.761279][ T4784]  ? assign_work+0x1a0/0x250
[  125.762452][ T4784]  worker_thread+0x6c8/0xf00
[  125.763627][ T4784]  ? __pfx_worker_thread+0x10/0x10
[  125.764922][ T4784]  kthread+0x2c1/0x3a0
[  125.765958][ T4784]  ? _raw_spin_unlock_irq+0x23/0x50
[  125.767349][ T4784]  ? __pfx_kthread+0x10/0x10
[  125.768504][ T4784]  ret_from_fork+0x45/0x80
[  125.769630][ T4784]  ? __pfx_kthread+0x10/0x10
[  125.770808][ T4784]  ret_from_fork_asm+0x1a/0x30
[  125.772032][ T4784]  </TASK>
[  125.774475][ T4784] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  125.775353][ T8207] can0 (unregistered): slcan off ptm0.
[  125.778493][ T4784] Bluetooth: hci0: failed to register connection device
[  125.828035][ T8220] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.829987][ T8220] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.831919][ T8220] bridge_slave_0: entered allmulticast mode
[  125.833957][ T8220] bridge_slave_0: entered promiscuous mode
[  125.836519][ T8220] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.838602][ T8220] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.841912][    T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  125.843769][ T8220] bridge_slave_1: entered allmulticast mode
[  125.845997][ T8220] bridge_slave_1: entered promiscuous mode
[  125.868304][    T8] usb 5-1: device descriptor read/8, error -71
[  125.884950][ T8220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.892111][ T8220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.931032][ T8220] team0: Port device team_slave_0 added
[  125.934373][ T8220] team0: Port device team_slave_1 added
[  125.966059][ T8220] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.968383][ T8220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.974564][ T8220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.977965][ T8220] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.979751][ T8220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.985840][ T8220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.988004][    T8] usb usb5-port1: unable to enumerate USB device
[  126.027296][ T8255] xt_CT: You must specify a L4 protocol and not use inversions on it
[  126.042873][ T8220] hsr_slave_0: entered promiscuous mode
[  126.047658][ T8220] hsr_slave_1: entered promiscuous mode
[  126.052609][ T8220] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  126.054963][ T8220] Cannot create hsr debugfs directory
[  126.103086][ T4784] Bluetooth: hci0: unexpected event 0x31 length: 23 > 6
[  126.156992][ T8220] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.245802][ T8220] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.314078][ T8220] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.394870][ T8220] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.489081][ T8220] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  126.493713][ T8220] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  126.498478][ T8220] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  126.502749][ T8220] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  126.562050][ T8220] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.568872][ T8220] 8021q: adding VLAN 0 to HW filter on device team0
[  126.573695][ T7225] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.575706][ T7225] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.584237][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.585997][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.610151][ T8220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  126.675478][ T8220] 8021q: adding VLAN 0 to HW filter on device batadv0
[  126.700190][ T8220] veth0_vlan: entered promiscuous mode
[  126.703930][ T8220] veth1_vlan: entered promiscuous mode
[  126.715800][ T8220] veth0_macvtap: entered promiscuous mode
[  126.720887][ T8220] veth1_macvtap: entered promiscuous mode
[  126.726654][ T8220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.729535][ T8220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.732098][ T8220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.734686][ T8220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.737121][ T8220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.739742][ T8220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.743758][ T8220] batman_adv: batadv0: Interface activated: batadv_slave_0
[  126.749126][ T8220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.752081][ T8220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.754483][ T8220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.757070][ T8220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.759552][ T8220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.762823][ T8220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.766454][ T8220] batman_adv: batadv0: Interface activated: batadv_slave_1
[  126.770247][ T8220] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.772549][ T8220] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.774727][ T8220] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.776932][ T8220] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.806701][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.812205][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.821115][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.823197][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.108047][ T5497] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  127.287885][ T5497] usb 8-1: Using ep0 maxpacket: 8
[  127.294804][ T5497] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  127.296874][ T5497] usb 8-1: config 0 has no interface number 0
[  127.302150][ T5497] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 101, changing to 10
[  127.304927][ T5497] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 58880, setting to 1024
[  127.307684][ T5497] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  127.310206][ T5497] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.317163][ T5497] usb 8-1: config 0 descriptor??
[  127.319990][ T8269] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  127.328264][ T5497] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  127.400170][ T8291] (syz.0.653,8291,2):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  127.402732][ T8291] (syz.0.653,8291,2):ocfs2_fill_super:1178 ERROR: status = -22
[  127.510762][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.654'.
[  127.535928][    C3] iowarrior 8-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1
[  127.543708][ T5497] usb 8-1: USB disconnect, device number 10
[  127.550974][ T5497] iowarrior 8-1:0.1: I/O-Warror #0 now disconnected
[  127.566040][ T8296] xt_CT: You must specify a L4 protocol and not use inversions on it
[  127.638551][ T4784] Bluetooth: hci2: command tx timeout
[  127.647298][ T8298] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  127.691519][ T8298] kvm: pic: non byte read
[  127.693834][ T8298] kvm: pic: level sensitive irq not supported
[  127.694100][ T8298] kvm: pic: non byte read
[  127.699314][ T8298] kvm: pic: level sensitive irq not supported
[  127.699617][ T8298] kvm: pic: non byte read
[  127.706036][ T8298] kvm: pic: level sensitive irq not supported
[  127.706282][ T8298] kvm: pic: non byte read
[  127.773574][ T8310] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.660'.
[  127.797926][ T4784] Bluetooth: hci0: command tx timeout
[  127.841746][ T8320] block device autoloading is deprecated and will be removed.
[  127.856998][ T8322] xt_CT: You must specify a L4 protocol and not use inversions on it
[  127.888626][ T8310] md: superblock version 620756992 not known
[  127.893165][ T8310] md: couldn't set array info. -22
[  127.904276][ T8310] vim2m vim2m.0: vidioc_s_fmt queue busy
[  127.968732][ T8338] wg2: entered promiscuous mode
[  127.970067][ T8338] wg2: entered allmulticast mode
[  127.982600][ T8341] random: crng reseeded on system resumption
[  128.129277][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'.
[  128.187957][ T1286] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  128.342321][ T1286] usb 8-1: config 0 has no interfaces?
[  128.343886][ T1286] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  128.346125][ T1286] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.364596][ T1286] usb 8-1: config 0 descriptor??
[  128.738669][ T1286] usb 8-1: USB disconnect, device number 11
[  128.766376][ T8353] xt_CT: You must specify a L4 protocol and not use inversions on it
[  129.326680][ T8377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.680'.
[  129.355866][ T8377] 9pnet_fd: Insufficient options for proto=fd
[  129.547122][ T8382] xt_CT: You must specify a L4 protocol and not use inversions on it
[  129.603912][ T8384] netlink: 596 bytes leftover after parsing attributes in process `syz.0.683'.
[  129.717958][ T4784] Bluetooth: hci2: command tx timeout
[  129.941842][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.684'.
[  129.946134][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.684'.
[  129.949236][ T8388] block nbd0: Unsupported socket: shutdown callout must be supported.
[  130.717893][  T831] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  130.870137][  T831] usb 5-1: Using ep0 maxpacket: 32
[  130.874071][  T831] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  130.876223][  T831] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  130.881484][  T831] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  130.887276][  T831] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  130.897814][  T831] usb 5-1: config 0 interface 0 has no altsetting 0
[  130.903092][  T831] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  130.905560][  T831] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  130.907618][  T831] usb 5-1: Product: syz
[  130.911412][  T831] usb 5-1: Manufacturer: syz
[  130.912664][  T831] usb 5-1: SerialNumber: syz
[  130.914695][  T831] usb 5-1: config 0 descriptor??
[  130.921757][  T831] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  130.927949][  T831] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  130.955865][ T8420] xt_CT: You must specify a L4 protocol and not use inversions on it
[  131.025500][ T8422] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.029733][ T8422] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.526951][ T8452] netlink: 32 bytes leftover after parsing attributes in process `syz.3.700'.
[  131.562427][ T8460] xt_CT: You must specify a L4 protocol and not use inversions on it
[  131.567962][ T8449] netlink: 328 bytes leftover after parsing attributes in process `syz.1.699'.
[  131.684756][ T8467] netlink: 1076 bytes leftover after parsing attributes in process `syz.3.702'.
[  131.687861][ T5384] usb 5-1: USB disconnect, device number 13
[  131.692619][ T5384] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  131.799230][ T4784] Bluetooth: hci2: command tx timeout
[  132.130884][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[  132.413541][ T8486] netlink: 'syz.0.708': attribute type 1 has an invalid length.
[  132.415611][ T8486] netlink: 'syz.0.708': attribute type 1 has an invalid length.
[  132.540572][ T8491] xt_CT: You must specify a L4 protocol and not use inversions on it
[  132.589657][ T8494] __nla_validate_parse: 3 callbacks suppressed
[  132.589668][ T8494] netlink: 132 bytes leftover after parsing attributes in process `syz.1.711'.
[  132.608440][ T8494] sit0: entered promiscuous mode
[  132.619410][ T8494] netlink: 'syz.1.711': attribute type 1 has an invalid length.
[  132.622179][ T8494] netlink: 1 bytes leftover after parsing attributes in process `syz.1.711'.
[  132.656755][ T8494] syz.1.711 (8494) used greatest stack depth: 20768 bytes left
[  133.206490][ T8502] overlay: ./bus is not a directory
[  133.423306][ T8513] trusted_key: syz.0.716 sent an empty control message without MSG_MORE.
[  133.446178][ T8517] ubi0: attaching mtd0
[  133.453076][ T8517] ubi0: scanning is finished
[  133.454452][ T8517] ubi0: empty MTD device detected
[  133.486831][ T8525] xt_CT: You must specify a L4 protocol and not use inversions on it
[  133.532086][ T8517] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  133.536642][ T8517] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  133.539220][ T8517] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  133.541369][ T8517] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  133.543776][ T8517] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  133.546517][ T8517] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  133.549339][ T8517] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1770434411
[  133.552415][ T8517] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  133.555121][ T8528] ubi0: background thread "ubi_bgt0d" started, PID 8528
[  133.592340][ T8532] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  133.594280][ T8532] overlayfs: failed to set xattr on upper
[  133.595920][ T8532] overlayfs: ...falling back to redirect_dir=nofollow.
[  133.598194][ T8532] overlayfs: ...falling back to index=off.
[  133.600005][ T8532] overlayfs: ...falling back to uuid=null.
[  133.868052][ T5384] usb 5-1: new low-speed USB device number 14 using dummy_hcd
[  133.887915][ T4784] Bluetooth: hci2: command tx timeout
[  134.019709][ T5384] usb 5-1: Invalid ep0 maxpacket: 16
[  134.088494][ T8554] xt_CT: You must specify a L4 protocol and not use inversions on it
[  134.096281][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.101784][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.143771][    C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  134.147879][ T5384] usb 5-1: new low-speed USB device number 15 using dummy_hcd
[  134.162458][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.730'.
[  134.164850][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.730'.
[  134.327837][ T5384] usb 5-1: Invalid ep0 maxpacket: 16
[  134.338768][ T5384] usb usb5-port1: attempt power cycle
[  134.707963][ T5384] usb 5-1: new low-speed USB device number 16 using dummy_hcd
[  134.738677][ T5384] usb 5-1: Invalid ep0 maxpacket: 16
[  134.867998][ T5384] usb 5-1: new low-speed USB device number 17 using dummy_hcd
[  134.888843][ T5384] usb 5-1: Invalid ep0 maxpacket: 16
[  134.890999][ T5384] usb usb5-port1: unable to enumerate USB device
[  135.137590][ T8594] xt_CT: You must specify a L4 protocol and not use inversions on it
[  135.222339][ T8601] netlink: 'syz.2.742': attribute type 1 has an invalid length.
[  135.250484][   T39] audit: type=1326 audit(1729746687.854:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.3.737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7f579 code=0x7ffc0000
[  135.260424][   T39] audit: type=1326 audit(1729746687.854:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.3.737" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f7f579 code=0x7ffc0000
[  135.266026][   T39] audit: type=1326 audit(1729746687.854:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.3.737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7f579 code=0x7ffc0000
[  135.273969][   T39] audit: type=1326 audit(1729746687.854:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.3.737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7f579 code=0x7ffc0000
[  135.285036][   T39] audit: type=1326 audit(1729746687.854:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.3.737" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f7f579 code=0x7ffc0000
[  135.290756][   T39] audit: type=1326 audit(1729746687.854:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.3.737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7f579 code=0x7ffc0000
[  135.296669][   T39] audit: type=1326 audit(1729746687.854:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.3.737" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f7f579 code=0x7ffc0000
[  135.306452][   T39] audit: type=1326 audit(1729746687.854:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.3.737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7f579 code=0x7ffc0000
[  135.324205][   T39] audit: type=1326 audit(1729746687.854:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.3.737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7f579 code=0x7ffc0000
[  135.330589][   T39] audit: type=1326 audit(1729746687.854:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.3.737" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f7f579 code=0x7ffc0000
[  135.583908][ T8619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.746'.
[  135.869645][ T8581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.957856][ T4784] Bluetooth: hci2: command tx timeout
[  135.982508][ T8627] xt_CT: You must specify a L4 protocol and not use inversions on it
[  136.150152][ T8634] syz_tun: entered promiscuous mode
[  136.155087][ T8634] batadv_slave_0: entered promiscuous mode
[  136.410294][ T8640] /dev/sr0: Can't open blockdev
[  136.534482][ T8651] netfs: Couldn't get user pages (rc=-14)
[  136.536481][ T8651] netfs: Zero-sized read [R=3]
[  136.540340][ T8651] netfs: Couldn't get user pages (rc=-14)
[  136.664465][ T8657] xt_CT: You must specify a L4 protocol and not use inversions on it
[  136.754295][ T8661] macvlan0: entered allmulticast mode
[  136.840490][ T8663] netlink: 3068 bytes leftover after parsing attributes in process `syz.1.761'.
[  136.842992][ T8663] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.761'.
[  136.870467][ T8661] veth1_vlan: entered allmulticast mode
[  136.902111][ T8668] overlay: filesystem on ./bus not supported as upperdir
[  137.103993][    T8] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  137.267864][    T8] usb 5-1: Using ep0 maxpacket: 32
[  137.270661][    T8] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  137.272872][    T8] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  137.275701][    T8] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  137.298660][    T8] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[  137.329491][    T8] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  137.337963][    T8] usb 5-1: config 0 interface 0 has no altsetting 0
[  137.364031][    T8] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  137.366531][    T8] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  137.369015][    T8] usb 5-1: Product: syz
[  137.370127][    T8] usb 5-1: Manufacturer: syz
[  137.383134][    T8] usb 5-1: SerialNumber: syz
[  137.398763][    T8] usb 5-1: config 0 descriptor??
[  137.403764][    T8] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  137.410350][    T8] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  137.605634][ T8662] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90
[  137.609031][ T8688] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90
[  137.612163][ T8661] xt_CT: You must specify a L4 protocol and not use inversions on it
[  137.619336][ T5382] usb 5-1: USB disconnect, device number 18
[  137.622315][ T5382] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  137.666440][ T8694] xt_CT: You must specify a L4 protocol and not use inversions on it
[  137.683274][ T8696] netlink: 72 bytes leftover after parsing attributes in process `syz.3.771'.
[  137.896106][ T8710] netlink: 32 bytes leftover after parsing attributes in process `syz.1.775'.
[  138.118674][ T1102] wlan1: Trigger new scan to find an IBSS to join
[  138.152698][ T8732] xt_CT: You must specify a L4 protocol and not use inversions on it
[  138.209815][ T8730] netlink: 'syz.0.781': attribute type 4 has an invalid length.
[  138.544269][ T8776] dvmrp0: entered allmulticast mode
[  138.761312][ T8783] netlink: 40 bytes leftover after parsing attributes in process `syz.0.790'.
[  138.889999][ T8786] xt_CT: You must specify a L4 protocol and not use inversions on it
[  139.135835][ T8793] netlink: 788 bytes leftover after parsing attributes in process `syz.2.794'.
[  139.255591][ T8804] sctp: [Deprecated]: syz.1.796 (pid 8804) Use of struct sctp_assoc_value in delayed_ack socket option.
[  139.255591][ T8804] Use struct sctp_sack_info instead
[  139.261558][ T8804] gretap0: entered allmulticast mode
[  139.400286][ T8806] xt_limit: Overflow, try lower: 0/0
[  139.402168][ T8806] netlink: 112 bytes leftover after parsing attributes in process `syz.1.797'.
[  139.881064][ T8813] workqueue: name exceeds WQ_NAME_LEN. Truncating to: �<)�2���U7��䋡�����;&!�i��
[  139.891907][ T8814] sysfs: cannot create duplicate filename '/class/ieee80211/�<)�2���U7��䋡�����;&!�i���'
[  139.894720][ T8814] CPU: 2 UID: 0 PID: 8814 Comm: syz.0.799 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0
[  139.897362][ T8814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  139.900052][ T8814] Call Trace:
[  139.900905][ T8814]  <TASK>
[  139.901659][ T8814]  dump_stack_lvl+0x16c/0x1f0
[  139.902886][ T8814]  sysfs_warn_dup+0x7f/0xa0
[  139.904052][ T8814]  sysfs_do_create_link_sd+0x124/0x140
[  139.905498][ T8814]  sysfs_create_link+0x61/0xc0
[  139.906702][ T8814]  device_add+0x62e/0x1a70
[  139.907965][ T8814]  ? __pfx_device_add+0x10/0x10
[  139.909232][ T8814]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  139.910739][ T8814]  ? ieee80211_set_bitrate_flags+0x249/0x6a0
[  139.912246][ T8814]  wiphy_register+0x20d7/0x2d30
[  139.913481][ T8814]  ? __pfx_wiphy_register+0x10/0x10
[  139.914808][ T8814]  ieee80211_register_hw+0x2959/0x3fb0
[  139.916181][ T8814]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  139.917637][ T8814]  ? rcu_is_watching+0x12/0xc0
[  139.918844][ T8814]  ? trace_hrtimer_init+0x19d/0x220
[  139.920177][ T8814]  ? __hrtimer_init+0x106/0x2c0
[  139.921444][ T8814]  mac80211_hwsim_new_radio+0x2c47/0x56c0
[  139.922874][ T8814]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  139.924415][ T8814]  ? __kmalloc_node_track_caller_noprof+0x22d/0x440
[  139.926052][ T8814]  ? hwsim_new_radio_nl+0x9ff/0x12b0
[  139.927466][ T8814]  hwsim_new_radio_nl+0xb42/0x12b0
[  139.928832][ T8814]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  139.930284][ T8814]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[  139.932150][ T8814]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[  139.934004][ T8814]  genl_family_rcv_msg_doit+0x202/0x2f0
[  139.935398][ T8814]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  139.936947][ T8814]  ? bpf_lsm_capable+0x9/0x10
[  139.938102][ T8814]  ? security_capable+0x7e/0x260
[  139.939318][ T8814]  ? ns_capable+0xd7/0x110
[  139.940432][ T8814]  genl_rcv_msg+0x565/0x800
[  139.941541][ T8814]  ? __pfx_genl_rcv_msg+0x10/0x10
[  139.942763][ T8814]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  139.944165][ T8814]  netlink_rcv_skb+0x165/0x410
[  139.945359][ T8814]  ? __pfx_genl_rcv_msg+0x10/0x10
[  139.946641][ T8814]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  139.947982][ T8814]  ? down_read+0xc9/0x330
[  139.949080][ T8814]  ? __pfx_down_read+0x10/0x10
[  139.950300][ T8814]  ? netlink_deliver_tap+0x1ae/0xcf0
[  139.951638][ T8814]  genl_rcv+0x28/0x40
[  139.952657][ T8814]  netlink_unicast+0x53c/0x7f0
[  139.953868][ T8814]  ? __pfx_netlink_unicast+0x10/0x10
[  139.955205][ T8814]  ? __phys_addr_symbol+0x30/0x80
[  139.956440][ T8814]  ? __check_object_size+0x4a1/0x710
[  139.957790][ T8814]  netlink_sendmsg+0x8b8/0xd70
[  139.959035][ T8814]  ? __pfx_netlink_sendmsg+0x10/0x10
[  139.960365][ T8814]  ? lock_acquire+0x2f/0xb0
[  139.961520][ T8814]  ____sys_sendmsg+0x9ae/0xb40
[  139.962744][ T8814]  ? __pfx_____sys_sendmsg+0x10/0x10
[  139.964119][ T8814]  ? get_compat_msghdr+0x11b/0x170
[  139.965458][ T8814]  ? __pfx___lock_acquire+0x10/0x10
[  139.966824][ T8814]  ___sys_sendmsg+0x135/0x1e0
[  139.968000][ T8814]  ? __pfx____sys_sendmsg+0x10/0x10
[  139.969316][ T8814]  ? lock_acquire+0x2f/0xb0
[  139.970497][ T8814]  ? __fget_files+0x40/0x3f0
[  139.971673][ T8814]  ? fdget+0x176/0x210
[  139.972701][ T8814]  __sys_sendmsg+0x117/0x1f0
[  139.973819][ T8814]  ? __pfx___sys_sendmsg+0x10/0x10
[  139.975069][ T8814]  ? _copy_from_user+0x5d/0xf0
[  139.976231][ T8814]  __do_fast_syscall_32+0x73/0x120
[  139.977455][ T8814]  do_fast_syscall_32+0x32/0x80
[  139.978678][ T8814]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  139.980196][ T8814] RIP: 0023:0xf73de579
[  139.981167][ T8814] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  139.985785][ T8814] RSP: 002b:00000000f56a556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  139.987858][ T8814] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080
[  139.989798][ T8814] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000
[  139.991788][ T8814] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  139.993761][ T8814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  139.995712][ T8814] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  139.997727][ T8814]  </TASK>
[  139.998592][    C2] vkms_vblank_simulate: vblank timer overrun
[  140.048850][ T8820] xt_CT: You must specify a L4 protocol and not use inversions on it
[  140.257552][ T8830] netlink: 9 bytes leftover after parsing attributes in process `syz.0.804'.
[  140.264402][ T8830] 0�X: renamed from hsr0 (while UP)
[  140.266763][ T8830] 0�X: entered allmulticast mode
[  140.268079][ T8830] hsr_slave_0: entered allmulticast mode
[  140.269486][ T8830] hsr_slave_1: entered allmulticast mode
[  140.271302][ T8830] A link change request failed with some changes committed already. Interface 
c0�X may have been left with an inconsistent configuration, please check.
[  140.307910][ T8833] fuse: Unknown parameter 'g'
[  140.311669][ T8833] Process accounting resumed
[  140.313030][ T8833] kernel write not supported for file /asound/timers (pid: 8833 comm: syz.0.805)
[  140.670417][ T8861] xt_CT: You must specify a L4 protocol and not use inversions on it
[  141.079779][   T83] wlan1: Trigger new scan to find an IBSS to join
[  141.995142][ T8893] xt_CT: You must specify a L4 protocol and not use inversions on it
[  142.049389][  T831] usb 5-1: new low-speed USB device number 19 using dummy_hcd
[  142.204649][  T831] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  142.207225][  T831] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  142.210770][  T831] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  142.213916][  T831] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  142.217567][  T831] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  142.221597][  T831] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  142.223993][  T831] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  142.227163][  T831] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  142.230455][  T831] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  142.234037][  T831] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  142.238708][  T831] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  142.241239][  T831] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  142.244496][  T831] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  142.247933][  T831] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  142.251628][  T831] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  142.262863][  T831] usb 5-1: string descriptor 0 read error: -22
[  142.265144][  T831] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  142.268233][  T831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.279086][  T831] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  142.462497][ T8898] netlink: 'syz.2.824': attribute type 1 has an invalid length.
[  142.464474][ T8898] netlink: 'syz.2.824': attribute type 4 has an invalid length.
[  142.466379][ T8898] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.824'.
[  142.477151][ T8889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.481674][ T8889] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.488150][ T8889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.492130][ T8889] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.495728][ T8889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.500127][ T8889] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.502749][ T8889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.505572][ T8889] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.508730][ T8889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.511896][ T8889] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.521988][    T8] usb 5-1: USB disconnect, device number 19
[  142.524781][ T8905] netlink: 'syz.2.824': attribute type 1 has an invalid length.
[  142.526804][ T8905] netlink: 'syz.2.824': attribute type 4 has an invalid length.
[  142.529577][ T8905] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.824'.
[  143.076071][ T8911] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.827'.
[  143.081031][ T8911] openvswitch: netlink: Missing key (keys=80040, expected=2000)
[  143.088000][ T8911] autofs: Unknown parameter '�P�'
[  143.150166][ T8912] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117
[  143.152396][ T8912] PKCS7: Only support pkcs7_signedData type
[  143.833207][ T8936] xt_CT: You must specify a L4 protocol and not use inversions on it
[  144.207967][   T83] wlan1: Trigger new scan to find an IBSS to join
[  144.262721][ T8948] syzkaller0: entered promiscuous mode
[  144.264225][ T8948] syzkaller0: entered allmulticast mode
[  144.542418][ T8956] netlink: 32 bytes leftover after parsing attributes in process `syz.1.840'.
[  144.597925][  T831] usb 7-1: new low-speed USB device number 17 using dummy_hcd
[  144.760032][  T831] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  144.762766][  T831] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  144.766309][  T831] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  144.771599][  T831] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  144.777146][  T831] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  144.781580][  T831] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  144.784371][  T831] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  144.788209][  T831] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  144.791431][  T831] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  144.794217][  T831] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  144.797496][  T831] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  144.799596][  T831] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  144.802234][  T831] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  144.804754][  T831] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  144.811065][  T831] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  144.826197][ T8970] xt_CT: You must specify a L4 protocol and not use inversions on it
[  144.972617][ T8978] netlink: 'syz.3.845': attribute type 5 has an invalid length.
[  144.976790][ T8978] netlink: 7 bytes leftover after parsing attributes in process `syz.3.845'.
[  144.984717][ T8978] netlink: 'syz.3.845': attribute type 5 has an invalid length.
[  144.986872][ T8978] netlink: 7 bytes leftover after parsing attributes in process `syz.3.845'.
[  145.062838][ T8988] binder: 8987:8988 ioctl 400c620e 20002340 returned -22
[  145.096960][ T8993] netlink: 'syz.3.848': attribute type 2 has an invalid length.
[  145.161887][ T1191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.166134][ T8993] input: syz1 as /devices/virtual/input/input17
[  145.250577][ T8996] fuse: Unknown parameter '0x0000000000000004'
[  145.262909][ T8996] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[  145.702464][ T9014] xt_CT: You must specify a L4 protocol and not use inversions on it
[  145.972251][ T9029] netlink: 'syz.0.858': attribute type 1 has an invalid length.
[  145.980918][ T9026] netlink: 48 bytes leftover after parsing attributes in process `syz.1.856'.
[  146.029117][ T9028] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  146.031150][ T9028] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  146.037144][ T9028] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  146.043753][ T9028] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  146.045763][ T9028] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  146.047479][ T9028] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  146.050541][ T9028] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  146.458008][ T5409] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  146.607984][ T5409] usb 5-1: Using ep0 maxpacket: 32
[  146.614676][ T5409] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  146.616867][ T5409] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  146.628003][ T5409] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  146.631149][ T5409] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  146.634504][ T5409] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  146.638229][ T5409] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  146.648081][ T5409] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  146.651607][ T5409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.656923][ T5409] usb 5-1: config 0 descriptor??
[  146.850497][ T9048] xt_CT: You must specify a L4 protocol and not use inversions on it
[  146.863614][ T5409] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  146.871182][ T5409] usb 5-1: USB disconnect, device number 21
[  146.875563][ T5409] usblp0: removed
[  147.081342][ T9052] e1000e 0000:00:02.0 eth1: NIC Link is Down
[  147.258821][  T831] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  147.261457][  T831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.264842][  T831] usb 7-1: can't set config #168, error -71
[  147.266827][  T831] usb 7-1: USB disconnect, device number 17
[  147.317866][ T5382] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  147.394080][ T9075] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  147.396283][ T9075] UDF-fs: Scanning with blocksize 512 failed
[  147.406177][ T9075] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  147.409094][ T9075] UDF-fs: Scanning with blocksize 1024 failed
[  147.411232][ T9075] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  147.413185][ T9075] UDF-fs: Scanning with blocksize 2048 failed
[  147.414899][ T9075] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  147.416972][ T9075] UDF-fs: Scanning with blocksize 4096 failed
[  147.477960][ T5382] usb 5-1: Using ep0 maxpacket: 32
[  147.480572][ T5382] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  147.482767][ T5382] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  147.485000][ T5382] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  147.487369][ T5382] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  147.490779][ T5382] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  147.493275][ T5382] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  147.496896][ T5382] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  147.499294][ T5382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.502109][ T5382] usb 5-1: config 0 descriptor??
[  147.706054][ T5382] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  147.981961][ T5409] usb 5-1: USB disconnect, device number 22
[  147.985569][    C3] usblp0: nonzero read bulk status received: -108
[  148.047918][ T4784] Bluetooth: hci0: command 0x0c1a tx timeout
[  148.128966][ T4784] Bluetooth: hci2: command 0x0c1a tx timeout
[  148.209165][ T9096] usblp0: removed
[  148.650867][ T9099] fuse: Unknown parameter '�d�'
[  148.654745][ T9098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  148.752787][ T9112] xt_CT: You must specify a L4 protocol and not use inversions on it
[  148.960988][ T9121] netlink: 'syz.1.876': attribute type 10 has an invalid length.
[  148.966625][ T9121] ipvlan1: entered promiscuous mode
[  148.975652][ T9121] team0: Device ipvlan1 failed to register rx_handler
[  148.991395][ T9121] autofs: Bad value for 'fd'
[  149.238952][ T5407] libceph: connect (1)[c::]:6789 error -101
[  149.240853][ T5407] libceph: mon0 (1)[c::]:6789 connect error
[  149.243045][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.881'.
[  149.253124][ T5395] libceph: connect (1)[c::]:6789 error -101
[  149.254786][ T5395] libceph: mon0 (1)[c::]:6789 connect error
[  149.320033][ T9128] ceph: No mds server is up or the cluster is laggy
[  149.380648][ T9146] xt_CT: You must specify a L4 protocol and not use inversions on it
[  149.424835][ T9149] sctp: [Deprecated]: syz.1.883 (pid 9149) Use of int in maxseg socket option.
[  149.424835][ T9149] Use struct sctp_assoc_value instead
[  149.741200][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.883'.
[  150.128547][ T4784] Bluetooth: hci0: command 0x0c1a tx timeout
[  150.209506][ T4784] Bluetooth: hci2: command 0x0c1a tx timeout
[  151.736162][ T1100] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.821173][ T1100] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.885442][ T5343] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  151.890344][ T5343] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  151.892796][ T5343] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  151.902740][ T1100] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.911209][ T5343] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  151.913921][ T5343] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  151.916019][ T5343] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  151.982531][ T1100] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.023062][ T9163] chnl_net:caif_netlink_parms(): no params data found
[  152.095321][ T9163] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.097490][ T9163] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.099540][ T9163] bridge_slave_0: entered allmulticast mode
[  152.101846][ T9163] bridge_slave_0: entered promiscuous mode
[  152.104886][ T9163] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.106986][ T9163] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.109159][ T9163] bridge_slave_1: entered allmulticast mode
[  152.111773][ T9163] bridge_slave_1: entered promiscuous mode
[  152.182599][ T9163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.186242][ T9163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  152.191791][ T1100] bridge_slave_1: left allmulticast mode
[  152.193277][ T1100] bridge_slave_1: left promiscuous mode
[  152.194790][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.197654][ T1100] bridge_slave_0: left allmulticast mode
[  152.199909][ T1100] bridge_slave_0: left promiscuous mode
[  152.201418][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.279735][ T4784] Bluetooth: hci2: command 0x0c1a tx timeout
[  152.527107][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.533120][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.539093][ T1100] bond0 (unregistering): Released all slaves
[  152.543698][ T1100] bond1 (unregistering): Released all slaves
[  152.637507][ T9163] team0: Port device team_slave_0 added
[  152.641378][ T1100] : left promiscuous mode
[  152.656254][ T9163] team0: Port device team_slave_1 added
[  152.684630][ T9163] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.687154][ T9163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.695402][ T9163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.699531][ T9163] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.701491][ T9163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.714499][ T9163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.729294][ T1100] tipc: Disabling bearer <eth:ipvlan0>
[  152.732016][ T1100] tipc: Left network mode
[  152.767557][ T9163] hsr_slave_0: entered promiscuous mode
[  152.771299][ T9163] hsr_slave_1: entered promiscuous mode
[  152.774133][ T9163] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  152.776227][ T9163] Cannot create hsr debugfs directory
[  152.922425][ T9191] xt_CT: You must specify a L4 protocol and not use inversions on it
[  152.971131][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.976692][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.980961][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.984430][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.002913][ T9193] afs: Unknown parameter 'hash'
[  153.048443][ T1100] veth1_macvtap: left promiscuous mode
[  153.049941][ T1100] veth0_macvtap: left promiscuous mode
[  153.051428][ T1100] veth1_vlan: left promiscuous mode
[  153.052828][ T1100] veth0_vlan: left promiscuous mode
[  153.380606][ T9198] netlink: set zone limit has 4 unknown bytes
[  153.791261][ T1100] team0 (unregistering): Port device team_slave_1 removed
[  153.877113][ T1100] team0 (unregistering): Port device team_slave_0 removed
[  153.960238][ T4784] Bluetooth: hci0: command tx timeout
[  154.518155][ T9195] netlink: 'syz.3.893': attribute type 10 has an invalid length.
[  154.520316][ T9195] ipvlan1: entered promiscuous mode
[  154.524800][ T9195] team0: Device ipvlan1 failed to register rx_handler
[  154.567324][ T9217] No such timeout policy "syz1"
[  154.569732][ T9207] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  154.574306][ T9207] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  154.599060][ T9220] binder: BINDER_SET_CONTEXT_MGR already set
[  154.600783][ T9220] binder: 9219:9220 ioctl 4018620d 20000040 returned -16
[  154.602938][ T9220] binder: BINDER_SET_CONTEXT_MGR already set
[  154.604661][ T9220] binder: 9219:9220 ioctl 4018620d 20000040 returned -16
[  154.606982][ T9220] binder: BINDER_SET_CONTEXT_MGR already set
[  154.609500][ T9220] binder: 9219:9220 ioctl 4018620d 20000040 returned -16
[  154.611671][ T9220] binder: BINDER_SET_CONTEXT_MGR already set
[  154.615929][ T9220] binder: 9219:9220 ioctl 4018620d 20000040 returned -16
[  154.700494][ T9236] xt_CT: You must specify a L4 protocol and not use inversions on it
[  154.734452][ T9240] tipc: Started in network mode
[  154.739044][ T9240] tipc: Node identity f7, cluster identity 4711
[  154.740993][ T9240] tipc: Node number set to 247
[  155.308004][ T9163] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  155.314868][ T9163] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  155.321549][ T9163] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  155.337972][ T9163] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  155.471326][ T9163] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.480873][ T9163] 8021q: adding VLAN 0 to HW filter on device team0
[  155.484680][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.486530][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.531693][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.533721][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.568122][ T9266] binder: BINDER_SET_CONTEXT_MGR already set
[  155.569745][ T9266] binder: 9265:9266 ioctl 4018620d 20000100 returned -16
[  155.571754][ T9266] binder: 9265:9266 ioctl c0306201 20000080 returned -14
[  155.731794][ T9163] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.746930][ T9163] veth0_vlan: entered promiscuous mode
[  155.752334][ T9163] veth1_vlan: entered promiscuous mode
[  155.760105][ T9163] veth0_macvtap: entered promiscuous mode
[  155.762839][ T9163] veth1_macvtap: entered promiscuous mode
[  155.768444][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.771054][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.773417][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.775961][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.778584][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.781243][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.786123][ T9163] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.789401][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.792097][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.794609][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.797268][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.800146][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.802831][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.806076][ T9163] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.856587][ T9163] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.859140][ T9163] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.861394][ T9163] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.863649][ T9163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.906331][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.908455][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.917546][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.921909][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.039053][ T4784] Bluetooth: hci0: command tx timeout
[  156.230786][ T9296] xt_CT: You must specify a L4 protocol and not use inversions on it
[  156.386492][ T9301] ptrace attach of "/syz-executor exec"[6210] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               
[  156.408983][ T9301] netlink: 'syz.0.913': attribute type 3 has an invalid length.
[  156.435430][ T9301] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.913'.
[  156.619807][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.916'.
[  157.018750][ T9327] input: syz0 as /devices/virtual/input/input18
[  157.130624][ T9331] xt_CT: You must specify a L4 protocol and not use inversions on it
[  157.219368][ T9333] random: crng reseeded on system resumption
[  157.785106][   T39] kauditd_printk_skb: 22 callbacks suppressed
[  157.785121][   T39] audit: type=1326 audit(1729746710.384:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.2.924" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf73ce579 code=0x7fc00000
[  157.799527][ T9356] netlink: set zone limit has 4 unknown bytes
[  157.818610][ T9361] fuse: Bad value for 'fd'
[  157.820412][ T9360] fuse: Bad value for 'fd'
[  157.824535][ T9356] netlink: 'syz.3.925': attribute type 10 has an invalid length.
[  157.826587][ T9356] netlink: 40 bytes leftover after parsing attributes in process `syz.3.925'.
[  157.830844][ T9356] batman_adv: batadv0: Adding interface: vlan1
[  157.832488][ T9356] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.839239][ T9356] batman_adv: batadv0: Interface activated: vlan1
[  157.852837][ T9365] xt_CT: You must specify a L4 protocol and not use inversions on it
[  157.888601][ T9369] xt_CT: You must specify a L4 protocol and not use inversions on it
[  158.002879][ T9380] netlink: 'syz.2.935': attribute type 4 has an invalid length.
[  158.007025][ T9380] netlink: 17 bytes leftover after parsing attributes in process `syz.2.935'.
[  158.127901][ T4784] Bluetooth: hci0: command tx timeout
[  158.136689][ T9389] ieee802154 phy1 wpan1: encryption failed: -22
[  158.250115][ T9382] input: syz1 as /devices/virtual/input/input19
[  158.287998][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.934'.
[  158.434214][ T9395] input: syz0 as /devices/virtual/input/input20
[  158.451095][ T9395] netlink: 24 bytes leftover after parsing attributes in process `syz.3.939'.
[  158.722109][ T9398] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only
[  158.725475][ T9398] overlayfs: failed to set uuid (/file1, err=-28); falling back to uuid=null.
[  158.762896][ T9400] nfs4: Bad value for 'source'
[  158.789882][ T9404] xt_CT: You must specify a L4 protocol and not use inversions on it
[  159.509593][   T39] audit: type=1804 audit(1729746712.104:210): pid=9430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.949" name="/newroot/170/file0/bus" dev="ramfs" ino=30301 res=1 errno=0
[  159.982371][ T9450] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  159.989244][ T9450] CIFS mount error: No usable UNC path provided in device string!
[  159.989244][ T9450] 
[  159.992099][ T9450] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  160.197901][ T5343] Bluetooth: hci0: command tx timeout
[  160.203026][ T9458] fuse: Unknown parameter '�'
[  160.207373][ T5343] Bluetooth: hci0: unexpected event for opcode 0x0c6d
[  160.822032][   T39] audit: type=1800 audit(1729746713.424:211): pid=9430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.949" name="bus" dev="ramfs" ino=30301 res=0 errno=0
[  162.370317][ T9494] xt_CT: You must specify a L4 protocol and not use inversions on it
[  162.446568][ T9499] ieee802154 phy1 wpan1: encryption failed: -22
[  163.416915][ T9520] Unsupported ieee802154 address type: 0
[  163.763667][ T9534] xt_CT: You must specify a L4 protocol and not use inversions on it
[  164.280332][ T5343] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  164.284702][ T5343] Bluetooth: hci0: Injecting HCI hardware error event
[  165.313386][ T9567] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:2
[  165.316004][ T9567] netlink: 'syz.2.984': attribute type 1 has an invalid length.
[  165.528241][   T35] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  165.679460][   T35] usb 5-1: config 0 has no interfaces?
[  165.681425][   T35] usb 5-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca
[  165.683849][   T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.687345][   T35] usb 5-1: config 0 descriptor??
[  165.825267][ T9570] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  165.829108][ T9570] Error parsing options; rc = [-22]
[  165.894592][ T5384] usb 5-1: USB disconnect, device number 23
[  167.247907][ T5343] Bluetooth: hci2: command 0x0c1a tx timeout
[  167.421065][ T9612] fuse: Bad value for 'fd'
[  167.595284][ T9627] openvswitch: netlink: Missing key (keys=44, expected=2000)
[  167.634632][ T9628] serio: Serial port pts0
[  168.256727][ T9653] vivid-007: disconnect
[  168.631020][ T9661] binder: 9659:9661 ioctl c0306201 20000680 returned -14
[  169.089305][ T9652] vivid-007: reconnect
[  169.843718][ T9668] netlink: 156800 bytes leftover after parsing attributes in process `syz.0.1011'.
[  170.063210][ T9673] block nbd0: shutting down sockets
[  170.111520][ T9679] xt_CT: You must specify a L4 protocol and not use inversions on it
[  170.208598][  T831] kernel write not supported for file /vcsa1 (pid: 831 comm: kworker/3:2)
[  170.213382][  T831] kernel write not supported for file /vcsa1 (pid: 831 comm: kworker/3:2)
[  170.216213][  T831] kernel write not supported for file /vcsa1 (pid: 831 comm: kworker/3:2)
[  170.219735][  T831] kernel write not supported for file /vcsa1 (pid: 831 comm: kworker/3:2)
[  170.222176][  T831] kernel write not supported for file /vcsa1 (pid: 831 comm: kworker/3:2)
[  170.224816][  T831] kernel write not supported for file /vcsa1 (pid: 831 comm: kworker/3:2)
[  170.227299][  T831] kernel write not supported for file /vcsa1 (pid: 831 comm: kworker/3:2)
[  170.230813][  T831] kernel write not supported for file /vcsa1 (pid: 831 comm: kworker/3:2)
[  170.233632][  T831] kernel write not supported for file /vcsa1 (pid: 831 comm: kworker/3:2)
[  170.236098][  T831] kernel write not supported for file /vcsa1 (pid: 831 comm: kworker/3:2)
[  170.413216][ T9693] fuse: Unknown parameter 'allow_ouhena�'
[  170.609650][ T9696] block nbd0: server does not support multiple connections per device.
[  170.619050][ T9691] block nbd0: NBD_DISCONNECT
[  170.623983][ T9691] block nbd0: Disconnected due to user request.
[  170.626037][ T9691] block nbd0: shutting down sockets
[  170.839190][ T9702] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1021'.
[  170.844661][   T39] audit: type=1326 audit(1729746723.444:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.0.1022" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x0
[  171.218328][ T9721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1026'.
[  171.297668][ T9723] nvme_fabrics: missing parameter 'transport=%s'
[  171.299694][ T9723] nvme_fabrics: missing parameter 'nqn=%s'
[  171.981980][   T39] audit: type=1804 audit(1729746724.584:213): pid=9740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1030" name="/newroot/200/bus/bus" dev="overlay" ino=1130 res=1 errno=0
[  171.985918][ T9740] Invalid ELF header magic: != ELF
[  172.898367][ T9759] bridge0: port 3(syz_tun) entered disabled state
[  172.900320][ T9759] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.902322][ T9759] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.909986][ T9759] bridge0: port 3(syz_tun) entered blocking state
[  172.911892][ T9759] bridge0: port 3(syz_tun) entered forwarding state
[  172.914714][ T9759] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.916607][ T9759] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.918619][ T9759] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.920475][ T9759] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.930575][ T9759] team0: Port device bridge0 added
[  172.996761][ T9764] EXT4-fs (sda1): shut down requested (2)
[  173.019442][ T9764] Aborting journal on device sda1-8.
[  173.040394][ T9768] xt_CT: You must specify a L4 protocol and not use inversions on it
[  173.084287][ T9770] netlink: 'syz.2.1040': attribute type 3 has an invalid length.
[  173.088538][ T9770] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1040'.
[  173.091297][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1040'.
[  173.186882][ T9774] tmpfs: Bad value for 'mpol'
[  173.484649][ T9803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1048'.
[  173.487146][ T9803] netlink: 'syz.1.1048': attribute type 7 has an invalid length.
[  173.489847][ T9803] netlink: 'syz.1.1048': attribute type 8 has an invalid length.
[  173.491801][ T9803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1048'.
[  173.500978][ T9803] erspan0: entered promiscuous mode
[  173.506108][ T9803] batadv_slave_1: entered promiscuous mode
[  173.507938][ T5409] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  173.516338][ T9803] erspan0: left promiscuous mode
[  173.525937][ T9803] batadv_slave_1: left promiscuous mode
[  173.537068][ T9805] xt_CT: You must specify a L4 protocol and not use inversions on it
[  173.647873][ T5409] usb 7-1: device descriptor read/64, error -71
[  173.687569][ T9810] netlink: 'syz.1.1051': attribute type 10 has an invalid length.
[  173.696894][ T9810] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.699683][ T9810] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  173.927941][ T5409] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  173.955261][ T9821] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  173.973039][ T9821] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[  174.067853][ T5409] usb 7-1: device descriptor read/64, error -71
[  174.178070][ T5409] usb usb7-port1: attempt power cycle
[  174.426228][ T9836] xt_CT: You must specify a L4 protocol and not use inversions on it
[  174.474938][   T39] audit: type=1326 audit(1729746727.074:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9831 comm="syz.1.1057" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000
[  174.484618][   T39] audit: type=1326 audit(1729746727.084:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9831 comm="syz.1.1057" exe="/syz-executor" sig=0 arch=40000003 syscall=441 compat=1 ip=0xf7fa2579 code=0x7ffc0000
[  174.491922][   T39] audit: type=1326 audit(1729746727.084:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9831 comm="syz.1.1057" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000
[  174.500557][   T39] audit: type=1326 audit(1729746727.084:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9831 comm="syz.1.1057" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000
[  174.506518][   T39] audit: type=1326 audit(1729746727.084:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9831 comm="syz.1.1057" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fa2579 code=0x7ffc0000
[  174.512337][   T39] audit: type=1326 audit(1729746727.084:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9831 comm="syz.1.1057" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000
[  174.517940][ T5409] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  174.520096][   T39] audit: type=1326 audit(1729746727.084:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9831 comm="syz.1.1057" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000
[  174.540195][ T5409] usb 7-1: device descriptor read/8, error -71
[  174.777994][ T5409] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  174.798615][ T5409] usb 7-1: device descriptor read/8, error -71
[  174.912407][ T5409] usb usb7-port1: unable to enumerate USB device
[  176.441765][ T9862] mmap: syz.2.1066 (9862) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  176.461894][ T9868] xt_CT: You must specify a L4 protocol and not use inversions on it
[  176.498402][ T9870] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98
[  176.500625][ T9873] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1070'.
[  176.767728][ T9888] xt_connbytes: Forcing CT accounting to be enabled
[  176.769922][ T9888] xt_CT: You must specify a L4 protocol and not use inversions on it
[  176.804152][ T9886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  177.606572][ T9901] xt_CT: You must specify a L4 protocol and not use inversions on it
[  177.865439][ T9906] ptrace attach of "/syz-executor exec"[9908] was attempted by "/syz-executor exec"[9906]
[  178.062292][   T39] audit: type=1326 audit(1729746730.664:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.2.1083" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x0
[  179.073016][ T9937] syz.0.1087 (9937): drop_caches: 2
[  179.845066][ T9939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1088'.
[  180.068600][ T9966] Cannot find set identified by id 3 to match
[  180.177905][ T5385] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  180.333161][ T5385] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  180.336602][ T5385] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  180.340527][ T5385] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  180.343307][ T5385] usb 5-1: config 0 interface 0 has no altsetting 0
[  180.345777][ T5385] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  180.351233][ T5385] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  180.353955][ T5385] usb 5-1: config 0 interface 0 has no altsetting 0
[  180.356429][ T5385] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  180.358816][ T5385] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  180.361597][ T5385] usb 5-1: config 0 interface 0 has no altsetting 0
[  180.363983][ T5385] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  180.366261][ T5385] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  180.369320][ T5385] usb 5-1: config 0 interface 0 has no altsetting 0
[  180.371694][ T5385] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  180.373912][ T5385] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  180.376854][ T5385] usb 5-1: config 0 interface 0 has no altsetting 0
[  180.379366][ T5385] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  180.381620][ T5385] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  180.384397][ T5385] usb 5-1: config 0 interface 0 has no altsetting 0
[  180.386813][ T5385] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  180.389251][ T5385] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  180.392041][ T5385] usb 5-1: config 0 interface 0 has no altsetting 0
[  180.394443][ T5385] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  180.396684][ T5385] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  180.400327][ T5385] usb 5-1: config 0 interface 0 has no altsetting 0
[  180.403545][ T5385] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  180.405875][ T5385] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  180.408166][ T5385] usb 5-1: Product: syz
[  180.409257][ T5385] usb 5-1: Manufacturer: syz
[  180.410536][ T5385] usb 5-1: SerialNumber: syz
[  180.412603][ T5385] usb 5-1: config 0 descriptor??
[  180.417263][ T5385] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  180.447286][ T9976] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long
[  180.670623][    C2] usb 5-1: yurex_control_callback - control failed: -71
[  180.670957][   T35] usb 5-1: USB disconnect, device number 24
[  180.680344][   T35] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  180.937954][ T9987] overlay: Bad value for 'uuid'
[  181.489355][T10001] 9pnet_virtio: no channels available for device syz
[  181.601111][T10002] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  181.956192][T10014] xt_CT: You must specify a L4 protocol and not use inversions on it
[  181.969234][T10012] fuse: Unknown parameter '0x0000000000000004'
[  181.980046][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'.
[  181.988279][T10012] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[  182.060636][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'.
[  182.062978][T10020] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1110'.
[  182.210966][T10027] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1109'.
[  183.143076][T10052] xt_CT: You must specify a L4 protocol and not use inversions on it
[  183.874569][T10058] fuse: Unknown parameter '0x0000000000000004'
[  183.900631][T10058] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[  183.972948][T10062] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  184.231240][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1124'.
[  184.241426][T10072] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.058261][T10082] block nbd1: Device being setup by another task
[  185.111260][T10082] block nbd1: NBD_DISCONNECT
[  185.114112][T10082] block nbd1: Disconnected due to user request.
[  185.116706][T10082] block nbd1: shutting down sockets
[  185.272893][   T39] audit: type=1326 audit(1729746737.874:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10085 comm="syz.1.1128" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x0
[  185.278486][   T39] audit: type=1326 audit(1729746737.874:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10084 comm="syz.0.1136" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x0
[  185.719748][T10094] nvme_fabrics: missing parameter 'transport=%s'
[  185.721380][T10094] nvme_fabrics: missing parameter 'nqn=%s'
[  187.107944][ T5384] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  187.259964][ T5384] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  187.262653][ T5384] usb 6-1: config 0 has no interfaces?
[  187.264090][ T5384] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  187.266454][ T5384] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.273511][ T5384] usb 6-1: config 0 descriptor??
[  187.478196][    T8] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  187.658077][    T8] usb 5-1: Using ep0 maxpacket: 32
[  187.664390][    T8] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=40.72
[  187.667219][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.670173][    T8] usb 5-1: Product: syz
[  187.671910][    T8] usb 5-1: Manufacturer: syz
[  187.673584][    T8] usb 5-1: SerialNumber: syz
[  187.677063][    T8] usb 5-1: config 0 descriptor??
[  187.898120][T10114] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  187.905791][    T8] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -71
[  187.912697][    T8] usb 5-1: USB disconnect, device number 25
[  188.640020][T10119] binder: Unknown parameter 'smackfsroot'
[  189.268148][ T5384] usb 6-1: string descriptor 0 read error: -71
[  189.271460][ T5384] usb 6-1: USB disconnect, device number 9
[  189.463710][T10130] 9pnet_virtio: no channels available for device syz
[  189.557213][T10131] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  191.617859][ T5384] usb 5-1: new full-speed USB device number 26 using dummy_hcd
[  191.748046][ T5384] usb 5-1: device descriptor read/64, error -71
[  191.938900][T10168] netlink: 'syz.1.1145': attribute type 7 has an invalid length.
[  191.941575][T10168] netlink: 'syz.1.1145': attribute type 39 has an invalid length.
[  191.955548][T10168] bridge2: port 1(gretap1) entered blocking state
[  191.958027][T10168] bridge2: port 1(gretap1) entered disabled state
[  191.961360][T10168] gretap1: entered allmulticast mode
[  191.963929][T10168] gretap1: entered promiscuous mode
[  191.972890][T10168] netlink: 'syz.1.1145': attribute type 7 has an invalid length.
[  191.975514][T10168] netlink: 'syz.1.1145': attribute type 39 has an invalid length.
[  191.988041][ T5384] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[  192.036031][T10175] xt_CT: You must specify a L4 protocol and not use inversions on it
[  192.073481][T10177] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1148'.
[  192.117899][ T5384] usb 5-1: device descriptor read/64, error -71
[  192.228399][ T5384] usb usb5-port1: attempt power cycle
[  192.397896][ T5409] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  192.547904][ T5409] usb 6-1: Using ep0 maxpacket: 32
[  192.553232][ T5409] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  192.555955][ T5409] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  192.559026][ T5409] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  192.562030][ T5409] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  192.565154][ T5409] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  192.568578][ T5409] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  192.572747][ T5409] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  192.575602][ T5409] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.577940][ T5384] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[  192.579497][ T5409] usb 6-1: config 0 descriptor??
[  192.609079][ T5384] usb 5-1: device descriptor read/8, error -71
[  192.790046][ T5409] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  192.797137][ T5409] usb 6-1: USB disconnect, device number 10
[  192.800203][ T5409] usblp0: removed
[  192.857955][ T5384] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  192.878716][ T5384] usb 5-1: device descriptor read/8, error -71
SYZFAIL: posix_spawn failed
 (errno 5: Input/output error)
[  192.988768][ T5384] usb usb5-port1: unable to enumerate USB device
[  193.097535][ T9183] syz_tun (unregistering): left promiscuous mode
[  193.247005][T10161] bridge0: port 3(syz_tun) entered disabled state
[  193.256250][T10161] syz_tun (unregistering): left allmulticast mode
[  193.258234][T10161] syz_tun (unregistering): left promiscuous mode
[  193.260587][T10161] bridge0: port 3(syz_tun) entered disabled state
[  193.336722][ T9337] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  193.340179][ T9337] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.456752][ T9337] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  193.459793][ T9337] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.568887][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[  193.594187][ T9337] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  193.596916][ T9337] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.650775][ T9337] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  193.653485][ T9337] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.753106][ T9337] bridge_slave_0: left allmulticast mode
[  193.754609][ T9337] bridge_slave_0: left promiscuous mode
[  193.756126][ T9337] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.771105][ T9337] gretap1: left allmulticast mode
[  193.772914][ T9337] gretap1: left promiscuous mode
[  193.774600][ T9337] bridge2: port 1(gretap1) entered disabled state
[  194.302206][ T9337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  194.313703][ T9337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  194.319404][ T9337] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  194.324141][ T9337] bond0 (unregistering): Released all slaves
[  194.418609][ T9337] IPVS: stopping master sync thread 7908 ...
[  194.633202][ T9337] batadv_slave_0: left promiscuous mode
[  194.640571][ T9337] hsr_slave_0: left promiscuous mode
[  194.642650][ T9337] hsr_slave_1: left promiscuous mode
[  194.645119][ T9337] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.647191][ T9337] batman_adv: batadv0: Removing interface: batadv_slave_0
[  194.655103][ T9337] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.658760][ T9337] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.700026][ T9337] veth1_macvtap: left promiscuous mode
[  194.702141][ T9337] veth0_macvtap: left promiscuous mode
[  194.704227][ T9337] veth1_vlan: left promiscuous mode
[  194.706253][ T9337] veth0_vlan: left promiscuous mode
[  195.489606][ T9337] team0 (unregistering): Port device team_slave_1 removed
[  195.575916][ T9337] team0 (unregistering): Port device team_slave_0 removed
[  196.721284][ T9337] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.792596][ T9337] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.883409][ T9337] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.984450][ T9337] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.109168][ T9337] bridge_slave_1: left allmulticast mode
[  197.111057][ T9337] bridge_slave_1: left promiscuous mode
[  197.115495][ T9337] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.123028][ T9337] bridge_slave_0: left allmulticast mode
[  197.124531][ T9337] bridge_slave_0: left promiscuous mode
[  197.126293][ T9337] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.270311][ T9337] team0: Port device bridge0 removed
[  197.530735][ T9337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  197.535776][ T9337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  197.541992][ T9337] bond0 (unregistering): Released all slaves
[  197.549003][ T9337] bond1 (unregistering): Released all slaves
[  197.668675][ T9337] IPVS: stopping master sync thread 7811 ...
[  197.883028][ T9337] hsr_slave_0: left promiscuous mode
[  197.885016][ T9337] hsr_slave_1: left promiscuous mode
[  197.886883][ T9337] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.889279][ T9337] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.891877][ T9337] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.894400][ T9337] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.924527][ T9337] veth1_macvtap: left promiscuous mode
[  197.926491][ T9337] veth0_macvtap: left promiscuous mode
[  197.928517][ T9337] veth1_vlan: left allmulticast mode
[  197.930330][ T9337] veth1_vlan: left promiscuous mode
[  197.932173][ T9337] veth0_vlan: left promiscuous mode
[  198.169188][ T9337] macvlan0 (unregistering): left allmulticast mode
[  198.729298][ T4784] Bluetooth: hci0: hardware error 0x00
[  198.805262][ T9337] team0 (unregistering): Port device team_slave_1 removed
[  198.893243][ T9337] team0 (unregistering): Port device team_slave_0 removed
[  200.757919][ T4784] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  201.025483][ T7225] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.143427][ T7225] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.214969][ T7225] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.302155][ T7225] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.411285][ T7225] bridge_slave_1: left allmulticast mode
[  201.413771][ T7225] bridge_slave_1: left promiscuous mode
[  201.415346][ T7225] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.419324][ T7225] bridge_slave_0: left allmulticast mode
[  201.420818][ T7225] bridge_slave_0: left promiscuous mode
[  201.422505][ T7225] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.766585][ T7225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  201.772058][ T7225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  201.777133][ T7225] bond0 (unregistering): Released all slaves
[  202.142432][ T7225] hsr_slave_0: left promiscuous mode
[  202.144966][ T7225] hsr_slave_1: left promiscuous mode
[  202.147620][ T7225] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  202.149797][ T7225] batman_adv: batadv0: Removing interface: batadv_slave_0
[  202.152235][ T7225] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  202.154226][ T7225] batman_adv: batadv0: Removing interface: batadv_slave_1
[  202.177875][ T7225] veth1_macvtap: left promiscuous mode
[  202.179376][ T7225] veth0_macvtap: left promiscuous mode
[  202.181216][ T7225] veth1_vlan: left promiscuous mode
[  202.182861][ T7225] veth0_vlan: left promiscuous mode

VM DIAGNOSIS:
05:12:25  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffc90002d7fb60 RCX=0000000000000000 RDX=0000000000000000
RSI=ffffffff84b96cb4 RDI=ffffc90002d7fb60 RBP=ffffffff84b96ca0 RSP=ffffc90000007f60
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=0000000000000000 R13=dffffc0000000000 R14=ffffc90003c4fb20 R15=ffffc90002d7fb28
RIP=ffffffff84b96cdd RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b400000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f52783c4 CR3=00000000748d2000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f747bff4
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=dffffc0000000000 RBX=ffff888022208080 RCX=0000000000000001 RDX=1ffff11004b2310b
RSI=ffff888025918800 RDI=ffff888022208118 RBP=dffffc0000000000 RSP=ffffc90002d7f730
R8 =0000000000000000 R9 =0000000000225510 R10=1ffff11004441017 R11=0000000000000000
R12=ffff888070054880 R13=dffffc0000000000 R14=ffff88802b53f988 R15=ffff88802b53ee80
RIP=ffffffff81613aa3 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000200ce000 CR3=000000005cac8000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000001 RBX=ffffed10049f15e3 RCX=ffffffff8169f88b RDX=fffffbfff2d32190
RSI=0000000000000008 RDI=ffffffff96990c78 RBP=00000000000001c0 RSP=ffffc9000349f580
R8 =0000000000000000 R9 =fffffbfff2d3218f R10=ffffffff96990c7f R11=0000000000000002
R12=dffffc0000000000 R13=0000000000000000 R14=0000000000000004 R15=ffff888024f8a440
RIP=ffffffff81ee0756 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7fe6e40 CR3=000000000db7c000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f747bff4
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=ffff88802b4467c0 RCX=ffffffff8180ab0c RDX=ffff88801f75a440
RSI=ffffffff8180aae6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90003dd77a8
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffffed1005688cf9 R13=0000000000000001 R14=ffff88802b4467c8 R15=ffff88802b740100
RIP=ffffffff8180aae8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f091dff0 CR3=0000000061296000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000