last executing test programs:

5.058711359s ago: executing program 1 (id=2325):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@d, {}, {}, {0x7, 0x0, 0x9}}]}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x8b, &(0x7f0000000100)=""/139}, 0x90)

4.860406584s ago: executing program 1 (id=2327):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/cgroup', 0x0, 0x0)
getdents64(r0, &(0x7f0000000080)=""/55, 0x37)
getdents64(r0, 0x0, 0x0)

4.860122739s ago: executing program 1 (id=2328):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x16}, 0x70)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001200)={0x0, @multicast1, @multicast1}, &(0x7f0000001240)=0xc)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
mlock2(&(0x7f00003ed000/0x3000)=nil, 0x3000, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000009000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='ext4_es_find_extent_range_exit\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000008850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_es_find_extent_range_exit\x00', r3}, 0x10)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)

4.737432139s ago: executing program 1 (id=2330):
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0xc)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

4.735336655s ago: executing program 2 (id=2331):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffca1}, 0x90)
keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x0)
request_key(0x0, &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000040)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#$\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce\x19+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8<dR}\x8e\b\x16\x8c\xa6\x01\x11\x97S\x99k\x1e\x03\x8e\xea\v}+\".\xda,\xfe\xb7\xbf\x01T\x99\xbdF\xd4\x925[\xd1\xeb\xdf\x98\xfa\xb0\x93\xc3>\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ<pCoa\xf2\xd1\x96\x8f\xf3>\xa1\xed', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000000340)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0xe8}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080), 0x62)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0x40049409, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0)
dup2(r0, r1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
socket$packet(0x11, 0x3, 0x300)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00')
socket$packet(0x11, 0x3, 0x300)
preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1, 0x4c, 0x0)

4.590122438s ago: executing program 1 (id=2332):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000100), 0x1001)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18)
ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}})
dup2(r1, r0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_flowlabel\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xcd}]}]}, 0x5c}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
pipe(0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r5, &(0x7f000000e3c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
write$FUSE_INIT(r7, &(0x7f0000000100)={0x50}, 0x7)
setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)

3.443228867s ago: executing program 2 (id=2343):
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), 0x0, 0x0, 0xfffffffffffffffe)
pipe2$watch_queue(0x0, 0x80)
socket$alg(0x26, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
preadv(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r2, 0x3)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
r4 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000001500), 0x588, 0x0)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
close_range(r6, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0)
keyctl$update(0x2, r0, &(0x7f0000000180)="b8", 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.945575898s ago: executing program 2 (id=2352):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffca1}, 0x90)
keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x0)
request_key(0x0, &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000040)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#$\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce\x19+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8<dR}\x8e\b\x16\x8c\xa6\x01\x11\x97S\x99k\x1e\x03\x8e\xea\v}+\".\xda,\xfe\xb7\xbf\x01T\x99\xbdF\xd4\x925[\xd1\xeb\xdf\x98\xfa\xb0\x93\xc3>\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ<pCoa\xf2\xd1\x96\x8f\xf3>\xa1\xed', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000000340)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0xe8}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080), 0x62)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0x40049409, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0)
dup2(r0, r1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
socket$packet(0x11, 0x3, 0x300)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00')
socket$packet(0x11, 0x3, 0x300)
preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1, 0x4c, 0x0)

1.741587135s ago: executing program 2 (id=2369):
io_setup(0x4, &(0x7f0000000400)=<r0=>0x0)
r1 = eventfd2(0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
r2 = fcntl$dupfd(r1, 0x0, r1)
writev(r2, &(0x7f0000000280)=[{&(0x7f0000000180)="0000a00000000000", 0x8}], 0x1d)

1.453720426s ago: executing program 3 (id=2374):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5385, &(0x7f0000000000))

1.453443058s ago: executing program 3 (id=2375):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r0, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84)

1.413022339s ago: executing program 2 (id=2377):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000ffffffff00000000000000000008000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000"], 0xb8}}, 0x0)
syz_emit_ethernet(0x26, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x89, 0x0, @private=0xa010101, @remote}, "68ef365c"}}}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r2, 0x0, r0, 0x0, 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
fcntl$setpipe(r0, 0x407, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='cachefiles_coherency\x00', r4}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000200029"], 0x1c}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.3439065s ago: executing program 3 (id=2379):
unshare(0x20020000)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r0)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file0\x00', 0x200)

1.325802821s ago: executing program 1 (id=2380):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000fa3600000000000000450000007b10323695"], &(0x7f0000000100)='syzkaller\x00'}, 0x90)
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = io_uring_setup(0x3a01, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x3, 0x1da, 0x0, r1})
r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001200)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001240)={0x40, r6, 0x3, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={{{}, {0x1}, @device_a, @device_b, @from_mac=@broadcast}, 0x0, 0x0, 0x0, @void}}]}, 0x40}}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000)
mremap(&(0x7f0000e95000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil)
munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x15)
r9 = gettid()
process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e030600bfff9801288463"], 0xffdd)
r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x160, 0x4c, 0x1a, 0x160, 0x73, 0x388, 0x258, 0x258, 0x388, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@time={{0x38}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x100, 0x228, 0x0, {}, [@common=@inet=@dscp={{0x28}}, @common=@srh={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:hald_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)
ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000780)={0x0, 0x33565348})
r12 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r12, 0xc0145608, &(0x7f0000000080)={0x2, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r12, 0xc058565d, &(0x7f0000000240)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x80}, 0x0, 0x1, {0x0}, 0x0, 0x0, r0})
close_range(r1, 0xffffffffffffffff, 0x0)

1.112237666s ago: executing program 2 (id=2381):
syz_open_dev$usbfs(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x181480, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000700)={'pimreg1\x00', @local})
r2 = syz_io_uring_setup(0xec5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x18a}, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000340))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r4 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000))
io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0xde5, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000000)={'ip6gre0\x00', @random="0200"})
readahead(r1, 0x0, 0x0)
r6 = syz_open_dev$cec(0x0, 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000002c0)={"90125830", 0x0, 0x5, 0x9, 0x0, 0x6, "471d855406050000c6a185480039d5", 'W\x00', "214619ed", "41f336e7", ["c81de44b0091fb7ce7442d42", "ed5eb3eecf000c00bd00", "34334e67c300e1a4c49d3300", "e996c9c4d23135876ea2fff7"]})
ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

630.346505ms ago: executing program 0 (id=2383):
r0 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x0)
ioctl$BLKBSZGET(r0, 0x80041270, &(0x7f00000003c0))

492.498583ms ago: executing program 0 (id=2384):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5385, &(0x7f0000000000))

450.939417ms ago: executing program 3 (id=2385):
io_setup(0x4, &(0x7f0000000400)=<r0=>0x0)
r1 = eventfd2(0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
r2 = fcntl$dupfd(r1, 0x0, r1)
writev(r2, &(0x7f0000000280)=[{&(0x7f0000000180)="0000a00000000000", 0x8}], 0x1d)

300.378125ms ago: executing program 0 (id=2386):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = fanotify_init(0x0, 0x0)
fanotify_mark(r1, 0x201, 0x4800003e, r0, 0x0)

164.155379ms ago: executing program 0 (id=2387):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000080)={{0x2}, {}, 0x0, 0x6})

163.524489ms ago: executing program 3 (id=2388):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r0, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84)

146.673912ms ago: executing program 0 (id=2389):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1}}]}}, 0x0, 0x32}, 0x20)

90.34665ms ago: executing program 0 (id=2390):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001600)="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", 0x2a1}], 0x1}}], 0x2, 0x0)

0s ago: executing program 3 (id=2391):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000003c0)=0x11, 0x4)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000001a00)=0x9, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10)
sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000000), 0x4)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11)

kernel console output (not intermixed with test programs):

nvalid maxpacket 59391, setting to 1024
[  291.426400][ T9426] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.433826][ T3660] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  291.473182][ T3660] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  291.484555][ T3660] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.498056][ T3660] usb 6-1: config 0 descriptor??
[  291.501609][ T9684] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  291.600834][ T9659] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.604755][ T9659] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.610988][ T9659] bridge_slave_0: entered allmulticast mode
[  291.621057][ T9659] bridge_slave_0: entered promiscuous mode
[  291.684772][ T9659] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.692918][ T9659] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.696100][ T9659] bridge_slave_1: entered allmulticast mode
[  291.702590][ T9659] bridge_slave_1: entered promiscuous mode
[  291.892039][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.004285][ T3660] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd
[  292.009656][ T3660] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[  292.028469][ T3660] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  292.028650][ T9659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  292.069854][ T9659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  292.106774][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.286294][    C2] hpet: Lost 1 RTC interrupts
[  292.307554][ T7509] usb 6-1: USB disconnect, device number 12
[  292.394756][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.426748][ T9659] team0: Port device team_slave_0 added
[  292.525784][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.668297][ T9659] team0: Port device team_slave_1 added
[  292.878037][ T9659] batman_adv: batadv0: Adding interface: batadv_slave_0
[  292.881734][ T9659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.922768][ T9659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  292.941095][ T9659] batman_adv: batadv0: Adding interface: batadv_slave_1
[  292.944803][ T9659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.966344][ T9659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  292.991650][   T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.995308][   T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.164831][ T9659] hsr_slave_0: entered promiscuous mode
[  293.179263][ T9659] hsr_slave_1: entered promiscuous mode
[  293.187499][ T5206] Bluetooth: hci2: command tx timeout
[  293.227688][ T9659] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  293.230874][ T9659] Cannot create hsr debugfs directory
[  293.311876][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.316264][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.319007][ T9573] 8021q: adding VLAN 0 to HW filter on device bond0
[  293.423129][   T13] bridge_slave_1: left allmulticast mode
[  293.425812][   T13] bridge_slave_1: left promiscuous mode
[  293.444007][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.469482][   T13] bridge_slave_0: left allmulticast mode
[  293.472175][   T13] bridge_slave_0: left promiscuous mode
[  293.474754][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.597291][ T9727] binder: 9725:9727 ioctl 4018620d 0 returned -22
[  294.063569][ T9727] binder: 9725:9727 ioctl c0306201 20000380 returned -11
[  294.147070][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  294.158591][   T13] bond_slave_0: left allmulticast mode
[  294.174365][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  294.207152][   T13] bond_slave_1: left allmulticast mode
[  294.217191][   T13] bond0 (unregistering): Released all slaves
[  294.391893][ T9573] 8021q: adding VLAN 0 to HW filter on device team0
[  294.407166][   T13] tipc: Left network mode
[  294.444709][ T5266] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.448069][ T5266] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.530455][ T5245] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.533324][ T5245] bridge0: port 2(bridge_slave_1) entered forwarding state
[  294.690450][    C2] hpet: Lost 1 RTC interrupts
[  294.720917][   T39] audit: type=1326 audit(1720905142.761:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.3.1583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  294.739734][   T39] audit: type=1326 audit(1720905142.761:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.3.1583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  294.763692][   T39] audit: type=1326 audit(1720905142.761:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.3.1583" exe="/syz-executor" sig=0 arch=40000003 syscall=353 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  294.806376][   T39] audit: type=1326 audit(1720905142.761:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.3.1583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  294.823159][   T39] audit: type=1326 audit(1720905142.761:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.3.1583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  294.837186][   T39] audit: type=1326 audit(1720905142.761:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.3.1583" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  294.846954][   T39] audit: type=1326 audit(1720905142.811:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.3.1583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  294.856000][   T39] audit: type=1326 audit(1720905142.811:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.3.1583" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  294.872210][   T39] audit: type=1326 audit(1720905142.811:3789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.3.1583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  294.912252][ T9573] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  294.919283][ T9573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  295.054275][ T5266] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  295.114081][   T13] hsr_slave_0: left promiscuous mode
[  295.132148][   T13] hsr_slave_1: left promiscuous mode
[  295.135613][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  295.139696][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  295.145213][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  295.152240][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  295.229027][ T5250] IPVS: starting estimator thread 0...
[  295.231619][   T13] veth1_macvtap: left promiscuous mode
[  295.234548][   T13] veth0_macvtap: left promiscuous mode
[  295.238244][   T13] veth1_vlan: left promiscuous mode
[  295.240765][   T13] veth0_vlan: left promiscuous mode
[  295.250112][ T9765] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available
[  295.266822][ T5206] Bluetooth: hci2: command tx timeout
[  295.270018][ T5266] usb 8-1: Using ep0 maxpacket: 16
[  295.277970][ T5266] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  295.281166][ T5266] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  295.285970][ T5266] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  295.293425][ T5266] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  295.300368][ T5266] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.303924][ T5266] usb 8-1: Product: syz
[  295.305563][ T5266] usb 8-1: Manufacturer: syz
[  295.307480][ T5266] usb 8-1: SerialNumber: syz
[  295.334596][ T9766] IPVS: using max 37 ests per chain, 88800 per kthread
[  295.901152][ T5266] usb 8-1: 0:2 : does not exist
[  295.935856][ T5266] usb 8-1: USB disconnect, device number 8
[  296.177038][ T9648] udevd[9648]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  297.078429][   T13] team0 (unregistering): Port device team_slave_1 removed
[  297.222445][   T13] team0 (unregistering): Port device team_slave_0 removed
[  299.664730][ T9573] 8021q: adding VLAN 0 to HW filter on device batadv0
[  299.806733][ T9573] veth0_vlan: entered promiscuous mode
[  299.832734][ T9573] veth1_vlan: entered promiscuous mode
[  299.916477][ T9573] veth0_macvtap: entered promiscuous mode
[  299.924509][ T9573] veth1_macvtap: entered promiscuous mode
[  299.926529][    C2] hpet_rtc_timer_reinit: 72 callbacks suppressed
[  299.926543][    C2] hpet: Lost 1 RTC interrupts
[  299.972821][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  299.997912][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.001665][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  300.002234][    C2] hpet: Lost 1 RTC interrupts
[  300.005604][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.041548][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  300.046570][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.050856][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  300.055838][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.060749][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  300.065864][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.074126][ T9573] batman_adv: batadv0: Interface activated: batadv_slave_0
[  300.087469][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  300.108897][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.113223][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  300.124965][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.129581][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  300.133922][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.138975][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  300.143944][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.148082][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  300.163311][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.170140][ T9573] batman_adv: batadv0: Interface activated: batadv_slave_1
[  300.180530][ T9573] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  300.184620][ T9573] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  300.189544][ T9573] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  300.193223][ T9573] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  300.289381][ T9659] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  300.329265][ T9659] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  300.371856][ T9659] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  300.389692][ T9659] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  300.507030][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.510847][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.580490][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.586900][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.646405][ T9659] 8021q: adding VLAN 0 to HW filter on device bond0
[  300.679147][ T9659] 8021q: adding VLAN 0 to HW filter on device team0
[  300.688053][ T5202] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.691212][ T5202] bridge0: port 1(bridge_slave_0) entered forwarding state
[  300.708994][ T5202] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.712216][ T5202] bridge0: port 2(bridge_slave_1) entered forwarding state
[  300.747015][ T9659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  300.796770][ T5245] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  300.905849][ T9659] 8021q: adding VLAN 0 to HW filter on device batadv0
[  300.981353][ T5245] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  300.986761][ T5245] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  300.991667][ T5245] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  301.002643][ T5245] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  301.005935][ T9659] veth0_vlan: entered promiscuous mode
[  301.006869][ T5245] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.013456][ T5245] usb 8-1: config 0 descriptor??
[  301.017484][ T9811] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  301.023814][ T9659] veth1_vlan: entered promiscuous mode
[  301.059492][ T9659] veth0_macvtap: entered promiscuous mode
[  301.067625][ T9659] veth1_macvtap: entered promiscuous mode
[  301.091626][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  301.096371][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.100891][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  301.105323][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.111550][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  301.115665][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.119873][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  301.124400][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.128338][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  301.132274][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.136727][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  301.141029][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.148073][ T9659] batman_adv: batadv0: Interface activated: batadv_slave_0
[  301.161102][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  301.165811][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.171797][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  301.176073][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.184250][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  301.189022][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.193363][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  301.198799][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.203074][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  301.207801][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.211733][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  301.215777][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.224988][ T9659] batman_adv: batadv0: Interface activated: batadv_slave_1
[  301.234678][ T9659] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  301.238657][ T9659] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  301.242595][ T9659] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  301.252845][ T9659] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  301.417851][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.421070][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.471510][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.476532][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.574524][ T5245] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd
[  301.590214][ T5245] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  301.601053][ T5245] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  301.850225][    C2] hpet: Lost 1 RTC interrupts
[  301.867437][   T55] usb 8-1: USB disconnect, device number 9
[  302.340869][ T9842] usb usb9: usbfs: process 9842 (syz.2.1607) did not claim interface 1 before use
[  302.949250][ T9869] usb usb9: usbfs: process 9869 (syz.1.1618) did not claim interface 1 before use
[  303.702888][   T39] audit: type=1326 audit(1720905151.741:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1627" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  303.725315][   T39] audit: type=1326 audit(1720905151.761:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1627" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  303.766102][   T39] audit: type=1326 audit(1720905151.771:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1627" exe="/syz-executor" sig=0 arch=40000003 syscall=353 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  303.777614][   T39] audit: type=1326 audit(1720905151.771:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1627" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  303.793292][   T39] audit: type=1326 audit(1720905151.771:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1627" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  303.802910][   T39] audit: type=1326 audit(1720905151.771:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1627" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  303.816896][   T39] audit: type=1326 audit(1720905151.841:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1627" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  303.847690][ T9901] syzkaller1: entered promiscuous mode
[  303.850270][ T9901] syzkaller1: entered allmulticast mode
[  304.087322][ T5246] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  304.269233][ T5246] usb 8-1: Using ep0 maxpacket: 16
[  304.274683][ T5246] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  304.279151][ T5246] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  304.285095][ T5246] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  304.299302][ T5246] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  304.303406][ T5246] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.309031][ T5246] usb 8-1: Product: syz
[  304.311006][ T5246] usb 8-1: Manufacturer: syz
[  304.313067][ T5246] usb 8-1: SerialNumber: syz
[  304.817718][ T9918] ptrace attach of "/syz-executor exec"[6270] was attempted by "/syz-executor exec"[9918]
[  304.952200][   T39] kauditd_printk_skb: 66 callbacks suppressed
[  304.952215][   T39] audit: type=1326 audit(1720905152.991:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1627" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  304.993543][   T39] audit: type=1326 audit(1720905153.011:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1627" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  305.063035][ T9928] vxcan1: tx drop: invalid sa for name 0x0000000000000003
[  305.101859][ T5246] usb 8-1: 0:2 : does not exist
[  305.202551][ T5246] usb 8-1: USB disconnect, device number 10
[  305.315882][ T9933] usb usb9: usbfs: process 9933 (syz.1.1640) did not claim interface 1 before use
[  305.428089][ T9939] unknown channel width for channel at 909000KHz?
[  305.467278][ T9786] udevd[9786]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  306.056283][   T30] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  306.197531][ T9960] unknown channel width for channel at 909000KHz?
[  306.259663][   T30] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  306.275461][   T30] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  306.280637][   T30] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  306.285009][   T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.292182][ T9952] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  306.633481][ T5214] usb 6-1: USB disconnect, device number 13
[  306.783099][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1655'.
[  307.062666][   T39] audit: type=1326 audit(1720905155.101:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.3.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  307.086972][   T39] audit: type=1326 audit(1720905155.121:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.3.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  307.095145][   T39] audit: type=1326 audit(1720905155.131:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.3.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=353 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  307.115216][   T39] audit: type=1326 audit(1720905155.131:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.3.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  307.136289][   T39] audit: type=1326 audit(1720905155.131:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.3.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  307.146061][   T39] audit: type=1326 audit(1720905155.181:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.3.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  307.206964][   T39] audit: type=1326 audit(1720905155.231:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.3.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  307.225152][   T39] audit: type=1326 audit(1720905155.231:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.3.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  307.288398][ T9984] binder: 9983:9984 ioctl 4018620d 0 returned -22
[  307.536408][   T55] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  307.588223][ T9984] binder: 9983:9984 ioctl c0306201 20000380 returned -11
[  307.748540][   T55] usb 8-1: Using ep0 maxpacket: 16
[  307.760237][   T55] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  307.764940][   T55] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  307.809474][   T55] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  307.825489][   T55] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  307.836302][   T55] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.841673][   T55] usb 8-1: Product: syz
[  307.843852][   T55] usb 8-1: Manufacturer: syz
[  307.846156][   T55] usb 8-1: SerialNumber: syz
[  307.872906][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1666'.
[  308.857116][   T55] usb 8-1: 0:2 : does not exist
[  308.862477][T10006] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  308.894873][   T55] usb 8-1: USB disconnect, device number 11
[  309.063611][ T5206] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  309.108080][ T9786] udevd[9786]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  309.552212][T10014] unknown channel width for channel at 909000KHz?
[  309.699088][T10016] binder: 10015:10016 ioctl 4018620d 0 returned -22
[  310.111917][ T5206] Bluetooth: hci2: unexpected event 0x09 length: 10 > 3
[  310.112033][ T5206] Bluetooth: hci2: SCO packet for unknown connection handle 201
[  310.115366][ T5206] Bluetooth: hci2: SCO packet for unknown connection handle 1039
[  310.207334][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1671'.
[  310.478298][T10016] binder: 10015:10016 ioctl c0306201 20000380 returned -11
[  310.895452][    C2] hpet_rtc_timer_reinit: 72 callbacks suppressed
[  310.895468][    C2] hpet: Lost 1 RTC interrupts
[  310.967740][T10028] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  311.145764][ T5206] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  311.658018][    C2] hpet: Lost 1 RTC interrupts
[  311.912798][T10053] binder: 10052:10053 ioctl 4018620d 0 returned -22
[  313.073640][T10065] ptrace attach of "/syz-executor exec"[9659] was attempted by "/syz-executor exec"[10065]
[  313.398228][T10071] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1696'.
[  314.016465][  T966] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  314.137641][T10091] ptrace attach of "/syz-executor exec"[9426] was attempted by "/syz-executor exec"[10091]
[  314.221284][  T966] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  314.241152][  T966] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  314.245557][  T966] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  314.266765][  T966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.289139][T10076] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  314.306479][ T5206] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  314.315477][ T5206] Bluetooth: hci2: Injecting HCI hardware error event
[  314.321205][ T5206] Bluetooth: hci2: hardware error 0x00
[  314.335761][T10095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1706'.
[  314.593358][  T966] usb 5-1: USB disconnect, device number 9
[  315.326719][T10104] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  315.785564][T10119] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  315.790173][T10119] overlayfs: failed to set xattr on upper
[  315.793452][T10119] overlayfs: ...falling back to redirect_dir=nofollow.
[  315.797369][T10119] overlayfs: ...falling back to index=off.
[  315.800029][T10119] overlayfs: ...falling back to uuid=null.
[  316.302291][T10130] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  316.406342][ T5206] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  316.815418][T10141] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  316.821033][T10141] overlayfs: failed to set xattr on upper
[  316.829003][T10141] overlayfs: ...falling back to redirect_dir=nofollow.
[  316.836488][T10141] overlayfs: ...falling back to index=off.
[  316.842140][T10141] overlayfs: ...falling back to uuid=null.
[  317.359636][T10161] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  317.362703][T10161] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  317.376405][T10161] vhci_hcd vhci_hcd.0: Device attached
[  317.576581][ T5214] vhci_hcd: vhci_device speed not set
[  317.647340][ T5214] usb 13-1: new full-speed USB device number 5 using vhci_hcd
[  317.663775][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1736'.
[  318.198220][T10162] vhci_hcd: connection reset by peer
[  318.201625][   T63] vhci_hcd: stop threads
[  318.203343][   T63] vhci_hcd: release socket
[  318.205459][   T63] vhci_hcd: disconnect device
[  318.481479][   T39] audit: type=1326 audit(1720905166.521:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.1741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7494579 code=0x7ffc0000
[  318.535801][   T39] audit: type=1326 audit(1720905166.521:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.1741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7494579 code=0x7ffc0000
[  318.545168][   T39] audit: type=1326 audit(1720905166.521:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.1741" exe="/syz-executor" sig=0 arch=40000003 syscall=353 compat=1 ip=0xf7494579 code=0x7ffc0000
[  318.555672][   T39] audit: type=1326 audit(1720905166.521:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.1741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7494579 code=0x7ffc0000
[  318.564955][   T39] audit: type=1326 audit(1720905166.521:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.1741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7494579 code=0x7ffc0000
[  318.574755][   T39] audit: type=1326 audit(1720905166.531:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.1741" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7494579 code=0x7ffc0000
[  318.584226][   T39] audit: type=1326 audit(1720905166.571:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.1741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7494579 code=0x7ffc0000
[  318.596149][   T39] audit: type=1326 audit(1720905166.571:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.1741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7494579 code=0x7ffc0000
[  318.605479][   T39] audit: type=1326 audit(1720905166.601:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.1741" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7494579 code=0x7ffc0000
[  318.615246][   T39] audit: type=1326 audit(1720905166.611:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.1741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7494579 code=0x7ffc0000
[  318.856499][  T966] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  319.052597][  T966] usb 7-1: Using ep0 maxpacket: 16
[  319.057584][  T966] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  319.061502][  T966] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  319.096280][  T966] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  319.125583][  T966] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  319.131822][  T966] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.135384][  T966] usb 7-1: Product: syz
[  319.137417][  T966] usb 7-1: Manufacturer: syz
[  319.142305][  T966] usb 7-1: SerialNumber: syz
[  319.326002][ T5206] Bluetooth: hci4: ACL packet for unknown connection handle 0
[  319.959421][T10200] netlink: 'syz.0.1747': attribute type 3 has an invalid length.
[  319.963649][T10200] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1747'.
[  320.036496][  T966] usb 7-1: 0:2 : does not exist
[  320.058554][  T966] usb 7-1: USB disconnect, device number 11
[  320.300113][ T9786] udevd[9786]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  320.786804][ T5206] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  320.793301][ T5206] Bluetooth: hci1: Injecting HCI hardware error event
[  320.801081][ T5211] Bluetooth: hci1: hardware error 0x00
[  320.806791][T10230] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  320.810905][T10230] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  320.815696][T10230] vhci_hcd vhci_hcd.0: Device attached
[  321.018069][   T35] vhci_hcd: vhci_device speed not set
[  321.087627][   T35] usb 15-1: new full-speed USB device number 3 using vhci_hcd
[  321.411484][T10231] vhci_hcd: connection reset by peer
[  321.436897][   T13] vhci_hcd: stop threads
[  321.438833][   T13] vhci_hcd: release socket
[  321.455633][   T13] vhci_hcd: disconnect device
[  322.552313][ T1352] ieee802154 phy0 wpan0: encryption failed: -22
[  322.796791][ T5214] vhci_hcd: vhci_device speed not set
[  322.867308][ T5211] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  323.725917][T10286] kAFS: unable to lookup cell '���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[@��o���j��"a����/���EEc��h8H3�'
[  323.802505][T10291] dccp_close: ABORT with 1 bytes unread
[  324.092235][T10306] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  324.094671][T10306] overlayfs: failed to set xattr on upper
[  324.100530][T10306] overlayfs: ...falling back to redirect_dir=nofollow.
[  324.102942][T10306] overlayfs: ...falling back to index=off.
[  324.104917][T10306] overlayfs: ...falling back to uuid=null.
[  324.279360][   T39] kauditd_printk_skb: 70 callbacks suppressed
[  324.279374][   T39] audit: type=1326 audit(1720905172.321:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.3.1791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  324.296468][   T39] audit: type=1326 audit(1720905172.341:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.3.1791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  324.305794][   T39] audit: type=1326 audit(1720905172.341:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.3.1791" exe="/syz-executor" sig=0 arch=40000003 syscall=353 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  324.315713][   T39] audit: type=1326 audit(1720905172.341:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.3.1791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  324.333878][   T39] audit: type=1326 audit(1720905172.341:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.3.1791" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  324.362439][   T39] audit: type=1326 audit(1720905172.401:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.3.1791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  324.373515][   T39] audit: type=1326 audit(1720905172.401:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.3.1791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  324.426528][   T39] audit: type=1326 audit(1720905172.461:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.3.1791" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  324.456300][   T39] audit: type=1326 audit(1720905172.491:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.3.1791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  324.475804][   T39] audit: type=1326 audit(1720905172.491:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.3.1791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  324.721492][T10330] kAFS: unable to lookup cell '���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[@��o���j��"a��O���*�a'���H3�'
[  324.774713][ T5266] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  324.956552][ T5266] usb 8-1: Using ep0 maxpacket: 16
[  324.961559][ T5266] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  324.965153][ T5266] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  324.971554][ T5266] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  324.982939][ T5266] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  324.992250][T10338] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  324.993230][ T5266] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.997274][T10338] overlayfs: failed to set xattr on upper
[  325.019836][T10338] overlayfs: ...falling back to redirect_dir=nofollow.
[  325.022979][T10338] overlayfs: ...falling back to index=off.
[  325.026281][ T5266] usb 8-1: Product: syz
[  325.028312][ T5266] usb 8-1: Manufacturer: syz
[  325.031297][T10338] overlayfs: ...falling back to uuid=null.
[  325.033213][ T5266] usb 8-1: SerialNumber: syz
[  325.776082][T10356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1807'.
[  325.867801][ T5266] usb 8-1: 0:2 : does not exist
[  325.887157][ T5266] usb 8-1: USB disconnect, device number 12
[  325.976171][T10362] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  325.978947][T10362] overlayfs: failed to set xattr on upper
[  325.981328][T10362] overlayfs: ...falling back to redirect_dir=nofollow.
[  325.989844][T10362] overlayfs: ...falling back to index=off.
[  325.992063][T10362] overlayfs: ...falling back to uuid=null.
[  326.115727][T10374] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  326.137609][ T9786] udevd[9786]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  326.172316][T10377] kAFS: unable to lookup cell '���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[v���@�bo�^]1�F[@��o���j��"a��/l��A^�ͫ�d��C�H3�'
[  326.246798][   T35] vhci_hcd: vhci_device speed not set
[  326.520825][T10395] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  326.654581][T10404] netlink: 'syz.0.1828': attribute type 21 has an invalid length.
[  326.705654][T10390] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  327.157284][ T5250] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  327.172300][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1836'.
[  327.211466][T10425] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1836'.
[  327.219136][T10425] gre1: entered promiscuous mode
[  327.221567][T10425] gre1: entered allmulticast mode
[  327.242586][T10432] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  327.336290][ T5250] usb 5-1: Using ep0 maxpacket: 16
[  327.341980][ T5250] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  327.346043][ T5250] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  327.354267][ T5250] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  327.362981][ T5250] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  327.372554][ T5250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.375871][ T5250] usb 5-1: Product: syz
[  327.378321][ T5250] usb 5-1: Manufacturer: syz
[  327.380142][ T5250] usb 5-1: SerialNumber: syz
[  327.740491][T10459] macvlan2: entered allmulticast mode
[  327.743924][T10459] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[  327.753589][T10459] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[  327.763842][T10459] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  327.821850][T10459] bond0: entered promiscuous mode
[  327.823717][T10459] bond_slave_0: entered promiscuous mode
[  327.833728][T10459] bond_slave_1: entered promiscuous mode
[  327.836159][T10459] macvlan2: entered promiscuous mode
[  328.035914][ T5250] usb 5-1: 0:2 : does not exist
[  328.053551][ T5250] usb 5-1: USB disconnect, device number 10
[  328.138879][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1853'.
[  328.187988][T10465] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1853'.
[  328.198287][T10465] gre1: entered promiscuous mode
[  328.200641][T10465] gre1: entered allmulticast mode
[  328.279340][ T9786] udevd[9786]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  328.432138][T10473] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  328.656349][   T35] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  328.840189][   T35] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  328.844964][   T35] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  328.853450][   T35] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  328.861623][   T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.881261][T10476] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  328.952543][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1866'.
[  329.024184][T10493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1866'.
[  329.031434][T10493] gre2: entered promiscuous mode
[  329.034962][T10493] gre2: entered allmulticast mode
[  329.200880][   T35] usb 6-1: USB disconnect, device number 14
[  329.359506][T10512] syz.3.1874[10512] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  329.359660][T10512] syz.3.1874[10512] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  329.380892][T10512] syz.3.1874[10512] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  329.385898][T10512] syz.3.1874[10512] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  329.480067][   T39] kauditd_printk_skb: 144 callbacks suppressed
[  329.480077][   T39] audit: type=1326 audit(1720905177.521:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10511 comm="syz.3.1874" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  329.506969][   T39] audit: type=1326 audit(1720905177.551:4244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10511 comm="syz.3.1874" exe="/syz-executor" sig=0 arch=40000003 syscall=29 compat=1 ip=0xf73b0579 code=0x7ffc0000
[  329.995614][T10530] netlink: 'syz.0.1880': attribute type 1 has an invalid length.
[  330.000521][T10530] netlink: 9352 bytes leftover after parsing attributes in process `syz.0.1880'.
[  330.004612][T10530] netlink: 'syz.0.1880': attribute type 1 has an invalid length.
[  330.009461][T10530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1880'.
[  330.562567][T10554] netlink: 'syz.0.1889': attribute type 1 has an invalid length.
[  330.569053][T10554] netlink: 9352 bytes leftover after parsing attributes in process `syz.0.1889'.
[  330.573144][T10554] netlink: 'syz.0.1889': attribute type 1 has an invalid length.
[  330.955377][T10568] input: syz1 as /devices/virtual/input/input29
[  331.616297][ T5266] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  331.704655][T10580] __nla_validate_parse: 1 callbacks suppressed
[  331.704671][T10580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1897'.
[  331.852163][T10584] netlink: 'syz.0.1898': attribute type 1 has an invalid length.
[  331.861935][T10584] netlink: 9352 bytes leftover after parsing attributes in process `syz.0.1898'.
[  331.864928][ T5266] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  331.874135][T10584] netlink: 'syz.0.1898': attribute type 1 has an invalid length.
[  331.874626][ T5266] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.886289][ T5266] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.888958][T10584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1898'.
[  331.895440][ T5266] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  331.937428][ T5266] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  331.942088][ T5266] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  331.945513][ T5266] usb 6-1: Manufacturer: syz
[  331.969536][ T5266] usb 6-1: config 0 descriptor??
[  332.479938][ T5266] appleir 0003:05AC:8243.0008: unknown main item tag 0x0
[  332.483685][ T5266] appleir 0003:05AC:8243.0008: No inputs registered, leaving
[  332.535894][ T5266] appleir 0003:05AC:8243.0008: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  334.574017][ T5266] usb 6-1: USB disconnect, device number 15
[  335.533792][    C2] hpet: Lost 1 RTC interrupts
[  336.629839][T10671] xt_CT: You must specify a L4 protocol and not use inversions on it
[  338.253056][T10691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1937'.
[  338.515750][T10695] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  339.429050][T10706] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1942'.
[  339.435440][T10706] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1942'.
[  339.605269][T10711] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0
[  339.805806][T10715] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1946'.
[  340.187333][T10727] input: syz1 as /devices/virtual/input/input30
[  340.327014][T10729] syzkaller1: entered promiscuous mode
[  340.329738][T10729] syzkaller1: entered allmulticast mode
[  340.347997][T10729] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  340.746338][T10736] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0
[  341.400586][T10754] xt_CT: You must specify a L4 protocol and not use inversions on it
[  341.914498][T10767] input: syz1 as /devices/virtual/input/input31
[  343.490256][    C2] hpet: Lost 1 RTC interrupts
[  344.221757][    C2] hpet: Lost 1 RTC interrupts
[  344.337782][    C2] hpet: Lost 1 RTC interrupts
[  344.505607][    C2] hpet: Lost 1 RTC interrupts
[  345.643276][ T5206] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  345.653666][ T5206] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  345.666830][ T5206] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  345.693899][ T5206] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  345.697366][ T5206] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  345.700392][ T5206] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  345.707122][    C2] hpet: Lost 1 RTC interrupts
[  345.913795][T10787] chnl_net:caif_netlink_parms(): no params data found
[  346.164816][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.504968][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.609404][T10787] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.617612][T10787] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.621503][T10787] bridge_slave_0: entered allmulticast mode
[  346.639324][T10787] bridge_slave_0: entered promiscuous mode
[  346.702347][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.752406][T10787] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.756886][T10787] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.760788][T10787] bridge_slave_1: entered allmulticast mode
[  346.765255][T10787] bridge_slave_1: entered promiscuous mode
[  346.996409][   T13] batman_adv: batadv1: Interface deactivated: netdevsim0
[  347.077841][   T13] batman_adv: batadv1: Removing interface: netdevsim0
[  347.097131][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.190511][T10787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  347.214661][ T5211] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  347.228885][ T5211] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  347.239373][ T5211] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  347.270772][ T5211] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  347.291497][ T5211] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  347.295122][ T5211] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  347.326156][T10787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  347.559065][T10787] team0: Port device team_slave_0 added
[  347.629589][T10787] team0: Port device team_slave_1 added
[  347.675145][T10828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.756627][ T5206] Bluetooth: hci0: command tx timeout
[  347.794714][T10787] batman_adv: batadv0: Adding interface: batadv_slave_0
[  347.803909][T10787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.824639][T10787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  347.832217][T10787] batman_adv: batadv0: Adding interface: batadv_slave_1
[  347.835390][T10787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.854752][T10787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  348.017884][T10787] hsr_slave_0: entered promiscuous mode
[  348.021665][T10787] hsr_slave_1: entered promiscuous mode
[  348.025139][T10787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  348.038238][T10787] Cannot create hsr debugfs directory
[  348.053142][   T13] bridge_slave_1: left allmulticast mode
[  348.055711][   T13] bridge_slave_1: left promiscuous mode
[  348.056474][ T5266] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  348.060547][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.093187][   T13] bridge_slave_0: left allmulticast mode
[  348.095759][   T13] bridge_slave_0: left promiscuous mode
[  348.100187][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.242127][ T5266] usb 8-1: Using ep0 maxpacket: 32
[  348.263351][ T5266] usb 8-1: config 9 has no interfaces?
[  348.267819][ T5266] usb 8-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[  348.273668][ T5266] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.580674][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  348.584795][   T13] bond_slave_0: left promiscuous mode
[  348.597190][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  348.601835][   T13] bond_slave_1: left promiscuous mode
[  348.612716][   T13] bond0 (unregistering): (slave macvlan2): Releasing backup interface
[  348.618391][   T13] macvlan2: left promiscuous mode
[  348.624094][   T13] mac80211_hwsim hwsim12 wlan0: left allmulticast mode
[  348.629715][   T13] mac80211_hwsim hwsim12 wlan0: left promiscuous mode
[  348.634794][   T13] bond0 (unregistering): Released all slaves
[  348.801255][   T13] tipc: Left network mode
[  348.859971][ T5266] usb 8-1: string descriptor 0 read error: -71
[  348.886808][ T5266] usb 8-1: USB disconnect, device number 13
[  349.272208][T10820] chnl_net:caif_netlink_parms(): no params data found
[  349.346706][ T5206] Bluetooth: hci1: command tx timeout
[  349.566271][   T13] hsr_slave_0: left promiscuous mode
[  349.588989][   T13] hsr_slave_1: left promiscuous mode
[  349.593871][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  349.607282][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  349.615589][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  349.619611][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  349.719909][   T13] veth1_macvtap: left promiscuous mode
[  349.722527][   T13] veth0_macvtap: left promiscuous mode
[  349.724989][   T13] veth1_vlan: left promiscuous mode
[  349.746822][   T13] veth0_vlan: left promiscuous mode
[  349.836657][ T5206] Bluetooth: hci0: command tx timeout
[  351.227379][ T5245] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  351.408425][ T5245] usb 8-1: Using ep0 maxpacket: 8
[  351.428851][ T5245] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  351.433114][ T5245] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  351.436354][ T5206] Bluetooth: hci1: command tx timeout
[  351.444046][ T5245] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  351.449480][ T5245] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  351.455042][ T5245] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  351.465605][ T5245] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.575233][   T13] team0 (unregistering): Port device team_slave_1 removed
[  351.723900][ T5245] usb 8-1: GET_CAPABILITIES returned 0
[  351.732401][ T5245] usbtmc 8-1:16.0: can't read capabilities
[  351.841029][   T13] team0 (unregistering): Port device team_slave_0 removed
[  351.916437][ T5206] Bluetooth: hci0: command tx timeout
[  352.003811][ T5245] usb 8-1: USB disconnect, device number 14
[  352.833540][T10867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1992'.
[  353.445652][    C2] hpet: Lost 1 RTC interrupts
[  353.516354][ T5206] Bluetooth: hci1: command tx timeout
[  353.986543][ T5206] Bluetooth: hci0: command tx timeout
[  354.050541][T10820] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.053924][T10820] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.057347][T10820] bridge_slave_0: entered allmulticast mode
[  354.060071][T10820] bridge_slave_0: entered promiscuous mode
[  354.067349][T10820] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.077443][T10820] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.081998][T10820] bridge_slave_1: entered allmulticast mode
[  354.096286][T10820] bridge_slave_1: entered promiscuous mode
[  354.420346][T10820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  354.439778][T10820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  354.563101][T10820] team0: Port device team_slave_0 added
[  354.575155][T10820] team0: Port device team_slave_1 added
[  354.670976][T10820] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.673959][T10820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.686550][T10820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.692385][T10820] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.694757][T10820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.719133][T10820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.768406][   T13] IPVS: stop unused estimator thread 0...
[  354.929797][T10820] hsr_slave_0: entered promiscuous mode
[  354.943546][T10820] hsr_slave_1: entered promiscuous mode
[  355.020884][T10787] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  355.206979][T10787] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  355.216046][T10787] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  355.341158][T10787] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  355.428878][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1999'.
[  355.571910][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.586483][ T5206] Bluetooth: hci1: command tx timeout
[  355.730115][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.856367][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  355.909949][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.040128][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.048056][    T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  356.055118][    T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  356.072880][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  356.083862][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  356.091215][    T9] usb 5-1: string descriptor 0 read error: -22
[  356.106684][    T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  356.110688][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.122194][    T9] usb 5-1: 0:2 : does not exist
[  356.301266][T10787] 8021q: adding VLAN 0 to HW filter on device bond0
[  356.368820][    T9] usb 5-1: USB disconnect, device number 11
[  356.539906][   T13] bridge_slave_1: left allmulticast mode
[  356.544700][   T13] bridge_slave_1: left promiscuous mode
[  356.549611][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.559651][   T13] bridge_slave_0: left allmulticast mode
[  356.562296][   T13] bridge_slave_0: left promiscuous mode
[  356.567050][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.283885][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  357.316701][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  357.336135][   T13] bond0 (unregistering): Released all slaves
[  357.412371][T10787] 8021q: adding VLAN 0 to HW filter on device team0
[  357.530245][T10946] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  357.576250][   T25] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.580221][   T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[  357.614549][T10959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2010'.
[  357.690404][  T966] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.693773][  T966] bridge0: port 2(bridge_slave_1) entered forwarding state
[  357.825316][T10962] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  358.449166][T10974] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  358.456931][   T13] hsr_slave_0: left promiscuous mode
[  358.460244][   T13] hsr_slave_1: left promiscuous mode
[  358.463864][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  358.476515][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  358.483623][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  358.487593][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  358.620200][   T13] veth1_macvtap: left promiscuous mode
[  358.628304][   T13] veth0_macvtap: left promiscuous mode
[  358.633985][   T13] veth1_vlan: left promiscuous mode
[  358.636503][   T13] veth0_vlan: left promiscuous mode
[  358.645237][T10982] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  358.652288][T10982] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  359.221564][    C2] hpet: Lost 1 RTC interrupts
[  360.497257][   T13] team0 (unregistering): Port device team_slave_1 removed
[  360.737479][   T13] team0 (unregistering): Port device team_slave_0 removed
[  362.340397][T10820] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  362.383781][T10820] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  362.407147][T10787] 8021q: adding VLAN 0 to HW filter on device batadv0
[  362.412769][T10820] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  362.422031][T10820] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  362.594099][T10787] veth0_vlan: entered promiscuous mode
[  362.604054][T10787] veth1_vlan: entered promiscuous mode
[  362.689253][T10820] 8021q: adding VLAN 0 to HW filter on device bond0
[  362.708572][T10787] veth0_macvtap: entered promiscuous mode
[  362.715807][T10787] veth1_macvtap: entered promiscuous mode
[  362.751247][T10820] 8021q: adding VLAN 0 to HW filter on device team0
[  362.770984][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.773897][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  362.820190][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  362.841330][ T5211] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  362.842765][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.848618][ T5211] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  362.849831][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  362.855627][ T5211] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  362.862374][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.864200][ T5211] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  362.872894][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  362.877047][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.877661][ T5211] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  362.884448][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  362.884766][ T5211] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  362.893816][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.901859][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  362.910161][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.928251][T10787] batman_adv: batadv0: Interface activated: batadv_slave_0
[  362.958416][T10997] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  363.056737][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.092714][ T5250] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.095394][ T5250] bridge0: port 2(bridge_slave_1) entered forwarding state
[  363.142858][T11001] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  363.164122][T11001] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  363.182425][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  363.197138][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  363.206582][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  363.211010][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  363.214788][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  363.226828][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  363.230684][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  363.234851][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  363.239295][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  363.243713][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  363.255087][T10787] batman_adv: batadv0: Interface activated: batadv_slave_1
[  363.261988][T10787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.266630][T10787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.276601][T10787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  363.281375][T10787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.353033][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.480888][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.595877][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.044121][ T5211] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  364.052279][ T5211] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  364.059423][ T5211] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  364.064550][ T5211] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  364.069615][ T5211] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  364.073815][ T5211] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  364.080495][   T13] bridge_slave_1: left allmulticast mode
[  364.083024][   T13] bridge_slave_1: left promiscuous mode
[  364.086161][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.109337][   T13] bridge_slave_0: left allmulticast mode
[  364.111760][   T13] bridge_slave_0: left promiscuous mode
[  364.114245][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.485282][    C2] hpet: Lost 1 RTC interrupts
[  364.666985][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  364.685600][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  364.709249][   T13] bond0 (unregistering): Released all slaves
[  364.726948][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.730278][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.858064][T10994] chnl_net:caif_netlink_parms(): no params data found
[  364.873125][T10820] 8021q: adding VLAN 0 to HW filter on device batadv0
[  364.936972][   T13] IPVS: stopping master sync thread 10736 ...
[  364.947384][ T5206] Bluetooth: hci4: command tx timeout
[  364.955284][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.960974][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.514101][   T13] hsr_slave_0: left promiscuous mode
[  365.523097][   T13] hsr_slave_1: left promiscuous mode
[  365.530484][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  365.533853][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  365.540622][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  365.543969][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  365.624208][   T13] veth1_macvtap: left promiscuous mode
[  365.626791][   T13] veth0_macvtap: left promiscuous mode
[  365.629239][   T13] veth1_vlan: left promiscuous mode
[  365.632312][   T13] veth0_vlan: left promiscuous mode
[  366.156623][ T5206] Bluetooth: hci2: command tx timeout
[  367.037790][ T5206] Bluetooth: hci4: command tx timeout
[  367.066593][   T39] audit: type=1804 audit(1720905215.101:4245): pid=11043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2038" name="/" dev="pidfs" ino=11342 res=1 errno=0
[  367.067296][   T13] team0 (unregistering): Port device team_slave_1 removed
[  367.194486][   T13] team0 (unregistering): Port device team_slave_0 removed
[  367.615469][T11058] syz.1.2044[11058] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  367.615554][T11058] syz.1.2044[11058] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  368.236416][ T5206] Bluetooth: hci2: command tx timeout
[  368.450534][T10994] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.453573][T10994] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.457316][T10994] bridge_slave_0: entered allmulticast mode
[  368.461497][T10994] bridge_slave_0: entered promiscuous mode
[  368.481924][T10820] veth0_vlan: entered promiscuous mode
[  368.493646][T10994] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.515349][T10994] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.529363][T10994] bridge_slave_1: entered allmulticast mode
[  368.533561][T10994] bridge_slave_1: entered promiscuous mode
[  368.695510][T10820] veth1_vlan: entered promiscuous mode
[  368.710420][T10994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  368.737952][T10994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  368.839938][T10994] team0: Port device team_slave_0 added
[  368.915608][T10994] team0: Port device team_slave_1 added
[  369.030657][T10994] batman_adv: batadv0: Adding interface: batadv_slave_0
[  369.033414][T10994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  369.046148][T10994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  369.052565][T10994] batman_adv: batadv0: Adding interface: batadv_slave_1
[  369.055469][T10994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  369.067293][T10994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  369.102182][T10820] veth0_macvtap: entered promiscuous mode
[  369.116768][ T5206] Bluetooth: hci4: command tx timeout
[  369.159590][T10820] veth1_macvtap: entered promiscuous mode
[  369.221958][T11010] chnl_net:caif_netlink_parms(): no params data found
[  369.275841][T10994] hsr_slave_0: entered promiscuous mode
[  369.280566][T10994] hsr_slave_1: entered promiscuous mode
[  369.283820][T10994] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  369.287224][T10994] Cannot create hsr debugfs directory
[  369.534155][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.577671][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.582355][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.599467][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.604165][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.611542][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.616120][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.630809][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.635677][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.639797][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.644563][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.657343][T10820] batman_adv: batadv0: Interface activated: batadv_slave_0
[  369.794954][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.801140][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.805564][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.810777][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.815108][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.820181][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.824276][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.828891][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.833193][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.837823][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.843959][T10820] batman_adv: batadv0: Interface activated: batadv_slave_1
[  369.886614][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.926601][T11010] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.929665][T11010] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.932615][T11010] bridge_slave_0: entered allmulticast mode
[  369.976552][T11010] bridge_slave_0: entered promiscuous mode
[  370.008638][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.046940][T11010] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.049727][T11010] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.052768][T11010] bridge_slave_1: entered allmulticast mode
[  370.079220][T11010] bridge_slave_1: entered promiscuous mode
[  370.123163][T11104] syz.1.2051[11104] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  370.123310][T11104] syz.1.2051[11104] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  370.176755][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.255772][T10820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  370.261629][T10820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  370.266654][T10820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  370.270513][T10820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  370.316355][ T5206] Bluetooth: hci2: command tx timeout
[  370.317222][T11010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  370.349371][T11010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  370.534858][T11010] team0: Port device team_slave_0 added
[  370.557415][T11010] team0: Port device team_slave_1 added
[  370.719973][T11010] batman_adv: batadv0: Adding interface: batadv_slave_0
[  370.727485][T11010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.763625][T11010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  370.856096][T11010] batman_adv: batadv0: Adding interface: batadv_slave_1
[  370.872716][T11010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.908222][T11010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  371.186363][ T5206] Bluetooth: hci4: command tx timeout
[  371.305347][T11010] hsr_slave_0: entered promiscuous mode
[  371.337244][T11010] hsr_slave_1: entered promiscuous mode
[  371.340176][T11010] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  371.342875][T11010] Cannot create hsr debugfs directory
[  371.345130][   T13] bridge_slave_1: left allmulticast mode
[  371.348292][   T13] bridge_slave_1: left promiscuous mode
[  371.362493][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.386681][   T13] bridge_slave_0: left allmulticast mode
[  371.388613][   T13] bridge_slave_0: left promiscuous mode
[  371.391078][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.057001][   T39] audit: type=1326 audit(1720905220.101:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11126 comm="syz.1.2056" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7415579 code=0x0
[  372.166567][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  372.188284][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  372.195325][   T13] bond0 (unregistering): Released all slaves
[  372.346561][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.349652][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.396419][ T5206] Bluetooth: hci2: command tx timeout
[  372.423810][   T13] IPVS: stopping master sync thread 10711 ...
[  372.602462][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.605923][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.765721][T11130] vivid-007: =================  START STATUS  =================
[  372.770161][T11130] vivid-007: Enable Output Cropping: true grabbed
[  372.775930][T11130] vivid-007: Enable Output Composing: true grabbed
[  372.785588][T11130] vivid-007: Enable Output Scaler: true grabbed
[  372.788960][T11130] vivid-007: Tx RGB Quantization Range: Automatic grabbed
[  372.799154][T11130] vivid-007: Transmit Mode: HDMI grabbed
[  372.801674][T11130] vivid-007: Display Present: true inactive
[  372.804444][T11130] vivid-007: Hotplug Present: 0x00000001
[  372.807499][T11130] vivid-007: RxSense Present: 0x00000001
[  372.809932][T11130] vivid-007: EDID Present: 0x00000001
[  372.812613][T11130] vivid-007: ==================  END STATUS  ==================
[  372.928054][   T13] hsr_slave_0: left promiscuous mode
[  372.931708][   T13] hsr_slave_1: left promiscuous mode
[  372.934942][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  372.940788][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  372.957916][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  372.962165][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  373.028572][   T13] veth1_macvtap: left promiscuous mode
[  373.030895][   T13] veth0_macvtap: left promiscuous mode
[  373.033769][   T13] veth1_vlan: left promiscuous mode
[  373.036115][   T13] veth0_vlan: left promiscuous mode
[  373.467958][T11147] vivid-007: =================  START STATUS  =================
[  373.470872][T11147] vivid-007: Enable Output Cropping: true grabbed
[  373.473366][T11147] vivid-007: Enable Output Composing: true grabbed
[  373.477533][T11147] vivid-007: Enable Output Scaler: true grabbed
[  373.480029][T11147] vivid-007: Tx RGB Quantization Range: Automatic grabbed
[  373.482569][T11147] vivid-007: Transmit Mode: HDMI grabbed
[  373.484620][T11147] vivid-007: Display Present: true inactive
[  373.536680][T11147] vivid-007: Hotplug Present: 0x00000001
[  373.561363][T11147] vivid-007: RxSense Present: 0x00000001
[  373.563668][T11147] vivid-007: EDID Present: 0x00000001
[  373.565551][T11147] vivid-007: ==================  END STATUS  ==================
[  373.999995][T11158] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  374.144535][   T39] audit: type=1326 audit(1720905222.181:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11160 comm="syz.2.2066" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741f579 code=0x0
[  374.916339][   T13] team0 (unregistering): Port device team_slave_1 removed
[  375.117062][   T13] team0 (unregistering): Port device team_slave_0 removed
[  376.709459][T10994] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  376.725728][T10994] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  376.805356][T10994] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  376.822356][T10994] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  377.174852][ T5206] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  377.179726][ T5206] CPU: 2 PID: 5206 Comm: kworker/u33:3 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0
[  377.184253][ T5206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  377.189028][ T5206] Workqueue: hci0 hci_rx_work
[  377.191125][ T5206] Call Trace:
[  377.192657][ T5206]  <TASK>
[  377.194020][ T5206]  dump_stack_lvl+0x16c/0x1f0
[  377.196207][ T5206]  sysfs_warn_dup+0x7f/0xa0
[  377.198270][ T5206]  sysfs_create_dir_ns+0x24d/0x2b0
[  377.200571][ T5206]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  377.203300][ T5206]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  377.205739][ T5206]  ? do_raw_spin_unlock+0x172/0x230
[  377.208037][ T5206]  kobject_add_internal+0x2c8/0x990
[  377.210275][ T5206]  kobject_add+0x16f/0x240
[  377.212258][ T5206]  ? __pfx_kobject_add+0x10/0x10
[  377.214485][ T5206]  ? do_raw_spin_unlock+0x172/0x230
[  377.216829][ T5206]  ? kobject_put+0xbe/0x5b0
[  377.218865][ T5206]  device_add+0x289/0x1a70
[  377.220801][ T5206]  ? __pfx_dev_set_name+0x10/0x10
[  377.223051][ T5206]  ? __pfx_device_add+0x10/0x10
[  377.225225][ T5206]  ? mgmt_send_event_skb+0x2f0/0x460
[  377.227597][ T5206]  hci_conn_add_sysfs+0x17e/0x230
[  377.229890][ T5206]  le_conn_complete_evt+0xfc7/0x1cf0
[  377.232277][ T5206]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  377.234842][ T5206]  ? trace_contention_end+0xea/0x140
[  377.237226][ T5206]  hci_le_enh_conn_complete_evt+0x23d/0x380
[  377.239773][ T5206]  ? skb_pull_data+0x166/0x210
[  377.241906][ T5206]  hci_le_meta_evt+0x2e2/0x5d0
[  377.244055][ T5206]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  377.246904][ T5206]  hci_event_packet+0x664/0x1190
[  377.249189][ T5206]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  377.251562][ T5206]  ? __pfx_hci_event_packet+0x10/0x10
[  377.253984][ T5206]  ? mark_held_locks+0x9f/0xe0
[  377.256147][ T5206]  ? kcov_remote_start+0x3d1/0x6e0
[  377.258392][ T5206]  ? lockdep_hardirqs_on+0x7c/0x110
[  377.260678][ T5206]  hci_rx_work+0x2c4/0x1610
[  377.262614][ T5206]  process_one_work+0x958/0x1ad0
[  377.264565][ T5206]  ? __pfx_lock_acquire+0x10/0x10
[  377.266759][ T5206]  ? __pfx_process_one_work+0x10/0x10
[  377.269144][ T5206]  ? assign_work+0x1a0/0x250
[  377.271224][ T5206]  worker_thread+0x6c8/0xf30
[  377.273338][ T5206]  ? __pfx_worker_thread+0x10/0x10
[  377.275654][ T5206]  kthread+0x2c1/0x3a0
[  377.277486][ T5206]  ? _raw_spin_unlock_irq+0x23/0x50
[  377.279722][ T5206]  ? __pfx_kthread+0x10/0x10
[  377.281782][ T5206]  ret_from_fork+0x45/0x80
[  377.283781][ T5206]  ? __pfx_kthread+0x10/0x10
[  377.285843][ T5206]  ret_from_fork_asm+0x1a/0x30
[  377.287983][ T5206]  </TASK>
[  377.290077][    C2] hpet: Lost 6 RTC interrupts
[  377.301965][ T5206] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  377.307619][ T5206] Bluetooth: hci0: failed to register connection device
[  377.397973][T10994] 8021q: adding VLAN 0 to HW filter on device bond0
[  377.444463][T10994] 8021q: adding VLAN 0 to HW filter on device team0
[  377.457764][ T5202] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.460327][ T5202] bridge0: port 1(bridge_slave_0) entered forwarding state
[  377.497911][ T5202] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.501073][ T5202] bridge0: port 2(bridge_slave_1) entered forwarding state
[  377.670373][T11010] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  377.708538][T11010] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  377.719932][T11010] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  377.728811][T11010] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  377.938494][T11010] 8021q: adding VLAN 0 to HW filter on device bond0
[  377.973171][T11010] 8021q: adding VLAN 0 to HW filter on device team0
[  377.991890][   T25] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.995063][   T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[  378.046652][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[  378.050402][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[  378.232262][T10994] 8021q: adding VLAN 0 to HW filter on device batadv0
[  378.286148][T10994] veth0_vlan: entered promiscuous mode
[  378.293590][T10994] veth1_vlan: entered promiscuous mode
[  378.321087][T11010] 8021q: adding VLAN 0 to HW filter on device batadv0
[  378.327732][T10994] veth0_macvtap: entered promiscuous mode
[  378.331978][T10994] veth1_macvtap: entered promiscuous mode
[  378.357410][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  378.360945][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.364188][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  378.368058][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.371358][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  378.374776][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.379555][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  378.383851][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.388725][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  378.392828][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.400659][T10994] batman_adv: batadv0: Interface activated: batadv_slave_0
[  378.410305][T11010] veth0_vlan: entered promiscuous mode
[  378.415648][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  378.422985][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.428219][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  378.432901][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.441923][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  378.447615][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.451874][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  378.461619][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.468441][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  378.474725][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.480502][T10994] batman_adv: batadv0: Interface activated: batadv_slave_1
[  378.488980][T10994] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  378.491994][T10994] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  378.495486][T10994] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  378.500049][T10994] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  378.524104][T11010] veth1_vlan: entered promiscuous mode
[  378.613867][T11010] veth0_macvtap: entered promiscuous mode
[  378.628749][T11010] veth1_macvtap: entered promiscuous mode
[  378.649076][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  378.652327][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  378.673587][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  378.678385][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.682435][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  378.688916][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.692643][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  378.697399][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.701890][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  378.707552][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.711782][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  378.716750][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.721120][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  378.725121][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.733109][T11010] batman_adv: batadv0: Interface activated: batadv_slave_0
[  378.759717][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  378.764405][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.769638][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  378.773246][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.781205][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  378.798188][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.803055][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  378.832371][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.836029][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  378.839033][T11230] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  378.840913][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.846447][T11230] overlayfs: failed to set xattr on upper
[  378.847595][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  378.848915][T11230] overlayfs: ...falling back to redirect_dir=nofollow.
[  378.848921][T11230] overlayfs: ...falling back to index=off.
[  378.853216][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.856029][T11230] overlayfs: ...falling back to uuid=null.
[  378.861365][T11010] batman_adv: batadv0: Interface activated: batadv_slave_1
[  378.868930][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  378.871779][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  378.919647][T11010] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  378.925773][T11010] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  378.930718][T11010] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  378.934665][T11010] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  379.061766][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  379.065602][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  379.114301][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  379.144800][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  379.220399][T11192] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  379.225211][T11192] CPU: 3 PID: 11192 Comm: kworker/u33:0 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0
[  379.229236][T11192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  379.234008][T11192] Workqueue: hci1 hci_rx_work
[  379.236591][T11192] Call Trace:
[  379.238124][T11192]  <TASK>
[  379.239480][T11192]  dump_stack_lvl+0x16c/0x1f0
[  379.241932][T11192]  sysfs_warn_dup+0x7f/0xa0
[  379.244366][T11192]  sysfs_create_dir_ns+0x24d/0x2b0
[  379.246899][T11192]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  379.249409][T11192]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  379.251767][T11192]  ? do_raw_spin_unlock+0x172/0x230
[  379.254195][T11192]  kobject_add_internal+0x2c8/0x990
[  379.256583][T11192]  kobject_add+0x16f/0x240
[  379.258672][T11192]  ? __pfx_kobject_add+0x10/0x10
[  379.261042][T11192]  ? do_raw_spin_unlock+0x172/0x230
[  379.263019][T11192]  ? kobject_put+0xbe/0x5b0
[  379.264556][T11192]  device_add+0x289/0x1a70
[  379.266299][T11192]  ? __pfx_dev_set_name+0x10/0x10
[  379.268141][T11192]  ? __pfx_device_add+0x10/0x10
[  379.270237][T11192]  ? mgmt_send_event_skb+0x2f0/0x460
[  379.272284][T11192]  hci_conn_add_sysfs+0x17e/0x230
[  379.274298][T11192]  le_conn_complete_evt+0xfc7/0x1cf0
[  379.276582][T11192]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  379.279756][T11192]  ? trace_contention_end+0xea/0x140
[  379.282768][T11192]  hci_le_enh_conn_complete_evt+0x23d/0x380
[  379.285988][T11192]  ? skb_pull_data+0x166/0x210
[  379.288105][T11192]  hci_le_meta_evt+0x2e2/0x5d0
[  379.289787][T11192]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  379.292092][T11192]  hci_event_packet+0x664/0x1190
[  379.294375][T11192]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  379.297086][T11192]  ? __pfx_hci_event_packet+0x10/0x10
[  379.299609][T11192]  ? mark_held_locks+0x9f/0xe0
[  379.301927][T11192]  ? kcov_remote_start+0x3d1/0x6e0
[  379.304363][T11192]  ? lockdep_hardirqs_on+0x7c/0x110
[  379.306487][T11192]  hci_rx_work+0x2c4/0x1610
[  379.308618][T11192]  process_one_work+0x958/0x1ad0
[  379.311159][T11192]  ? __pfx_lock_acquire+0x10/0x10
[  379.313109][T11192]  ? __pfx_process_one_work+0x10/0x10
[  379.314942][T11192]  ? assign_work+0x1a0/0x250
[  379.316817][T11192]  worker_thread+0x6c8/0xf30
[  379.318784][T11192]  ? __kthread_parkme+0x148/0x220
[  379.320881][T11192]  ? __pfx_worker_thread+0x10/0x10
[  379.323063][T11192]  kthread+0x2c1/0x3a0
[  379.324763][T11192]  ? _raw_spin_unlock_irq+0x23/0x50
[  379.326845][T11192]  ? __pfx_kthread+0x10/0x10
[  379.328840][T11192]  ret_from_fork+0x45/0x80
[  379.330594][T11192]  ? __pfx_kthread+0x10/0x10
[  379.332542][T11192]  ret_from_fork_asm+0x1a/0x30
[  379.334868][T11192]  </TASK>
[  379.341405][T11192] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  379.348297][T11192] Bluetooth: hci1: failed to register connection device
[  380.058098][T11266] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  380.061701][T11266] overlayfs: failed to set xattr on upper
[  380.064662][T11266] overlayfs: ...falling back to redirect_dir=nofollow.
[  380.069939][T11266] overlayfs: ...falling back to index=off.
[  380.076471][T11266] overlayfs: ...falling back to uuid=null.
[  380.422525][T11192] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  380.426904][T11192] CPU: 3 PID: 11192 Comm: kworker/u33:0 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0
[  380.430973][T11192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  380.435322][T11192] Workqueue: hci2 hci_rx_work
[  380.437138][T11192] Call Trace:
[  380.438578][T11192]  <TASK>
[  380.439801][T11192]  dump_stack_lvl+0x16c/0x1f0
[  380.441748][T11192]  sysfs_warn_dup+0x7f/0xa0
[  380.443624][T11192]  sysfs_create_dir_ns+0x24d/0x2b0
[  380.445725][T11192]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  380.448055][T11192]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  380.450299][T11192]  ? do_raw_spin_unlock+0x172/0x230
[  380.452230][T11192]  kobject_add_internal+0x2c8/0x990
[  380.454257][T11192]  kobject_add+0x16f/0x240
[  380.456068][T11192]  ? __pfx_kobject_add+0x10/0x10
[  380.458418][T11192]  ? do_raw_spin_unlock+0x172/0x230
[  380.460751][T11192]  ? kobject_put+0xbe/0x5b0
[  380.462791][T11192]  device_add+0x289/0x1a70
[  380.464526][T11192]  ? __pfx_dev_set_name+0x10/0x10
[  380.466632][T11192]  ? __pfx_device_add+0x10/0x10
[  380.468475][T11192]  ? mgmt_send_event_skb+0x2f0/0x460
[  380.470676][T11192]  hci_conn_add_sysfs+0x17e/0x230
[  380.472797][T11192]  le_conn_complete_evt+0xfc7/0x1cf0
[  380.474980][T11192]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  380.477217][T11192]  ? trace_contention_end+0xea/0x140
[  380.479291][T11192]  hci_le_enh_conn_complete_evt+0x23d/0x380
[  380.481765][T11192]  ? skb_pull_data+0x166/0x210
[  380.483824][T11192]  hci_le_meta_evt+0x2e2/0x5d0
[  380.485901][T11192]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  380.488086][T11192]  hci_event_packet+0x664/0x1190
[  380.490070][T11192]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  380.492254][T11192]  ? __pfx_hci_event_packet+0x10/0x10
[  380.494470][T11192]  ? mark_held_locks+0x9f/0xe0
[  380.496484][T11192]  ? kcov_remote_start+0x3d1/0x6e0
[  380.499124][T11192]  ? lockdep_hardirqs_on+0x7c/0x110
[  380.501491][T11192]  hci_rx_work+0x2c4/0x1610
[  380.503567][T11192]  process_one_work+0x958/0x1ad0
[  380.506487][T11192]  ? __pfx_lock_acquire+0x10/0x10
[  380.508787][T11192]  ? __pfx_process_one_work+0x10/0x10
[  380.511103][T11192]  ? assign_work+0x1a0/0x250
[  380.513306][T11192]  worker_thread+0x6c8/0xf30
[  380.526879][T11192]  ? __kthread_parkme+0x148/0x220
[  380.529089][T11192]  ? __pfx_worker_thread+0x10/0x10
[  380.531282][T11192]  kthread+0x2c1/0x3a0
[  380.533074][T11192]  ? _raw_spin_unlock_irq+0x23/0x50
[  380.533553][    C2] hpet: Lost 1 RTC interrupts
[  380.535444][T11192]  ? __pfx_kthread+0x10/0x10
[  380.539785][T11192]  ret_from_fork+0x45/0x80
[  380.541574][T11192]  ? __pfx_kthread+0x10/0x10
[  380.543425][T11192]  ret_from_fork_asm+0x1a/0x30
[  380.545347][T11192]  </TASK>
[  380.550769][T11192] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  380.556494][T11192] Bluetooth: hci2: failed to register connection device
[  380.689768][T11288] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  380.703235][T11288] overlayfs: failed to set xattr on upper
[  380.705849][T11288] overlayfs: ...falling back to redirect_dir=nofollow.
[  380.709887][T11288] overlayfs: ...falling back to index=off.
[  380.712528][T11288] overlayfs: ...falling back to uuid=null.
[  381.271670][T11308] netlink: 'syz.3.2104': attribute type 21 has an invalid length.
[  381.275749][T11308] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2104'.
[  381.312135][T11308] netlink: 'syz.3.2104': attribute type 5 has an invalid length.
[  381.315210][T11308] netlink: 'syz.3.2104': attribute type 6 has an invalid length.
[  381.325241][T11308] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2104'.
[  381.368693][T11299] trusted_key: encrypted_key: insufficient parameters specified
[  381.386745][T11299] trusted_key: encrypted_key: insufficient parameters specified
[  382.157248][T11327] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode
[  382.666669][ T3660] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  382.763155][T11354] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode
[  382.866298][ T3660] usb 8-1: Using ep0 maxpacket: 8
[  382.870443][ T3660] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  382.878813][ T3660] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  382.883176][ T3660] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.897330][ T3660] usb 8-1: config 0 descriptor??
[  383.105895][T11365] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2131'.
[  383.138010][ T3660] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  383.415044][T11379] syz.1.2135[11379] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  383.415241][T11379] syz.1.2135[11379] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  383.436652][  T966] usb 8-1: USB disconnect, device number 15
[  383.436777][    C3] iowarrior 8-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[  383.453384][  T966] iowarrior 8-1:0.0: I/O-Warror #0 now disconnected
[  383.991014][ T1352] ieee802154 phy0 wpan0: encryption failed: -22
[  385.019209][T11434] syz.3.2155[11434] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  385.019352][T11434] syz.3.2155[11434] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  385.237091][    C2] hpet: Lost 1 RTC interrupts
[  385.635801][T11440] trusted_key: encrypted_key: insufficient parameters specified
[  385.643214][T11440] trusted_key: encrypted_key: insufficient parameters specified
[  385.925365][T11451] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2161'.
[  386.097975][T11459] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2163'.
[  386.388888][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.394081][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.405115][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.411151][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.422571][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.430584][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.433955][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.449172][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.452750][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.456002][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.481345][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.487565][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.499156][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.502350][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.505504][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.510417][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.514065][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.522404][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.525481][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.529364][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.533945][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.541175][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.544197][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.548866][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.552183][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.555337][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.561766][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.569428][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.572269][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.575855][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.587124][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.590585][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.594152][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.598428][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.601872][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.605302][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.610514][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.614184][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.621115][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.631502][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.634928][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.641941][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.649644][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.672682][ T5214] hid-generic 0000:0000:0000.0009: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  386.899514][   T39] audit: type=1326 audit(1720905234.941:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11480 comm="syz.1.2172" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7415579 code=0x7ffc0000
[  386.920882][   T39] audit: type=1326 audit(1720905234.961:4249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11480 comm="syz.1.2172" exe="/syz-executor" sig=0 arch=40000003 syscall=440 compat=1 ip=0xf7415579 code=0x7ffc0000
[  386.941162][   T39] audit: type=1326 audit(1720905234.961:4250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11480 comm="syz.1.2172" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7415579 code=0x7ffc0000
[  386.984676][   T39] audit: type=1326 audit(1720905234.961:4251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11480 comm="syz.1.2172" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7415579 code=0x7ffc0000
[  387.463894][   T39] audit: type=1326 audit(1720905235.501:4252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000
[  387.487457][   T39] audit: type=1326 audit(1720905235.501:4253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000
[  387.517857][T11508] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2183'.
[  387.519825][   T39] audit: type=1326 audit(1720905235.501:4254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=440 compat=1 ip=0xf741d579 code=0x7ffc0000
[  387.538317][   T39] audit: type=1326 audit(1720905235.501:4255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000
[  387.556424][   T39] audit: type=1326 audit(1720905235.511:4256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000
[  388.177183][    C2] vkms_vblank_simulate: vblank timer overrun
[  389.010078][T11558] netdevsim netdevsim1 @: renamed from netdevsim0 (while UP)
[  390.283327][T11594] binder_alloc: binder_alloc_mmap_handler: 11593 200a0000-200a2000 already mapped failed -16
[  391.025150][    C2] hpet: Lost 1 RTC interrupts
[  391.027586][    C2] vkms_vblank_simulate: vblank timer overrun
[  391.118131][T11620] binder_alloc: binder_alloc_mmap_handler: 11619 200a0000-200a2000 already mapped failed -16
[  391.650382][   T39] audit: type=1326 audit(1720905239.691:4257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.2231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000
[  391.707673][   T39] audit: type=1326 audit(1720905239.691:4258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.2231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000
[  391.712965][    C2] vkms_vblank_simulate: vblank timer overrun
[  391.720521][    C2] hpet: Lost 2 RTC interrupts
[  391.791836][   T39] audit: type=1326 audit(1720905239.691:4259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.2231" exe="/syz-executor" sig=0 arch=40000003 syscall=440 compat=1 ip=0xf741d579 code=0x7ffc0000
[  391.841259][   T39] audit: type=1326 audit(1720905239.691:4260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.2231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000
[  391.908014][   T39] audit: type=1326 audit(1720905239.711:4261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.2231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000
[  392.301046][T11647] syz.3.2237 (11647): /proc/11646/oom_adj is deprecated, please use /proc/11646/oom_score_adj instead.
[  392.304443][T11645] macvlan0: entered allmulticast mode
[  392.349143][T11645] veth1_vlan: entered allmulticast mode
[  392.394775][T11648] macvlan0: left allmulticast mode
[  392.401431][T11648] veth1_vlan: left allmulticast mode
[  392.533027][    C2] hpet: Lost 1 RTC interrupts
[  392.801900][T11654] Cannot find add_set index 0 as target
[  394.164626][T11674] netlink: 'syz.0.2247': attribute type 10 has an invalid length.
[  394.192520][T11674] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2247'.
[  394.201265][T11674] batman_adv: batadv0: Adding interface: vlan0
[  394.218049][T11674] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.237839][T11674] batman_adv: batadv0: Interface activated: vlan0
[  394.749775][T11677] trusted_key: encrypted_key: insufficient parameters specified
[  394.780983][T11677] trusted_key: encrypted_key: insufficient parameters specified
[  395.307764][T11699] netlink: 'syz.1.2257': attribute type 10 has an invalid length.
[  395.369568][   T39] audit: type=1804 audit(1720905243.411:4262): pid=11698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2256" name="/newroot/51/bus/bus" dev="overlay" ino=290 res=1 errno=0
[  395.411319][T11699] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2257'.
[  395.417624][T11698] Invalid ELF header magic: != ELF
[  395.423851][T11699] batman_adv: batadv0: Adding interface: vlan0
[  395.426922][T11699] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  395.438430][T11699] batman_adv: batadv0: Interface activated: vlan0
[  396.393459][T11727] trusted_key: encrypted_key: insufficient parameters specified
[  396.399328][T11727] trusted_key: encrypted_key: insufficient parameters specified
[  396.735387][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.749211][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.756082][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.763730][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.768035][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.774375][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.784278][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.787911][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.794670][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.806266][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.810284][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.824738][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.828661][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.831789][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.834974][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.839628][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.843030][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.848982][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.856281][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.859738][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.863031][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.869847][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.872807][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.876001][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.886300][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.889582][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.903009][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.914678][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.926350][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.930802][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.934409][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.939790][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.942914][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  396.949996][ T3660] hid-generic 0000:0000:0000.000A: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  397.069278][T11745] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  397.099041][T11745] cramfs: wrong magic
[  397.730846][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.733857][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.738531][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.741445][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.744550][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.751417][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.754979][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.758620][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.762303][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.765509][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.769641][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.772977][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.776672][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.779602][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.783746][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.788985][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.792643][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.795825][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.800715][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.803542][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.806587][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.809969][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.814090][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.820332][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.823777][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.827550][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.830607][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.833108][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.835592][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.839110][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.842572][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.847309][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.851125][  T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  397.860518][  T966] hid-generic 0000:0000:0000.000B: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  397.955785][T11777] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  397.965423][T11777] cramfs: wrong magic
[  398.521330][    C2] hpet: Lost 1 RTC interrupts
[  398.603100][T11801] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2296'.
[  398.805271][   T39] audit: type=1804 audit(1720905246.841:4263): pid=11805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2297" name="/newroot/45/bus/bus" dev="overlay" ino=258 res=1 errno=0
[  398.874962][T11805] Invalid ELF header magic: != ELF
[  399.305270][T11828] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2308'.
[  399.759562][   T39] audit: type=1804 audit(1720905247.791:4264): pid=11834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2310" name="/newroot/67/bus/bus" dev="overlay" ino=381 res=1 errno=0
[  399.769713][T11834] Invalid ELF header magic: != ELF
[  400.187922][T11853] xt_CT: You must specify a L4 protocol and not use inversions on it
[  400.289209][T11859] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2321'.
[  400.672800][   T39] audit: type=1804 audit(1720905248.711:4265): pid=11869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2326" name="/newroot/85/bus/bus" dev="overlay" ino=467 res=1 errno=0
[  400.707669][T11869] Invalid ELF header magic: != ELF
[  400.720049][T11860] trusted_key: encrypted_key: insufficient parameters specified
[  400.725099][T11860] trusted_key: encrypted_key: insufficient parameters specified
[  401.692538][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2338'.
[  402.559797][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.562694][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.576266][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.580283][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.583700][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.587434][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.590703][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.594710][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.598532][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.601769][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.604891][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.608621][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.612501][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.635442][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.654288][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.659100][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.683792][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.688790][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.692119][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.695297][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.698662][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.701911][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.706639][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.710128][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.713057][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.715998][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.724862][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.734601][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.738865][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.742292][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.745671][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.756350][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.759506][  T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  402.764711][T11939] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  402.767356][  T966] hid-generic 0000:0000:0000.000C: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  402.768405][T11939] cramfs: wrong magic
[  403.332618][   T39] audit: type=1804 audit(1720905251.371:4266): pid=11959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2362" name="/newroot/61/bus/bus" dev="overlay" ino=349 res=1 errno=0
[  403.335363][T11959] Invalid ELF header magic: != ELF
[  404.171435][T11992] delete_channel: no stack
[  404.243132][T11997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2377'.
[  404.501007][   T84] bridge_slave_1: left allmulticast mode
[  404.503607][   T84] bridge_slave_1: left promiscuous mode
[  404.520507][   T84] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.556577][   T84] bridge_slave_0: left allmulticast mode
[  404.559280][   T84] bridge_slave_0: left promiscuous mode
[  404.561973][   T84] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.569696][   T84] gretap1: left allmulticast mode
[  404.571885][   T84] gretap1: left promiscuous mode
[  404.574234][   T84] bridge1: port 1(gretap1) entered disabled state
[  404.876129][T12011] trusted_key: encrypted_key: insufficient parameters specified
[  404.903000][T12011] trusted_key: encrypted_key: insufficient parameters specified
[  405.644124][   T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  405.657112][T11192] BUG: workqueue leaked atomic, lock or RCU: kworker/u33:0[11192]
[  405.657112][T11192]      preempt=0x00000000 lock=0->1 RCU=0->0 workfn=hci_rx_work
[  405.675766][T11192] 1 lock held by kworker/u33:0/11192:
[  405.677953][T11192]  #0: ffff888015339518 (&chan->lock#2/1){+.+.}-{3:3}, at: l2cap_recv_frame+0x14f2/0x8e10
[  405.681680][T11192] CPU: 3 PID: 11192 Comm: kworker/u33:0 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0
[  405.685750][T11192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  405.690220][T11192] Workqueue: hci4 hci_rx_work
[  405.692389][T11192] Call Trace:
[  405.693817][T11192]  <TASK>
[  405.694986][T11192]  dump_stack_lvl+0x16c/0x1f0
[  405.696852][T11192]  process_one_work+0x1170/0x1ad0
[  405.698781][T11192]  ? __pfx_hci_rx_work+0x10/0x10
[  405.700871][T11192]  ? __pfx_hci_rx_work+0x10/0x10
[  405.702828][T11192]  ? __pfx_hci_rx_work+0x10/0x10
[  405.704833][T11192]  ? __pfx_process_one_work+0x10/0x10
[  405.707469][T11192]  ? assign_work+0x1a0/0x250
[  405.709356][T11192]  worker_thread+0x6c8/0xf30
[  405.711132][T11192]  ? __kthread_parkme+0x148/0x220
[  405.713060][T11192]  ? __pfx_worker_thread+0x10/0x10
[  405.715020][T11192]  kthread+0x2c1/0x3a0
[  405.716609][T11192]  ? _raw_spin_unlock_irq+0x23/0x50
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  405.718865][T11192]  ? __pfx_kthread+0x10/0x10
[  405.720854][T11192]  ret_from_fork+0x45/0x80
[  405.722618][T11192]  ? __pfx_kthread+0x10/0x10
[  405.724427][T11192]  ret_from_fork_asm+0x1a/0x30
[  405.726289][T11192]  </TASK>
[  405.769406][   T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  405.783076][ T5187] syz-executor (5187) used greatest stack depth: 20160 bytes left
[  405.803230][   T84] bond0 (unregistering): Released all slaves
[  405.924418][    C2] hpet: Lost 1 RTC interrupts
[  406.156383][T11192] 
[  406.157736][T11192] ======================================================
[  406.160493][T11192] WARNING: possible circular locking dependency detected
[  406.163811][T11192] 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 Not tainted
[  406.166913][T11192] ------------------------------------------------------
[  406.170252][T11192] kworker/u33:0/11192 is trying to acquire lock:
[  406.173273][T11192] ffff888029aba148 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_one_work+0x11f0/0x1ad0
[  406.177419][T11192] 
[  406.177419][T11192] but task is already holding lock:
[  406.180365][T11192] ffff888015339518 (&chan->lock#2/1){+.+.}-{3:3}, at: l2cap_recv_frame+0x14f2/0x8e10
[  406.185254][T11192] 
[  406.185254][T11192] which lock already depends on the new lock.
[  406.185254][T11192] 
[  406.190369][T11192] 
[  406.190369][T11192] the existing dependency chain (in reverse order) is:
[  406.194468][T11192] 
[  406.194468][T11192] -> #2 (&chan->lock#2/1){+.+.}-{3:3}:
[  406.198231][T11192]        __mutex_lock+0x175/0x9c0
[  406.200559][T11192]        l2cap_recv_frame+0x14f2/0x8e10
[  406.203470][T11192]        l2cap_recv_acldata+0x9ac/0xb60
[  406.205922][T11192]        hci_rx_work+0xaa7/0x1610
[  406.208071][T11192]        process_one_work+0x958/0x1ad0
[  406.210397][T11192]        worker_thread+0x6c8/0xf30
[  406.212783][T11192]        kthread+0x2c1/0x3a0
[  406.215321][T11192]        ret_from_fork+0x45/0x80
[  406.218172][T11192]        ret_from_fork_asm+0x1a/0x30
[  406.221254][T11192] 
[  406.221254][T11192] -> #1 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}:
[  406.225085][T11192]        process_one_work+0x8c4/0x1ad0
[  406.227758][T11192]        worker_thread+0x6c8/0xf30
[  406.230480][T11192]        kthread+0x2c1/0x3a0
[  406.232684][T11192]        ret_from_fork+0x45/0x80
[  406.235062][T11192]        ret_from_fork_asm+0x1a/0x30
[  406.237845][T11192] 
[  406.237845][T11192] -> #0 ((wq_completion)hci2#2){+.+.}-{0:0}:
[  406.241431][T11192]        __lock_acquire+0x2478/0x3b30
[  406.243613][T11192]        lock_acquire+0x1b1/0x560
[  406.246106][T11192]        process_one_work+0x1220/0x1ad0
[  406.248493][T11192]        worker_thread+0x6c8/0xf30
[  406.251147][T11192]        kthread+0x2c1/0x3a0
[  406.253523][T11192]        ret_from_fork+0x45/0x80
[  406.256185][T11192]        ret_from_fork_asm+0x1a/0x30
[  406.258656][T11192] 
[  406.258656][T11192] other info that might help us debug this:
[  406.258656][T11192] 
[  406.263653][T11192] Chain exists of:
[  406.263653][T11192]   (wq_completion)hci2#2 --> (work_completion)(&hdev->rx_work) --> &chan->lock#2/1
[  406.263653][T11192] 
[  406.270892][T11192]  Possible unsafe locking scenario:
[  406.270892][T11192] 
[  406.274251][T11192]        CPU0                    CPU1
[  406.276534][T11192]        ----                    ----
[  406.279181][T11192]   lock(&chan->lock#2/1);
[  406.281105][T11192]                                lock((work_completion)(&hdev->rx_work));
[  406.285586][T11192]                                lock(&chan->lock#2/1);
[  406.288634][T11192]   lock((wq_completion)hci2#2);
[  406.290747][T11192] 
[  406.290747][T11192]  *** DEADLOCK ***
[  406.290747][T11192] 
[  406.304299][T11192] 1 lock held by kworker/u33:0/11192:
[  406.306636][T11192]  #0: ffff888015339518 (&chan->lock#2/1){+.+.}-{3:3}, at: l2cap_recv_frame+0x14f2/0x8e10
[  406.311314][T11192] 
[  406.311314][T11192] stack backtrace:
[  406.314350][T11192] CPU: 3 PID: 11192 Comm: kworker/u33:0 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0
[  406.320628][T11192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  406.326345][T11192] Workqueue: hci2 hci_ncmd_timeout
[  406.328812][T11192] Call Trace:
[  406.330517][T11192]  <TASK>
[  406.331943][T11192]  dump_stack_lvl+0x116/0x1f0
[  406.334388][T11192]  check_noncircular+0x31a/0x400
[  406.337075][T11192]  ? __pfx_check_noncircular+0x10/0x10
[  406.340289][T11192]  ? lockdep_lock+0xc6/0x200
[  406.343099][T11192]  ? __pfx_lockdep_lock+0x10/0x10
[  406.346036][T11192]  __lock_acquire+0x2478/0x3b30
[  406.348715][T11192]  ? __pfx___lock_acquire+0x10/0x10
[  406.351866][T11192]  ? __pfx_mark_lock+0x10/0x10
[  406.355058][T11192]  lock_acquire+0x1b1/0x560
[  406.357757][T11192]  ? process_one_work+0x11f0/0x1ad0
[  406.360885][T11192]  ? __pfx_lock_acquire+0x10/0x10
[  406.363335][T11192]  ? __pfx_lock_release+0x10/0x10
[  406.365977][T11192]  ? mark_held_locks+0x9f/0xe0
[  406.368827][T11192]  ? process_one_work+0x11f0/0x1ad0
[  406.371937][T11192]  process_one_work+0x1220/0x1ad0
[  406.374417][T11192]  ? process_one_work+0x11f0/0x1ad0
[  406.376949][T11192]  ? __pfx_lock_acquire+0x10/0x10
[  406.379172][T11192]  ? __pfx_process_one_work+0x10/0x10
[  406.381529][T11192]  ? assign_work+0x1a0/0x250
[  406.383649][T11192]  worker_thread+0x6c8/0xf30
[  406.385721][T11192]  ? __kthread_parkme+0x148/0x220
[  406.387942][T11192]  ? __pfx_worker_thread+0x10/0x10
[  406.390209][T11192]  kthread+0x2c1/0x3a0
[  406.392062][T11192]  ? _raw_spin_unlock_irq+0x23/0x50
[  406.394366][T11192]  ? __pfx_kthread+0x10/0x10
[  406.396314][T11192]  ret_from_fork+0x45/0x80
[  406.398305][T11192]  ? __pfx_kthread+0x10/0x10
[  406.400435][T11192]  ret_from_fork_asm+0x1a/0x30
[  406.402610][T11192]  </TASK>
[  406.407415][T11192] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  406.411527][T11192] Bluetooth: hci2: Injecting HCI hardware error event
[  406.414451][T11192] BUG: workqueue leaked atomic, lock or RCU: kworker/u33:0[11192]
[  406.414451][T11192]      preempt=0x00000000 lock=1->0 RCU=0->0 workfn=hci_ncmd_timeout
[  406.424188][T11192] INFO: lockdep is turned off.
[  406.426432][T11192] CPU: 3 PID: 11192 Comm: kworker/u33:0 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0
[  406.431113][T11192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  406.437601][T11192] Workqueue: hci2 hci_ncmd_timeout
[  406.439950][T11192] Call Trace:
[  406.441491][T11192]  <TASK>
[  406.443087][T11192]  dump_stack_lvl+0x16c/0x1f0
[  406.445645][T11192]  process_one_work+0x1170/0x1ad0
[  406.447932][T11192]  ? __pfx_hci_ncmd_timeout+0x10/0x10
[  406.450320][T11192]  ? __pfx_hci_ncmd_timeout+0x10/0x10
[  406.452715][T11192]  ? __pfx_hci_ncmd_timeout+0x10/0x10
[  406.455227][T11192]  ? __pfx_process_one_work+0x10/0x10
[  406.457678][T11192]  ? assign_work+0x1a0/0x250
[  406.459664][T11192]  worker_thread+0x6c8/0xf30
[  406.461730][T11192]  ? __kthread_parkme+0x148/0x220
[  406.463972][T11192]  ? __pfx_worker_thread+0x10/0x10
[  406.466248][T11192]  kthread+0x2c1/0x3a0
[  406.468065][T11192]  ? _raw_spin_unlock_irq+0x23/0x50
[  406.470435][T11192]  ? __pfx_kthread+0x10/0x10
[  406.472507][T11192]  ret_from_fork+0x45/0x80
[  406.474487][T11192]  ? __pfx_kthread+0x10/0x10
[  406.476383][T11192]  ret_from_fork_asm+0x1a/0x30
[  406.478485][T11192]  </TASK>
[  406.873339][   T84] hsr_slave_0: left promiscuous mode
[  406.878131][   T84] hsr_slave_1: left promiscuous mode
[  406.881287][   T84] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  406.884280][   T84] batman_adv: batadv0: Removing interface: batadv_slave_0
[  406.889372][   T84] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  406.892759][   T84] batman_adv: batadv0: Removing interface: batadv_slave_1
[  406.898290][   T84] veth1_macvtap: left promiscuous mode
[  406.900789][   T84] veth0_macvtap: left promiscuous mode
[  406.903330][   T84] veth1_vlan: left promiscuous mode
[  406.905861][   T84] veth0_vlan: left promiscuous mode
[  407.189658][   T84] team0 (unregistering): Port device team_slave_1 removed
[  407.257456][   T84] team0 (unregistering): Port device team_slave_0 removed
[  408.216892][   T84] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.267387][   T84] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.364024][   T84] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.461950][   T84] netdevsim netdevsim1 @ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.591393][   T84] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.663546][   T84] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.745333][   T84] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.830652][   T84] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.915426][   T84] bridge_slave_1: left allmulticast mode
[  408.918246][   T84] bridge_slave_1: left promiscuous mode
[  408.920832][   T84] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.926430][   T84] bridge_slave_0: left allmulticast mode
[  408.928907][   T84] bridge_slave_0: left promiscuous mode
[  408.931521][   T84] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.938405][   T84] bridge_slave_1: left allmulticast mode
[  408.941135][   T84] bridge_slave_1: left promiscuous mode
[  408.943722][   T84] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.971100][   T84] bridge_slave_0: left allmulticast mode
[  408.973501][   T84] bridge_slave_0: left promiscuous mode
[  408.976272][   T84] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.423138][   T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  409.429769][   T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  409.435047][   T84] bond0 (unregistering): Released all slaves
[  409.447987][   T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  409.453851][   T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  409.462452][   T84] bond0 (unregistering): Released all slaves
[  410.138713][   T84] hsr_slave_0: left promiscuous mode
[  410.142549][   T84] hsr_slave_1: left promiscuous mode
[  410.145732][   T84] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  410.149451][   T84] batman_adv: batadv0: Removing interface: batadv_slave_0
[  410.159330][   T84] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.162657][   T84] batman_adv: batadv0: Removing interface: batadv_slave_1
[  410.166999][   T84] batman_adv: batadv0: Interface deactivated: vlan0
[  410.169870][   T84] batman_adv: batadv0: Removing interface: vlan0
[  410.181902][   T84] hsr_slave_0: left promiscuous mode
[  410.185140][   T84] hsr_slave_1: left promiscuous mode
[  410.189504][   T84] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  410.192738][   T84] batman_adv: batadv0: Removing interface: batadv_slave_0
[  410.197080][   T84] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.200346][   T84] batman_adv: batadv0: Removing interface: batadv_slave_1
[  410.208379][   T84] veth1_macvtap: left promiscuous mode
[  410.211041][   T84] veth0_macvtap: left promiscuous mode
[  410.213361][   T84] veth1_vlan: left promiscuous mode
[  410.215585][   T84] veth0_vlan: left promiscuous mode
[  410.229862][   T84] veth1_macvtap: left promiscuous mode
[  410.232362][   T84] veth0_macvtap: left promiscuous mode
[  410.235482][   T84] veth1_vlan: left promiscuous mode
[  410.238960][   T84] veth0_vlan: left promiscuous mode
[  410.735432][   T84] team0 (unregistering): Port device team_slave_1 removed
[  410.809786][    C2] hpet: Lost 1 RTC interrupts
[  410.882266][   T84] team0 (unregistering): Port device team_slave_0 removed
[  411.526783][   T84] team0 (unregistering): Port device team_slave_1 removed
[  411.599947][   T84] team0 (unregistering): Port device team_slave_0 removed
[  412.786466][ T1084] bridge_slave_1: left allmulticast mode
[  412.788947][ T1084] bridge_slave_1: left promiscuous mode
[  412.791421][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.806746][ T1084] bridge_slave_0: left allmulticast mode
[  412.816702][ T1084] bridge_slave_0: left promiscuous mode
[  412.819332][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.116685][ T1084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  413.122453][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  413.128477][ T1084] bond0 (unregistering): Released all slaves
[  413.518834][ T1084] hsr_slave_0: left promiscuous mode
[  413.521791][ T1084] hsr_slave_1: left promiscuous mode
[  413.525064][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  413.529850][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0
[  413.534295][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  413.537560][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1
[  413.542490][ T1084] veth1_macvtap: left promiscuous mode
[  413.544841][ T1084] veth0_macvtap: left promiscuous mode
[  413.549582][ T1084] veth1_vlan: left promiscuous mode
[  413.551883][ T1084] veth0_vlan: left promiscuous mode
[  413.749270][ T1084] team0 (unregistering): Port device team_slave_1 removed
[  413.762685][ T1084] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
21:14:13  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=ffff888022d78b08 RCX=0000000000000001 RDX=0000000000000000
RSI=ffffffff8b2cbce0 RDI=ffffffff8b8ff8e0 RBP=ffff8880583c23d8 RSP=ffffc90007b77b98
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=ffff888022d78000 R13=0000000000000001 R14=00000000ffffffff R15=0000000000000001
RIP=ffffffff8adca378 RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802c000000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000033110ff8 CR3=0000000058792000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000088000000 Opmask01=00000000fffff808 Opmask02=0000000002000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff38a59760 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000a735b 462f3136000a3d6f
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000478fdb RBX=0000000000000001 RCX=ffffffff8adc9be9 RDX=0000000000000000
RSI=ffffffff8b2cb9e0 RDI=ffffffff8b8ff8e0 RBP=ffffed1002ce9910 RSP=ffffc90000477e08
R8 =0000000000000001 R9 =ffffed1005826fdd R10=ffff88802c137eeb R11=0000000000000000
R12=0000000000000001 R13=ffff88801674c880 R14=ffffffff8fe2e3d0 R15=0000000000000000
RIP=ffffffff8adcafdf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802c100000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7415cbc CR3=000000000d97a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000002012492 Opmask01=0000000000004211 Opmask02=000000000000ffdf Opmask03=0000000000000000
Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b5f5455504e495f 4449006b636f6c62
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc976f1070 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ff00000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a18d9e9a35902934 73732560083478b7
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737142 7373737373737373
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000003f1 0000000000000000 30706f6f6c2f6b63 6f6c622f6c617574
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e303030303a30 3030303a30303030 0000000000000021 0000000000004330
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 640079737650db0f 6d2f256a0868121a 7373377a79093be9 732f563c0832701e
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 777f7f7b7f7fffff 7f7f7f6f7f7f7f5f ffffffff7fdfffff 7f7f7f7d5f7f7fff
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 264c383a3a264f38 3a3a264e383a3a26 49383a3a2648383a 3a2633383a3a2632
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000210 0000000000000030 2f6d697346685a31 0000301363470b00
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000210 0000000000000030 000056161a264831 0000301363470b00
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=ffffc90006d175a0 RCX=ffffffff813c94ce RDX=ffff8880193ec880
RSI=ffffffff813ca131 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90006d17518
R8 =0000000000000001 R9 =0000000000000004 R10=0000000000000001 R11=0000000000000001
R12=ffffffff90701018 R13=ffffc90006d17df8 R14=0000000000000001 R15=0000000000000001
RIP=ffffffff818e8f78 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802c200000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7255fa0 CR3=000000000d97a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=0000000001000000 Opmask03=0000000000000000
Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff672b8c00 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33323437352e3430 3420205b3e363c00 65646f6d2073756f 756373696d6f7200
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3332343735243430 3420205134363600 6564656720737565 7563736367657200
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30372e3230342020 4330000000304530 203d212020636567 6120206961642065
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3020203230202000 3030000000204520 2037212020203333 3320203333202030
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3e2a2a5134393600 3a37656478786f2a 3b37796f782a333e 39376564632a2873
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7d656461647f2a30 493a0a004c464f75 2a372b2a3069636d 6b672a786f6e6b6f
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000400100 RBX=0000000000100cca RCX=1ffff92000839ec0 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff88801c8f48ac RBP=ffff88801c8f4880 RSP=ffffc900041cf468
R8 =ffffc900041cf5e8 R9 =ffffc900041cf5a8 R10=0000000000000000 R11=0000000000000001
R12=ffffc900041cf5e8 R13=ffffc900041cf604 R14=ffffc900041cf5f0 R15=0000000000000008
RIP=ffffffff81df253d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007eff70d6dd00 ffffffff 00c00000
GS =0000 ffff88802c300000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00005565c9f72000 CR3=000000001dc10000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=9aad47319aad4731 9aad47319aad4731 9aad47319aad4731 9aad47319aad4731 9aad47319aad4731 9aad47319aad4731 9aad47319aad4731 9aad47319aad4731
ZMM22=44a8d1a644a8d1a6 44a8d1a644a8d1a6 44a8d1a644a8d1a6 44a8d1a644a8d1a6 44a8d1a644a8d1a6 44a8d1a644a8d1a6 44a8d1a644a8d1a6 44a8d1a644a8d1a6
ZMM23=c688becfc688becf c688becfc688becf c688becfc688becf c688becfc688becf c688becfc688becf c688becfc688becf c688becfc688becf c688becfc688becf
ZMM24=9c8923ad9c8923ad 9c8923ad9c8923ad 9c8923ad9c8923ad 9c8923ad9c8923ad 9c8923ad9c8923ad 9c8923ad9c8923ad 9c8923ad9c8923ad 9c8923ad9c8923ad
ZMM25=822de20f822de20f 822de20f822de20f 822de20f822de20f 822de20f822de20f 822de20f822de20f 822de20f822de20f 822de20f822de20f 822de20f822de20f
ZMM26=b7ad8929b7ad8929 b7ad8929b7ad8929 b7ad8929b7ad8929 b7ad8929b7ad8929 b7ad8929b7ad8929 b7ad8929b7ad8929 b7ad8929b7ad8929 b7ad8929b7ad8929
ZMM27=cb08a4a8cb08a4a8 cb08a4a8cb08a4a8 cb08a4a8cb08a4a8 cb08a4a8cb08a4a8 cb08a4a8cb08a4a8 cb08a4a8cb08a4a8 cb08a4a8cb08a4a8 cb08a4a8cb08a4a8
ZMM28=000001f0000001ef 000001ee000001ed 000001ec000001eb 000001ea000001e9 000001e8000001e7 000001e6000001e5 000001e4000001e3 000001e2000001e1
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=4320000043200000 4320000043200000 4320000043200000 4320000043200000 4320000043200000 4320000043200000 4320000043200000 4320000043200000