last executing test programs:

58.441344905s ago: executing program 0 (id=139):
syz_open_dev$dri(&(0x7f0000000040), 0x7b, 0x688b00)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
syz_io_uring_setup(0x6f19, &(0x7f00000001c0)={0x0, 0x4099, 0x20, 0x1, 0x243, 0x0, r1}, &(0x7f0000000180), &(0x7f0000000280))
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f00000000c0)="510003000000", 0x6)
r3 = pidfd_getfd(r1, r2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x38}}, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, 'syz_tun\x00'}}, 0x1e)
ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000000)={0xb54, 0xb, 0x40fd})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000580)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
getegid()
recvmmsg(r2, &(0x7f0000006d00)=[{{&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/22, 0x16}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f00000003c0)=""/85, 0x55}], 0x3, &(0x7f0000000440)=""/172, 0xac}, 0x6}, {{&(0x7f0000000500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000039c0)=[{&(0x7f00000005c0)=""/168, 0xa8}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f0000000680)=""/186, 0xba}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/48, 0x30}, {0x0}, {&(0x7f00000038c0)=""/216, 0xd8}], 0x8, &(0x7f0000003a00)=""/86, 0x56}}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000003a80)=""/123, 0x7b}], 0x1, &(0x7f0000003b40)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000004b40)=""/185, 0xb9}, {&(0x7f0000004c00)=""/189, 0xbd}, {&(0x7f0000004d00)=""/112, 0x70}, {&(0x7f0000004d80)=""/231, 0xe7}], 0x4}, 0x9}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000004ec0)=""/96, 0x60}, {&(0x7f0000004f40)=""/65, 0x41}, {&(0x7f0000004fc0)=""/85, 0x55}, {&(0x7f0000005040)=""/160, 0xa0}, {&(0x7f0000005100)=""/245, 0xf5}, {&(0x7f0000005200)=""/122, 0x7a}, {&(0x7f0000005280)=""/18, 0x12}, {&(0x7f00000052c0)=""/54, 0x36}, {&(0x7f0000005300)=""/101, 0x65}, {&(0x7f0000005380)=""/67, 0x43}], 0xa, &(0x7f0000005480)=""/204, 0xcc}, 0x5}, {{&(0x7f0000005580)=@in6, 0x80, &(0x7f0000005800)=[{&(0x7f0000005600)=""/66, 0x42}, {&(0x7f0000005680)=""/253, 0xfd}, {&(0x7f0000005780)=""/74, 0x4a}], 0x3, &(0x7f0000005840)=""/204, 0xcc}, 0xffffffc0}, {{&(0x7f0000005940)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000006cc0)=[{&(0x7f00000059c0)=""/138, 0x8a}, {&(0x7f0000005a80)=""/4096, 0x1000}, {&(0x7f0000006a80)=""/237, 0xed}, {&(0x7f0000006b80)=""/232, 0xe8}, {&(0x7f0000006c80)=""/49, 0x31}], 0x5}, 0x4}], 0x7, 0x40000000, 0x0)
personality(0x0)

57.560103978s ago: executing program 0 (id=146):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c00e803000008000d"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0)

57.438233068s ago: executing program 0 (id=147):
r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002)
socket(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getpgrp(0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES8], 0x22c}], 0x1}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x4)
r2 = socket(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="0600000000000000000400"/20, @ANYRES32, @ANYRES32=r0, @ANYBLOB="010000000400000000000000040000000000000000"], 0x50)
writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0)}, {&(0x7f0000000900), 0x4000}], 0xe)

54.825832293s ago: executing program 0 (id=155):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
socket$can_j1939(0x1d, 0x2, 0x7)
r0 = syz_open_dev$vim2m(0x0, 0xb, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7079, 0x0, 0x4, 0x316}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000200)=0xa0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r5, 0x7a9, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

53.953669468s ago: executing program 0 (id=159):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x5, 0x0)
getdents(r0, 0x0, 0x58)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
mkdirat(r1, &(0x7f00000001c0)='./bus\x00', 0x34)
unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200)

53.810886021s ago: executing program 0 (id=161):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010020, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'wg2\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0)

38.697407552s ago: executing program 32 (id=161):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010020, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'wg2\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0)

7.404918002s ago: executing program 3 (id=365):
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {}, {}, {0x1}, {}, {0xfffffffa, 0x6}], 0x0, 0x0, 0x8, 0x0, 0x1}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$caif_stream(0x25, 0x1, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
socket(0x10, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040))
socket$packet(0x11, 0x2, 0x300)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0)

7.4028642s ago: executing program 1 (id=366):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
wait4(0x0, 0x0, 0x1000000, 0x0)
r0 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x408)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0)
ioperm(0x6, 0x7, 0x400)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x6}}, 0x20)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
pread64(0xffffffffffffffff, 0x0, 0x0, 0xc0000)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000380), 0x24, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000005, 0x10, r0, 0x8000000)

6.98432488s ago: executing program 1 (id=368):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, 0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
process_vm_readv(0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/146, 0x92}, {&(0x7f0000000500)=""/170, 0xaa}, {0x0}], 0x3, &(0x7f00000006c0), 0x0, 0x0)
bind$alg(r4, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f00000013c0))
read$dsp(r5, &(0x7f0000000440)=""/171, 0xab)

5.246460906s ago: executing program 1 (id=384):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[]}, 0x50)
move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x3666b165f8ff1357})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
pselect6(0x40, &(0x7f00000045c0)={0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000004640)={0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
openat$sndtimer(0xffffff9c, &(0x7f0000000380), 0x80000)
mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x8012, r2, 0x0)

5.244915896s ago: executing program 3 (id=386):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x24a4}})
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)
pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000300)="7b02178827d8a586e540a6f041b1deaf8382fa633a40a7167e27ef6bacc594c43f6e5af47337c432fc86abafc673b9c7ef15737937", 0x35}], 0x1, 0x40, 0x3ff, 0x12)
syz_clone3(&(0x7f0000000840)={0x44020100, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58)

4.807246107s ago: executing program 4 (id=378):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x20}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1600", 0x10, 0x2b, 0x0, @private1, @local, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x18}, 0x18}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$ptp1(0xffffff9c, &(0x7f0000000000), 0x500, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.42460641s ago: executing program 4 (id=379):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000001800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1c00", @ANYRES32=r0], 0x3001c, 0x4}}], 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r9, &(0x7f0000002fc0)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f00000011c0)="e6", 0x1}], 0x2, &(0x7f0000000300)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="9e174cb8", @ANYRES16=r8, @ANYBLOB="050000000000000008000600000008000300", @ANYRES32=r6, @ANYBLOB="080005000b000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010200000000000000000800000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x700}, 0x0)

4.422421035s ago: executing program 2 (id=389):
r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYBLOB="da2261875f58323cf5704ca92bdcc7e39a892a"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6)
syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20)

4.283433612s ago: executing program 4 (id=380):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101)
r1 = dup(r0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000043000900ffff"], 0x20}}, 0x44850)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x5)
recvmmsg(r7, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x100, &(0x7f0000002400)={0x77359400})

4.15089303s ago: executing program 3 (id=381):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0xfffffe38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)

3.44954672s ago: executing program 2 (id=382):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
pwritev2(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000180)="fad4c0e4891b0b33e7058d8c026e0ee9a217f5c247f30acc2e01d601d38edf4277d2253d5c8d8ad4acdcd40c49a0877d7bb4460e092de1b97cf47434879e7fc29263f04a7292289cbcc92ee2a029de18ba7154a75ec5808edc69d15b72ae9293a096a8500fd27752a954c979bc4a65abaf1d2dafa4ea1271308883ce6dfb2da7af883eeea17864988d8e5d014db68aaf65987fed3e2eb833bc88cccf8dd008db218e22b461ff3440f8e1564ac8e75aa74bff9793fb38", 0xb6}], 0x1, 0xfba, 0x2, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000010101010000000000000000020000001800018014000180ee0001000000000008000200000000000c00198008000100"], 0x38}}, 0x0)
r2 = dup(r0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d})
ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x8004552d, 0x0)
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)
setgroups(0x352, &(0x7f0000000080)=[0x0, 0xee00])

2.958929535s ago: executing program 3 (id=383):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700))
ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x1, 0x1})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/73, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)

2.948327844s ago: executing program 4 (id=394):
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usbip_server_init(0x4)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20000000}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat(0xffffffffffffff9c, 0x0, 0x40440, 0x0)

2.54323322s ago: executing program 2 (id=385):
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = io_uring_setup(0x6281, &(0x7f0000000080))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
pipe(&(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCGDEV(r3, 0x540e, 0x0)

2.001114777s ago: executing program 1 (id=387):
socket$kcm(0xa, 0x5, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$netlink(0x10, 0x3, 0xf)
epoll_create1(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x608d00, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000080071000040", @ANYRES32, @ANYRES16=r1, @ANYRES64=r0])

1.963159685s ago: executing program 2 (id=388):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000380), 0xc01)
syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0})
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
mount$nfs4(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"])
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f00000000c0)={0x0, 0xc})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = syz_io_uring_setup(0x3678, &(0x7f0000000080)={0x0, 0x1ffffd, 0x10100, 0x40000000, 0x3}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r5, 0x1000a3d, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

1.050832693s ago: executing program 2 (id=390):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x20}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1600", 0x10, 0x2b, 0x0, @private1, @local, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x18}, 0x18}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$ptp1(0xffffff9c, &(0x7f0000000000), 0x500, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.050650471s ago: executing program 3 (id=391):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc})
socket$alg(0x26, 0x5, 0x0)
io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)

1.045367463s ago: executing program 1 (id=399):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x22, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x40020)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r5, &(0x7f0000000200)=""/209, 0xd1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)

1.043926215s ago: executing program 4 (id=392):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd)
keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55)

528.697389ms ago: executing program 2 (id=393):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x0, @local}, 0x2}}, 0x26)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x3f, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="2503000000060000000008"], 0x14}}, 0x0)

1.716406ms ago: executing program 1 (id=395):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0xfffffe38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)

1.557775ms ago: executing program 3 (id=396):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0x9, 0x0, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r3, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)

0s ago: executing program 4 (id=404):
syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0)
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"})
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:38054' (ED25519) to the list of known hosts.
[   41.159815][ T5936] cgroup: Unknown subsys name 'net'
[   41.371567][ T5936] cgroup: Unknown subsys name 'cpuset'
[   41.375439][ T5936] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.236109][ T5936] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   44.999356][ T5957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.002956][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   45.005276][ T5957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.008106][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   45.011423][ T5957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.011816][ T5961] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.014459][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   45.016868][ T5961] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.017588][ T5962] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.019066][ T5963] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.019681][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   45.019914][ T5957] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   45.020019][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   45.021681][ T5961] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.025818][ T5963] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.027267][ T5961] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.030082][ T5963] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.031032][ T5961] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   45.033579][ T5963] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   45.033873][ T5962] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.034821][ T5962] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   45.035051][ T5962] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.035843][ T5961] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.038068][ T5963] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.298905][ T5959] chnl_net:caif_netlink_parms(): no params data found
[   45.306235][ T5949] chnl_net:caif_netlink_parms(): no params data found
[   45.309738][ T5947] chnl_net:caif_netlink_parms(): no params data found
[   45.378785][ T5948] chnl_net:caif_netlink_parms(): no params data found
[   45.497044][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.500315][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.503101][ T5959] bridge_slave_0: entered allmulticast mode
[   45.505462][ T5959] bridge_slave_0: entered promiscuous mode
[   45.529930][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.532222][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.534618][ T5949] bridge_slave_0: entered allmulticast mode
[   45.536919][ T5949] bridge_slave_0: entered promiscuous mode
[   45.555095][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.558051][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.560886][ T5959] bridge_slave_1: entered allmulticast mode
[   45.564058][ T5959] bridge_slave_1: entered promiscuous mode
[   45.576031][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.578799][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.580974][ T5947] bridge_slave_0: entered allmulticast mode
[   45.583247][ T5947] bridge_slave_0: entered promiscuous mode
[   45.585960][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.588710][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.590982][ T5949] bridge_slave_1: entered allmulticast mode
[   45.593550][ T5949] bridge_slave_1: entered promiscuous mode
[   45.650521][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.653503][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.656499][ T5947] bridge_slave_1: entered allmulticast mode
[   45.660118][ T5947] bridge_slave_1: entered promiscuous mode
[   45.673708][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.677914][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.680919][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.683574][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.686415][ T5948] bridge_slave_0: entered allmulticast mode
[   45.689715][ T5948] bridge_slave_0: entered promiscuous mode
[   45.694292][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.730791][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.733772][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.736445][ T5948] bridge_slave_1: entered allmulticast mode
[   45.739207][ T5948] bridge_slave_1: entered promiscuous mode
[   45.754618][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.781665][ T5949] team0: Port device team_slave_0 added
[   45.796748][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.809771][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.814045][ T5949] team0: Port device team_slave_1 added
[   45.816798][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.828293][ T5959] team0: Port device team_slave_0 added
[   45.832049][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.868044][ T5959] team0: Port device team_slave_1 added
[   45.895424][ T5948] team0: Port device team_slave_0 added
[   45.924609][ T5947] team0: Port device team_slave_0 added
[   45.927636][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.929900][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.938609][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.943554][ T5948] team0: Port device team_slave_1 added
[   45.954421][ T5947] team0: Port device team_slave_1 added
[   45.957268][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.960459][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.970486][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.983954][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.986708][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.996728][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.026595][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.029520][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.036991][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.052567][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.055303][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.063506][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.070107][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.072261][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.080733][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.085926][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.089112][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.096780][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.103073][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.105840][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.116386][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.151004][ T5959] hsr_slave_0: entered promiscuous mode
[   46.153269][ T5959] hsr_slave_1: entered promiscuous mode
[   46.169832][ T5949] hsr_slave_0: entered promiscuous mode
[   46.172776][ T5949] hsr_slave_1: entered promiscuous mode
[   46.175079][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.178513][ T5949] Cannot create hsr debugfs directory
[   46.226492][ T5947] hsr_slave_0: entered promiscuous mode
[   46.229213][ T5947] hsr_slave_1: entered promiscuous mode
[   46.231542][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.234188][ T5947] Cannot create hsr debugfs directory
[   46.268726][ T5948] hsr_slave_0: entered promiscuous mode
[   46.270857][ T5948] hsr_slave_1: entered promiscuous mode
[   46.272755][ T5948] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.275204][ T5948] Cannot create hsr debugfs directory
[   46.478640][ T5959] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.484628][ T5959] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.497991][ T5959] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.503249][ T5959] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.516301][ T5949] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.524362][ T5949] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.531255][ T5949] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.535407][ T5949] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.565503][ T5947] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.569537][ T5947] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.576340][ T5948] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   46.579756][ T5947] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.583893][ T5947] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.590257][ T5948] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   46.593570][ T5948] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   46.597041][ T5948] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   46.619487][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.641068][ T5959] 8021q: adding VLAN 0 to HW filter on device team0
[   46.657909][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.660343][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.673308][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.676172][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.706865][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.728049][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.751904][ T5948] 8021q: adding VLAN 0 to HW filter on device team0
[   46.758102][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.769629][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.772010][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.777175][ T5949] 8021q: adding VLAN 0 to HW filter on device team0
[   46.783817][ T5947] 8021q: adding VLAN 0 to HW filter on device team0
[   46.790596][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.793611][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.798270][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.801326][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.805281][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.807342][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.821706][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.824116][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.832471][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.835464][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.874293][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.920511][ T5959] veth0_vlan: entered promiscuous mode
[   46.927449][ T5959] veth1_vlan: entered promiscuous mode
[   46.947461][ T5959] veth0_macvtap: entered promiscuous mode
[   46.951758][ T5959] veth1_macvtap: entered promiscuous mode
[   46.962943][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.968189][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.973915][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.977264][ T5959] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.980968][ T5959] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.983636][ T5959] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.986262][ T5959] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.003332][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.019253][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.043292][ T5949] veth0_vlan: entered promiscuous mode
[   47.057157][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.059211][ T5963] Bluetooth: hci3: command tx timeout
[   47.060241][ T5298] Bluetooth: hci0: command tx timeout
[   47.060565][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.067886][ T5298] Bluetooth: hci2: command tx timeout
[   47.072237][ T5949] veth1_vlan: entered promiscuous mode
[   47.075687][ T5948] veth0_vlan: entered promiscuous mode
[   47.096035][ T5947] veth0_vlan: entered promiscuous mode
[   47.110980][ T5948] veth1_vlan: entered promiscuous mode
[   47.116095][ T5947] veth1_vlan: entered promiscuous mode
[   47.119806][   T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.120741][ T5949] veth0_macvtap: entered promiscuous mode
[   47.122671][   T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.131779][ T5949] veth1_macvtap: entered promiscuous mode
[   47.147890][ T5298] Bluetooth: hci1: command tx timeout
[   47.148958][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.152784][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.156955][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.161048][ T5947] veth0_macvtap: entered promiscuous mode
[   47.165093][ T5959] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.167523][ T5948] veth0_macvtap: entered promiscuous mode
[   47.173502][ T5947] veth1_macvtap: entered promiscuous mode
[   47.176107][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.179805][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.184071][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.188589][ T5948] veth1_macvtap: entered promiscuous mode
[   47.199175][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.202468][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.205774][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.209802][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.213366][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.216420][ T5949] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.220122][ T5949] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.223296][ T5949] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.226464][ T5949] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.244014][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.253281][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.256483][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.260272][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.265327][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.280208][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.284578][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.297946][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.302317][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.306556][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.310940][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.316727][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.328884][ T5947] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.334365][ T5947] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.337288][ T5947] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.340079][ T5947] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.344807][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.348889][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.351836][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.355471][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.359689][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.363993][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.369385][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.390414][ T5948] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.393032][ T5948] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.395664][ T5948] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.399366][ T5948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.429787][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.434158][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.454938][   T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.457366][   T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.465540][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.472169][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.489081][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.492012][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.509667][   T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.512656][   T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.531458][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.533894][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.613152][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   47.679798][ T6027] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'.
[   48.220720][    T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!!
[   48.255743][ T6038] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET)
[   48.489230][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   48.493757][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   48.497706][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   48.534637][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   48.692830][ T6038] syz.0.8: attempt to access beyond end of device
[   48.692830][ T6038] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0
[   48.700148][ T6038] XFS (loop0): SB validate failed with error -5.
[   49.139493][ T5298] Bluetooth: hci2: command tx timeout
[   49.141708][ T5298] Bluetooth: hci3: command tx timeout
[   49.147883][ T5963] Bluetooth: hci0: command tx timeout
[   49.217928][ T5963] Bluetooth: hci1: command tx timeout
[   49.373289][ T6058] capability: warning: `syz.3.12' uses deprecated v2 capabilities in a way that may be insecure
[   49.522859][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'.
[   50.809492][ T6084] ubi0: attaching mtd0
[   50.815500][ T6084] ubi0: scanning is finished
[   50.817501][ T6084] ubi0: empty MTD device detected
[   50.830444][ T6086] netlink: 'syz.1.21': attribute type 10 has an invalid length.
[   50.840016][ T6086] 8021q: adding VLAN 0 to HW filter on device team0
[   50.842960][ T6086] bond0: (slave team0): Enslaving as an active interface with an up link
[   50.877244][ T6092] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   50.887962][ T6092] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   50.891444][ T6092] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   50.894075][ T6092] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   50.898747][ T6092] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[   50.901418][ T6092] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[   50.904018][ T6092] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[   50.906739][ T6092] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[   50.910500][ T6092] geneve2: entered promiscuous mode
[   50.912178][ T6092] geneve2: entered allmulticast mode
[   50.938363][ T6084] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[   50.941684][ T6084] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[   50.944729][ T6084] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[   50.947578][ T6084] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[   50.950738][ T6084] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[   50.953672][ T6084] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[   50.957023][ T6084] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4063669938
[   50.961343][ T6084] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[   50.966214][ T6093] ubi0: background thread "ubi_bgt0d" started, PID 6093
[   51.218334][ T5963] Bluetooth: hci0: command tx timeout
[   51.218375][ T5298] Bluetooth: hci3: command tx timeout
[   51.218412][ T5952] Bluetooth: hci2: command tx timeout
[   51.298159][ T5298] Bluetooth: hci1: command tx timeout
[   51.709980][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   52.108136][    T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!!
[   52.348121][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   52.348573][    T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!!
[   52.350672][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   52.702934][ T6129] overlay: ./file1 is not a directory
[   52.762540][ T6129] syz.0.32 (6129) used greatest stack depth: 20512 bytes left
[   52.912419][ T6134] Bluetooth: MGMT ver 1.23
[   53.297854][ T5298] Bluetooth: hci3: command tx timeout
[   53.297958][ T5963] Bluetooth: hci2: command tx timeout
[   53.298884][ T5952] Bluetooth: hci0: command tx timeout
[   53.377874][ T5298] Bluetooth: hci1: command tx timeout
[   54.121474][ T5298] block nbd0: Receive control failed (result -107)
[   54.123281][ T6157] syz.0.40: attempt to access beyond end of device
[   54.123281][ T6157] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0
[   54.129561][ T6157] syz.0.40: attempt to access beyond end of device
[   54.129561][ T6157] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0
[   54.133429][ T6157] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[   54.137636][ T6157] syz.0.40: attempt to access beyond end of device
[   54.137636][ T6157] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0
[   54.143164][ T6157] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[   54.148164][ T6157] syz.0.40: attempt to access beyond end of device
[   54.148164][ T6157] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0
[   54.152592][ T6157] syz.0.40: attempt to access beyond end of device
[   54.152592][ T6157] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0
[   54.157834][ T6157] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[   54.161750][ T6157] syz.0.40: attempt to access beyond end of device
[   54.161750][ T6157] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0
[   54.167505][ T6157] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[   54.172144][ T6157] syz.0.40: attempt to access beyond end of device
[   54.172144][ T6157] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0
[   54.183650][ T6157] syz.0.40: attempt to access beyond end of device
[   54.183650][ T6157] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0
[   54.191724][ T6157] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[   54.195995][ T6157] syz.0.40: attempt to access beyond end of device
[   54.195995][ T6157] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0
[   54.226009][ T6157] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[   54.231396][ T6157] syz.0.40: attempt to access beyond end of device
[   54.231396][ T6157] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0
[   54.236757][ T6157] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[   54.240533][ T6157] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[   54.243383][ T6157] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[   54.258098][ T6160] nbd0: detected capacity change from 0 to 20
[   54.532131][ T5956] block nbd0: Dead connection, failed to find a fallback
[   54.534491][ T5956] block nbd0: shutting down sockets
[   54.536752][ T5956] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   54.544581][ T5956] Buffer I/O error on dev nbd0, logical block 0, async page read
[   54.549303][ T5956] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   54.553196][ T5956] Buffer I/O error on dev nbd0, logical block 0, async page read
[   54.556706][ T5956] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   54.556760][ T5956] Buffer I/O error on dev nbd0, logical block 0, async page read
[   54.556841][ T5956] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   54.556855][ T5956] Buffer I/O error on dev nbd0, logical block 0, async page read
[   54.556906][ T5956] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   54.556918][ T5956] Buffer I/O error on dev nbd0, logical block 0, async page read
[   54.556966][ T5956] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   54.556979][ T5956] Buffer I/O error on dev nbd0, logical block 0, async page read
[   54.557027][ T5956] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   54.557039][ T5956] Buffer I/O error on dev nbd0, logical block 0, async page read
[   54.557081][ T5956] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   54.557094][ T5956] Buffer I/O error on dev nbd0, logical block 0, async page read
[   54.557117][ T5956] ldm_validate_partition_table(): Disk read failed.
[   54.557159][ T5956] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   54.557172][ T5956] Buffer I/O error on dev nbd0, logical block 0, async page read
[   54.557214][ T5956] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   54.557227][ T5956] Buffer I/O error on dev nbd0, logical block 0, async page read
[   54.557329][ T5956] Dev nbd0: unable to read RDB block 0
[   54.557452][ T5956]  nbd0: unable to read partition table
[   54.557522][ T5956] nbd0: partition table beyond EOD, truncated
[   54.563072][ T5956] ldm_validate_partition_table(): Disk read failed.
[   54.563223][ T5956] Dev nbd0: unable to read RDB block 0
[   54.563338][ T5956]  nbd0: unable to read partition table
[   54.563402][ T5956] nbd0: partition table beyond EOD, truncated
[   54.566024][ T5956] ldm_validate_partition_table(): Disk read failed.
[   54.566285][ T5956] Dev nbd0: unable to read RDB block 0
[   54.566473][ T5956]  nbd0: unable to read partition table
[   54.566580][ T5956] nbd0: partition table beyond EOD, truncated
[   54.569115][ T5956] ldm_validate_partition_table(): Disk read failed.
[   54.569512][ T5956] Dev nbd0: unable to read RDB block 0
[   54.569709][ T5956]  nbd0: unable to read partition table
[   54.569809][ T5956] nbd0: partition table beyond EOD, truncated
[   55.894897][ T6187] No buffer was provided with the request
[   56.269724][ T6198] Illegal XDP return value 322755949 on prog  (id 16) dev N/A, expect packet loss!
[   56.458329][ T5992] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   56.647925][ T5992] usb 8-1: Using ep0 maxpacket: 8
[   56.666467][ T5992] usb 8-1: config 7 has an invalid interface number: 161 but max is 0
[   56.669212][ T5992] usb 8-1: config 7 has no interface number 0
[   56.671540][ T5992] usb 8-1: config 7 interface 161 has no altsetting 0
[   56.680862][ T5992] usb 8-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=4e.59
[   56.685759][ T5992] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.689262][ T5992] usb 8-1: Product: syz
[   56.690693][ T5992] usb 8-1: Manufacturer: syz
[   56.692126][ T5992] usb 8-1: SerialNumber: syz
[   57.779156][ T5992] hub 8-1:7.161: bad descriptor, ignoring hub
[   57.783201][ T5992] hub 8-1:7.161: probe with driver hub failed with error -5
[   57.793705][ T5992] cypress_m8 8-1:7.161: HID->COM RS232 Adapter converter detected
[   57.814315][ T5992] cyphidcom ttyUSB0: required endpoint is missing
[   57.863177][ T5992] usb 8-1: USB disconnect, device number 2
[   57.877331][ T5992] cypress_m8 8-1:7.161: device disconnected
[   58.177852][ T5963] Bluetooth: hci3: command 0x0405 tx timeout
[   61.161413][ T6284] vim2m vim2m.0: vidioc_s_fmt queue busy
[   61.342470][ T6289] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.347357][ T6289] netlink: 'syz.1.74': attribute type 1 has an invalid length.
[   61.350064][ T6289] netlink: 168 bytes leftover after parsing attributes in process `syz.1.74'.
[   61.352839][ T6289] netlink: 'syz.1.74': attribute type 1 has an invalid length.
[   61.904569][ T6299] 9pnet: Found fid 0 not clunked
[   61.956395][ T6303] Zero length message leads to an empty skb
[   62.056704][ T6310] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   62.076978][ T6310] kvm: requested 22628 ns i8254 timer period limited to 200000 ns
[   62.300527][ T6323] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   62.303530][ T6323] overlayfs: failed to set xattr on upper
[   62.305344][ T6323] overlayfs: ...falling back to redirect_dir=nofollow.
[   62.309923][ T6323] overlayfs: ...falling back to index=off.
[   62.312556][ T6323] overlayfs: ...falling back to uuid=null.
[   63.682547][ T6348] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   65.729474][ T6386] syzkaller1: entered promiscuous mode
[   65.731483][ T6386] syzkaller1: entered allmulticast mode
[   66.257938][ T1320] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   66.418193][ T1320] usb 6-1: Using ep0 maxpacket: 8
[   66.424078][ T1320] usb 6-1: config 0 has no interfaces?
[   66.426096][ T1320] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   66.429754][ T1320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.443280][ T1320] usb 6-1: config 0 descriptor??
[   66.659000][ T1320] usb 6-1: USB disconnect, device number 2
[   67.494268][   T39] audit: type=1326 audit(1735849183.750:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.1.113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000
[   67.506758][   T39] audit: type=1326 audit(1735849183.760:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.1.113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000
[   67.520716][   T39] audit: type=1326 audit(1735849183.760:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.1.113" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe7579 code=0x7ffc0000
[   67.531970][   T39] audit: type=1326 audit(1735849183.760:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.1.113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000
[   67.546323][   T39] audit: type=1326 audit(1735849183.760:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.1.113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000
[   67.557118][   T39] audit: type=1326 audit(1735849183.760:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.1.113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000
[   67.566692][   T39] audit: type=1326 audit(1735849183.760:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.1.113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000
[   67.587172][   T39] audit: type=1326 audit(1735849183.760:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.1.113" exe="/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf7fe7579 code=0x7ffc0000
[   67.614725][   T39] audit: type=1326 audit(1735849183.760:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.1.113" exe="/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf7fe7579 code=0x7ffc0000
[   67.621385][   T39] audit: type=1326 audit(1735849183.760:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.1.113" exe="/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf7fe7579 code=0x7ffc0000
[   68.583034][ T6431] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   68.592009][ T6431] kvm: pic: level sensitive irq not supported
[   68.592598][ T6431] kvm: pic: non byte read
[   68.597621][ T6431] kvm: pic: level sensitive irq not supported
[   68.598211][ T6431] kvm: pic: non byte read
[   69.357420][ T6449] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.354828][ T6480] uprobe: syz.1.130:6480 failed to unregister, leaking uprobe
[   70.822027][ T1412] ieee802154 phy0 wpan0: encryption failed: -22
[   70.824205][ T1412] ieee802154 phy1 wpan1: encryption failed: -22
[   71.638048][ T6504] process 'syz.2.136' launched './file0' with NULL argv: empty string added
[   71.770237][ T6510] Bluetooth: MGMT ver 1.23
[   71.823556][ T6508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'.
[   72.643566][ T6535] netlink: 'syz.0.146': attribute type 10 has an invalid length.
[   72.658667][ T6535] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   72.690644][ T6535] netlink: 164 bytes leftover after parsing attributes in process `syz.0.146'.
[   72.777982][ T2291] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   72.930366][ T2291] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.933646][ T2291] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[   72.941047][ T2291] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   72.946089][ T2291] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.948977][ T2291] usb 8-1: Product: syz
[   72.950282][ T2291] usb 8-1: Manufacturer: syz
[   72.951641][ T2291] usb 8-1: SerialNumber: syz
[   72.995352][ T6544] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[   72.995352][ T6544]    program syz.2.149 not setting count and/or reply_len properly
[   73.389773][ T5298] Bluetooth: hci1: hardware error 0x00
[   73.407546][ T6541] Set syz1 is full, maxelem 65536 reached
[   73.989582][ T2291] cdc_mbim 8-1:1.0: bind() failure
[   73.993947][ T2291] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found
[   73.996218][ T2291] cdc_ncm 8-1:1.1: bind() failure
[   74.005599][ T2291] usb 8-1: USB disconnect, device number 3
[   75.245643][ T6565] : renamed from ipvlan1
[   75.467904][ T5298] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[   78.182640][ T6631] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   78.194305][ T6631] kvm: pic: level sensitive irq not supported
[   78.194615][ T6631] kvm: pic: non byte read
[   78.197944][ T2291] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   78.361984][ T2291] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   78.367885][ T2291] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   78.374902][ T2291] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[   78.381822][ T2291] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   78.389178][ T2291] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   78.396614][ T2291] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   78.399712][ T2291] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   78.402174][ T2291] usb 8-1: Product: syz
[   78.403475][ T2291] usb 8-1: Manufacturer: syz
[   78.408762][ T2291] cdc_wdm 8-1:1.0: skipping garbage
[   78.410562][ T2291] cdc_wdm 8-1:1.0: skipping garbage
[   78.415064][ T2291] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[   78.417170][ T2291] cdc_wdm 8-1:1.0: Unknown control protocol
[   78.728215][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   78.729234][ T6010] usb 8-1: USB disconnect, device number 4
[   78.730409][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   78.730421][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[   78.731645][ T6628] cdc_wdm 8-1:1.0: Tx URB error: -19
[   79.267934][ T6010] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   79.435288][ T6010] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   79.450432][ T6010] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   79.453495][ T6010] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[   79.467311][ T6010] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87
[   79.470980][ T6010] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64
[   79.475625][ T6010] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   79.478528][ T6010] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   79.481042][ T6010] usb 8-1: Product: syz
[   79.482413][ T6010] usb 8-1: Manufacturer: syz
[   79.509566][ T6010] cdc_wdm 8-1:1.0: skipping garbage
[   79.514014][ T6010] cdc_wdm 8-1:1.0: skipping garbage
[   79.519459][ T6010] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22
[   79.670278][ T6649] input: syz1 as /devices/virtual/input/input5
[   79.691431][ T6628] tmpfs: Bad value for 'mpol'
[   79.694457][ T6010] usb 8-1: USB disconnect, device number 5
[   80.522416][ T6661] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   80.533098][ T6661] kvm: pic: level sensitive irq not supported
[   80.533383][ T6661] kvm: pic: non byte read
[   80.537392][ T6661] kvm: pic: level sensitive irq not supported
[   80.538669][ T6661] kvm: pic: non byte read
[   80.543589][ T6661] kvm: pic: level sensitive irq not supported
[   80.544367][ T6661] kvm: pic: non byte read
[   80.802428][ T6665] block device autoloading is deprecated and will be removed.
[   80.805268][ T6665] bio_check_eod: 2 callbacks suppressed
[   80.805276][ T6665] syz.1.183: attempt to access beyond end of device
[   80.805276][ T6665] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[   81.142653][    T8] cfg80211: failed to load regulatory.db
[   82.664899][ T6693] netfs: Couldn't get user pages (rc=-14)
[   85.044230][ T6741] netlink: 'syz.3.198': attribute type 1 has an invalid length.
[   85.056249][ T6741] 8021q: adding VLAN 0 to HW filter on device bond1
[   85.095555][ T6741] 8021q: adding VLAN 0 to HW filter on device bond1
[   85.099241][ T6741] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address
[   85.104339][ T6741] bond1: (slave ip6tnl1): Error -95 calling set_mac_address
[   85.324305][  T833] libceph: connect (1)[c::]:6789 error -101
[   85.328777][  T833] libceph: mon0 (1)[c::]:6789 connect error
[   85.394179][ T6754] 9pnet_fd: Insufficient options for proto=fd
[   85.608730][ T5989] libceph: connect (1)[c::]:6789 error -101
[   85.610960][ T5989] libceph: mon0 (1)[c::]:6789 connect error
[   85.915494][ T6749] ceph: No mds server is up or the cluster is laggy
[   86.254407][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'.
[   86.282237][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'.
[   88.527811][ T6808] 9pnet_fd: Insufficient options for proto=fd
[   91.215034][ T6845] netlink: 'syz.1.227': attribute type 10 has an invalid length.
[   91.227491][ T6845] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   91.261565][ T6845] netlink: 164 bytes leftover after parsing attributes in process `syz.1.227'.
[   91.609729][ T5963] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   91.620016][ T5963] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   91.628050][ T5963] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   91.633621][ T5963] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   91.640146][ T5963] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   91.651359][ T5963] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   91.757354][ T6856] chnl_net:caif_netlink_parms(): no params data found
[   91.842293][ T6856] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.845208][ T6856] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.847509][ T6856] bridge_slave_0: entered allmulticast mode
[   91.851115][ T6856] bridge_slave_0: entered promiscuous mode
[   91.869009][ T1137] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.876560][ T6856] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.879784][ T6856] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.881986][ T6856] bridge_slave_1: entered allmulticast mode
[   91.884282][ T6856] bridge_slave_1: entered promiscuous mode
[   91.923517][ T6856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.940604][ T1137] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.949994][ T6856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.982500][ T6856] team0: Port device team_slave_0 added
[   91.987126][ T6856] team0: Port device team_slave_1 added
[   92.015800][ T1137] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.024182][ T6856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.026492][ T6856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.035288][ T6856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.039325][ T6856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.041435][ T6856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.050093][ T6856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.090122][ T6856] hsr_slave_0: entered promiscuous mode
[   92.093004][ T6856] hsr_slave_1: entered promiscuous mode
[   92.095626][ T6856] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.099641][ T6856] Cannot create hsr debugfs directory
[   92.116512][ T1137] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.236963][ T6856] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   92.291874][ T6856] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   92.304510][ T6856] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   92.309624][ T6856] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   92.323987][ T1137] bridge_slave_1: left allmulticast mode
[   92.326033][ T1137] bridge_slave_1: left promiscuous mode
[   92.331081][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.340548][ T1137] bridge_slave_0: left allmulticast mode
[   92.343086][ T1137] bridge_slave_0: left promiscuous mode
[   92.346024][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.620952][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   92.632813][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   92.637564][ T1137] bond0 (unregistering): (slave wlan1): Releasing backup interface
[   92.657628][ T1137] bond0 (unregistering): Released all slaves
[   92.700362][ T6856] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.707703][ T6856] 8021q: adding VLAN 0 to HW filter on device team0
[   92.724960][ T6856] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   92.729293][ T6856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   92.763036][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.765198][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.768770][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.770918][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.885188][ T6856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.004067][ T1137] hsr_slave_0: left promiscuous mode
[   93.007027][ T1137] hsr_slave_1: left promiscuous mode
[   93.011293][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.014239][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.020283][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.023399][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.042584][ T1137] veth1_macvtap: left promiscuous mode
[   93.045059][ T1137] veth0_macvtap: left promiscuous mode
[   93.047230][ T1137] veth1_vlan: left promiscuous mode
[   93.052367][ T1137] veth0_vlan: left promiscuous mode
[   93.427634][   T39] kauditd_printk_skb: 234 callbacks suppressed
[   93.427649][   T39] audit: type=1326 audit(1735849209.680:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.3.238" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f20579 code=0x0
[   93.697899][ T5963] Bluetooth: hci3: command tx timeout
[   93.707885][ T5963] Bluetooth: hci2: command tx timeout
[   93.781062][ T1137] team0 (unregistering): Port device team_slave_1 removed
[   93.860149][ T1137] team0 (unregistering): Port device team_slave_0 removed
[   94.413096][ T6927] cgroup: fork rejected by pids controller in /syz3
[   94.506283][ T6856] veth0_vlan: entered promiscuous mode
[   94.530388][ T6856] veth1_vlan: entered promiscuous mode
[   94.552194][ T6856] veth0_macvtap: entered promiscuous mode
[   94.559367][ T6856] veth1_macvtap: entered promiscuous mode
[   94.571613][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.574803][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.578569][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.583585][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.587418][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.595683][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.607690][ T6856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.616199][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.621282][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.625516][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.632160][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.636106][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.640284][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.650088][ T6856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.667158][ T6856] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.676504][ T6856] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.680822][ T6856] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.686113][ T6856] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.773745][   T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.776236][   T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.806727][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.815241][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.787937][ T5963] Bluetooth: hci3: command tx timeout
[   96.087873][    T8] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   96.263218][    T8] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[   96.265637][    T8] usb 9-1: config 0 has no interface number 0
[   96.268042][    T8] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.272401][    T8] usb 9-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[   96.277315][    T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.291447][    T8] usb 9-1: config 0 descriptor??
[   96.301970][    T8] usbhid 9-1:0.1: couldn't find an input interrupt endpoint
[   97.206758][ T7139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.210034][ T7139] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.857923][ T5963] Bluetooth: hci3: command tx timeout
[   98.534540][   T39] audit: type=1800 audit(1735849214.790:247): pid=7159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.254" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[   98.889298][ T7069] usb 9-1: USB disconnect, device number 2
[   98.898304][ T7152] Set syz1 is full, maxelem 65536 reached
[   99.938452][ T5963] Bluetooth: hci3: command tx timeout
[  101.843828][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'.
[  102.511921][ T7234] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  102.514432][ T7234] overlayfs: failed to set xattr on upper
[  102.516230][ T7234] overlayfs: ...falling back to redirect_dir=nofollow.
[  102.518602][ T7234] overlayfs: ...falling back to index=off.
[  102.521395][ T7234] overlayfs: ...falling back to uuid=null.
[  102.950848][ T1133] Bluetooth: Error in BCSP hdr checksum
[  103.208546][ T1133] Bluetooth: Error in BCSP hdr checksum
[  103.267109][ T7253] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  103.273025][ T7253] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  103.284490][ T7253] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  103.286356][ T7253] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  103.294013][ T7253] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  103.295901][ T7253] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  103.404705][ T7265] netlink: 'syz.3.283': attribute type 1 has an invalid length.
[  103.424265][ T7265] 8021q: adding VLAN 0 to HW filter on device bond2
[  103.443264][ T7265] bond2: (slave bridge1): making interface the new active one
[  103.446682][ T7265] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  103.463542][ T7265] bond2: (slave bridge2): Enslaving as an active interface with a down link
[  104.738503][ T5298] Bluetooth: hci4: command 0x1003 tx timeout
[  104.738680][ T5963] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  104.803300][ T7289] netlink: 'syz.3.289': attribute type 10 has an invalid length.
[  104.806429][ T7289] netlink: 40 bytes leftover after parsing attributes in process `syz.3.289'.
[  104.820159][   T39] audit: type=1326 audit(1735849221.080:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.4.290" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x0
[  104.821642][ T7289] team0: entered promiscuous mode
[  104.838998][ T7289] team_slave_0: entered promiscuous mode
[  104.850865][ T7289] team_slave_1: entered promiscuous mode
[  104.853137][ T7289] team0: entered allmulticast mode
[  104.855873][ T7289] team_slave_0: entered allmulticast mode
[  104.858426][ T7289] team_slave_1: entered allmulticast mode
[  104.861303][ T7289] bridge0: port 3(team0) entered blocking state
[  104.864108][ T7289] bridge0: port 3(team0) entered disabled state
[  104.868684][ T7289] bridge0: port 3(team0) entered blocking state
[  104.871543][ T7289] bridge0: port 3(team0) entered forwarding state
[  106.499959][ T7340] bond0: entered allmulticast mode
[  107.628145][ T7386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.301'.
[  107.630960][ T7386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.301'.
[  107.664436][ T7386] bond0: entered promiscuous mode
[  107.666625][ T7386] bond_slave_0: entered promiscuous mode
[  107.682933][ T7386] bond_slave_1: entered promiscuous mode
[  107.684765][ T7386] team0: entered promiscuous mode
[  107.686543][ T7386] team_slave_0: entered promiscuous mode
[  107.691018][ T7386] team_slave_1: entered promiscuous mode
[  107.693429][ T7386] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  107.699820][ T7386] batadv_slave_1: entered promiscuous mode
[  107.831049][ T7394] input: syz1 as /devices/virtual/input/input7
[  108.461919][ T7406] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  108.474337][ T7406] kvm: pic: non byte read
[  108.479367][ T7406] kvm: pic: level sensitive irq not supported
[  108.480183][ T7406] kvm: pic: non byte read
[  108.872168][   T39] audit: type=1326 audit(1735849225.130:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7430 comm="syz.4.309" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f13579 code=0x0
[  111.820642][   T57] IPVS: starting estimator thread 0...
[  111.919673][ T7484] IPVS: using max 38 ests per chain, 91200 per kthread
[  115.511550][   T39] audit: type=1326 audit(1735849231.770:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7539 comm="syz.1.331" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe7579 code=0x0
[  116.800630][ T7570] netlink: 168 bytes leftover after parsing attributes in process `syz.1.338'.
[  116.804370][ T7570] netlink: 'syz.1.338': attribute type 1 has an invalid length.
[  117.823532][ T7592] syz.1.346 (7592): /proc/7589/oom_adj is deprecated, please use /proc/7589/oom_score_adj instead.
[  118.139509][   T39] audit: type=1326 audit(1735849234.400:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.348" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f20579 code=0x0
[  118.433755][ T7606] ubi: mtd0 is already attached to ubi0
[  118.693840][   T39] audit: type=1804 audit(1735849234.950:252): pid=7608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.350" name="/newroot/87/bus/file1" dev="overlay" ino=526 res=1 errno=0
[  120.436230][ T7638] netlink: 'syz.1.367': attribute type 2 has an invalid length.
[  122.050270][ T5963] block nbd4: Receive control failed (result -107)
[  122.128176][ T7650] nbd4: detected capacity change from 0 to 20
[  122.135185][ T7650] block nbd4: Dead connection, failed to find a fallback
[  122.137522][ T7650] block nbd4: shutting down sockets
[  122.147923][ T7650] blk_print_req_error: 60 callbacks suppressed
[  122.147934][ T7650] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.153827][ T7650] buffer_io_error: 60 callbacks suppressed
[  122.153835][ T7650] Buffer I/O error on dev nbd4, logical block 0, async page read
[  122.160736][ T7650] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.163601][ T7650] Buffer I/O error on dev nbd4, logical block 0, async page read
[  122.166204][ T7650] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.169487][ T7650] Buffer I/O error on dev nbd4, logical block 0, async page read
[  122.171934][ T7650] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.174782][ T7650] Buffer I/O error on dev nbd4, logical block 0, async page read
[  122.177177][ T7650] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.182924][ T7650] Buffer I/O error on dev nbd4, logical block 0, async page read
[  122.186314][ T7650] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.190477][ T7650] Buffer I/O error on dev nbd4, logical block 0, async page read
[  122.193409][ T7650] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.196267][ T7650] Buffer I/O error on dev nbd4, logical block 0, async page read
[  122.200715][ T7650] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.203538][ T7650] Buffer I/O error on dev nbd4, logical block 0, async page read
[  122.206022][ T7650] ldm_validate_partition_table(): Disk read failed.
[  122.209092][ T7650] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.213132][ T7650] Buffer I/O error on dev nbd4, logical block 0, async page read
[  122.216756][ T7650] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.220801][ T7650] Buffer I/O error on dev nbd4, logical block 0, async page read
[  122.228072][ T7650] Dev nbd4: unable to read RDB block 0
[  122.236500][ T7650]  nbd4: unable to read partition table
[  122.241674][ T7650] nbd4: partition table beyond EOD, truncated
[  122.246063][ T7650] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  122.252395][ T5956] ldm_validate_partition_table(): Disk read failed.
[  122.252759][ T7650] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=9, location=9
[  122.256526][ T5956] Dev nbd4: unable to read RDB block 0
[  122.258953][ T7650] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8, location=8
[  122.266521][ T7650] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=7, location=7
[  122.268292][ T5956]  nbd4: unable to read partition table
[  122.271720][ T7650] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  122.272854][ T5956] nbd4: partition table beyond EOD, 
[  122.275136][ T7650] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  122.278258][ T5956] truncated
[  122.280226][ T7650] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=4, location=4
[  122.284092][ T7650] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=3, location=3
[  122.287389][ T7650] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=2, location=2
[  122.288984][ T5956] ldm_validate_partition_table(): Disk read failed.
[  122.292335][ T5956] Dev nbd4: unable to read RDB block 0
[  122.292622][ T7650] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  122.294351][ T5956]  nbd4: unable to read partition table
[  122.297148][ T7650] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  122.303513][ T7650] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=1, location=1
[  122.306532][ T7650] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=0, location=0
[  122.310505][ T7650] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  122.313626][ T7650] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1)
[  122.318037][ T5956] nbd4: partition table beyond EOD, truncated
[  124.322129][ T7689] wireguard0: entered promiscuous mode
[  127.403828][ T7740] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  127.406135][ T7740] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  127.422514][ T7740] vhci_hcd vhci_hcd.0: Device attached
[  128.197859][    T8] vhci_hcd: vhci_device speed not set
[  128.235089][ T7741] vhci_hcd: connection closed
[  128.237353][   T45] vhci_hcd: stop threads
[  128.240739][   T45] vhci_hcd: release socket
[  128.242847][   T45] vhci_hcd: disconnect device
[  128.268092][    T8] usb 45-1: new full-speed USB device number 2 using vhci_hcd
[  128.270588][    T8] usb 45-1: enqueue for inactive port 0
[  128.339349][    T8] vhci_hcd: vhci_device speed not set
[  130.204986][ T7784] netlink: 36 bytes leftover after parsing attributes in process `syz.3.396'.
[  130.208699][ T7784] netlink: 16 bytes leftover after parsing attributes in process `syz.3.396'.
[  130.211409][ T7784] netlink: 36 bytes leftover after parsing attributes in process `syz.3.396'.
[  130.214182][ T7784] netlink: 36 bytes leftover after parsing attributes in process `syz.3.396'.
[  130.436949][    C3] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN NOPTI
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  130.440860][    C3] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[  130.444809][    C3] CPU: 3 UID: 0 PID: 1137 Comm: kworker/u32:6 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0
[  130.448206][    C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  130.451601][    C3] Workqueue: events_unbound flush_to_ldisc
[  130.453399][    C3] RIP: 0010:put_page+0x21/0x280
[  130.454905][    C3] Code: 90 90 90 90 90 90 90 90 90 41 54 55 53 48 89 fb e8 d4 d7 a2 f8 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 20 02 00 00 4c 8b 63 08 31 ff 4c 89 e5 83 e5 01
[  130.460619][    C3] RSP: 0018:ffffc900005f8428 EFLAGS: 00010202
[  130.462440][    C3] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff88f7ff98
[  130.464812][    C3] RDX: 0000000000000001 RSI: ffffffff88f677ec RDI: 0000000000000008
[  130.467185][    C3] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[  130.469556][    C3] R10: 0000000000000000 R11: 0000000000000008 R12: ffff88806bffd180
[  130.471924][    C3] R13: ffff8880786fa240 R14: ffff8880786fa270 R15: 0000000000000007
[  130.474376][    C3] FS:  0000000000000000(0000) GS:ffff88802b700000(0000) knlGS:0000000000000000
[  130.477181][    C3] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  130.478951][    C3] CR2: 0000000020005000 CR3: 0000000026970000 CR4: 0000000000352ef0
[  130.481377][    C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  130.483883][    C3] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  130.486280][    C3] Call Trace:
[  130.487321][    C3]  <IRQ>
[  130.488187][    C3]  ? die_addr+0x3b/0xa0
[  130.489495][    C3]  ? exc_general_protection+0x155/0x230
[  130.491229][    C3]  ? asm_exc_general_protection+0x26/0x30
[  130.492995][    C3]  ? skb_release_data+0x4b8/0x730
[  130.494726][    C3]  ? put_page+0xc/0x280
[  130.496164][    C3]  ? put_page+0x21/0x280
[  130.497599][    C3]  ? put_page+0xc/0x280
[  130.498969][    C3]  skb_release_data+0x4d7/0x730
[  130.500576][    C3]  __kfree_skb+0x4f/0x70
[  130.501999][    C3]  tcp_ack+0x1eb7/0x5ba0
[  130.503294][    C3]  ? __pfx_tcp_ack+0x10/0x10
[  130.504827][    C3]  ? tcp_validate_incoming+0x662/0x1d00
[  130.506494][    C3]  ? read_tsc+0x9/0x20
[  130.507781][    C3]  tcp_rcv_state_process+0xdd4/0x4c40
[  130.509404][    C3]  ? __pfx___lock_acquire+0x10/0x10
[  130.510964][    C3]  ? sk_filter_trim_cap+0x50b/0xb90
[  130.512537][    C3]  ? __pfx_lock_release+0x10/0x10
[  130.514157][    C3]  ? __pfx_tcp_rcv_state_process+0x10/0x10
[  130.516039][    C3]  ? lock_acquire.part.0+0x11b/0x380
[  130.517626][    C3]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  130.519317][    C3]  ? rcu_is_watching+0x12/0xc0
[  130.520799][    C3]  ? do_raw_spin_lock+0x12d/0x2c0
[  130.522338][    C3]  ? tcp_v4_do_rcv+0x1ad/0xa90
[  130.523817][    C3]  tcp_v4_do_rcv+0x1ad/0xa90
[  130.525221][    C3]  tcp_v4_rcv+0x33b4/0x43a0
[  130.526604][    C3]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  130.528022][    C3]  ? __pfx_raw_local_deliver+0x10/0x10
[  130.529663][    C3]  ? rcu_is_watching+0x12/0xc0
[  130.531143][    C3]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  130.532629][    C3]  ip_protocol_deliver_rcu+0xba/0x4c0
[  130.534286][    C3]  ip_local_deliver_finish+0x316/0x570
[  130.535940][    C3]  ip_local_deliver+0x18e/0x1f0
[  130.537425][    C3]  ? __pfx_ip_local_deliver+0x10/0x10
[  130.539116][    C3]  ip_rcv+0x2c3/0x5d0
[  130.540353][    C3]  ? __pfx_ip_rcv+0x10/0x10
[  130.541740][    C3]  __netif_receive_skb_one_core+0x199/0x1e0
[  130.543574][    C3]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[  130.545622][    C3]  ? rcu_is_watching+0x12/0xc0
[  130.547093][    C3]  ? process_backlog+0x3f1/0x15f0
[  130.548602][    C3]  ? process_backlog+0x3f1/0x15f0
[  130.550137][    C3]  __netif_receive_skb+0x1d/0x160
[  130.551658][    C3]  process_backlog+0x443/0x15f0
[  130.553139][    C3]  __napi_poll.constprop.0+0xb7/0x550
[  130.554903][    C3]  net_rx_action+0xa94/0x1010
[  130.556589][    C3]  ? __pfx_net_rx_action+0x10/0x10
[  130.558211][    C3]  ? __pfx_lock_release+0x10/0x10
[  130.559762][    C3]  ? trace_lock_acquire+0x14e/0x1f0
[  130.561329][    C3]  ? kvm_sched_clock_read+0x11/0x20
[  130.562895][    C3]  ? sched_clock+0x38/0x60
[  130.564296][    C3]  ? sched_clock_cpu+0x6d/0x4d0
[  130.565759][    C3]  ? clockevents_program_event+0x155/0x380
[  130.567523][    C3]  ? mark_held_locks+0x9f/0xe0
[  130.568965][    C3]  handle_softirqs+0x213/0x8f0
[  130.570418][    C3]  ? __pfx_handle_softirqs+0x10/0x10
[  130.572010][    C3]  __irq_exit_rcu+0x109/0x170
[  130.573427][    C3]  irq_exit_rcu+0x9/0x30
[  130.574744][    C3]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  130.576447][    C3]  </IRQ>
[  130.577341][    C3]  <TASK>
[  130.578275][    C3]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  130.580087][    C3] RIP: 0010:__sanitizer_cov_trace_pc+0xc/0x70
[  130.581936][    C3] Code: cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 74 8a 6a 7e <65> 8b 05 75 8a 6a 7e a9 00 01 ff 00 48 8b 34 24 74 1d f6 c4 01 74
[  130.587706][    C3] RSP: 0018:ffffc90006c2fad0 EFLAGS: 00000286
[  130.589537][    C3] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: ffffffff850b01f9
[  130.591920][    C3] RDX: ffff888025244880 RSI: 0000000000000000 RDI: 0000000000000005
[  130.594293][    C3] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[  130.596651][    C3] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000001000
[  130.599025][    C3] R13: 00000000ffffffff R14: 00000000ffffffff R15: dffffc0000000000
[  130.601376][    C3]  ? n_tty_receive_buf_common+0xf89/0x18e0
[  130.603138][    C3]  n_tty_receive_buf_common+0xf96/0x18e0
[  130.604802][    C3]  ? kfree+0x14f/0x4b0
[  130.606036][    C3]  ? __pfx_n_tty_receive_buf2+0x10/0x10
[  130.607698][    C3]  tty_ldisc_receive_buf+0xa2/0x190
[  130.609232][    C3]  tty_port_default_receive_buf+0x70/0xb0
[  130.610949][    C3]  flush_to_ldisc+0x264/0x780
[  130.612367][    C3]  ? lock_acquire+0x2f/0xb0
[  130.613757][    C3]  ? process_one_work+0x8bb/0x1b30
[  130.615323][    C3]  process_one_work+0x958/0x1b30
[  130.616805][    C3]  ? __pfx_flush_to_ldisc+0x10/0x10
[  130.618474][    C3]  ? __pfx_process_one_work+0x10/0x10
[  130.620266][    C3]  ? rcu_is_watching+0x12/0xc0
[  130.621718][    C3]  ? assign_work+0x1a0/0x250
[  130.623129][    C3]  worker_thread+0x6c8/0xf00
[  130.624549][    C3]  ? __pfx_worker_thread+0x10/0x10
[  130.626104][    C3]  kthread+0x2c1/0x3a0
[  130.627328][    C3]  ? _raw_spin_unlock_irq+0x23/0x50
[  130.628895][    C3]  ? __pfx_kthread+0x10/0x10
[  130.630302][    C3]  ret_from_fork+0x45/0x80
[  130.631649][    C3]  ? __pfx_kthread+0x10/0x10
[  130.633051][    C3]  ret_from_fork_asm+0x1a/0x30
[  130.634619][    C3]  </TASK>
[  130.635563][    C3] Modules linked in:
[  130.636844][    C3] ---[ end trace 0000000000000000 ]---
[  130.638564][    C3] RIP: 0010:put_page+0x21/0x280
[  130.640047][    C3] Code: 90 90 90 90 90 90 90 90 90 41 54 55 53 48 89 fb e8 d4 d7 a2 f8 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 20 02 00 00 4c 8b 63 08 31 ff 4c 89 e5 83 e5 01
[  130.646072][    C3] RSP: 0018:ffffc900005f8428 EFLAGS: 00010202
[  130.647966][    C3] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff88f7ff98
[  130.650358][    C3] RDX: 0000000000000001 RSI: ffffffff88f677ec RDI: 0000000000000008
[  130.652729][    C3] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[  130.655214][    C3] R10: 0000000000000000 R11: 0000000000000008 R12: ffff88806bffd180
[  130.657602][    C3] R13: ffff8880786fa240 R14: ffff8880786fa270 R15: 0000000000000007
[  130.660081][    C3] FS:  0000000000000000(0000) GS:ffff88802b700000(0000) knlGS:0000000000000000
[  130.662774][    C3] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  130.664811][    C3] CR2: 0000000020005000 CR3: 0000000026970000 CR4: 0000000000352ef0
[  130.667235][    C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  130.669668][    C3] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  130.672075][    C3] Kernel panic - not syncing: Fatal exception in interrupt
[  130.674862][    C3] Kernel Offset: disabled
[  130.676158][    C3] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:20:46  Registers:
info registers vcpu 0

CPU#0
RAX=000000000035cf54 RBX=0000000000000000 RCX=ffffffff8b1a4819 RDX=ffffed1005686fee
RSI=ffffffff8bb17080 RDI=ffffffff81702ed9 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20
R8 =0000000000000000 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000001
R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901ce550 R15=0000000000000000
RIP=ffffffff8b1a5bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b400000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000002000d000 CR3=0000000078690000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000003adb4c RBX=0000000000000001 RCX=ffffffff8b1a4819 RDX=ffffed10056a6fee
RSI=ffffffff8bb17080 RDI=ffffffff81702ed9 RBP=ffffed10039dc910 RSP=ffffc9000047fe08
R8 =0000000000000000 R9 =ffffed10056a6fed R10=ffff88802b537f6b R11=0000000000000000
R12=0000000000000001 R13=ffff88801cee4880 R14=ffffffff901ce550 R15=0000000000000000
RIP=ffffffff8b1a5bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b500000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000020008000 CR3=0000000071336000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=ffffc900072c0000 RBX=ffff888025438000 RCX=ffffffff817a7937 RDX=1ffff11004a8724d
RSI=ffffffff86563bbf RDI=0000000000000016 RBP=0000000000000003 RSP=ffffc90000548eb8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=ffffc90000548ff8
R12=0000000000000000 R13=dffffc0000000000 R14=ffff888025439268 R15=0000000000000000
RIP=ffffffff86563be7 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7f76e40 CR3=000000000db7e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7413ff4
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=ffffffff85143475 RDI=ffffffff9a667200 RBP=ffffffff9a6671c0 RSP=ffffc900005f7e00
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b
R12=0000000000000000 R13=0000000000000005 R14=ffffffff85143410 R15=0000000000000000
RIP=ffffffff8514349f RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000020005000 CR3=0000000026970000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000