last executing test programs:

1m17.580025505s ago: executing program 1 (id=168):
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
eventfd2(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_CPUID2(r3, 0xc008ae09, &(0x7f00000002c0)=ANY=[@ANYBLOB])
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
connect$802154_dgram(r4, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c)
sendto$inet6(r6, &(0x7f00000000c0)="e9", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000a40), &(0x7f0000000200)=0x8)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r9, 0x541c, &(0x7f0000000000))
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x24, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
socket$kcm(0x2, 0x2, 0x73)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x17, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)

1m17.355576363s ago: executing program 1 (id=169):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r3=>0x0})
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0407ff0200000000000032b66092b882c2f8"], 0x102) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x6) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef)
dup2(r4, 0xffffffffffffffff) (async)
fdatasync(r4)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r5 = fsopen(&(0x7f0000000040)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x8, 0x0, 0x0, 0x0) (async)
r6 = socket(0xa, 0x1, 0x0)
ioctl(r6, 0x8916, &(0x7f0000000000))
ioctl(r6, 0x8936, &(0x7f0000000000))
r7 = socket$packet(0x11, 0x3, 0x300)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) (async)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x68, r9, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x60}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (async)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x20}}, 0x4)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="7404fe00", @ANYRES16=r1, @ANYBLOB="010000000000000000002500000008000300", @ANYRES32=r3, @ANYBLOB="08002600000000000a000600ffffffffffff00000a0034000101010101010000080035000000000028005080110001008564fdcfb560b1035308a2796800000005000200000000000800030005ac0f000400280004002800"], 0x74}}, 0x0)

1m17.28595163s ago: executing program 1 (id=170):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8]})
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0xf2d6, 0xffff, 0x0, 0x8, 0xe})
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x38, &(0x7f00000001c0)={0x5, 0xf, 0x38, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x0, 0x0, 0x0, [0xc0, 0x0, 0xff0f, 0x0]}, @generic={0xc, 0x10, 0x0, "1d8057032499cffc9b"}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m16.5500625s ago: executing program 1 (id=177):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r4, 0x402, 0x8000003d)
fcntl$setsig(r4, 0xa, 0x21)
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x16', &(0x7f0000000140)='./file0/file0\x00', r4)
mknodat$loop(r4, &(0x7f00000001c0)='./bus/file0\x00', 0x400, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = eventfd(0x0)
r7 = eventfd(0x0)
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000280)={r6})
r8 = socket$inet(0x2, 0xa, 0x0)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10)
sendto$inet(r8, 0x0, 0xfffffffffffffecf, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f00000039c0)={0x34, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x10)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x0)
splice(r8, 0x0, r11, 0x0, 0x7ffff000, 0x0)
ioctl$KVM_GET_TSC_KHZ(r11, 0xaea3)
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000080)={r7})
close(r0)

1m13.484078281s ago: executing program 1 (id=197):
socket$nl_route(0x10, 0x3, 0x0)
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x2, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
timerfd_gettime(r0, &(0x7f0000000180))
syz_open_dev$mouse(0x0, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x1}}, './file0\x00'})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x690a, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x8001, 0x1, &(0x7f00000005c0), 0x94eb, 0x0, 0x0, {0x3}})
pread64(0xffffffffffffffff, &(0x7f0000000040)=""/172, 0xac, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x3, 0x0, @empty}}, 0xfffffffc, 0x3, 0x989, 0x0, 0x10}, 0x9c)
sendmmsg$inet6(r3, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES64=r2], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

1m12.978098989s ago: executing program 1 (id=202):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
readahead(0xffffffffffffffff, 0xd492, 0xc02d)
pipe2$9p(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x84800)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0xc0089364, &(0x7f0000000180))
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x200, 0x10000, 0x9, 0x40000, r2, 0x5, '\x00', 0x0, r6, 0x5, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="000425bd7000fbdbdf25420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000040)
r7 = dup(r4)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}})

57.630302376s ago: executing program 32 (id=202):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
readahead(0xffffffffffffffff, 0xd492, 0xc02d)
pipe2$9p(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x84800)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0xc0089364, &(0x7f0000000180))
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x200, 0x10000, 0x9, 0x40000, r2, 0x5, '\x00', 0x0, r6, 0x5, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="000425bd7000fbdbdf25420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000040)
r7 = dup(r4)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}})

56.262338163s ago: executing program 4 (id=280):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, 0x10) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
recvmmsg(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/182, 0xb6}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000200)=""/90, 0x5a}, {&(0x7f0000000380)=""/235, 0xeb}, {&(0x7f0000000480)=""/116, 0x74}, {&(0x7f0000000500)=""/92, 0x5c}, {&(0x7f0000000580)=""/145, 0x91}, {&(0x7f0000000300)=""/21, 0x15}], 0x8}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000007c0)=""/190, 0xbe}], 0x1}}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/4096, 0x1000}], 0x2}}], 0x3, 0x0, 0x0)

55.358657823s ago: executing program 4 (id=282):
memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\a\x9b%\xf3[d  \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\veG.\x98\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\x06\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8b[\x90\x9a\xb3\xb1\xde!<u\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccz\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x17;\xcf@_\xe4\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3)
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b03, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000036462c0cc2264796292487ef272bc8afff9117c555e01c58353366576bc1c4ba7967f7818cee3a5cdfe2388827b76d77c7a5f6341e87ed3197ee5aaf979f6cf4515002189f97"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r3 = epoll_create1(0x0)
r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r4, r2, 0x11, 0x0, r4, @void, @value}, 0x14)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r6 = epoll_create1(0x0)
r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r7, r5, 0x11, 0x0, r7, @void, @value}, 0x14)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58)
setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000), 0x4)
chdir(&(0x7f0000000140)='./bus\x00')
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140080001000010000000000000000000004400a58000000060a01040000009608190ce06dea9c82e5933f00007f00000000002c000480280001800b0001006f626a7265660000180002800900040073797a300000000008000340000000000900010073797a300000000009000201000000e6ff000000140000001100010000000000000000000000000a80e73f81ccdad0ef32e215180b4d7b258157c416455e2f1ef2e30c1a73f381ba39638c602a3a26253f3f"], 0x80}}, 0x0)
r10 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r10, 0x2, &(0x7f0000000480)='\x00', &(0x7f00000004c0)="a082", 0x2)

53.690132617s ago: executing program 4 (id=291):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x141a42, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0)
splice(r3, 0x0, r2, 0x0, 0x7f, 0xe)
write(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0)
r5 = memfd_create(&(0x7f0000000540)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r6, 0x0)
r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x3000)=nil, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x28})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x0, 0x28011, r9, 0x0)
setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0x4e9c}}, 0x0)
fsmount(r8, 0x0, 0x0)

51.937974733s ago: executing program 4 (id=301):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="180800000000000b000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001c000000b7030000000000008500000005000000bca90000000000003509011c000000009500000000000000b702000004000000632af8ff00000000b509000000000000c3aaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7375e00080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

51.928428365s ago: executing program 4 (id=303):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f0000000340)=""/154, 0x9a}], 0x2, 0x0, 0x0)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000008006a020000000008000b01"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001ed000008000300", @ANYRES32=r6, @ANYBLOB], 0x28}}, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r7 = userfaultfd(0x801)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r7, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

51.083480535s ago: executing program 4 (id=310):
socket$xdp(0x2c, 0x3, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000180), 0x4)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f000018e000/0x3000)=nil, 0x3000, 0x1)
r0 = io_uring_setup(0x0, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000780), 0x7f, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x11, 0x1, 0x0, "8eb8a828e93b07f1dd06da7a41bfeac48048beb159fbba176fb1de26098c68d9"})
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x4000)
flock(0xffffffffffffffff, 0xa556a814575266ed)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0x0, 0x1000000})
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(r4)
flistxattr(r0, &(0x7f0000000040)=""/44, 0x2c)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r5, 0x5b03, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0)

35.95175883s ago: executing program 33 (id=310):
socket$xdp(0x2c, 0x3, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000180), 0x4)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f000018e000/0x3000)=nil, 0x3000, 0x1)
r0 = io_uring_setup(0x0, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000780), 0x7f, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x11, 0x1, 0x0, "8eb8a828e93b07f1dd06da7a41bfeac48048beb159fbba176fb1de26098c68d9"})
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x4000)
flock(0xffffffffffffffff, 0xa556a814575266ed)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0x0, 0x1000000})
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(r4)
flistxattr(r0, &(0x7f0000000040)=""/44, 0x2c)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r5, 0x5b03, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0)

22.098324763s ago: executing program 2 (id=449):
unshare(0x22020400)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) (async)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x30)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000340))
preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x45}], 0x2, 0x0, 0x0)

21.947766296s ago: executing program 2 (id=452):
r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x2)
writev(r0, &(0x7f00000008c0)=[{&(0x7f00000005c0)="647c8c", 0x3}], 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}, 0xffffffff}, 0xfffffffffffffe32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x34}}, 0xc000)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r3, 0x11c, 0x2, &(0x7f00000000c0)=""/122, &(0x7f0000000040)=0x7a)

21.827891606s ago: executing program 2 (id=453):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x400)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000000800018004b140d1500002800800020000000000080001"], 0x30}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000005140000000000000000000008000100000000000800000100000000080001000000000008000300040000000800010001"], 0x40}}, 0x0)
sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x11, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b0001ca650000000000001806"], 0x114}], 0x1}, 0x0) (async)
sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x11, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b0001ca650000000000001806"], 0x114}], 0x1}, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x3b6, 0x5}) (async)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x3b6, 0x5})

21.826069645s ago: executing program 2 (id=454):
r0 = getpid()
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000500)=0x2, 0x4)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x5, 0x2bc243)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_udp(0x2, 0x2, 0x0)
move_pages(0x0, 0x400000000000014a, &(0x7f0000000540), &(0x7f0000000540), &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4040083)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, r0)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000580))
ioctl$VT_RELDISP(r3, 0x5605)
pipe(0x0)
openat$sndtimer(0xffffff9c, &(0x7f0000000380), 0x80000)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x0, 0x3}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x200, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x4, 0x0, 0xc8], [0x0, 0x97, 0x0, 0xfffffff3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1]}, 0x45c)
ioctl$UI_SET_PROPBIT(r4, 0x5501, 0x0)
write$input_event(r4, &(0x7f00000005c0), 0x200005d8)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r5, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [], [], [], [0x1]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, <r7=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000004, 0x13, r7, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

21.579143755s ago: executing program 3 (id=456):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000800)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x4c00}}, 0x1c}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = gettid()
r3 = syz_open_procfs(r2, &(0x7f0000000180)='timerslack_ns\x00')
write$tun(r3, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0xfce)

21.460129234s ago: executing program 3 (id=457):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a000000000000791130000000000018000000000000000000000000000a0095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

21.452510476s ago: executing program 3 (id=458):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x1e9502)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffff08, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000280)=0x20181)
write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[], 0x13)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2)
sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x34}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=0x0, @ANYRES64=r7], 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
r9 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000100)={0x98f2, 0x7})
r10 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff)
finit_module(r10, &(0x7f0000000240)='wlan1\x00', 0x1)
writev(r9, &(0x7f0000000000)=[{&(0x7f00000002c0)="96"}, {0x0}, {&(0x7f0000000300)="cc34c5c4b67caac7e1219c59a0dbc12d3d299ae95413fa090e55f6a6b329a57b808a726825c7e6294f9dff5dbfeeaa2601c287272432d4f833b592183cb972f0a95e991a5d7384f3d5becb56e821879838786ce2322f965a503f4790bcc2c38107229629b4eb4383bc6d67b0cf1a00fa84ab021607e6f37328fe02a27c42be54f039a4db243e66fc3e0806efc41fdf72bafab6df5b", 0x95}], 0x3)
write$P9_RSTATu(r0, &(0x7f0000000580)={0x239, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\x00\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239)

21.378121922s ago: executing program 3 (id=459):
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000001180)='./bus\x00')
lremovexattr(&(0x7f00000020c0)='./bus\x00', &(0x7f0000002100)=@random={'btrfs.', '\\]!\x00'})

21.329421592s ago: executing program 3 (id=460):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0})
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_audit(0x10, 0x3, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'})
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r3 = syz_open_procfs$userns(0x0, &(0x7f00000002c0))
ioctl$NS_GET_PARENT(r3, 0xb702, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
writev(r4, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15)
madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet6(0xa, 0x80803, 0x83)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0xff}, @in6=@private0, 0x400, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff}, {}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@multicast1, 0x0, 0x3}}, 0x12b)

18.999342348s ago: executing program 0 (id=463):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4141, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x5c2, 0x0, &(0x7f0000000240), 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="a963000000000000000006ddd4dc6e067f6b", @ANYRES32=r5], 0x1c}}, 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[], [], 0x2f})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
r6 = openat$dir(0xffffff9c, &(0x7f0000000240)='./file1\x00', 0x82102, 0x28)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000200))
mknodat(r6, &(0x7f0000000280)='./file1\x00', 0x4, 0x7)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
fsetxattr(r8, &(0x7f00000016c0)=@known='system.posix_acl_access\x00', &(0x7f0000001700)='*\x00', 0x2, 0x1)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
chdir(&(0x7f0000000140)='./bus\x00')
chmod(&(0x7f0000000100)='./file0\x00', 0x84)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r10 = dup(r9)
write$UHID_INPUT(r10, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006)

18.607728985s ago: executing program 0 (id=464):
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="e90c230faca2", @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @dev={0xac, 0x14, 0x14, 0x13}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @loopback}}}}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 64)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r3, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r4=>0x0], 0x1}) (rerun: 32)
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r4, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000340)={&(0x7f0000000480), 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[<r6=>0x0]}) (async, rerun: 32)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003f000b000000000000000000030000000c00020005008008000000050014aa000000000000000000"], 0x2c}}, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0, <r8=>0x0], &(0x7f0000000040), 0x3, r5})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06464ce, &(0x7f00000003c0)={r6, 0x0, 0x0, 0x4, 0x1, [], [0x8001, 0x2, 0x1], [0x6, 0x2, 0x7, 0x5b], [0x1, 0x8, 0x100000000, 0x10]}) (async)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f0000000440)=[r5], &(0x7f0000000200), &(0x7f00000000c0)=[r8], &(0x7f0000000340), 0x0, 0xa39a}) (async)
r9 = syz_io_uring_setup(0x16e, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=<r10=>0x0, &(0x7f0000001340)=<r11=>0x0)
syz_emit_ethernet(0x1f, &(0x7f0000000840)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000011424203", @ANYRESDEC], 0x0) (async, rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f0000000180)=@raw=[@call={0x85, 0x0, 0x0, 0x8c}, @tail_call={{0x6}}], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64)
syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r9, 0x567, 0x0, 0x0, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00'})
unshare(0x62040200)

18.39887305s ago: executing program 0 (id=466):
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6)
write(0xffffffffffffffff, &(0x7f0000000340), 0x0)
socket(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28)
recvfrom$inet6(r2, &(0x7f00000000c0)=""/104, 0x68, 0x10002, 0x0, 0x0)
recvfrom$inet6(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0xfffffffe, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x8, 0x9}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r3 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0)
kcmp(r3, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)

18.336412245s ago: executing program 2 (id=468):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9}, 0x8, 0x10, &(0x7f0000000340)={0x8000003, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000080)=[{0x5, 0x2, 0x10000013, 0x5}, {0xfffffffe, 0x0, 0xa, 0xb}, {0x2, 0x2, 0x8, 0x7}, {0x5, 0x5, 0x8, 0x9}, {0x2, 0xfffffffe, 0xf, 0x5}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x10000)
r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0)
kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
setresuid(0xee01, 0x0, 0x0)
prlimit64(0x0, 0xa, &(0x7f00000002c0)={0x0, 0x2}, 0x0)
setreuid(0x0, 0x0)
r4 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r4)
setresuid(0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r5, 0x1)
setsockopt(r5, 0x7ffffffd, 0x80, &(0x7f0000000240)="1af3050000f2bd5b", 0x8)

17.139509108s ago: executing program 2 (id=470):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000002060108000034e40000000000000000050005000a000000050001000600000005000400000000000900020073797a31000000000d000300686173683a6e6574000000000c0007800800124000000000086df1c2ca7aa6486fb3fe31942982cfa3d6f90117b6d181d1da0b3e647d5a73b015890a7ddb2fe0192844d382af2bba74a6d2962e1e1f857367e84280ca64894b84db17d088ef64b6cf8e970dfc2db147f98571494cc462f049ec9be9f3471834c429bde7efffe4b62263"], 0x54}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
syz_emit_ethernet(0xa2, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527e006c3c0000000000000000000000000000000000ff020000000000000000000000000001000300000000000005020000c910"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(0x0, &(0x7f0000008400), 0x0, &(0x7f0000008640), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000008440)=""/102392, 0x18ff8}], 0x1, 0xfffffe01, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10)
socket$inet6(0xa, 0x800000000000002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x15, 0x808, 0x7, 0x0, 0xc, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x8, 0x34324152, 0x0, 0xb, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f00000003c0)={0x30, "3c7bea5886eb11acfaa625864c93b051ca0bffeaf8148ae1121b8575fd0e1baea35c33cda9f82647d8f295345bfdd36d902c6ba82f66d030d01dc8a22345eded3d73f57cf3dc4d8f00c1fd13cb0533521ba120b36789ca6444ee271cb5c8b3f7b9d224acdfc6ec5a958418424595dadaa5785bf858eba47ae636dd636f17546b"})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)

16.629737818s ago: executing program 5 (id=471):
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e0a010e04"], 0xd)
pipe(0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9fe3010018000000000000000c0000000c000000020000000000000000000004000000000000"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000001a8080008000000950000000000000018120000", @ANYRES32, @ANYRES16=r0], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
mknod$loop(0x0, 0x0, 0x1)
openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x0, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000003680), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc2c45512, &(0x7f00000036c0)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc58, 0x0, 0x0, 0x4, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]})
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)
r4 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x0, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{0x4}]}, 0x18}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl2\x00', r8, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2}})
syz_emit_ethernet(0xb3, 0x0, 0x0)

16.445167904s ago: executing program 5 (id=472):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4141, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x5c2, 0x0, &(0x7f0000000240), 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="a963000000000000000006ddd4dc6e067f6b", @ANYRES32=r5], 0x1c}}, 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[], [], 0x2f})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
r6 = openat$dir(0xffffff9c, &(0x7f0000000240)='./file1\x00', 0x82102, 0x28)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000200))
mknodat(r6, &(0x7f0000000280)='./file1\x00', 0x4, 0x7)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
fsetxattr(r8, &(0x7f00000016c0)=@known='system.posix_acl_access\x00', &(0x7f0000001700)='*\x00', 0x2, 0x1)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
chdir(&(0x7f0000000140)='./bus\x00')
chmod(&(0x7f0000000100)='./file0\x00', 0x84)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r10 = dup(r9)
write$UHID_INPUT(r10, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006)

16.179306606s ago: executing program 3 (id=473):
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r5, 0x402, 0x8000003d)
fcntl$setsig(r5, 0xa, 0x21)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x2, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x16', &(0x7f0000000140)='./file0/file0\x00', r5)
mknodat$loop(r5, &(0x7f00000001c0)='./bus/file0\x00', 0x400, 0x0)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = eventfd(0x0)
r8 = eventfd(0x0)
ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000280)={r7})
r9 = socket$inet(0x2, 0xa, 0x0)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10)
sendto$inet(r9, 0x0, 0xfffffffffffffecf, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r10, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f00000039c0)={0x34, r11, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x10)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r5, 0x12, 0x0, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x0)
splice(r9, 0x0, r12, 0x0, 0x7ffff000, 0x0)
ioctl$KVM_GET_TSC_KHZ(r12, 0xaea3)
ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000080)={r8})
close(r0)

15.439948404s ago: executing program 0 (id=474):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r1, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r4, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x401, @private0, 0x4}, {0xa, 0x4e21, 0xa0c, @empty, 0x4}, 0xffffffffffffffff, 0x6}}, 0x48)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000fcffff0600000000060015000400000014001680100008800c0003800500010002"], 0x38}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe8b7b8053f6265c2, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150700000fff07003506000002000000170600000ee50000bf250000000000001f650000000000006507000002000000070700004c0001000f75000000000000bf54000000000000070400000400f9ff2d3501000000000095000000000000000500000000000000950007000000000001722fabb733a0c857c7c45402000000a2d23da04d1ffc187fa1a2ba7ba030c7267c2de00435fd233cc0f0d9b2c3127c46b0f408398d09ee4dc258d726eae098804de25df627a64ac7efde50fd7f1dd5b17ed764c33b06598bae66ea38541a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07f8a4b6e6155cecc13a5ddfab726eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a459db8e7ada8ee987cc0000f6"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000)={0x1, 0xffffffff}, 0x10, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvtap0\x00'})
setsockopt(r1, 0x8000, 0x394, &(0x7f00000001c0)="b5128b3c1ebc9a450e34b77c704442e27cf60eedb5b3bf1478968f74f8445f5d7581eefc", 0x24)
ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000100)={{r0}, 0x4d, 0x1, 0x4})

15.439269597s ago: executing program 5 (id=475):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000030000000500"/28], 0x50)
r1 = syz_open_dev$video(&(0x7f0000000380), 0x8, 0x80)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f00000003c0)={0xe66, [0x6, 0x0, 0xb1f, 0x81, 0x3, 0x0, 0x7, 0xa, 0x1, 0x9, 0xa, 0x20, 0x8001, 0x4, 0xfffc, 0x7, 0x5, 0x8, 0xa76, 0x3ff, 0x9, 0x2, 0x2, 0xfffb, 0x98a, 0x7, 0x2, 0x1, 0x9000, 0x8, 0x2e, 0x5, 0x2, 0xa, 0x8000, 0x3, 0x2, 0x9, 0x1, 0x2, 0x1, 0x3, 0x2, 0x0, 0x1, 0x1c2a, 0xf001, 0x400], 0xa})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)={'#! ', '', [], 0xa, "bb47e7455361cc3a1b278f85fcb2c496092fb5d6d808aa898e91a7440ec403cc338a90b9612506e93a0b2e32665925ce0d4d72f00d97f4d666faeb6290dcbb0cb44cfb795aeea78558915e8ee2a663e5a14d636aa6988dbdc8ca198fb8b17c7382fd7390cd92c4cbff8fef907e036c201d670d8261953fddac129d1368da0985d5374b7ddd28640292c995be1dc3a7a1352c07e5e3e36471175912d0ba6a037ce1d7930a8b511dc11ab5be235dad455dbb2ee35446ab5a"}, 0xbb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x28011, r5, 0x0)
preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000002200)=""/4101, 0x1005}], 0x1, 0x0, 0x0, 0x0)
write$UHID_INPUT(r3, 0x0, 0x0)
r6 = accept4$x25(r3, 0x0, &(0x7f00000002c0), 0x80000)
ioctl$SIOCX25SENDCALLACCPT(r6, 0x89e9)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r4, @ANYRES32=r3], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10)
syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="041e4400040481e9df39fa3e4e5c394b7cc4c384fa26785634ac3a281b34d7463fb1bbb4e871c4404d999ad9f806d8a0107d382095396de066c84ad865a4934595d5e75a59"], 0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)
process_mrelease(r5, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r9, 0x11, 0x67, &(0x7f0000000000)=0x203, 0x4)
r10 = openat$ptp1(0xffffff9c, &(0x7f0000000040), 0x400201, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r11=>r0}, './file0\x00'})
setsockopt$SO_RDS_TRANSPORT(r11, 0x114, 0x8, &(0x7f0000000340)=0xffffffffffffffff, 0x4)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000010000), r12)
sendmsg$NLBL_CALIPSO_C_ADD(r12, &(0x7f00000100c0)={0x0, 0x0, &(0x7f0000010080)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r13, @ANYRES16=r13, @ANYBLOB="110e0000000000000000010000000800010000000000080002"], 0x24}}, 0x0)
ioctl$PTP_PIN_GETFUNC2(r10, 0xc0603d0f, &(0x7f0000000200)={'\x00', 0x3ff, 0x0, 0x40000003})

15.227108966s ago: executing program 5 (id=476):
r0 = socket$nl_route(0x10, 0x3, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) (async, rerun: 32)
r1 = socket$kcm(0x2, 0x3, 0x2) (rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x58, 0x0, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8b2b, &(0x7f0000000040)={'virt_wifi0\x00', @local}) (async, rerun: 64)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adff8888000000001c001280090001e4f3c088c0ad9400766c6e000000000c000280060001000300000008001b0000aa"], 0x50}}, 0x0) (rerun: 64)
ftruncate(r0, 0x6)

15.089832714s ago: executing program 5 (id=477):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
ioctl$TCSBRKP(r0, 0x5425, 0x2a4d)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xffffffffffffff0e)
listen(r2, 0x0)
connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
pread64(r0, &(0x7f0000000fc0)=""/177, 0xb1, 0xe0)

14.999871767s ago: executing program 5 (id=478):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_mreq(r2, 0x29, 0x19, 0x0, &(0x7f0000000040))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r3, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0))
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = dup(r1)
r6 = fcntl$dupfd(r3, 0x406, r4)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0})
ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5})
ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x164f42)
r8 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x80)
ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x2, 0x0, 0x5, 0x100000, 0x1c, "339f020bbe3ee8aa50d6010100000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c75d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a6ab174f000000000000000010e200", [0x20, 0x9]}})

14.566377303s ago: executing program 0 (id=479):
mount$binder(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100), 0x800, &(0x7f0000000380)={[{@max={'max', 0x3d, 0x3}}]})
socketpair(0x1d, 0x3, 0x1, &(0x7f00000008c0))

1.163968878s ago: executing program 34 (id=470):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000002060108000034e40000000000000000050005000a000000050001000600000005000400000000000900020073797a31000000000d000300686173683a6e6574000000000c0007800800124000000000086df1c2ca7aa6486fb3fe31942982cfa3d6f90117b6d181d1da0b3e647d5a73b015890a7ddb2fe0192844d382af2bba74a6d2962e1e1f857367e84280ca64894b84db17d088ef64b6cf8e970dfc2db147f98571494cc462f049ec9be9f3471834c429bde7efffe4b62263"], 0x54}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
syz_emit_ethernet(0xa2, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527e006c3c0000000000000000000000000000000000ff020000000000000000000000000001000300000000000005020000c910"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(0x0, &(0x7f0000008400), 0x0, &(0x7f0000008640), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000008440)=""/102392, 0x18ff8}], 0x1, 0xfffffe01, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10)
socket$inet6(0xa, 0x800000000000002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x15, 0x808, 0x7, 0x0, 0xc, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x8, 0x34324152, 0x0, 0xb, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f00000003c0)={0x30, "3c7bea5886eb11acfaa625864c93b051ca0bffeaf8148ae1121b8575fd0e1baea35c33cda9f82647d8f295345bfdd36d902c6ba82f66d030d01dc8a22345eded3d73f57cf3dc4d8f00c1fd13cb0533521ba120b36789ca6444ee271cb5c8b3f7b9d224acdfc6ec5a958418424595dadaa5785bf858eba47ae636dd636f17546b"})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)

1.001408798s ago: executing program 35 (id=473):
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r5, 0x402, 0x8000003d)
fcntl$setsig(r5, 0xa, 0x21)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x2, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x16', &(0x7f0000000140)='./file0/file0\x00', r5)
mknodat$loop(r5, &(0x7f00000001c0)='./bus/file0\x00', 0x400, 0x0)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = eventfd(0x0)
r8 = eventfd(0x0)
ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000280)={r7})
r9 = socket$inet(0x2, 0xa, 0x0)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10)
sendto$inet(r9, 0x0, 0xfffffffffffffecf, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r10, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f00000039c0)={0x34, r11, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x10)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r5, 0x12, 0x0, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x0)
splice(r9, 0x0, r12, 0x0, 0x7ffff000, 0x0)
ioctl$KVM_GET_TSC_KHZ(r12, 0xaea3)
ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000080)={r8})
close(r0)

130.589584ms ago: executing program 0 (id=482):
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000000000000000)
write$char_usb(r2, &(0x7f0000000000)="9548", 0x2)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)
mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0)
syz_usb_ep_write(r0, 0x1, 0xc0, &(0x7f0000000040)="7f1b14847bf7a3f9e5e2df40c92ad37c9491c5857f2c5f1f613e90a18d4ccf7c8694c459ee98e647320e28f1381aae2049f17d313a79ef1763cc8014417969542d6a7d51d03b1998cd4c1d299d797307a5a4c778294b758b94ce4ff374e742b7bbfffca008bc664e9a3b789714ef974926494a35fd8ce7a7ce8ed142442a0a7750696ad6a3680b9a9829e3502e6d83eda1a1ccb1e8287f1ddb57dee766be4eaee125ee949a170f1f2345f4d10e34173cc96f990af2be3a4cd01245dcc0d6c715")
syz_emit_ethernet(0x56, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\a\f', 0x20, 0x2b, 0xfc, @local, @local, {[@srh], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@nop, @eol]}}}}}}}}, 0x0)

0s ago: executing program 36 (id=478):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_mreq(r2, 0x29, 0x19, 0x0, &(0x7f0000000040))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r3, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0))
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = dup(r1)
r6 = fcntl$dupfd(r3, 0x406, r4)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0})
ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5})
ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x164f42)
r8 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x80)
ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x2, 0x0, 0x5, 0x100000, 0x1c, "339f020bbe3ee8aa50d6010100000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c75d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a6ab174f000000000000000010e200", [0x20, 0x9]}})

kernel console output (not intermixed with test programs):

0] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.429438][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.431338][ T5960] bridge_slave_1: entered allmulticast mode
[   46.433326][ T5960] bridge_slave_1: entered promiscuous mode
[   46.452834][ T5961] team0: Port device team_slave_1 added
[   46.489283][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.491131][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.498475][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.503308][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.505174][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.512522][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.516081][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.517846][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.524026][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.528706][ T5960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.533934][ T5960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.538418][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.540172][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.546795][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.571385][ T5960] team0: Port device team_slave_0 added
[   46.574096][ T5960] team0: Port device team_slave_1 added
[   46.642399][ T5961] hsr_slave_0: entered promiscuous mode
[   46.644328][ T5961] hsr_slave_1: entered promiscuous mode
[   46.646525][ T5961] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.650042][ T5961] Cannot create hsr debugfs directory
[   46.654150][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.655920][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.662729][ T5960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.668619][ T5955] hsr_slave_0: entered promiscuous mode
[   46.671471][ T5955] hsr_slave_1: entered promiscuous mode
[   46.674140][ T5955] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.676792][ T5955] Cannot create hsr debugfs directory
[   46.691604][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.693909][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.702703][ T5960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.776319][ T5960] hsr_slave_0: entered promiscuous mode
[   46.778693][ T5960] hsr_slave_1: entered promiscuous mode
[   46.780866][ T5960] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.783378][ T5960] Cannot create hsr debugfs directory
[   46.841267][ T5950] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.880251][ T5950] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.910714][ T5950] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.915660][ T5950] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.968223][ T5955] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.971383][ T5955] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.979984][ T5955] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.983741][ T5955] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.006169][ T5961] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   47.019664][ T5961] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   47.023769][ T5961] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   47.027290][ T5961] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   47.052567][ T5960] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.055710][ T5960] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.058979][ T5960] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.061936][ T5960] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.082906][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.098226][ T5950] 8021q: adding VLAN 0 to HW filter on device team0
[   47.106071][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.108082][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.121774][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.123645][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.144822][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.161366][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.171892][ T5955] 8021q: adding VLAN 0 to HW filter on device team0
[   47.179508][   T98] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.181684][   T98] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.184226][   T98] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.186248][   T98] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.209631][ T5961] 8021q: adding VLAN 0 to HW filter on device team0
[   47.215614][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.223425][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.226020][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.240302][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.242256][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.257995][ T5960] 8021q: adding VLAN 0 to HW filter on device team0
[   47.271946][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.274196][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.293994][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.296594][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.309588][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.352429][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.362318][ T5950] veth0_vlan: entered promiscuous mode
[   47.375048][ T5950] veth1_vlan: entered promiscuous mode
[   47.385632][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.396603][ T5955] veth0_vlan: entered promiscuous mode
[   47.409817][ T5955] veth1_vlan: entered promiscuous mode
[   47.411909][ T5950] veth0_macvtap: entered promiscuous mode
[   47.416427][ T5950] veth1_macvtap: entered promiscuous mode
[   47.429089][ T5961] veth0_vlan: entered promiscuous mode
[   47.440155][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.449146][ T5961] veth1_vlan: entered promiscuous mode
[   47.454710][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.457896][ T5960] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.462383][ T5955] veth0_macvtap: entered promiscuous mode
[   47.465576][ T5955] veth1_macvtap: entered promiscuous mode
[   47.471124][ T5950] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.473488][ T5950] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.475735][ T5950] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.478634][ T5950] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.502020][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.504595][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.507949][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.522687][ T5960] veth0_vlan: entered promiscuous mode
[   47.524987][ T5961] veth0_macvtap: entered promiscuous mode
[   47.533569][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.537787][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.540853][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.544323][ T5955] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.546625][ T5955] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.549306][ T5955] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.551626][ T5955] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.557742][ T5961] veth1_macvtap: entered promiscuous mode
[   47.570271][ T5960] veth1_vlan: entered promiscuous mode
[   47.577866][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.581879][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.603298][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.607864][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.611023][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.613688][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.617763][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.630554][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.630561][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.633840][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.635939][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.638974][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.643354][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.646705][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.649267][ T5959] Bluetooth: hci0: command tx timeout
[   47.653218][ T5961] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.656079][ T5961] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.659160][ T5961] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.661657][ T5961] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.674920][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.680522][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.687494][ T5960] veth0_macvtap: entered promiscuous mode
[   47.695744][ T5960] veth1_macvtap: entered promiscuous mode
[   47.705261][ T5950] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.713190][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.715358][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.719748][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.722070][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.728207][ T5959] Bluetooth: hci3: command tx timeout
[   47.728425][ T5307] Bluetooth: hci2: command tx timeout
[   47.729929][   T66] Bluetooth: hci1: command tx timeout
[   47.736176][ T1226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.739671][ T1226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.751923][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.754780][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.758787][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.762080][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.764584][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.767902][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.772419][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.793092][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.797292][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.800735][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.803863][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.806380][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.812716][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.817891][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.828161][ T5960] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.830469][ T5960] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.836667][ T5960] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.847303][ T5960] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.910239][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.912439][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.916565][ T6019] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[   47.933417][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.935465][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.952049][ T6019] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   47.959707][ T6021] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3'.
[   47.972230][ T6019] evm: overlay not supported
[   48.316963][ T2188] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   48.423672][ T6035] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[   48.439384][ T6035] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   48.468707][ T2188] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   48.472490][ T2188] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   48.480820][ T2188] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   48.480961][ T2188] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   48.487199][ T2188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.509698][ T2188] usb 6-1: config 0 descriptor??
[   48.606934][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   48.609210][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   48.617358][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   48.787270][ T6040] process 'syz.2.7' launched './file2' with NULL argv: empty string added
[   48.798399][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   48.890482][ T6047] syz.0.6(6047): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[   48.918335][ T6050] bridge0: entered promiscuous mode
[   48.920373][ T6050] bridge0: entered allmulticast mode
[   48.935792][ T6051] vivid-000: =================  START STATUS  =================
[   48.940824][ T6051] vivid-000: Radio HW Seek Mode: Bounded
[   48.942484][ T6051] vivid-000: Radio Programmable HW Seek: false
[   48.944158][ T6051] vivid-000: RDS Rx I/O Mode: Block I/O
[   48.945666][ T6051] vivid-000: Generate RBDS Instead of RDS: false
[   48.948153][ T6051] vivid-000: RDS Reception: true
[   48.949531][ T6051] vivid-000: RDS Program Type: 0 inactive
[   48.951092][ T6051] vivid-000: RDS PS Name:  inactive
[   48.952508][ T6051] vivid-000: RDS Radio Text:  inactive
[   48.953980][ T6051] vivid-000: RDS Traffic Announcement: false inactive
[   48.955804][ T6051] vivid-000: RDS Traffic Program: false inactive
[   48.957575][ T6051] vivid-000: RDS Music: false inactive
[   48.959069][ T6051] vivid-000: ==================  END STATUS  ==================
[   48.982798][ T6050] netlink: 'syz.3.8': attribute type 21 has an invalid length.
[   49.126934][ T5996] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   49.307028][ T5996] usb 5-1: Using ep0 maxpacket: 8
[   49.311663][ T5996] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[   49.313734][ T5996] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   49.316340][ T5996] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   49.319032][ T5996] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   49.321674][ T5996] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   49.325478][ T5996] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   49.329378][ T5996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.540208][ T5996] usb 5-1: usb_control_msg returned -32
[   49.541779][ T5996] usbtmc 5-1:16.0: can't read capabilities
[   49.553105][ T5996] usb 5-1: USB disconnect, device number 2
[   49.622252][ T6055] syz.2.9 (6055): /proc/6054/oom_adj is deprecated, please use /proc/6054/oom_score_adj instead.
[   49.728752][ T5959] Bluetooth: hci0: command tx timeout
[   49.755345][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'.
[   49.807358][ T5959] Bluetooth: hci2: command tx timeout
[   49.807420][ T5307] Bluetooth: hci1: command tx timeout
[   49.807428][   T66] Bluetooth: hci3: command tx timeout
[   49.866900][    T8] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   50.016964][    T8] usb 7-1: Using ep0 maxpacket: 8
[   50.023674][    T8] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[   50.027191][    T8] usb 7-1: config 246 descriptor has 1 excess byte, ignoring
[   50.030122][    T8] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42
[   50.034044][    T8] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[   50.038306][    T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[   50.042864][    T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[   50.047453][    T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   50.053806][    T8] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[   50.056241][    T8] usb 7-1: config 246 descriptor has 1 excess byte, ignoring
[   50.058581][    T8] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42
[   50.061084][    T8] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[   50.064137][    T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[   50.067399][    T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[   50.070448][    T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   50.075408][    T8] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[   50.078414][    T8] usb 7-1: config 246 descriptor has 1 excess byte, ignoring
[   50.080390][    T8] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42
[   50.082787][    T8] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[   50.085922][    T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[   50.089125][    T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[   50.092137][    T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   50.101696][    T8] usb 7-1: string descriptor 0 read error: -22
[   50.103646][    T8] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   50.106226][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.118186][    T8] adutux 7-1:246.0: ADU100  now attached to /dev/usb/adutux0
[   50.305691][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.308675][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.314753][ T6059] bridge0: left allmulticast mode
[   50.374387][ T6063] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET)
[   51.034919][ T2188] usbhid 6-1:0.0: can't add hid device: -71
[   51.037262][ T2188] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[   51.041409][ T2188] usb 6-1: USB disconnect, device number 2
[   51.579847][ T6080] netlink: 'syz.3.14': attribute type 10 has an invalid length.
[   51.582622][ T6080] bridge0: left promiscuous mode
[   51.585598][ T6080] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.588144][ T6080] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.590778][ T6080] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.593775][ T6080] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.603796][ T6080] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   51.656610][ T6081] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[   51.691810][ T6081] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   51.756962][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   51.759160][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   51.761326][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   51.763465][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   51.765764][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   51.806937][ T5307] Bluetooth: hci0: command tx timeout
[   51.887182][ T5307] Bluetooth: hci1: command tx timeout
[   51.887231][ T5959] Bluetooth: hci2: command tx timeout
[   51.887289][   T66] Bluetooth: hci3: command tx timeout
[   52.755291][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   53.887045][ T5959] Bluetooth: hci0: command tx timeout
[   53.968232][ T5959] Bluetooth: hci3: command tx timeout
[   53.969866][ T5959] Bluetooth: hci2: command tx timeout
[   53.971331][ T5959] Bluetooth: hci1: command tx timeout
[   54.449063][   T56] usb 7-1: USB disconnect, device number 2
[   54.566417][   T39] audit: type=1326 audit(1730248590.284:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz.3.20" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x0
[   54.907173][   T56] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   55.001361][ T6125] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[   55.030474][ T6123] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   55.056923][   T56] usb 7-1: Using ep0 maxpacket: 8
[   55.062065][   T56] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[   55.064463][   T56] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   55.067488][   T56] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   55.069963][   T56] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   55.072591][   T56] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   55.077140][   T56] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   55.081798][   T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.298852][   T56] usb 7-1: usb_control_msg returned -32
[   55.304235][   T56] usbtmc 7-1:16.0: can't read capabilities
[   55.312535][   T56] usb 7-1: USB disconnect, device number 3
[   55.517006][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'.
[   55.685651][ T6131] netlink: 24 bytes leftover after parsing attributes in process `syz.3.25'.
[   55.841250][ T6134] capability: warning: `syz.0.26' uses deprecated v2 capabilities in a way that may be insecure
[   55.947037][   T56] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   56.097025][   T56] usb 8-1: Using ep0 maxpacket: 8
[   56.100926][   T56] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[   56.104080][   T56] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   56.108041][   T56] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   56.111683][   T56] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   56.116347][   T56] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   56.119802][   T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.330837][   T56] usb 8-1: GET_CAPABILITIES returned 0
[   56.333368][   T56] usbtmc 8-1:16.0: can't read capabilities
[   56.536136][   T35] usb 8-1: USB disconnect, device number 2
[   56.858986][ T6139] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[   56.903372][ T6139] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   57.163615][ T6142] kernel read not supported for file /eth0 (pid: 6142 comm: syz.0.28)
[   57.169292][   T39] audit: type=1800 audit(1730248592.904:3): pid=6142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.28" name="eth0" dev="mqueue" ino=9040 res=0 errno=0
[   58.283104][ T6171] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[   58.329203][ T6171] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   58.345291][ T6172] netlink: 40 bytes leftover after parsing attributes in process `syz.0.33'.
[   58.421025][ T6172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   58.448470][ T5307] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[   58.448688][ T5307] Bluetooth: hci3: Injecting HCI hardware error event
[   58.458654][ T5959] Bluetooth: hci3: hardware error 0x00
[   58.666948][ T5956] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   58.826948][ T5956] usb 5-1: Using ep0 maxpacket: 8
[   58.833307][ T5956] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[   58.856885][ T5956] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[   58.858840][ T5956] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[   58.863038][ T5956] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[   58.867144][ T5956] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[   58.871385][ T5956] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[   58.875263][ T5956] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   58.879844][ T5956] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[   58.883302][ T5956] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[   58.885936][ T5956] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[   58.889577][ T5956] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[   58.895361][ T5956] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[   58.900182][ T5956] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[   58.903910][ T5956] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   58.908544][ T5956] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[   58.913203][ T5956] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[   58.915820][ T5956] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[   58.918974][ T5956] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[   58.923883][ T5956] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[   58.941798][ T5956] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[   58.945534][ T5956] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   58.951628][ T5956] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   58.954699][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.958057][ T5956] usb 5-1: Product: syz
[   58.959561][ T5956] usb 5-1: Manufacturer: syz
[   58.961326][ T5956] usb 5-1: SerialNumber: syz
[   59.256325][ T5956] adutux 5-1:246.0: ADU100  now attached to /dev/usb/adutux0
[   59.261347][ T5956] usb 5-1: USB disconnect, device number 3
[   59.848983][ T6197] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[   59.875081][ T6197] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   60.382638][ T6205] serio: Serial port pts0
[   60.538798][ T5959] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[   60.746897][ T6056] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   60.903188][ T6056] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   60.906107][ T6056] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   60.909858][ T6056] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   60.913510][ T6056] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   60.915822][ T6056] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.936462][ T6056] usb 5-1: config 0 descriptor??
[   60.955509][ T6205] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   61.916686][ T6205] syz.0.43 (6205): drop_caches: 2
[   62.057118][ T6056] usbhid 5-1:0.0: can't add hid device: -71
[   62.058735][ T6056] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   62.071052][ T6056] usb 5-1: USB disconnect, device number 4
[   62.669429][ T5996] libceph: connect (1)[c::]:6789 error -101
[   62.671386][ T5996] libceph: mon0 (1)[c::]:6789 connect error
[   62.675387][ T5996] libceph: connect (1)[c::]:6789 error -101
[   62.677193][ T5996] libceph: mon0 (1)[c::]:6789 connect error
[   62.938955][ T5996] libceph: connect (1)[c::]:6789 error -101
[   62.940960][ T5996] libceph: mon0 (1)[c::]:6789 connect error
[   62.998148][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'.
[   63.037485][ T6257] netlink: 56 bytes leftover after parsing attributes in process `syz.2.53'.
[   63.367581][ T6014] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   63.449238][ T5996] libceph: connect (1)[c::]:6789 error -101
[   63.453878][ T5996] libceph: mon0 (1)[c::]:6789 connect error
[   63.551521][ T6014] usb 7-1: config index 0 descriptor too short (expected 45, got 36)
[   63.553837][ T6014] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   63.608088][ T6014] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   63.612101][ T6014] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   63.615246][ T6014] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   63.620101][ T6014] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   63.622470][ T6014] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.625717][ T6014] usb 7-1: config 0 descriptor??
[   63.628307][ T6257] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   63.789828][ T6270] vivid-002: =================  START STATUS  =================
[   63.792332][ T6270] vivid-002: Radio HW Seek Mode: Bounded
[   63.793911][ T6270] vivid-002: Radio Programmable HW Seek: false
[   63.795554][ T6270] vivid-002: RDS Rx I/O Mode: Block I/O
[   63.797788][ T6270] vivid-002: Generate RBDS Instead of RDS: false
[   63.800032][ T6270] vivid-002: RDS Reception: true
[   63.801355][ T6270] vivid-002: RDS Program Type: 0 inactive
[   63.802909][ T6270] vivid-002: RDS PS Name:  inactive
[   63.804466][ T6270] vivid-002: RDS Radio Text:  inactive
[   63.806009][ T6270] vivid-002: RDS Traffic Announcement: false inactive
[   63.808272][ T6270] vivid-002: RDS Traffic Program: false inactive
[   63.810072][ T6270] vivid-002: RDS Music: false inactive
[   63.811545][ T6270] vivid-002: ==================  END STATUS  ==================
[   64.072180][ T6014] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd
[   64.117201][ T6014] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[   64.125353][ T6014] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   64.322620][    T9] usb 7-1: USB disconnect, device number 4
[   64.658535][ T6281] binder: 6280:6281 ioctl 1 20000340 returned -22
[   64.664155][ T6281] binder: 6280:6281 ioctl 4601 20000440 returned -22
[   64.776202][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.60'.
[   64.783857][ T6285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.60'.
[   64.834112][ T6286] overlayfs: failed to resolve './file2': -2
[   65.167645][ T5996] libceph: connect (1)[c::]:6789 error -101
[   65.169786][ T5996] libceph: mon0 (1)[c::]:6789 connect error
[   65.407008][    T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   65.410121][ T6303] vivid-000: =================  START STATUS  =================
[   65.412515][ T6303] vivid-000: Radio HW Seek Mode: Bounded
[   65.414203][ T6303] vivid-000: Radio Programmable HW Seek: false
[   65.416030][ T6303] vivid-000: RDS Rx I/O Mode: Block I/O
[   65.418642][ T6303] vivid-000: Generate RBDS Instead of RDS: false
[   65.420453][ T6303] vivid-000: RDS Reception: true
[   65.421826][ T6303] vivid-000: RDS Program Type: 0 inactive
[   65.423347][ T6303] vivid-000: RDS PS Name:  inactive
[   65.424812][ T6303] vivid-000: RDS Radio Text:  inactive
[   65.426328][ T6303] vivid-000: RDS Traffic Announcement: false inactive
[   65.428320][ T6303] vivid-000: RDS Traffic Program: false inactive
[   65.430040][ T6303] vivid-000: RDS Music: false inactive
[   65.431679][ T6303] vivid-000: ==================  END STATUS  ==================
[   65.557997][    T9] usb 8-1: Using ep0 maxpacket: 32
[   65.566668][    T9] usb 8-1: config 0 has no interfaces?
[   65.568355][    T9] usb 8-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15
[   65.571002][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.580734][    T9] usb 8-1: config 0 descriptor??
[   65.651607][ T6243] ceph: No mds server is up or the cluster is laggy
[   66.168257][ T6330] binder: 6329:6330 ioctl 1 20000340 returned -22
[   66.174477][ T6330] binder: 6329:6330 ioctl 4601 20000440 returned -22
usb_generic_handle_packet: ctrl buffer too small (16384 > 4096)
[   66.551031][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'.
[   66.554995][ T6336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.70'.
[   66.577105][ T6309] cgroup: fork rejected by pids controller in /syz1
[   66.746607][ T6359] netlink: 40 bytes leftover after parsing attributes in process `syz.2.72'.
[   66.818510][ T6359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.856439][ T6365] kernel read not supported for file /eth0 (pid: 6365 comm: syz.1.74)
[   66.859992][   T39] audit: type=1800 audit(1730248602.594:4): pid=6365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.74" name="eth0" dev="mqueue" ino=11350 res=0 errno=0
[   67.066951][ T5956] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   67.257011][ T5956] usb 7-1: Using ep0 maxpacket: 8
[   67.261011][ T5956] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[   67.263966][ T5956] usb 7-1: config 246 descriptor has 1 excess byte, ignoring
[   67.266807][ T5956] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42
[   67.280504][ T5956] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[   67.284560][ T5956] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[   67.288660][ T5956] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[   67.292753][ T5956] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   67.298371][ T5956] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[   67.301840][ T5956] usb 7-1: config 246 descriptor has 1 excess byte, ignoring
[   67.305227][ T5956] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42
[   67.309191][ T5956] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[   67.312667][ T5956] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[   67.316407][ T5956] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[   67.320157][ T5956] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   67.323958][ T5956] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[   67.327177][ T5956] usb 7-1: config 246 descriptor has 1 excess byte, ignoring
[   67.329778][ T5956] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42
[   67.332957][ T5956] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[   67.337343][ T5956] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[   67.341197][ T5956] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[   67.345324][ T5956] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   67.352335][ T5956] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   67.355487][ T5956] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.358479][ T5956] usb 7-1: Product: syz
[   67.360328][ T5956] usb 7-1: Manufacturer: syz
[   67.362187][ T5956] usb 7-1: SerialNumber: syz
[   67.456981][   T64] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   67.620304][   T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   67.624055][   T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   67.627946][   T64] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   67.633545][   T64] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   67.637013][   T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.652372][   T64] usb 5-1: config 0 descriptor??
[   68.140058][ T5996] usb 8-1: USB disconnect, device number 3
[   68.331333][ T5956] adutux 7-1:246.0: ADU100  now attached to /dev/usb/adutux0
[   68.340041][ T5956] usb 7-1: USB disconnect, device number 5
[   68.769451][ T6381] overlayfs: failed to resolve './file2': -2
[   70.022029][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'.
[   70.038266][ T6400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.82'.
[   70.174021][   T35] libceph: connect (1)[c::]:6789 error -101
[   70.174140][   T35] libceph: mon0 (1)[c::]:6789 connect error
[   70.429309][   T35] libceph: connect (1)[c::]:6789 error -101
[   70.429430][   T35] libceph: mon0 (1)[c::]:6789 connect error
[   70.461213][   T64] usbhid 5-1:0.0: can't add hid device: -71
[   70.463204][   T64] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   70.468812][   T64] usb 5-1: USB disconnect, device number 5
[   70.770416][ T1408] ieee802154 phy0 wpan0: encryption failed: -22
[   70.772857][ T1408] ieee802154 phy1 wpan1: encryption failed: -22
[   70.937304][   T35] libceph: connect (1)[c::]:6789 error -101
[   70.943312][   T35] libceph: mon0 (1)[c::]:6789 connect error
[   71.165491][ T6430] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[   71.702079][ T6435] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[   71.747508][ T6438] netlink: 'syz.3.90': attribute type 1 has an invalid length.
[   71.747535][ T6438] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.90'.
[   71.747543][ T6438] netlink: 'syz.3.90': attribute type 1 has an invalid length.
[   71.983999][ T6454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.95'.
[   71.990076][ T6454] bridge2: entered allmulticast mode
[   71.997833][ T6454] warning: `syz.3.95' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   72.045629][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'.
[   72.139598][   T35] libceph: connect (1)[c::]:6789 error -101
[   72.152350][   T35] libceph: mon0 (1)[c::]:6789 connect error
[   73.153442][ T6403] ceph: No mds server is up or the cluster is laggy
[   73.182355][  T829] libceph: connect (1)[c::]:6789 error -101
[   73.192572][  T829] libceph: mon0 (1)[c::]:6789 connect error
[   73.525097][ T6490] sctp: [Deprecated]: syz.3.106 (pid 6490) Use of int in max_burst socket option deprecated.
[   73.525097][ T6490] Use struct sctp_assoc_value instead
[   73.526100][ T6487] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[   74.486607][ T6056] libceph: connect (1)[c::]:6789 error -101
[   74.489195][ T6056] libceph: mon0 (1)[c::]:6789 connect error
[   74.749341][    T9] libceph: connect (1)[c::]:6789 error -101
[   74.751250][    T9] libceph: mon0 (1)[c::]:6789 connect error
[   75.257116][ T6056] libceph: connect (1)[c::]:6789 error -101
[   75.259977][ T6056] libceph: mon0 (1)[c::]:6789 connect error
[   75.327558][ T6525] mmap: syz.2.113 (6525) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   75.376501][ T6527] trusted_key: syz.3.114 sent an empty control message without MSG_MORE.
[   75.699324][   T39] audit: type=1326 audit(1730248611.424:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.0.115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000
[   75.704899][   T39] audit: type=1326 audit(1730248611.424:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.0.115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000
[   75.710863][   T39] audit: type=1326 audit(1730248611.424:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.0.115" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73fe579 code=0x7ffc0000
[   75.717909][   T39] audit: type=1326 audit(1730248611.424:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.0.115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000
[   75.732694][   T39] audit: type=1326 audit(1730248611.424:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.0.115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000
[   75.740455][   T39] audit: type=1326 audit(1730248611.424:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.0.115" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73fe579 code=0x7ffc0000
[   75.748489][   T39] audit: type=1326 audit(1730248611.424:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.0.115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000
[   75.754859][   T39] audit: type=1326 audit(1730248611.424:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.0.115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000
[   75.760989][   T39] audit: type=1326 audit(1730248611.424:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.0.115" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73fe579 code=0x7ffc0000
[   75.766760][   T39] audit: type=1326 audit(1730248611.424:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.0.115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000
[   76.216474][ T6541] overlayfs: missing 'lowerdir'
[   76.288624][ T6056] libceph: connect (1)[c::]:6789 error -101
[   76.290776][ T6056] libceph: mon0 (1)[c::]:6789 connect error
[   76.425401][ T6553] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   77.463890][ T6511] ceph: No mds server is up or the cluster is laggy
[   78.207003][  T829] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   78.353757][ T6585] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   78.360422][  T829] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   78.363747][  T829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.366616][  T829] usb 6-1: Product: syz
[   78.368701][  T829] usb 6-1: Manufacturer: syz
[   78.370282][  T829] usb 6-1: SerialNumber: syz
[   78.378509][  T829] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   78.405243][  T829] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   78.830021][ T6590] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   79.487155][  T829] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[   79.491413][  T829] ath9k_htc: Failed to initialize the device
[   79.515786][  T829] usb 6-1: ath9k_htc: USB layer deinitialized
[   79.589531][ T6599] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[   79.595659][ T6599] netlink: 'syz.0.136': attribute type 1 has an invalid length.
[   79.598663][ T6599] netlink: 224 bytes leftover after parsing attributes in process `syz.0.136'.
[   79.661469][ T6600] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20001
[   79.730386][ T6056] usb 6-1: USB disconnect, device number 3
[   79.974390][ T6605] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   80.057020][ T6606] openvswitch: netlink: Flow actions attr not present in new flow.
[   80.789445][ T6638] netlink: 'syz.3.146': attribute type 10 has an invalid length.
[   80.799902][ T6638] team0: Port device netdevsim0 added
[   80.814746][ T6638] netlink: 'syz.3.146': attribute type 10 has an invalid length.
[   80.823267][ T6638] team0: Port device netdevsim0 removed
[   80.827734][ T6638] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   80.947934][ T6644] netlink: 16 bytes leftover after parsing attributes in process `syz.3.148'.
[   81.022401][   T30] cfg80211: failed to load regulatory.db
[   81.494901][ T6672] openvswitch: netlink: Flow actions attr not present in new flow.
[   81.787213][ T6682] sctp: [Deprecated]: syz.0.159 (pid 6682) Use of int in max_burst socket option deprecated.
[   81.787213][ T6682] Use struct sctp_assoc_value instead
[   82.646127][ T6707] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   82.656644][ T6707] netlink: 'syz.1.166': attribute type 9 has an invalid length.
[   82.814684][ T6711] netlink: 'syz.1.168': attribute type 10 has an invalid length.
[   82.830815][ T6711] team0: Port device netdevsim0 added
[   82.846058][ T6711] netlink: 'syz.1.168': attribute type 10 has an invalid length.
[   82.856446][ T6711] team0: Port device netdevsim0 removed
[   82.878040][ T6711] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   82.914408][ T6711] syz.1.168 (6711) used greatest stack depth: 21008 bytes left
[   82.977202][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'.
[   83.384208][ T6733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.173'.
[   83.388024][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'.
[   83.396271][ T6732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.173'.
[   83.401434][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'.
[   84.177204][ T6056] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   84.327259][ T6056] usb 7-1: Using ep0 maxpacket: 16
[   84.337377][ T6056] usb 7-1: config 0 has an invalid interface number: 133 but max is 0
[   84.341771][ T6056] usb 7-1: config 0 has no interface number 0
[   84.343729][ T6056] usb 7-1: config 0 interface 133 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[   84.357766][ T6056] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[   84.361289][ T6056] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.364167][ T6056] usb 7-1: Product: syz
[   84.365910][ T6056] usb 7-1: Manufacturer: syz
[   84.368772][ T6056] usb 7-1: SerialNumber: syz
[   84.377877][ T6056] usb 7-1: config 0 descriptor??
[   84.380561][ T6749] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   84.385628][ T6056] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected
[   84.393344][ T6056] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81
[   84.397223][ T6056] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1
[   84.399629][ T6056] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2
[   84.409511][ T6056] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[   84.501760][ T6759] netlink: 9372 bytes leftover after parsing attributes in process `syz.0.179'.
[   84.526760][ T6759] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[   85.202772][ T5996] usb 7-1: USB disconnect, device number 6
[   85.211918][ T5996] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[   85.214612][ T5996] keyspan 7-1:0.133: device disconnected
[   86.152187][ T6819] syz.2.193: attempt to access beyond end of device
[   86.152187][ T6819] nbd2: rw=0, sector=2, nr_sectors = 1 limit=0
[   86.285032][ T6823] Cannot find del_set index 4 as target
[   87.014460][ T6851] tipc: Can't bind to reserved service type 0
[   87.172143][ T6855] overlayfs: statfs failed on './file0'
[   87.338136][ T6861] overlayfs: failed to resolve './file1': -2
[   87.406055][ T6864] input: syz0 as /devices/virtual/input/input6
[   87.439002][ T6864] input: syz0 as /devices/virtual/input/input7
[   87.846119][   T39] kauditd_printk_skb: 7 callbacks suppressed
[   87.846130][   T39] audit: type=1800 audit(1730248623.564:22): pid=6853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.199" name="/" dev="fuse" ino=1 res=0 errno=0
[   88.365860][ T6896] overlayfs: statfs failed on './file0'
[   88.747131][  T829] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   88.907007][  T829] usb 5-1: Using ep0 maxpacket: 8
[   88.911056][  T829] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[   88.913676][  T829] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   88.916374][  T829] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   88.919128][  T829] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   88.921687][  T829] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   88.925499][  T829] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   88.928135][  T829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.134662][  T829] usb 5-1: usb_control_msg returned -32
[   89.136345][  T829] usbtmc 5-1:16.0: can't read capabilities
[   89.153174][  T829] usb 5-1: USB disconnect, device number 6
[   89.186982][   T56] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   89.207635][ T6918] Zero length message leads to an empty skb
[   89.349371][ T6901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'.
[   89.356897][   T56] usb 7-1: Using ep0 maxpacket: 8
[   89.360161][   T56] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[   89.362509][   T56] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   89.365003][   T56] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   89.367715][   T56] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   89.370369][   T56] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   89.376878][   T56] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   89.379376][   T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.597818][   T56] usb 7-1: usb_control_msg returned -32
[   89.599580][   T56] usbtmc 7-1:16.0: can't read capabilities
[   89.608445][   T56] usb 7-1: USB disconnect, device number 7
[   89.815012][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'.
[   89.857995][ T6932] overlayfs: overlapping lowerdir path
[   90.188961][ T6941] ebtables: wrong size: *len 120, entries_size 144, replsz 144
[   90.412659][ T6945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.223'.
[   90.424512][ T6945] : entered promiscuous mode
[   90.616197][ T6949] input: syz0 as /devices/virtual/input/input8
[   91.683588][ T6969] overlayfs: statfs failed on './file0'
[   92.147457][ T2188] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   92.316998][ T2188] usb 5-1: Using ep0 maxpacket: 8
[   92.326985][ T2188] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[   92.330257][ T2188] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   92.333117][ T2188] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   92.336022][ T2188] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   92.339095][ T2188] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   92.343229][ T2188] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   92.346923][ T2188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.563639][ T2188] usb 5-1: usb_control_msg returned -32
[   92.565616][ T2188] usbtmc 5-1:16.0: can't read capabilities
[   92.575430][ T2188] usb 5-1: USB disconnect, device number 7
[   92.778421][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.230'.
[   93.300353][ T5996] libceph: connect (1)[c::]:6789 error -101
[   93.302382][ T5996] libceph: mon0 (1)[c::]:6789 connect error
[   93.534091][ T7005] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[   93.539147][ T7005] overlayfs: failed to resolve './file1': -2
[   93.567368][ T5996] libceph: connect (1)[c::]:6789 error -101
[   93.569009][ T5996] libceph: mon0 (1)[c::]:6789 connect error
[   94.077110][ T5996] libceph: connect (1)[c::]:6789 error -101
[   94.078779][ T5996] libceph: mon0 (1)[c::]:6789 connect error
[   94.169140][  T829] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   94.337069][  T829] usb 5-1: Using ep0 maxpacket: 16
[   94.341194][  T829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[   94.345063][  T829] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[   94.349091][  T829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.353132][  T829] usb 5-1: config 0 descriptor??
[   94.561811][ T7011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.565406][ T7011] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.744919][ T7064] netlink: 16 bytes leftover after parsing attributes in process `syz.3.242'.
[   94.752661][ T7064] : entered promiscuous mode
[   95.177161][   T64] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   95.178665][ T5996] libceph: connect (1)[c::]:6789 error -101
[   95.181869][ T5996] libceph: mon0 (1)[c::]:6789 connect error
[   95.322370][  T829] usbhid 5-1:0.0: can't add hid device: -71
[   95.324737][  T829] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   95.327304][   T64] usb 8-1: Using ep0 maxpacket: 32
[   95.327927][  T829] usb 5-1: USB disconnect, device number 8
[   95.333716][   T64] usb 8-1: config index 0 descriptor too short (expected 156, got 27)
[   95.336672][   T64] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   95.340944][   T64] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   95.344138][   T64] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   95.348911][   T64] usb 8-1: config 0 interface 0 has no altsetting 0
[   95.353300][   T64] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   95.357251][   T64] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   95.360354][   T64] usb 8-1: Product: syz
[   95.361838][   T64] usb 8-1: Manufacturer: syz
[   95.363496][   T64] usb 8-1: SerialNumber: syz
[   95.377006][   T64] usb 8-1: config 0 descriptor??
[   95.380758][   T64] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   95.384146][   T64] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   95.433521][ T7070] hub 6-0:1.0: USB hub found
[   95.436031][ T7070] hub 6-0:1.0: 1 port detected
[   95.535054][ T7073] overlayfs: overlapping lowerdir path
[   95.585455][ T7068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.589909][ T7068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.592508][ T7068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.595855][ T7068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.599359][ T7068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.602783][ T7068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.607974][ T7068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.611381][ T7068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.614815][ T7068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.620885][ T7068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.627035][   T64] usb 8-1: USB disconnect, device number 4
[   95.632062][   T64] ldusb 8-1:0.0: LD USB Device #0 now disconnected
[   96.209137][ T5996] libceph: connect (1)[c::]:6789 error -101
[   96.210995][ T5996] libceph: mon0 (1)[c::]:6789 connect error
[   96.294853][ T6994] ceph: No mds server is up or the cluster is laggy
[   96.557845][ T6056] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   96.707048][ T6056] usb 8-1: Using ep0 maxpacket: 8
[   96.712225][ T6056] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[   96.714467][ T6056] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   96.717144][ T6056] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   96.719667][ T6056] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   96.722508][ T6056] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   96.726060][ T6056] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   96.729470][ T6056] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.732736][ T7097] netlink: 'syz.0.250': attribute type 2 has an invalid length.
[   96.740888][ T7097] : entered promiscuous mode
[   96.938658][ T6056] usb 8-1: usb_control_msg returned -32
[   96.940989][ T6056] usbtmc 8-1:16.0: can't read capabilities
[   96.945485][ T6056] usb 8-1: USB disconnect, device number 5
[   97.146513][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.247'.
[   97.425029][ T7103] libceph: resolve '.
[   97.425029][ T7103] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[   97.425029][ T7103] ' (ret=-3): failed
[   97.433331][ T7103] No control pipe specified
[   97.482389][ T7103] syz.2.252: attempt to access beyond end of device
[   97.482389][ T7103] loop2: rw=0, sector=1, nr_sectors = 1 limit=0
[   97.487182][ T7103] qnx4: unable to read the superblock
[   97.667025][  T829] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   97.896966][  T829] usb 5-1: Using ep0 maxpacket: 8
[   97.900214][  T829] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[   97.902367][  T829] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   97.904838][  T829] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   97.908357][  T829] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   97.911131][  T829] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   97.914513][  T829] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   97.917052][  T829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.129457][  T829] usb 5-1: usb_control_msg returned -32
[   98.135194][  T829] usbtmc 5-1:16.0: can't read capabilities
[   98.142789][  T829] usb 5-1: USB disconnect, device number 9
[   98.340365][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.251'.
[   98.610534][ T7111] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   98.617855][ T7111] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock
[   98.622190][ T7111] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   98.624340][ T7111] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock
[   98.704483][   T39] audit: type=1326 audit(1730248634.434:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.3.254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000
[   98.713625][   T39] audit: type=1326 audit(1730248634.444:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.3.254" exe="/syz-executor" sig=0 arch=40000003 syscall=65 compat=1 ip=0xf741e579 code=0x7ffc0000
[   98.730964][   T39] audit: type=1326 audit(1730248634.444:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.3.254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000
[   98.736719][   T39] audit: type=1326 audit(1730248634.444:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.3.254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000
[   98.742906][   T39] audit: type=1326 audit(1730248634.454:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.3.254" exe="/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf741e579 code=0x7ffc0000
[   98.748628][   T39] audit: type=1326 audit(1730248634.454:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.3.254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000
[   98.754074][   T39] audit: type=1326 audit(1730248634.454:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.3.254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000
[   98.761112][   T39] audit: type=1326 audit(1730248634.454:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.3.254" exe="/syz-executor" sig=0 arch=40000003 syscall=440 compat=1 ip=0xf741e579 code=0x7ffc0000
[   98.771035][   T39] audit: type=1326 audit(1730248634.454:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.3.254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000
[   98.773881][ T5996] libceph: connect (1)[c::]:6789 error -101
[   98.779897][   T39] audit: type=1326 audit(1730248634.454:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.3.254" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf741e579 code=0x7ffc0000
[   98.780890][ T5996] libceph: mon0 (1)[c::]:6789 connect error
[   99.047367][ T5996] libceph: connect (1)[c::]:6789 error -101
[   99.049012][ T5996] libceph: mon0 (1)[c::]:6789 connect error
[   99.557195][ T5996] libceph: connect (1)[c::]:6789 error -101
[   99.559422][ T5996] libceph: mon0 (1)[c::]:6789 connect error
[  100.331070][ T7146] IPVS: set_ctl: invalid protocol: 58 172.30.1.1:20001
[  100.387388][ T7152] libceph: resolve '.
[  100.387388][ T7152] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[  100.387388][ T7152] ' (ret=-3): failed
[  100.396145][ T7152] No control pipe specified
[  100.439020][ T7152] syz.3.264: attempt to access beyond end of device
[  100.439020][ T7152] loop3: rw=0, sector=1, nr_sectors = 1 limit=0
[  100.442531][ T7152] qnx4: unable to read the superblock
[  101.167399][ T5996] libceph: connect (1)[c::]:6789 error -101
[  101.169213][ T5996] libceph: mon0 (1)[c::]:6789 connect error
[  101.230385][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'.
[  101.233641][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.266'.
[  101.341488][ T7163] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[  101.351640][ T7163] overlayfs: failed to resolve './file1': -2
[  101.377059][  T829] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  101.527004][  T829] usb 8-1: Using ep0 maxpacket: 32
[  101.529935][  T829] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[  101.532227][  T829] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  101.534599][  T829] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  101.537468][  T829] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 81
[  101.539826][  T829] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  101.542190][  T829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.548452][  T829] usb 8-1: config 0 descriptor??
[  101.764148][ T7116] ceph: No mds server is up or the cluster is laggy
[  101.942887][   T35] usb 8-1: USB disconnect, device number 6
[  102.859177][ T5307] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  102.862108][ T5307] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  102.865317][ T5307] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  102.868990][ T5307] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  102.871424][ T5307] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  102.873352][ T5307] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  102.953239][ T7192] syz.2.274 (7192): drop_caches: 2
[  102.993602][ T7182] chnl_net:caif_netlink_parms(): no params data found
[  103.085587][ T7182] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.088130][ T7182] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.090064][ T7182] bridge_slave_0: entered allmulticast mode
[  103.092114][ T7182] bridge_slave_0: entered promiscuous mode
[  103.094711][ T7182] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.096579][ T7182] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.099677][ T7182] bridge_slave_1: entered allmulticast mode
[  103.102929][ T7182] bridge_slave_1: entered promiscuous mode
[  103.124313][ T7182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.128202][ T7182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.155595][ T7182] team0: Port device team_slave_0 added
[  103.160601][ T7182] team0: Port device team_slave_1 added
[  103.192906][ T7182] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.195657][ T7182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.205109][ T7182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.211685][ T7182] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.213633][ T7182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.220878][ T7182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.244414][ T7182] hsr_slave_0: entered promiscuous mode
[  103.246356][ T7182] hsr_slave_1: entered promiscuous mode
[  103.247009][    T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  103.250378][ T7182] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  103.252359][ T7182] Cannot create hsr debugfs directory
[  103.328229][ T7182] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  103.331576][ T7182] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  103.334948][ T7182] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  103.339649][ T7182] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  103.354418][ T7182] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.356942][ T7182] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.359821][ T7182] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.361639][ T7182] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.387744][ T7182] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.394336][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.398273][    T9] usb 5-1: Using ep0 maxpacket: 8
[  103.401523][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.401622][    T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  103.409037][    T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  103.412725][    T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  103.416691][    T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  103.421606][    T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  103.425756][    T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  103.427971][    T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  103.432043][ T7182] 8021q: adding VLAN 0 to HW filter on device team0
[  103.432085][    T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  103.439254][    T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  103.443474][    T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  103.451074][    T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  103.453444][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.453647][    T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  103.455831][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.459921][    T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  103.466457][    T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  103.468766][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.470802][    T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  103.473321][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.481261][    T9] usb 5-1: string descriptor 0 read error: -22
[  103.483612][    T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  103.487194][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.494372][    T9] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  103.579821][ T7202] 9pnet_fd: Insufficient options for proto=fd
[  103.582840][ T7202] overlayfs: overlapping lowerdir path
[  103.622850][ T7182] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.680133][    T9] libceph: connect (1)[c::]:6789 error -101
[  103.682118][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  103.769383][ T7182] veth0_vlan: entered promiscuous mode
[  103.774338][ T7182] veth1_vlan: entered promiscuous mode
[  103.791208][ T7182] veth0_macvtap: entered promiscuous mode
[  103.796497][ T7182] veth1_macvtap: entered promiscuous mode
[  103.808638][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.811800][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.814765][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.817969][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.821038][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.824230][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.828489][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.831194][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.835603][ T7182] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.839436][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  103.842656][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.845131][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  103.848338][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.850869][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  103.853945][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.857389][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  103.860394][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.864131][ T7182] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.870471][ T5996] usb 5-1: USB disconnect, device number 10
[  103.873581][ T7182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.876082][ T7182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.879370][ T7182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.882060][ T7182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.916722][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.923091][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.932154][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.935114][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.940108][    T9] libceph: connect (1)[c::]:6789 error -101
[  103.942577][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  103.977333][ T2188] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  104.129588][ T2188] usb 7-1: Using ep0 maxpacket: 32
[  104.132641][ T2188] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[  104.134871][ T2188] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  104.137628][ T2188] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  104.140502][ T2188] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 81
[  104.142899][ T2188] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  104.145296][ T2188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.149512][ T2188] usb 7-1: config 0 descriptor??
[  104.447396][    T9] libceph: connect (1)[c::]:6789 error -101
[  104.449698][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  104.525148][  T829] usb 7-1: USB disconnect, device number 8
[  104.763724][ T7236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  104.937111][ T5307] Bluetooth: hci4: command tx timeout
[  105.127071][  T829] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  105.260533][    T9] libceph: connect (1)[c::]:6789 error -101
[  105.265281][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  105.287012][  T829] usb 9-1: Using ep0 maxpacket: 8
[  105.290000][  T829] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  105.292153][  T829] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  105.295414][  T829] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  105.299038][  T829] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1056, setting to 1024
[  105.302222][  T829] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  105.305178][  T829] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  105.309639][  T829] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  105.312128][  T829] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.386181][ T7242] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[  105.451394][ T7242] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  105.522731][  T829] usb 9-1: usb_control_msg returned -32
[  105.524291][  T829] usbtmc 9-1:16.0: can't read capabilities
[  105.564498][ T7245] 9pnet_fd: Insufficient options for proto=fd
[  105.571101][ T7245] overlayfs: overlapping lowerdir path
[  105.617305][ T7247] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.285'.
[  105.620634][ T7247] openvswitch: netlink: Missing key (keys=80040, expected=2000)
[  105.623550][ T7247] netlink: 80 bytes leftover after parsing attributes in process `syz.0.285'.
[  105.634671][ T7247] netlink: 256 bytes leftover after parsing attributes in process `syz.0.285'.
[  105.638477][ T7247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.285'.
[  105.809718][ T7250] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[  105.855533][ T7250] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  105.916338][ T7255] usbtmc 9-1:16.0: usb_control_msg returned -32
[  106.028825][   T64] usb 9-1: USB disconnect, device number 2
[  106.182371][ T7259] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[  106.217657][ T7259] overlayfs: failed to resolve './file1': -2
[  106.531834][ T7266] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  106.670548][ T7210] ceph: No mds server is up or the cluster is laggy
[  106.787923][ T7279] 9pnet_fd: Insufficient options for proto=fd
[  106.790332][ T7279] overlayfs: overlapping lowerdir path
[  106.958020][  T829] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  107.007017][ T5307] Bluetooth: hci4: command tx timeout
[  107.106953][  T829] usb 5-1: Using ep0 maxpacket: 8
[  107.339511][  T829] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  107.341786][  T829] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  107.348050][  T829] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  107.351981][  T829] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  107.356472][  T829] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  107.360929][  T829] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  107.364808][  T829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.410425][ T7291] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[  107.425740][ T7291] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  107.579435][  T829] usb 5-1: usb_control_msg returned -32
[  107.581105][  T829] usbtmc 5-1:16.0: can't read capabilities
[  107.595078][  T829] usb 5-1: USB disconnect, device number 11
[  107.791540][ T7272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.293'.
[  107.926685][ T7304] syz.3.299: attempt to access beyond end of device
[  107.926685][ T7304] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0
[  107.931658][ T7304] EXT4-fs (loop3): unable to read superblock
[  107.971832][ T7308] usb 2-1: USB disconnect, device number 2
[  108.159145][ T7304] hub 2-0:1.0: USB hub found
[  108.166906][ T7304] hub 2-0:1.0: 6 ports detected
[  108.344676][ T6056] libceph: connect (1)[c::]:6789 error -101
[  108.347532][    T9] usb 2-1: new high-speed USB device number 3 using ehci-pci
[  108.350143][ T6056] libceph: mon0 (1)[c::]:6789 connect error
[  108.354984][ T6056] libceph: connect (1)[c::]:6789 error -101
[  108.357103][ T6056] libceph: mon0 (1)[c::]:6789 connect error
[  108.396343][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.303'.
[  108.558064][    T9] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  108.561277][    T9] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  108.563508][    T9] usb 2-1: Product: QEMU USB Tablet
[  108.565032][    T9] usb 2-1: Manufacturer: QEMU
[  108.567031][    T9] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[  108.590541][    T9] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0003/input/input9
[  108.617363][ T6056] libceph: connect (1)[c::]:6789 error -101
[  108.620194][ T6056] libceph: mon0 (1)[c::]:6789 connect error
[  108.665353][    T9] hid-generic 0003:0627:0001.0003: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0
[  109.075279][ T7340] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[  109.088108][ T5307] Bluetooth: hci4: command tx timeout
[  109.090898][ T7340] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  109.131100][ T6056] libceph: connect (1)[c::]:6789 error -101
[  109.132946][ T6056] libceph: mon0 (1)[c::]:6789 connect error
[  109.179787][ T7347] fuse: Bad value for 'rootmode'
[  110.290758][    T9] libceph: connect (1)[c::]:6789 error -101
[  110.292490][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  111.177023][ T5307] Bluetooth: hci4: command tx timeout
[  111.247637][    T9] libceph: connect (1)[c::]:6789 error -101
[  111.249504][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  111.331992][ T7314] ceph: No mds server is up or the cluster is laggy
[  111.711967][ T7367] dccp_close: ABORT with 32 bytes unread
[  112.157075][ T7386] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[  112.180952][ T7386] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  113.103000][ T6056] libceph: connect (1)[c::]:6789 error -101
[  113.105758][ T6056] libceph: mon0 (1)[c::]:6789 connect error
[  113.224729][ T7390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.367461][ T6056] libceph: connect (1)[c::]:6789 error -101
[  113.369990][ T6056] libceph: mon0 (1)[c::]:6789 connect error
[  113.877609][ T6056] libceph: connect (1)[c::]:6789 error -101
[  113.881094][ T6056] libceph: mon0 (1)[c::]:6789 connect error
[  113.900045][ T7419] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[  113.915843][ T7419] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  114.265750][ T7428] vivid-004: disconnect
[  114.566954][ T6056] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[  114.750957][ T6056] usb 8-1: not running at top speed; connect to a high speed hub
[  114.754878][ T6056] usb 8-1: config 1 interface 0 altsetting 82 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  114.758129][ T6056] usb 8-1: config 1 interface 0 altsetting 82 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  114.761691][ T6056] usb 8-1: config 1 interface 0 has no altsetting 0
[  114.766696][ T6056] usb 8-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.40
[  114.770238][ T6056] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.772843][ T6056] usb 8-1: Product: syz
[  114.774180][ T6056] usb 8-1: Manufacturer: 郞䃂ᗢ╣잪㻝㙈䞨雮㬵઼뇮⪒㼭收敆ᜨ煙☇ꠂ騾䒂❔祼ሰ蠄幁쪅껵戬벞咞﷓น첊焢闓ﾐ최巌梨﫺冬䳥췏虲跔橺घ욇㬒˕粧翭Ẹ렣姉ຨ降돾䣏ꭞᆣ趑ᇢ太堹蜶ﶿ好ჵ⼦海ﻟ㿎動ꚨ䋢䣀님疠탚ܺ뤞ⵌ劧믄킧婉홼⬬ᡝ輖允堖✡〉テᡲ䇐䳟㣾釘鸭ꨶ良펚㥮없
[  114.784106][ T6056] usb 8-1: SerialNumber: syz
[  114.787535][ T6056] usb 8-1: rejected 1 configuration due to insufficient available bus power
[  114.791573][ T6056] usb 8-1: no configuration chosen from 1 choice
[  114.952591][ T7427] vivid-004: reconnect
[  115.259499][ T6056] libceph: connect (1)[c::]:6789 error -101
[  115.261635][ T6056] libceph: mon0 (1)[c::]:6789 connect error
[  116.086361][ T7400] ceph: No mds server is up or the cluster is laggy
[  117.213930][ T7456] netlink: 168 bytes leftover after parsing attributes in process `syz.0.338'.
[  117.216607][ T7456] netlink: 76 bytes leftover after parsing attributes in process `syz.0.338'.
[  117.222426][ T7456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.338'.
[  117.225368][ T7456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.338'.
[  117.228344][ T7456] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  117.250960][ T7456] bond1: entered allmulticast mode
[  117.252845][ T7456] 8021q: adding VLAN 0 to HW filter on device bond1
[  117.304826][  T829] usb 8-1: USB disconnect, device number 7
[  117.327038][ T5959] Bluetooth: hci4: command 0x0405 tx timeout
[  118.346033][ T7475] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[  118.360935][ T7475] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  118.427002][ T7478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  118.442004][ T7478] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  119.146120][ T7487] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[  119.231295][ T7487] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  120.449646][ T5307] Bluetooth: hci0: command tx timeout
[  121.072895][ T7506] FAULT_INJECTION: forcing a failure.
[  121.072895][ T7506] name failslab, interval 1, probability 0, space 0, times 1
[  121.076112][ T7506] CPU: 2 UID: 0 PID: 7506 Comm: syz.2.352 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0
[  121.079219][ T7506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  121.082404][ T7506] Call Trace:
[  121.083414][ T7506]  <TASK>
[  121.084239][ T7506]  dump_stack_lvl+0x16c/0x1f0
[  121.085512][ T7506]  should_fail_ex+0x497/0x5b0
[  121.086886][ T7506]  ? fs_reclaim_acquire+0xae/0x150
[  121.088325][ T7506]  should_failslab+0xc2/0x120
[  121.089627][ T7506]  __kmalloc_noprof+0xcb/0x410
[  121.090889][ T7506]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  121.092841][ T7506]  tomoyo_realpath_from_path+0xbf/0x710
[  121.094881][ T7506]  ? tomoyo_path_number_perm+0x232/0x5b0
[  121.096455][ T7506]  tomoyo_path_number_perm+0x245/0x5b0
[  121.097866][ T7506]  ? tomoyo_path_number_perm+0x232/0x5b0
[  121.099378][ T7506]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  121.100936][ T7506]  ? trace_lock_acquire+0x14a/0x1d0
[  121.102320][ T7506]  ? lock_acquire+0x2f/0xb0
[  121.103534][ T7506]  ? __fget_files+0x40/0x3f0
[  121.104775][ T7506]  ? __fget_files+0x244/0x3f0
[  121.106099][ T7506]  security_file_ioctl_compat+0x9b/0x240
[  121.107750][ T7506]  __do_compat_sys_ioctl+0x52/0x2b0
[  121.109163][ T7506]  __do_fast_syscall_32+0x73/0x120
[  121.110593][ T7506]  do_fast_syscall_32+0x32/0x80
[  121.111951][ T7506]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  121.113945][ T7506] RIP: 0023:0xf73ce579
[  121.115239][ T7506] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  121.120199][ T7506] RSP: 002b:00000000f56b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  121.122346][ T7506] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000008400ae8e
[  121.124372][ T7506] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000000
[  121.126490][ T7506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  121.128725][ T7506] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  121.131297][ T7506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  121.133450][ T7506]  </TASK>
[  121.138356][ T7506] ERROR: Out of memory at tomoyo_realpath_from_path.
[  121.375350][ T7520] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[  121.416676][ T7520] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  121.664533][ T7528] 9pnet_virtio: no channels available for device syz
[  121.668177][ T7528] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[  122.334527][ T7539] =======================================================
[  122.334527][ T7539] WARNING: The mand mount option has been deprecated and
[  122.334527][ T7539]          and is ignored by this kernel. Remove the mand
[  122.334527][ T7539]          option from the mount to silence this warning.
[  122.334527][ T7539] =======================================================
[  122.390656][ T7542] FAULT_INJECTION: forcing a failure.
[  122.390656][ T7542] name failslab, interval 1, probability 0, space 0, times 0
[  122.394586][ T7542] CPU: 3 UID: 0 PID: 7542 Comm: syz.2.363 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0
[  122.397512][ T7542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  122.400694][ T7542] Call Trace:
[  122.401601][ T7542]  <TASK>
[  122.402407][ T7542]  dump_stack_lvl+0x16c/0x1f0
[  122.403703][ T7542]  should_fail_ex+0x497/0x5b0
[  122.405618][ T7542]  ? fs_reclaim_acquire+0xae/0x150
[  122.407725][ T7542]  should_failslab+0xc2/0x120
[  122.410223][ T7542]  __kmalloc_noprof+0xcb/0x410
[  122.412146][ T7542]  ? rcu_is_watching+0x12/0xc0
[  122.413768][ T7542]  tomoyo_encode2+0x100/0x3e0
[  122.415396][ T7542]  tomoyo_realpath_from_path+0x1a7/0x710
[  122.417058][ T7542]  ? tomoyo_path_number_perm+0x232/0x5b0
[  122.418654][ T7542]  tomoyo_path_number_perm+0x245/0x5b0
[  122.420861][ T7542]  ? tomoyo_path_number_perm+0x232/0x5b0
[  122.422973][ T7542]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  122.425287][ T7542]  ? trace_lock_acquire+0x14a/0x1d0
[  122.426908][ T7542]  ? lock_acquire+0x2f/0xb0
[  122.428765][ T7542]  ? __fget_files+0x40/0x3f0
[  122.430133][ T7542]  ? __fget_files+0x244/0x3f0
[  122.431753][ T7542]  security_file_ioctl_compat+0x9b/0x240
[  122.433511][ T7542]  __do_compat_sys_ioctl+0x52/0x2b0
[  122.435471][ T7542]  __do_fast_syscall_32+0x73/0x120
[  122.437171][ T7542]  do_fast_syscall_32+0x32/0x80
[  122.438873][ T7542]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  122.440788][ T7542] RIP: 0023:0xf73ce579
[  122.441930][ T7542] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  122.447628][ T7542] RSP: 002b:00000000f56b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  122.449891][ T7542] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000008400ae8e
[  122.452150][ T7542] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000000
[  122.454443][ T7542] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  122.456744][ T7542] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  122.459933][ T7542] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  122.463062][ T7542]  </TASK>
[  122.464968][ T7542] ERROR: Out of memory at tomoyo_realpath_from_path.
[  122.624958][   T35] libceph: connect (1)[c::]:6789 error -101
[  122.628071][   T35] libceph: mon0 (1)[c::]:6789 connect error
[  122.673433][   T35] libceph: connect (1)[c::]:6789 error -101
[  122.675844][   T35] libceph: mon0 (1)[c::]:6789 connect error
[  122.899970][   T35] libceph: connect (1)[c::]:6789 error -101
[  122.902821][   T35] libceph: mon0 (1)[c::]:6789 connect error
[  122.937829][   T35] libceph: connect (1)[c::]:6789 error -101
[  122.939871][   T35] libceph: mon0 (1)[c::]:6789 connect error
[  123.407334][  T829] libceph: connect (1)[c::]:6789 error -101
[  123.409210][  T829] libceph: mon0 (1)[c::]:6789 connect error
[  123.457257][  T829] libceph: connect (1)[c::]:6789 error -101
[  123.459169][  T829] libceph: mon0 (1)[c::]:6789 connect error
[  124.450575][ T5959] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  124.455707][ T5959] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  124.459896][ T5959] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  124.463254][ T5959] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  124.467313][ T5959] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  124.470223][ T5959] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  124.552583][ T7573] chnl_net:caif_netlink_parms(): no params data found
[  124.587109][  T829] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  124.612157][ T7573] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.614155][ T7573] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.616517][ T7573] bridge_slave_0: entered allmulticast mode
[  124.620793][ T7573] bridge_slave_0: entered promiscuous mode
[  124.625997][ T7573] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.628882][ T7573] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.631509][ T7573] bridge_slave_1: entered allmulticast mode
[  124.634585][ T7573] bridge_slave_1: entered promiscuous mode
[  124.658149][ T7573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  124.662820][ T7573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  124.691465][ T7573] team0: Port device team_slave_0 added
[  124.694278][ T7573] team0: Port device team_slave_1 added
[  124.714128][ T7573] batman_adv: batadv0: Adding interface: batadv_slave_0
[  124.716502][ T7573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.724955][ T7573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  124.729533][ T7573] batman_adv: batadv0: Adding interface: batadv_slave_1
[  124.732005][ T7573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.737092][  T829] usb 8-1: Using ep0 maxpacket: 16
[  124.741301][ T7573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  124.744677][  T829] usb 8-1: config 114 has an invalid interface number: 150 but max is 0
[  124.749408][  T829] usb 8-1: config 114 has no interface number 0
[  124.751397][  T829] usb 8-1: config 114 interface 150 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  124.754173][  T829] usb 8-1: config 114 interface 150 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  124.757710][  T829] usb 8-1: config 114 interface 150 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  124.760666][  T829] usb 8-1: config 114 interface 150 altsetting 0 has a duplicate endpoint with address 0xA, skipping
[  124.763664][  T829] usb 8-1: config 114 interface 150 altsetting 0 has a duplicate endpoint with address 0xD, skipping
[  124.766564][  T829] usb 8-1: config 114 interface 150 altsetting 0 has a duplicate endpoint with address 0xA, skipping
[  124.769533][  T829] usb 8-1: config 114 interface 150 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  124.772264][  T829] usb 8-1: config 114 interface 150 altsetting 0 has 10 endpoint descriptors, different from the interface descriptor's value: 9
[  124.777239][  T829] usb 8-1: New USB device found, idVendor=19d2, idProduct=ffac, bcdDevice=6b.27
[  124.779937][  T829] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.782120][  T829] usb 8-1: Product: ࡠ
[  124.783206][  T829] usb 8-1: Manufacturer: Р
[  124.784813][  T829] usb 8-1: SerialNumber: 쇧ໜ
[  124.791989][ T7573] hsr_slave_0: entered promiscuous mode
[  124.794590][ T7573] hsr_slave_1: entered promiscuous mode
[  124.796451][ T7573] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  124.798556][ T7573] Cannot create hsr debugfs directory
[  124.878930][ T7573] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  124.882332][ T7573] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  124.885686][ T7573] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  124.890155][ T7573] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  124.900573][ T7573] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.902450][ T7573] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.904725][ T7573] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.906983][ T7573] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.946159][ T7573] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.960024][   T98] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.963802][   T98] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.976372][ T7573] 8021q: adding VLAN 0 to HW filter on device team0
[  124.986295][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.988552][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.994705][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.997198][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.000592][ T7572] netlink: 40 bytes leftover after parsing attributes in process `syz.3.370'.
[  125.013027][  T829] option 8-1:114.150: GSM modem (1-port) converter detected
[  125.025606][  T829] usb 8-1: USB disconnect, device number 8
[  125.030097][  T829] option 8-1:114.150: device disconnected
[  125.090789][ T7573] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.169260][   T35] libceph: connect (1)[c::]:6789 error -101
[  125.171214][   T35] libceph: mon0 (1)[c::]:6789 connect error
[  125.173210][   T35] libceph: connect (1)[c::]:6789 error -101
[  125.174944][   T35] libceph: mon0 (1)[c::]:6789 connect error
[  125.201893][ T7573] veth0_vlan: entered promiscuous mode
[  125.206539][ T7573] veth1_vlan: entered promiscuous mode
[  125.217853][ T7573] veth0_macvtap: entered promiscuous mode
[  125.222627][ T7573] veth1_macvtap: entered promiscuous mode
[  125.229577][ T7573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.232281][ T7573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.235313][ T7573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.239311][ T7573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.242438][ T7573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.245744][ T7573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.249031][ T7573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.252382][ T7573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.255358][ T7573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.258142][ T7573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.261642][ T7573] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.268856][ T7573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.271590][ T7573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.274408][ T7573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.279139][ T7573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.282369][ T7573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.284969][ T7573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.288289][ T7573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.290962][ T7573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.293549][ T7573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.297415][ T7573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.301919][ T7573] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.306790][ T7573] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.309372][ T7573] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.311647][ T7573] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.313866][ T7573] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.345879][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.348061][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.367845][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.370092][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.591953][ T7554] ceph: No mds server is up or the cluster is laggy
[  125.594522][ T7601] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[  125.616123][ T7601] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  125.642523][ T7558] ceph: No mds server is up or the cluster is laggy
[  126.547039][ T5307] Bluetooth: hci4: command tx timeout
[  126.820145][ T7622] netlink: 'syz.3.378': attribute type 3 has an invalid length.
[  126.823167][ T7622] netlink: 'syz.3.378': attribute type 3 has an invalid length.
[  127.031749][ T7627] FAULT_INJECTION: forcing a failure.
[  127.031749][ T7627] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  127.040950][ T7627] CPU: 1 UID: 0 PID: 7627 Comm: syz.2.379 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0
[  127.045299][ T7627] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  127.049898][ T7627] Call Trace:
[  127.051208][ T7627]  <TASK>
[  127.052630][ T7627]  dump_stack_lvl+0x16c/0x1f0
[  127.054459][ T7627]  should_fail_ex+0x497/0x5b0
[  127.056239][ T7627]  _copy_to_user+0x32/0xd0
[  127.058118][ T7627]  kvm_arch_vcpu_ioctl+0x7af/0x4c80
[  127.060408][ T7627]  ? is_bpf_text_address+0x94/0x1a0
[  127.062722][ T7627]  ? kernel_text_address+0x8d/0x100
[  127.064997][ T7627]  ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10
[  127.067278][ T7627]  ? stack_trace_save+0x95/0xd0
[  127.069107][ T7627]  ? __pfx___lock_acquire+0x10/0x10
[  127.071581][ T7627]  ? __pfx_mark_lock+0x10/0x10
[  127.073650][ T7627]  ? stack_depot_save_flags+0x28/0x900
[  127.075888][ T7627]  ? lock_acquire.part.0+0x11b/0x380
[  127.077860][ T7627]  ? __mutex_trylock_common+0xea/0x250
[  127.079824][ T7627]  ? __pfx___mutex_trylock_common+0x10/0x10
[  127.081998][ T7627]  ? kvm_vcpu_ioctl+0x1de/0x1510
[  127.083853][ T7627]  ? rcu_is_watching+0x12/0xc0
[  127.085707][ T7627]  ? trace_contention_end+0xea/0x140
[  127.087486][ T7627]  ? __mutex_lock+0x1a6/0x9c0
[  127.089719][ T7627]  ? kvm_vcpu_ioctl+0x1de/0x1510
[  127.092006][ T7627]  ? __pfx___mutex_lock+0x10/0x10
[  127.094004][ T7627]  ? find_held_lock+0x2d/0x110
[  127.095941][ T7627]  ? kvm_vcpu_ioctl+0x9e1/0x1510
[  127.097802][ T7627]  kvm_vcpu_ioctl+0x9e1/0x1510
[  127.099585][ T7627]  ? tomoyo_path_number_perm+0x467/0x5b0
[  127.101675][ T7627]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  127.103621][ T7627]  ? tomoyo_path_number_perm+0x190/0x5b0
[  127.106073][ T7627]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  127.108380][ T7627]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  127.110704][ T7627]  ? do_vfs_ioctl+0x513/0x1950
[  127.112553][ T7627]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  127.115176][ T7627]  ? trace_lock_acquire+0x14a/0x1d0
[  127.117329][ T7627]  kvm_vcpu_compat_ioctl+0x210/0x3f0
[  127.119407][ T7627]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  127.121566][ T7627]  ? __fget_files+0x244/0x3f0
[  127.123338][ T7627]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  127.125500][ T7627]  __do_compat_sys_ioctl+0x259/0x2b0
[  127.127467][ T7627]  __do_fast_syscall_32+0x73/0x120
[  127.129724][ T7627]  do_fast_syscall_32+0x32/0x80
[  127.131537][ T7627]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  127.133916][ T7627] RIP: 0023:0xf73ce579
[  127.135388][ T7627] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  127.142928][ T7627] RSP: 002b:00000000f56b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  127.146546][ T7627] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000008400ae8e
[  127.149569][ T7627] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000000
[  127.152523][ T7627] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  127.155482][ T7627] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  127.158380][ T7627] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  127.161316][ T7627]  </TASK>
[  127.162631][    C1] vkms_vblank_simulate: vblank timer overrun
[  127.213538][ T5951] libceph: connect (1)[c::]:6789 error -101
[  127.215531][ T5951] libceph: mon0 (1)[c::]:6789 connect error
[  127.477797][ T5951] libceph: connect (1)[c::]:6789 error -101
[  127.479325][ T5951] libceph: mon0 (1)[c::]:6789 connect error
[  127.531739][ T7660] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[  127.588154][ T7661] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  127.987186][ T5951] libceph: connect (1)[c::]:6789 error -101
[  127.989081][ T5951] libceph: mon0 (1)[c::]:6789 connect error
[  128.187038][ T7669] overlay: ./file0 is not a directory
[  128.249405][ T7668] /dev/sr0: Can't open blockdev
[  128.318597][ T7673] FAULT_INJECTION: forcing a failure.
[  128.318597][ T7673] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  128.322384][ T7673] CPU: 3 UID: 0 PID: 7673 Comm: syz.3.391 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0
[  128.325184][ T7673] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  128.328667][ T7673] Call Trace:
[  128.329746][ T7673]  <TASK>
[  128.330693][ T7673]  dump_stack_lvl+0x16c/0x1f0
[  128.332020][ T7673]  should_fail_ex+0x497/0x5b0
[  128.333322][ T7673]  _copy_to_user+0x32/0xd0
[  128.334542][ T7673]  simple_read_from_buffer+0xd0/0x160
[  128.335994][ T7673]  proc_fail_nth_read+0x198/0x270
[  128.337601][ T7673]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  128.339313][ T7673]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  128.341013][ T7673]  vfs_read+0x1df/0xbe0
[  128.342319][ T7673]  ? __fget_files+0x23a/0x3f0
[  128.344129][ T7673]  ? fdget_pos+0x24c/0x360
[  128.346326][ T7673]  ? __pfx_lock_release+0x10/0x10
[  128.348183][ T7673]  ? trace_lock_acquire+0x14a/0x1d0
[  128.350135][ T7673]  ? __pfx_vfs_read+0x10/0x10
[  128.351848][ T7673]  ? __pfx___mutex_lock+0x10/0x10
[  128.353741][ T7673]  ? __fget_files+0x244/0x3f0
[  128.355484][ T7673]  ksys_read+0x12f/0x260
[  128.357037][ T7673]  ? __pfx_ksys_read+0x10/0x10
[  128.358586][ T7673]  __do_fast_syscall_32+0x73/0x120
[  128.359961][ T7673]  do_fast_syscall_32+0x32/0x80
[  128.361281][ T7673]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  128.363135][ T7673] RIP: 0023:0xf741e579
[  128.364433][ T7673] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  128.369767][ T7673] RSP: 002b:00000000f5706590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  128.372217][ T7673] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f5706620
[  128.374655][ T7673] RDX: 000000000000000f RSI: 00000000f740cff4 RDI: 0000000000000000
[  128.376811][ T7673] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  128.379264][ T7673] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  128.381450][ T7673] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  128.384891][ T7673]  </TASK>
[  128.475886][ T7677] loop2: detected capacity change from 0 to 7
[  128.485926][ T7677] Dev loop2: unable to read RDB block 7
[  128.489377][ T7677]  loop2: unable to read partition table
[  128.491724][ T7677] loop2: partition table beyond EOD, truncated
[  128.497044][ T7677] loop_reread_partitions: partition scan of loop2 (�被������� ) failed (rc=-5)
[  128.607134][ T5307] Bluetooth: hci4: command tx timeout
[  128.704179][ T7683] netlink: 'syz.3.394': attribute type 12 has an invalid length.
[  128.718229][ T5307] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  128.748137][ T7694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.753287][ T7694] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.987003][ T5956] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  129.138559][ T5956] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  129.141454][ T5956] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  129.144399][ T5956] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  129.147988][ T5956] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.156328][ T7698] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  129.163472][ T5369] udevd[5369]: worker [5962] terminated by signal 33 (Unknown signal 33)
[  129.165790][ T5369] udevd[5369]: worker [5962] failed while handling '/devices/platform/dummy_hcd.2/usb7/7-1'
[  129.167312][ T5996] libceph: connect (1)[c::]:6789 error -101
[  129.167840][ T5956] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  129.171978][ T5996] libceph: mon0 (1)[c::]:6789 connect error
[  129.366086][ T5996] usb 7-1: USB disconnect, device number 9
[  130.076456][ T7720] fuse: Bad value for 'rootmode'
[  130.076992][ T7721] fuse: Bad value for 'rootmode'
[  130.161084][ T7635] ceph: No mds server is up or the cluster is laggy
[  130.317636][ T7721] af_packet: packet_mmap: vma is busy: 1
[  130.697103][ T5307] Bluetooth: hci4: command tx timeout
[  130.767093][   T35] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  130.770972][    T9] libceph: connect (1)[c::]:6789 error -101
[  130.773112][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  130.837636][    T9] libceph: connect (1)[c::]:6789 error -101
[  130.839423][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  130.868006][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.406'.
[  130.937013][   T35] usb 7-1: Using ep0 maxpacket: 8
[  130.940813][   T35] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  130.943515][   T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  130.946059][   T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  130.948875][   T35] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  130.952367][   T35] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  130.954714][   T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.006890][ T5996] libceph: connect (1)[c::]:6789 error -101
[  131.008776][ T5996] libceph: mon0 (1)[c::]:6789 connect error
[  131.038367][    T8] libceph: connect (1)[c::]:6789 error -101
[  131.040792][    T8] libceph: mon0 (1)[c::]:6789 connect error
[  131.107161][    T8] libceph: connect (1)[c::]:6789 error -101
[  131.109402][    T8] libceph: mon0 (1)[c::]:6789 connect error
[  131.267502][ T5996] libceph: connect (1)[c::]:6789 error -101
[  131.269604][ T5996] libceph: mon0 (1)[c::]:6789 connect error
[  131.419807][ T7736] ceph: No mds server is up or the cluster is laggy
[  131.420066][ T7759] ceph: No mds server is up or the cluster is laggy
[  131.787323][ T5996] libceph: connect (1)[c::]:6789 error -101
[  131.800849][ T5996] libceph: mon0 (1)[c::]:6789 connect error
[  132.139401][ T7798] netlink: 'syz.0.415': attribute type 10 has an invalid length.
[  132.142092][ T7798] ipvlan1: entered promiscuous mode
[  132.144014][ T7798] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up
[  132.209775][ T1408] ieee802154 phy0 wpan0: encryption failed: -22
[  132.538899][ T7806] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[  132.767127][ T5307] Bluetooth: hci4: command tx timeout
[  133.177301][ T5996] libceph: connect (1)[c::]:6789 error -101
[  133.180491][ T5996] libceph: mon0 (1)[c::]:6789 connect error
[  133.383436][   T35] usb 7-1: usb_control_msg returned -71
[  133.385011][   T35] usbtmc 7-1:16.0: can't read capabilities
[  133.391900][   T35] usb 7-1: USB disconnect, device number 10
[  133.414712][ T7820] netlink: 36 bytes leftover after parsing attributes in process `syz.5.423'.
[  133.440669][ T7823] netlink: 28 bytes leftover after parsing attributes in process `syz.2.424'.
[  133.987437][ T7779] ceph: No mds server is up or the cluster is laggy
[  134.083761][ T7838] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[  134.482087][  T829] libceph: connect (1)[c::]:6789 error -101
[  134.484262][  T829] libceph: mon0 (1)[c::]:6789 connect error
[  134.747924][  T829] libceph: connect (1)[c::]:6789 error -101
[  134.750109][  T829] libceph: mon0 (1)[c::]:6789 connect error
[  135.267820][  T829] libceph: connect (1)[c::]:6789 error -101
[  135.270292][  T829] libceph: mon0 (1)[c::]:6789 connect error
[  135.891278][ T7888] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[  136.137334][  T829] libceph: connect (1)[c::]:6789 error -101
[  136.139564][  T829] libceph: mon0 (1)[c::]:6789 connect error
[  137.432690][ T7862] ceph: No mds server is up or the cluster is laggy
[  137.841751][ T7911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.911209][ T7911] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  138.309966][ T7908] syz.5.445 (7908) used greatest stack depth: 20640 bytes left
[  138.391650][ T7925] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[  138.424807][ T7932] netlink: 156 bytes leftover after parsing attributes in process `syz.2.453'.
[  138.437038][ T7932] netlink: 'syz.2.453': attribute type 2 has an invalid length.
[  138.437051][ T7932] netlink: 60 bytes leftover after parsing attributes in process `syz.2.453'.
[  138.437085][ T7933] netlink: 156 bytes leftover after parsing attributes in process `syz.2.453'.
[  138.437093][ T7933] netlink: 'syz.2.453': attribute type 2 has an invalid length.
[  138.437099][ T7933] netlink: 60 bytes leftover after parsing attributes in process `syz.2.453'.
[  138.667009][   T64] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  138.838250][   T62] libceph: connect (1)[c::]:6789 error -101
[  138.839888][   T62] libceph: mon0 (1)[c::]:6789 connect error
[  138.849587][ T7948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.458'.
[  138.885828][ T7951] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  138.971526][ T7937] input: syz0 as /devices/virtual/input/input11
[  139.010094][   T64] usb 5-1: Using ep0 maxpacket: 8
[  139.034581][   T64] usb 5-1: unable to get BOS descriptor or descriptor too short
[  139.038602][   T64] usb 5-1: unable to read config index 0 descriptor/start: -71
[  139.040576][   T64] usb 5-1: can't read configurations, error -71
[  139.099565][   T62] libceph: connect (1)[c::]:6789 error -101
[  139.101256][   T62] libceph: mon0 (1)[c::]:6789 connect error
[  139.608297][   T62] libceph: connect (1)[c::]:6789 error -101
[  139.609999][   T62] libceph: mon0 (1)[c::]:6789 connect error
[  139.969874][ T5307] Bluetooth: hci0: command tx timeout
[  141.174552][   T62] libceph: connect (1)[c::]:6789 error -101
[  141.187822][   T62] libceph: mon0 (1)[c::]:6789 connect error
[  141.405365][ T7970] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[  141.789607][ T7943] ceph: No mds server is up or the cluster is laggy
[  144.098981][ T8011] overlay: Unknown parameter '/dev/snd/pcmC#D#p'
[  144.140470][   T30] libceph: connect (1)[c::]:6789 error -101
[  144.142174][   T30] libceph: mon0 (1)[c::]:6789 connect error
[  144.398463][   T30] libceph: connect (1)[c::]:6789 error -101
[  144.400016][   T30] libceph: mon0 (1)[c::]:6789 connect error
[  144.918441][   T30] libceph: connect (1)[c::]:6789 error -101
[  144.920651][   T30] libceph: mon0 (1)[c::]:6789 connect error
[  145.087406][ T8029] netlink: 20 bytes leftover after parsing attributes in process `syz.5.476'.
[  145.091039][ T8029] netlink: 12 bytes leftover after parsing attributes in process `syz.5.476'.
[  145.093994][ T8029] netlink: 20 bytes leftover after parsing attributes in process `syz.5.476'.
[  145.100633][ T8029] netlink: 12 bytes leftover after parsing attributes in process `syz.5.476'.
[  145.102994][ T8029] netlink: 20 bytes leftover after parsing attributes in process `syz.5.476'.
[  145.105271][ T8029] netlink: 12 bytes leftover after parsing attributes in process `syz.5.476'.
[  145.109284][ T8029] netlink: 20 bytes leftover after parsing attributes in process `syz.5.476'.
[  145.111691][ T8029] netlink: 12 bytes leftover after parsing attributes in process `syz.5.476'.
[  145.114683][ T8029] netlink: 20 bytes leftover after parsing attributes in process `syz.5.476'.
[  145.121456][ T8029] netlink: 12 bytes leftover after parsing attributes in process `syz.5.476'.
[  145.271195][ T8033] 9pnet_fd: Insufficient options for proto=fd
[  146.213089][   T30] libceph: connect (1)[c::]:6789 error -101
[  146.215808][   T30] libceph: mon0 (1)[c::]:6789 connect error
[  147.075091][ T8013] ceph: No mds server is up or the cluster is laggy
[  154.016850][    C0] sched: DL replenish lagged too much
[  159.598832][ T5959] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  159.609410][ T5959] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  159.613918][ T5959] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  159.617022][ T5959] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  159.619332][ T5959] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  159.621351][ T5959] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  159.696305][ T5959] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  159.701465][ T5959] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  159.704237][ T5959] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  159.708276][ T5959] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  159.711307][ T5959] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  159.715074][ T5959] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  160.459451][ T8042] chnl_net:caif_netlink_parms(): no params data found
[  160.477621][   T35] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  160.493446][ T5307] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  160.502247][ T5307] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  160.505714][ T5307] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  160.511215][ T5307] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  160.515755][ T5307] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  160.523672][ T5307] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  160.627031][   T35] usb 5-1: Using ep0 maxpacket: 32
[  160.634881][   T35] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  160.644487][   T35] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  160.654351][   T35] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  160.663859][   T35] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  160.672073][   T35] usb 5-1: config 0 interface 0 has no altsetting 0
[  160.678347][   T35] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  160.681616][   T35] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  160.684615][   T35] usb 5-1: Product: syz
[  160.686660][   T35] usb 5-1: Manufacturer: syz
[  160.691031][   T35] usb 5-1: SerialNumber: syz
[  160.710346][   T35] usb 5-1: config 0 descriptor??
[  160.720736][   T35] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  160.726602][   T35] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  160.930082][   T35] usb 5-1: USB disconnect, device number 14
[  160.936767][   T35] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  161.568524][   T35] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  161.720486][   T35] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  161.723668][   T35] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  161.727137][ T5307] Bluetooth: hci5: command tx timeout
[  161.728153][   T35] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  161.733697][   T35] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  161.737399][   T35] usb 5-1: config 0 interface 0 has no altsetting 0
[  161.740847][   T35] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  161.743514][   T35] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  161.746281][   T35] usb 5-1: Product: syz
[  161.748820][   T35] usb 5-1: Manufacturer: syz
[  161.750389][   T35] usb 5-1: SerialNumber: syz
[  161.756091][   T35] usb 5-1: config 0 descriptor??
[  161.761631][   T35] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  161.766379][   T35] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  161.807090][ T5307] Bluetooth: hci6: command tx timeout
[  162.178589][   T35] usb 5-1: USB disconnect, device number 15
[  162.180551][    C3] ldusb 5-1:0.0: usb_submit_urb failed (-19)
[  162.183142][ T8057] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  162.195344][   T35] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  162.607055][ T5307] Bluetooth: hci7: command tx timeout
[  163.807137][ T5307] Bluetooth: hci5: command tx timeout
[  163.887114][ T5307] Bluetooth: hci6: command tx timeout
[  164.687098][ T5307] Bluetooth: hci7: command tx timeout
[  165.744350][ T8060] ==================================================================
[  165.746532][ T8060] BUG: KASAN: double-free in dev_free+0x446/0x700
[  165.748257][ T8060] Free of addr ffff888070acd4c0 by task syz.0.482/8060
[  165.750145][ T8060] 
[  165.750896][ T8060] CPU: 3 UID: 0 PID: 8060 Comm: syz.0.482 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0
[  165.755615][ T8060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  165.758396][ T8060] Call Trace:
[  165.759279][ T8060]  <TASK>
[  165.760066][ T8060]  dump_stack_lvl+0x116/0x1f0
[  165.761667][ T8060]  print_report+0xc3/0x620
[  165.762914][ T8060]  ? __virt_addr_valid+0x5e/0x590
[  165.764312][ T8060]  ? __phys_addr+0xc6/0x150
[  165.765596][ T8060]  ? dev_free+0x446/0x700
[  165.766775][ T8060]  kasan_report_invalid_free+0xaa/0xd0
[  165.768202][ T8060]  ? dev_free+0x446/0x700
[  165.769381][ T8060]  ? dev_free+0x446/0x700
[  165.770532][ T8060]  check_slab_allocation+0xfd/0x130
[  165.771927][ T8060]  kfree+0x11e/0x4b0
[  165.773002][ T8060]  ? dummy_free_request+0x56/0x90
[  165.774351][ T8060]  ? dev_free+0x446/0x700
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  165.775503][ T8060]  dev_free+0x446/0x700
[  165.777002][ T8060]  ? __pfx_raw_release+0x10/0x10
[  165.778410][ T8060]  raw_release+0x168/0x2b0
[  165.779758][ T8060]  __fput+0x3f6/0xb60
[  165.780913][ T8060]  __fput_sync+0x45/0x50
[  165.782051][ T8060]  __ia32_sys_close+0x86/0x100
[  165.783478][ T8060]  __do_fast_syscall_32+0x73/0x120
[  165.784849][ T8060]  do_fast_syscall_32+0x32/0x80
[  165.786165][ T8060]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  165.787839][ T8060] RIP: 0023:0xf73fe579
[  165.788948][ T8060] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  165.794346][ T8060] RSP: 002b:00000000f525e520 EFLAGS: 00000293 ORIG_RAX: 0000000000000006
[  165.796977][ T8060] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f525eb40
[  165.799210][ T8060] RDX: 0000000000000000 RSI: 00000000f73ecff4 RDI: 0000000000000000
[  165.801271][ T8060] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  165.803341][ T8060] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  165.805423][ T8060] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  165.807544][ T8060]  </TASK>
[  165.808383][ T8060] 
[  165.809039][ T8060] Allocated by task 8057:
[  165.810178][ T8060]  kasan_save_stack+0x33/0x60
[  165.811441][ T8060]  kasan_save_track+0x14/0x30
[  165.812793][ T8060]  __kasan_kmalloc+0xaa/0xb0
[  165.814030][ T8060]  __kmalloc_node_track_caller_noprof+0x20f/0x440
[  165.815576][ T8060]  memdup_user+0x2a/0xd0
[  165.816761][ T8060]  raw_ioctl+0x1057/0x2a50
[  165.818006][ T8060]  __do_compat_sys_ioctl+0x259/0x2b0
[  165.819451][ T8060]  __do_fast_syscall_32+0x73/0x120
[  165.820923][ T8060]  do_fast_syscall_32+0x32/0x80
[  165.822488][ T8060]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  165.824187][ T8060] 
[  165.824843][ T8060] Freed by task 8046:
[  165.825889][ T8060]  kasan_save_stack+0x33/0x60
[  165.827152][ T8060]  kasan_save_track+0x14/0x30
[  165.828463][ T8060]  kasan_save_free_info+0x3b/0x60
[  165.829729][ T8060]  __kasan_slab_free+0x51/0x70
[  165.831041][ T8060]  kfree+0x14f/0x4b0
[  165.832113][ T8060]  dev_free+0x446/0x700
[  165.833287][ T8060]  raw_release+0x168/0x2b0
[  165.834471][ T8060]  __fput+0x3f6/0xb60
[  165.835647][ T8060]  __fput_sync+0x45/0x50
[  165.836786][ T8060]  __ia32_sys_close+0x86/0x100
[  165.838368][ T8060]  __do_fast_syscall_32+0x73/0x120
[  165.839800][ T8060]  do_fast_syscall_32+0x32/0x80
[  165.841079][ T8060]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  165.842743][ T8060] 
[  165.843375][ T8060] The buggy address belongs to the object at ffff888070acd4c0
[  165.843375][ T8060]  which belongs to the cache kmalloc-16 of size 16
[  165.847191][ T8060] The buggy address is located 0 bytes inside of
[  165.847191][ T8060]  16-byte region [ffff888070acd4c0, ffff888070acd4d0)
[  165.850543][ T8060] 
[  165.851175][ T8060] The buggy address belongs to the physical page:
[  165.852806][ T8060] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888070acdfe0 pfn:0x70acd
[  165.855883][ T8060] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[  165.858345][ T8060] page_type: f5(slab)
[  165.859410][ T8060] raw: 04fff00000000000 ffff88801ac42640 dead000000000100 dead000000000122
[  165.862138][ T8060] raw: ffff888070acdfe0 000000008080007a 00000001f5000000 0000000000000000
[  165.864771][ T8060] page dumped because: kasan: bad access detected
[  165.866680][ T8060] page_owner tracks the page as allocated
[  165.868320][ T8060] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7908, tgid 7904 (syz.5.445), ts 137607385672, free_ts 136097122998
[  165.873338][ T8060]  post_alloc_hook+0x2d1/0x350
[  165.874619][ T8060]  get_page_from_freelist+0x101e/0x3070
[  165.876224][ T8060]  __alloc_pages_noprof+0x6af/0x25a0
[  165.877714][ T8060]  alloc_pages_mpol_noprof+0x2c9/0x610
[  165.879145][ T8060]  new_slab+0x2ba/0x3f0
[  165.880250][ T8060]  ___slab_alloc+0xd1d/0x16f0
[  165.882023][ T8060]  __slab_alloc.constprop.0+0x56/0xb0
[  165.883572][ T8060]  __kmalloc_node_track_caller_noprof+0x365/0x440
[  165.885281][ T8060]  krealloc_noprof+0x5d/0x130
[  165.886765][ T8060]  push_jmp_history+0x254/0x620
[  165.888135][ T8060]  do_check_common+0xb63/0xd660
[  165.889475][ T8060]  bpf_check+0x788f/0xc970
[  165.890652][ T8060]  bpf_prog_load+0xe3f/0x2670
[  165.891891][ T8060]  __sys_bpf+0x4c8c/0x5780
[  165.893075][ T8060]  __ia32_sys_bpf+0x76/0xe0
[  165.894288][ T8060]  __do_fast_syscall_32+0x73/0x120
[  165.895648][ T8060] page last free pid 0 tgid 0 stack trace:
[  165.897317][ T8060]  free_unref_page+0x5f4/0xdc0
[  165.898615][ T8060]  __folio_put+0x30d/0x3d0
[  165.899880][ T8060]  free_page_and_swap_cache+0x249/0x2c0
[  165.901725][ T8060]  tlb_remove_table_rcu+0x89/0xe0
[  165.903249][ T8060]  rcu_core+0x79d/0x14d0
[  165.905083][ T8060]  handle_softirqs+0x213/0x8f0
[  165.906405][ T8060]  irq_exit_rcu+0xbb/0x120
[  165.907622][ T8060]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  165.909131][ T8060]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  165.910679][ T8060] 
[  165.911305][ T8060] Memory state around the buggy address:
[  165.912734][ T8060]  ffff888070acd380: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  165.914865][ T8060]  ffff888070acd400: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  165.916919][ T8060] >ffff888070acd480: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  165.918983][ T8060]                                            ^
[  165.920574][ T8060]  ffff888070acd500: 00 00 fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  165.922655][ T8060]  ffff888070acd580: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  165.924954][ T8060] ==================================================================
[  165.967606][ T8060] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  165.969554][ T8060] CPU: 1 UID: 0 PID: 8060 Comm: syz.0.482 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0
[  165.972670][ T8060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  165.975744][ T8060] Call Trace:
[  165.976640][ T8060]  <TASK>
[  165.977446][ T8060]  dump_stack_lvl+0x3d/0x1f0
[  165.978803][ T8060]  panic+0x71d/0x800
[  165.979865][ T8060]  ? __pfx_panic+0x10/0x10
[  165.981460][ T8060]  ? irqentry_exit+0x3b/0x90
[  165.982783][ T8060]  ? lockdep_hardirqs_on+0x7c/0x110
[  165.984558][ T8060]  ? preempt_schedule_thunk+0x1a/0x30
[  165.986425][ T8060]  ? preempt_schedule_common+0x44/0xc0
[  165.988620][ T8060]  check_panic_on_warn+0xab/0xb0
[  165.990527][ T8060]  end_report+0x117/0x180
[  165.992158][ T8060]  ? dev_free+0x446/0x700
[  165.993661][ T8060]  kasan_report_invalid_free+0xba/0xd0
[  165.995540][ T8060]  ? dev_free+0x446/0x700
[  165.997035][ T8060]  ? dev_free+0x446/0x700
[  165.998717][ T8060]  check_slab_allocation+0xfd/0x130
[  166.000514][ T8060]  kfree+0x11e/0x4b0
[  166.001873][ T8060]  ? dummy_free_request+0x56/0x90
[  166.003835][ T8060]  ? dev_free+0x446/0x700
[  166.005537][ T8060]  dev_free+0x446/0x700
[  166.006987][ T8060]  ? __pfx_raw_release+0x10/0x10
[  166.008697][ T8060]  raw_release+0x168/0x2b0
[  166.010382][ T8060]  __fput+0x3f6/0xb60
[  166.011739][ T8060]  __fput_sync+0x45/0x50
[  166.013208][ T8060]  __ia32_sys_close+0x86/0x100
[  166.014856][ T8060]  __do_fast_syscall_32+0x73/0x120
[  166.016604][ T8060]  do_fast_syscall_32+0x32/0x80
[  166.018280][ T8060]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  166.020421][ T8060] RIP: 0023:0xf73fe579
[  166.022387][ T8060] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  166.029489][ T8060] RSP: 002b:00000000f525e520 EFLAGS: 00000293 ORIG_RAX: 0000000000000006
[  166.032293][ T8060] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f525eb40
[  166.034957][ T8060] RDX: 0000000000000000 RSI: 00000000f73ecff4 RDI: 0000000000000000
[  166.037917][ T8060] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  166.040847][ T8060] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  166.043783][ T8060] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  166.046712][ T8060]  </TASK>
[  166.048413][ T8060] Kernel Offset: disabled
[  166.049914][ T8060] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:38:21  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=ffffc90000426f28 RCX=0000000000000000 RDX=1ffff92000084e0e
RSI=ffffffff81e395b3 RDI=ffffc90000426f28 RBP=ffffc90000426fb8 RSP=ffffc90000426f20
R8 =ffffc90000426f5c R9 =ffffffff90bab9ee R10=ffffc90000426f28 R11=000000000000edcc
R12=ffffffff81788f90 R13=ffffc90000426fe8 R14=0000000000000000 R15=ffff88801b740000
RIP=ffffffff813cecd0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b400000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000000c2f0143 CR3=000000000db7c000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 524b4f0f2819f833 e01e37c59ba70157
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dc05901cc88d25bc 121c38617991a990
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6990ce2d98d09326 ccdd812e05b8e696
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7b8d7b18aa145f93 f36aa119e8d8bb1e
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000180
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005c0000005c 008001000000005c
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d7118c38d77c4b18 1fd1cb4fa03dbb84
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00800100d778ee4a 0000005c00800100
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e742ae50fe56a27c 00800100d70fa492
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b5640c4dae621f8a c703017250c325c7
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bbca55d140999bcf 63506a35ce984697
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000046 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000001000
RSI=ffffffff8b4cc920 RDI=ffffffff8bb12fe0 RBP=0000000000000282 RSP=ffffc900032af820
R8 =0000000000000000 R9 =000000000000ac78 R10=ffffffff901cea8f R11=0000000000000000
R12=ffffffff9a561778 R13=000000000000158f R14=0000000000000000 R15=ffff88806074c000
RIP=ffffffff8b14370e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b500000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f521c7e3 CR3=000000000db7c000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b8ae394ce532e76b e4a85cd4bcbde2f0
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff9ecdc93d1cc6e9 6cb144922f828ce3
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c125c6473967bb2f 74001f2ad7281345
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a61f2ede10ac50e1 baa7616ba33f84c6
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 222eea6299a4438b c223fa05738fdc87
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fabb968c37ad668d 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f4865210d226f54f a460372cab0c108d
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 577cc3bc00000000 988c4618564709d5
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 23b24a59ee087862 e3f686f5fb210daf
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f6b0fc3b1f48c88 a8a0c3db6c7fa012
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865
ZMM17=85d43d0aba49f1c7 be572d52b4cf4379 85d43d0aba49f1c7 be572d52b4cf4379 85d43d0aba49f1c7 be572d52b4cf4379 85d43d0aba49f1c7 be572d52b4cf4379
ZMM18=11696abb32cfc157 d200b14ed76df956 11696abb32cfc157 d200b14ed76df956 11696abb32cfc157 d200b14ed76df956 11696abb32cfc157 d200b14ed76df956
ZMM19=0d05000000000000 0000000000000005 0d05000000000000 0000000000000004 0d05000000000000 0000000000000003 0d05000000000000 0000000000000002
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=cb7cdb5ccb7cdb5c cb7cdb5ccb7cdb5c cb7cdb5ccb7cdb5c cb7cdb5ccb7cdb5c cb7cdb5ccb7cdb5c cb7cdb5ccb7cdb5c cb7cdb5ccb7cdb5c cb7cdb5ccb7cdb5c
ZMM22=95a9316195a93161 95a9316195a93161 95a9316195a93161 95a9316195a93161 95a9316195a93161 95a9316195a93161 95a9316195a93161 95a9316195a93161
ZMM23=3120ee463120ee46 3120ee463120ee46 3120ee463120ee46 3120ee463120ee46 3120ee463120ee46 3120ee463120ee46 3120ee463120ee46 3120ee463120ee46
ZMM24=75e3cc2475e3cc24 75e3cc2475e3cc24 75e3cc2475e3cc24 75e3cc2475e3cc24 75e3cc2475e3cc24 75e3cc2475e3cc24 75e3cc2475e3cc24 75e3cc2475e3cc24
ZMM25=309e3b4d309e3b4d 309e3b4d309e3b4d 309e3b4d309e3b4d 309e3b4d309e3b4d 309e3b4d309e3b4d 309e3b4d309e3b4d 309e3b4d309e3b4d 309e3b4d309e3b4d
ZMM26=87cd2f9587cd2f95 87cd2f9587cd2f95 87cd2f9587cd2f95 87cd2f9587cd2f95 87cd2f9587cd2f95 87cd2f9587cd2f95 87cd2f9587cd2f95 87cd2f9587cd2f95
ZMM27=07e774ec07e774ec 07e774ec07e774ec 07e774ec07e774ec 07e774ec07e774ec 07e774ec07e774ec 07e774ec07e774ec 07e774ec07e774ec 07e774ec07e774ec
ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=b3080000b3080000 b3080000b3080000 b3080000b3080000 b3080000b3080000 b3080000b3080000 b3080000b3080000 b3080000b3080000 b3080000b3080000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff90adb9e2 RDX=0000000000000000
RSI=1ffffffff215b73c RDI=ffffffff902d68d0 RBP=ffffc900005177c0 RSP=ffffc90000517708
R8 =ffffffff90adba3c R9 =ffffffff90adb9e6 R10=ffffc90000517778 R11=0000000000005024
R12=ffffc900005177c8 R13=ffffc90000517778 R14=ffffc900005177ad R15=ffffffff90adb9e7
RIP=ffffffff813cf1eb RFL=00000a07 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000002000e000 CR3=0000000050c14000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 14dbd12eeb5fd72f 862259f2754b80a6
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f561ebbb5c45a87 5b7d575363cb48d2
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bf74bd47e0d96989 488552c2896742fa
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 368b30d4b7757a61 75814fdb785b5fff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001080
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 37f3c400c03a1200 00006296c9437600
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8001000080010000 fa6b26001c30f000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000629680010000 878f020000006296
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 80010000000062eb 000062b080010000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a5bce6583864d380 18cdebd3740f184e
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c23c735c494a8ac 29449f94f4b47619
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=000000000000007a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85042b35 RDI=ffffffff9a6412a0 RBP=ffffffff9a641260 RSP=ffffc90002e4f740
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043
R12=0000000000000000 R13=000000000000007a R14=ffffffff85042ad0 R15=0000000000000000
RIP=ffffffff85042b5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000055a498037d38 CR3=0000000054088000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000c0fcd0 Opmask01=0000000000000000 Opmask02=000000000000ffdf Opmask03=8200002022100080
Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd03ea30d0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 000000000000ff00
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4722c3496c0dd29f 737326d2b13b30f3
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373e2 7373737373737373
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000000000 44455a494c414954 494e495f43455355
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000281 00000000312e7465 676461672d776172 2f73726576697264
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000021 000000000000302e
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 000055a498018e10 000055a498018c00 307761726469682f
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 26483b3a3a264b3b 3a0a00307f617930 3a2433273f397b27 697a787c69303b7e
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000