last executing test programs:

2m0.936291461s ago: executing program 0 (id=196):
mknod$loop(&(0x7f0000000040)='./file1\x00', 0x100, 0x1)
prlimit64(0x0, 0x9, &(0x7f0000000100)={0x6, 0xffff}, &(0x7f0000000300))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x5)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5457, 0x0)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, "5f730000a9003f00"})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f0000002540)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
syz_open_pts(r1, 0x800)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8)
r4 = memfd_create(&(0x7f00000005c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x99\xb8<X\xfa\xdd\x8a6\xa1\x82\xf7r\xd8z\x85\x8do\xa5\xed\xd4\xbc8\xfb\x16\x8e\x8b-W\xd4\xc9\xbc\x94CR[Du8U^\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7z\'F\xc7\x91\x06x\xe1`\xf1:\xbd+\xd5\f\xb2\xce\xa4\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e\x80\x93\xafT\xdfl\xec\xc6\x8e\x96\r[n\xc6\x99\x1fr<\x06\xb3\xbcT\x00\xda6\x18/\x18', 0x7)
fcntl$addseals(r4, 0x409, 0xc)
ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x101})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
mount(&(0x7f0000000000)=@sr0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='affs\x00', 0x8085, 0x0)

1m59.99704728s ago: executing program 0 (id=199):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40046f41, 0x20000502)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket(0x10, 0x2, 0x0)
dup(0xffffffffffffffff)
write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000028000000000000", 0x1c)
recvmmsg(r4, &(0x7f0000002ec0), 0x0, 0x2, &(0x7f00000001c0)={0x77359400})

1m59.086692901s ago: executing program 0 (id=209):
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xa0603)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x3, 0x6, @random="558440ed89e0"}, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x5, &(0x7f0000000940)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='pids.current\x00', 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000740)={{{@in=@dev, @in=@remote}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe4)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="3bbc2d39dee8e4b5ce18d1949dacc008e450c2e69615a800", 0x18, 0xfffffffffffffffe)
keyctl$read(0xb, r4, &(0x7f0000000380)=""/222, 0xde)
syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0xa20d, 0x9c2}, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000200))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4)
futex(&(0x7f0000000300), 0x5, 0x40000002, 0x0, &(0x7f0000048000), 0xffffffff)
syz_io_uring_submit(r5, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4a, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x3938700}, 0x1, 0x10})
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xeb5b0dcbf0fde293, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000022280300180012800e000100697036677265746170"], 0x40}}, 0x4080)
write$rfkill(r6, &(0x7f0000000080)={0x800000, 0x81, 0x1}, 0x8)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmmsg$inet(r8, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="aab43ecc560c7d07965b8f3cc1", 0xd}, {&(0x7f0000000580)="6d694a24d0e5b0fb80619f2cd1f5814e751f66ecf6e0bec30741f362a810716808890cbebc0a237711280905821d0ffe3531b807e16d8bb8cb99bfe1b81301f08dfe62f597f749e10b434a8ff16a0580b72453727158d6e2debf", 0x5a}, {&(0x7f0000000600)="d632f524aaca71f1299e2685be14a2e4205cfcab9f5a03e9b63def39e140422a92aef608b8cfb3438e6531acd9d109677d12c61d5ee8606ab9d83cb1d3b27d3797c01e635d9a52be2fd33d20750fdff3938cc8ff1fd8e540f2b5bdd6da826aca7a62f0f630d72edbceb5d3aa330a", 0x6e}, {&(0x7f0000000680)="28b86accbb80bbaa9e6bbcb01fc4c7387cf8a4c3a87c15338711be062c3b7298da682a9bd58c7201cb98af0c33b52799f893bcd9b3d0d407000000330cf18e76fbb0850b183e63ef0ea3f3648aa9e6a67e9694f0965dc0cf80856d79", 0x5c}, {&(0x7f0000000840)="62053eae6e106ce4c068ca02c4ca5927912c0c6f2fad066a7751f95b57be1f576868cf080383c9bbdf00824bfdc17f122e10320cb82fe3fc18ef2c885cd4bdd9fd106212432655366bb7a3a3070fcdad1f0be7bbdc45f7c232d307b2d6483d1a08859716311e850740c51329ad0e9cf8576bbb75c7918e34ca0186550d8de738548bf9350410847e86d2fb1b4f8d65386fa04beaa21d9d45f3a09add63bebd076951695dfc113db5afde79914c3e02ee95ccb6ac7daa8d3a3e40cd586f802bcd198848b511ade8dc58362fb221bf02c5ae9e45057591b639ca9c1d9267d55ce31a14384e51e3a367b4e58f40456f2d70278ab7b7", 0xf4}], 0x5, &(0x7f0000000ac0)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x6}}, @ip_ttl={{0x10, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xff3}}], 0x40}}, {{&(0x7f0000000980)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000001580)="8e2ee63b4057ca44d226c89fd6c0aefb0412e87fe854eb93808873c2d638522853af6bdb80e4ea2a9374947c855273a426c4badbf76e7bbe7cce4b6618ec1f02e35f5ae2c9cbad0c92ebbd1e411873e326654dea9ea072b801501bf913957927b57d5022d057743dff07fdd823e0c93902e60bace045d9fcfbbe6b4ab0a3007502ad1cac58ba2ff27285956b4beb44a5065383e3da7c1ea6e84fb65f59222daf55cc1ae08b536355a57f015bea1495dd1547137bf1a10becb8c38e38eca650646c17af9556a5c201b29552779d64de5ad2a9ee8872f814d2a0d7450a0a692580bf721c888fc24a097b8a98dff5837373915fbe188d689c7ee914888d53a6dbbdca274f172653a591ab91ce9947aa468fc290f97eea4d8b7f6c6b1f5c5baf747fd0407175ad1c61dd22f7832349e251918b42bd0fcfe56f941063f32a1176e8d065f5443f49700400b3dfd3891487fc8be6a3c825e58e9607342317c98e70c6794e9eb74746f65f920f6ab9ea01161942e3957dd26dce19f44f2e1730e5db0fac361ad637343c1a97d6f9cece5df4ca55ac6d65c0505fcafd9f91917d2627303b6839268a96b0c55bc0f1d54d768b41b2b696922e0a3961ff4efdebbdd1b2a62311e04999d0fe2ef2250d4f876ef0b7d5e2f2eaabb0a533273922369e6140817ba0c6498965d6b6d2da0928af68067a63356f519619db014cf811564f8c722e01aed09f8c70fde9c84b039cd1436554c499225d7fca4812a8565a2f139ebd3cfcc98d2c17115223e863868057abad9318e7852500b5f38b8f4d49813adb3cb806b13813758c89074aa0a512d55e512bdc996c5d91b99fa9fdf4e4fce2fa17d68bbacddf097cb0d2682dfcc2ee893c6cca8b361d9f9c3289e01a832d8f23533e6df24f70fdb758f9ac69e3ab9d8258803570f0f6cda6b0fb97652160e7ba7cf6adb507502f8cfd6c5ce95cafd2959a0b57a1b623c52b0869c6acdceae9e3efb2f73007b862857e7661064cd60f9e9aeba80a1d8c29dfaafb29b09057ff2b6e66b983ff9f4265e097a5adcf8d8289a5e688ce23aa2305837c9f22906982d295b6cf30504fdde97c30a7ccfa6d4064214f4348c14c902d7ceaa18bd93b887793c9c0db48b8b3258c49c53ea9d2cc787c180fa5b8159e0f2624c3c0a9908ac0d02d538b030db4c300fc0719e62976be4faf4a657050a1dd2907f05e2832657b3a0ef503e98484e45f30548ec37d448d40a7991bb44bc95608303ed44d591e9efebc3c0afdaccbbcfd0facd79ea7767275e5cab0b05e3fe226ec090f5c0ebc136a28e62bb52f3f3eaab1ae7639aa746eb708dc517e2c35bd2304a08000253d425c1359f558fd6abb8a9b783165c7ebfffd32968dadda26319e73c68f1e7cbbebae4722c3e154c165fa41d1237f5fb5f3f6c41227e8c0efa12fdd37363e4cb4a9bae14ec1f5ad40d4cbde3d90f8dddf0d14486d65c27e59164a7b7fa5b8b83ff20a456124915b1c8f5b6e10afda61aa792e68acb3c6f4695958b383e77447330df9f8b8d5ee427a75c6f8fecde958f8913a3463c2dc9a2690c54df5186f35b5e9ec505e1b05fdc19ec6f152f3fbfa75cbd0fea81860684eccf70786aebdd61c01c93c702647cc5d1b79f093c554a404cb3116a3c12ffe61be478d5df559d982b32a7b9703c425ebc8e9718caf21326c0d3e47c1528847e9dfe7a8a693731ca48c4542c3a93087a8e5908c329d43efaf7aae269f9013f8999c446ab5fc5ef5ea3f3e6a24e5fdab917f2a4adca93abbff136ce4b812b9aefb726191a7f283661a31eaa47a1977184dec0e8cc694e610e24fb4118304e4bad8493d928b197ae1c1cfc00b78741e2504d88dac82cb7bc756dadeb24f7eb1bb3ac78a851fa006da8d19dfe8ebab52085949f1fd615375f6d1d9f381c7db7f1147fdf2651a8e366b2b8e470a65b312ba83a2c16d19f085b09ad63830991f67952a3d89687c2c2f8472099590daf1d0148edb16bc462f818a4e9919d8e1283be6db83403cb13c55df65d4f984a1a7cee4c162bb4ea6431ed097d16374e10753650214cfdacfb5e187aea61c344aaad60c2c480f3b366910b7a9e533de5e77f5faddb115cf617ff6628dae36ea319c3cdeb497acf04253a3d5675f24091bd4433d8eb86b345a39b8f6ce693c520f6d42f9eda6231007e19df8d5d13ac6f6f845add570f1ae0dc7b923533e620e07dc024e7563e4b6c3f1e066e0be015699264e4457a34c533ca04737b20521007531d3722134085ca89e00bbcd83ddf20fd46b42aa892729349f9f2aa08bbb4242bc89bfe613dc2ff6126c16793fd7b57027326cd1ce1e4012d2a8c4a3a41c9a542b7a842486ac9917578ddafda1724144a0e53a6ee68f99a4ba77b5974892d1aed06ab55ba27b3e099a954e709f095c477e41f57587afb1671679d4b98322c190e6041504c90522cecab057527ea4c44dab1325d9235096eaf3402db87321a304a543531656a2a994b524fa2ebec4daac619b9d9dfc2509e69b2c258892dbbb0cdff92e067829f8e37b6b25040db0fea598b52bd8d44ec9a37afd42841b14fe70277fee9366fc244b50b7699e0165029e1bd49cebbace99b221e6cba51f29263c96d1e0c381ee28fd765b464a1ee9d9132fe0cfe482c6b04e2b051aedb727570b86ecb82eb816eebd1aaf8279559d3f462776620923a5684971f32ee5394b50298e4d37445e7ba00b8e99ff9f82576c1905e6b54baf0bcc3a1e311bf3dd895dec96a83f8360e4f0ec19b1488e8bca59ad2de2b2b34d0796cd4005c0ddb8aa6e105938c59836f5c9a1edc613abf2b3bbe0f77b2f528e32824ffe4e2260e70f7fb51dbfa100efe096c66b7e8ec7d24c03cc408b1fd6569353e6ea9589cf274366817a455dff584bcb4d056cc3f7eb07bcc36045fc43d652f9aec5031acb2042fba97ca5e173e7108432b432a727b7fa727566215ca0a9355da441b24417d4ec969fdafa893497aa10ed55f74e2bca2944fa7fd460982fb54862b56d2ab08771f8475529cd750892cd92ec23dbeb287e1e505133c229206623b6773e02c0dc63a41b4976ecc5edd9685929d7d4ece790e47678d3a4da90b2b74153c54c04c082cd9ded7807ea540bb36a3adaff9ed0cf983258d852c9ab89198f8c4452d44acd0c1536edc8c5907dfea93a567effb46d1a9642c50993b677079b4ab26ab8c78d08e65b7ba0b5ff274ad9ddd84cc3d328531f9b572e88908984513d2015d759a3fbd437f5e7c152949ced7b380529d9848be4c36fbbe4af09b2e1c6d925471aac97a3c87549c648f821c45e1c559870e58fa6bda17e04c37efb7872e1ea1b495bff18b9ba37b34252ca13c83ce003dcae98f73a78978559a191ac1a7b80e006853523f4aedad8c22899c4ceda713861861791fc8001a1c3d23548902fa7f60026ef45cf40c6282644b2736de1dc0426de01bff0e561a693878b8a3ff57df4150dcc7b48589726c8b9af2e9c99106bed9a96fc7dbc5d8ab0055adf7054c8b7c628da1e1f11070bdf9946333f0ebda7718914348c99f7eb6af8c66f9d683cb84b0497a9e3790a680f578296344951ec0f33a60dcd11c74fc1cb61680bf8cb294c3115e9c7dadb8e6d80769e0286afa1a1b25128b6e9a935c9e962ddf33b16bdd34794e41d8807f1d978ab9fa8d98417fbd58d8e1ff7c8d7f8cb481f12817d3da7ef9bad665fa26ee55a4467f601a8bc684c283fa4d9908d469638b4a9520c08474330133d9777f0d124ee9618de736be7c3499568f1f2b02abbd65ec7e8a6927a5d309336def4e9b24804e97a37575ff0739c56662ce06f5e84e9f326b1f8b1f0bd7edcba7919f951a475e0818e20471d5a084c4fa8f1c7dc111b659bc74a98dce6e2eb254a32651c7e9746034b40f035e4782c52e13a2871024fbd7242cf9a0b16a55eaa785ee4c5d351f047725523482f7b0f7d88549b1ac698d55c814e116fdcd09485d4fc1b5a75369c430a969cf8e5636ec21aa38617861002e2555afa6faec888167faf39b2c7929d33713bca2beeded7a9261cbe69e113f55113924ba503bce90abfadc7ff43a425f75f445066fa0f360594e832f869ab81870cd9026063205f348b9be322e383b4edae7be58cd228f383f87c26f98306b46f3e258d187e66110ab2b83ba94b7f357a1d8017770a03ed35b5e3b867adc077cb6553a0baef8b56109de022c22898b13006b4d55f89b4b85451ff729ae2508f5c016e27cd527dfdfb2a80b3ef75d6e9400dffac1ef378df6b27ecf63752c72776aa4241162529486c1909616c2376bc9e4e46f5790dd695430c1ff26c505d91e5c5666b3115aac36814ae1d54caf4356f6cec3cac05d94e51e25ead20b554a6f00bc15dc4d303827fca25831f5dba5011a0fdcb8484e255210d6b1a3179373006702a87cfc298c251b38f2b15ec78473fa2ffa17f4c1189fbd10f6f9261abb01dc38891817ce4d711e02355b36e08ad0737ad7ab4b28cd749dec064cc85c076f0036c4f2d20b6457b8aea559ea523af8ef4562163a60d8509d38ab006f16b92b6f85b280613b86a4dd724c812ab14b7797422bbede22e2f2fa12b26b9fbdd41033c0efb19909cf250cb41d0978878696ecf6d55ea16e8e6efeddbab6fc6d39ed2e69f7a094f87afbd60119f3e3c3c415fcd0a33b4b37c90744c8968e655179c6e97ff37b3f7e9900f5d057096e131df1f060d84c53a61fa6c5adb8b2f702f90fdba05c9238ef0ff9983487b2bb8fb57f231fbf7423d005664baf297866f1b2c92e13b08e129e28dcd7ff230ed83697fa25b9472b64ad2154aa54fa9f1aec1d4c88db46e7e50e0965ef7ed6ae4c9fdeebab45f8176e5eaa7f1b5673adcc471eb0361321c297d3aa356f817732c5f22f4e82bce983e0bf8606c97495337b29a75c22040fb241f8f1745b69a89f3ab1762f1fb49c1231549bdff350a1c31bd2d9cc35376831e0d4263bbca844e0a3cafcaf07f229bcd41831febccf23b549e3ce8a7945c86d45127f398a72984f7eefb4ebc52fd17850d3dbc64a019794cffb407a6b36dc5223f098c2e546f4b907e0748a3226d5fc167b03de10fd0a052e7718de18e2ddad643385d24ed0dcb00055a709dfc6624bd9b6d5c2785797fcef3e072023572121d6c856c706d1b5fbafc2bb97bd9d6b416b7be2599ed725e814b154f4409c7c587610e3b29f9c3a373e6e43141b5ca6074589e3179bda40e1f3970eef97b1224557a676971173887989714828b002db6a00bd25cb0c21349ec6490286412b29e5ad6cd4914fbc35f3faffada17c2c2c04735a98ae955262deb9f5b34257a8dca3d07ec5b9e228bbe8a3a6b35d471cd2b35abe58b417c2f51d3cbb39fce5dce4fbc8486ffaad52291e0774ecadcfdb5c02ce1d730c623572f766281b247177b042a3d778a9389682b2561b62e7cc86e5aa8516f382e597b28466ebf0b84b21e86ef5e5a010923df6828cb51df5d4fe318f1bf29274aff997d91d4a42c563d777073444a2bbd3824b8bc0a343f3f0c6826c599fcfab9f9d601b5d29999517a1189abff47cd829f5d0840b32a3455518d8d00e95b7b950584f214a376e1ec467eedef655837b5c139d0c61b91631ff573546155d1cb2464aebef6b3c4a763c6090edf8298a0dca3f200cc56e33284f88569e82deb18ef63a4b40e0184c367cc31411027cc0882d7bf0bf6e88e16e885fc03b027afde10055d6882fc256e96068ef6a8704e3c8459ef5cb1f5c09cca9df50c5ab4e4f297f3295a447bed11eb1df8dae0bcf91d", 0x1000}], 0x1, &(0x7f0000000a00)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x9}}, @ip_ttl={{0x10, 0x0, 0x2, 0x8}}], 0x20}}], 0x3, 0x0)
close(r9)

1m58.190275064s ago: executing program 0 (id=212):
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@dyn}]})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@verity_off}, {@uuid_off}, {@xino_auto}]})
chdir(&(0x7f00000000c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)

1m58.09707309s ago: executing program 0 (id=214):
r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x3f, &(0x7f0000000080)=0x1, 0x4)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0xffffff81)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)

1m57.827199257s ago: executing program 0 (id=219):
prlimit64(0xffffffffffffffff, 0x9, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async)
connect$unix(0xffffffffffffffff, 0x0, 0x0) (async)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async)
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
rt_sigqueueinfo(r0, 0x15, &(0x7f0000000180)={0x3, 0x8000, 0x2}) (async)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x201, @empty}, 0x1c)
getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0xe, 0x0, &(0x7f0000000900)) (async)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010800"/20, @ANYRES32=r4, @ANYBLOB="000004001004000024001a80200002801c00018008001a00060000000800160002000000080010000004000008001b"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xc8d1)
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f00000000c0)={'wg1\x00', {0x2, 0x0, @broadcast}})
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)

1m57.730681831s ago: executing program 32 (id=219):
prlimit64(0xffffffffffffffff, 0x9, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async)
connect$unix(0xffffffffffffffff, 0x0, 0x0) (async)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async)
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
rt_sigqueueinfo(r0, 0x15, &(0x7f0000000180)={0x3, 0x8000, 0x2}) (async)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x201, @empty}, 0x1c)
getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0xe, 0x0, &(0x7f0000000900)) (async)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010800"/20, @ANYRES32=r4, @ANYBLOB="000004001004000024001a80200002801c00018008001a00060000000800160002000000080010000004000008001b"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xc8d1)
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f00000000c0)={'wg1\x00', {0x2, 0x0, @broadcast}})
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)

4.975882358s ago: executing program 1 (id=1202):
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000600000000000000000000104004e20004d13"], 0x0)

4.975748564s ago: executing program 1 (id=1203):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000192c0)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0xffffffff, 0xfffffffd, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4000, 0xffffffff}}}]}, {0x4}, {0xc, 0x4}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0xffffffe4}, 0x0)

4.88444365s ago: executing program 1 (id=1204):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x1a3c82)
r2 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000105804165000008000000109022400010000c0410904000001030000000921090000012aa0000905810340080000000b0341a3f60ca56f422525ca5153fd7a693b73b0faafd389597efa6ce4"], 0x0)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15)
write(r3, &(0x7f0000000280)="7d49fe", 0x3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063018400000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb9, &(0x7f000000cf3d)=""/185, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000400)=0xfffdfffd, 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000040)={r5, 0x10, "d8a60acc45ba90bf2299e5586e9fdd2f"}, &(0x7f00000000c0)=0x18)
syz_usb_control_io(r2, 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000000), 0x20, 0x0)
io_uring_setup(0x69c3, &(0x7f00000001c0)={0x0, 0x69b7, 0x40, 0x1, 0x251})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x82)
close_range(r0, 0xffffffffffffffff, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0100001a0001000000000000000000fe8000000000000000000000000000aae000000200000000000000000000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x8000002, 0x165b40)
r8 = dup(r7)
write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c)
r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0xff, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007911c00000000000850000008e00000095000000f8000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, r9, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
ioctl$BINDER_GET_FROZEN_INFO(r8, 0xc00c620f, &(0x7f0000000100)={r1})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000000300)={r6, 0x7fff, 0x1c5, 0x3})

2.274042509s ago: executing program 2 (id=1238):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000001300000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xe8}}, 0x0)

2.273884346s ago: executing program 2 (id=1239):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
futex(0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10010, r0, 0x0)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3, 0xc8, @any, 0x0, 0x1, 0x9, 0x1, 0x7ff, 0x22}}}, 0x14)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0xf5, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058004800090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001080003000000"], 0xa0}}, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast})

2.174751715s ago: executing program 2 (id=1240):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000001400000100000000fddbdf250240c0cb", @ANYRES32=r2, @ANYBLOB="07000600c7ae1ac4fe0347acffffffff0d00000008000200ac14142e08000a00ffffffff08000200e00000986e0208000a0001000000080009000800"], 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x0)
creat(&(0x7f0000000340)='./file0\x00', 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x11000)
r5 = openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x80)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x2}}}, 0x10)
bind$tipc(r6, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x3}}, 0x10)
bind$tipc(r7, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x2}}, 0x10)
bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r7, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x10)
bind$tipc(r6, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f00000000c0)={0xfffffff8, 0x80, 0x9})
vmsplice(r4, &(0x7f0000000280), 0x0, 0x0)
r8 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc2c85513, &(0x7f0000000340)={{0x9, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x23f2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x2, 0x6489f46a, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7fff, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8]})
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000001780), 0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB='\b,'])
openat$ttynull(0xffffff9c, &(0x7f0000000040), 0x210000, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r9 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r9, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
sendmsg$rds(r9, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
socket(0x15, 0x5, 0x0)

2.174505535s ago: executing program 3 (id=1241):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0x0, 0x0, 0x0, 0x6, 0x18, 0x0, {}, {0x300}, {}, {0x0, 0xfcd}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3a0})

2.095865968s ago: executing program 3 (id=1242):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
modify_ldt$read_default(0x2, &(0x7f0000000000)=""/18, 0x12)
modify_ldt$read_default(0x2, &(0x7f00000002c0)=""/122, 0x7a)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9)
getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f001982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae10200000000000000e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265ec3691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab254a984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, r3}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0xc40, 0x0)

1.985828372s ago: executing program 3 (id=1243):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a0104000000fff5000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c00014000000000000000080800044000000001"], 0xdc}}, 0x0)

1.985317968s ago: executing program 3 (id=1244):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r1}, 0x10)
arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f00000000c0))
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
bind$can_raw(r0, &(0x7f00000005c0), 0x10)
read(r0, &(0x7f00000027c0)=""/4073, 0xfe9)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x300, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000002030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x11)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000300000004000100050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000210000d9d40045a091a5e1b900000000"], 0x50)
close(r6)

1.845261951s ago: executing program 1 (id=1245):
r0 = socket(0x2, 0x2, 0x0)
syz_open_dev$ndb(0x0, 0x0, 0x44000)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0000000081000000ff0f0000090000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000004000000"], 0x48)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000580))
clock_adjtime(0x0, &(0x7f0000000700)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x3f})
ptrace(0x4218, r4)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, 0x140f, 0x9, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}]}, 0x24}}, 0x0)
recvmsg$unix(r0, &(0x7f0000000680)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000440)=""/237, 0xed}, {&(0x7f0000000540)=""/147, 0x93}], 0x2, &(0x7f0000000640)=[@cred={{0x18}}], 0x18}, 0x40000000)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r6 = io_uring_setup(0x168e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xff})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r7 = dup2(r0, r2)
write$USERIO_CMD_REGISTER(r7, &(0x7f00000006c0)={0x0, 0x9d}, 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=""/225, 0xe1}, {0x0}], 0x0, 0x11a}, 0x20)

1.355608537s ago: executing program 4 (id=1247):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10)
r1 = dup(r0)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000400)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000006c0)}], 0x1}, 0x0)

1.343525273s ago: executing program 2 (id=1248):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r6=>0xffffffffffffffff})
splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r7, &(0x7f0000000040)=0x3, 0x12)
ioctl$UI_END_FF_ERASE(r7, 0x400c55cb, &(0x7f0000000200)={0x9, 0x505, 0xc0c})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="310400000000000080140002006e657464657673696d30000000000000050004000000000005000300000000004f049e7eeb1219ff53adfda220ee95f09b4e067a3541"], 0x3c}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)

1.275796462s ago: executing program 4 (id=1249):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r6=>0xffffffffffffffff})
splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r7, &(0x7f0000000040)=0x3, 0x12)
ioctl$UI_END_FF_ERASE(r7, 0x400c55cb, &(0x7f0000000200)={0x9, 0x505, 0xc0c})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="310400000000000080140002006e657464657673696d30000000000000050004000000000005000300000000004f049e7eeb1219ff53adfda220ee95f09b4e067a3541"], 0x3c}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)

927.97865ms ago: executing program 3 (id=1250):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x8000003d)
fcntl$setsig(r1, 0xa, 0x21)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x2, 0x0, &(0x7f0000000080)='./bus\x00', r1)
mknodat$loop(r1, &(0x7f0000002600)='./bus\x00', 0x0, 0x0)

915.115062ms ago: executing program 1 (id=1251):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="a2c7278f3e29", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x9, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x2, {0x60, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xfffffffffffffd91, 0x1, {0x98, 0x3, 0x5, 0x1, 0x6, 0xfffffff6, 0x3, 0xffffffff}}}}]}, 0x58}}, 0x44080)
r5 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340), &(0x7f0000000280))
io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f00fffd028002002d1f", 0x2e}], 0x1}, 0x0)

795.89859ms ago: executing program 1 (id=1252):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000ffdbdf250200000024000680060005004e220000060001000a000000080006001000000008000700", @ANYRES32=0x0, @ANYBLOB="28000680050002000300000014000400ff0200000000000000000000000000000000000000887eec05004e2000000500050037000000"], 0x68}}, 0x40004)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000300)=@req3={0x7, 0x53, 0x7fffffff, 0x2, 0xa, 0xffffffff, 0x2}, 0x1c)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000001480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socket$kcm(0x29, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x15, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8004)
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)

437.139567ms ago: executing program 2 (id=1253):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c0002800800034000000016080001"], 0x110}}, 0x0)

431.837055ms ago: executing program 4 (id=1254):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, r1}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0xfffff000, 0x0)

365.504732ms ago: executing program 2 (id=1255):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x323301, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x10006)
execve(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000600)={[&(0x7f0000000480)='\x00', &(0x7f00000004c0)='y\x00', &(0x7f0000000500)='&\\+\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)=':#)!\x00']}, &(0x7f0000000740)={[&(0x7f0000000680)='trusted.overlay.origin\x00', &(0x7f00000006c0)='\'.^)}-.].,\x00', &(0x7f0000000700)='@},\x00']})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
ioctl$sock_netdev_private(r6, 0x89ff, &(0x7f0000000000))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffe, @loopback, 0xfffffffc}, 0x15)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$inet6(r3, 0x0, 0x0)
setsockopt$sock_linger(r6, 0x1, 0x3c, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x2000, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}, 0x1c)
sendmmsg$inet6(r3, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000003980), 0x0, 0x0, 0x0, 0x20000000}, 0xa}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000400)="c603f8fb376522c231", 0x9}, {&(0x7f0000000640)="ffb230dbdb7fa444630eb0184023ad1b7b34f2b9de7903c3133415c819abf54cc38a4a85", 0x24}, {&(0x7f0000000840)="978b6cfa27a9ae05cf1df538abd94ece5760948e296619c73d5c379bd21d89b00fc4bf0d17038628305cb7d4fd5920381b473f8f969573e0802b917f", 0x3c}, {&(0x7f0000000880)="b1f01143e223145cdc04bcd21325ffb6f358b3a38c068ca97b1470fc37d1715057c94eaac8095b9b8e78aedfbb030abeebdba1de68636ebfc4b07ee79bb5c25039087a0961e0464b331c0aca3b98aa9579a67694ca17a487152cf414fd3851783b", 0x61}, {&(0x7f0000000900)="6cdeb0986f8050328d385169c6d6207103f58f979f9208624ae06cdb77c78aebd8ce597f52f746dcc133d605af88ebdc8f8cc0a2027634bbe4ee21c2df1ebbd20cfcfd8e2c5dfab95d95f77a2909530ce85f5de32920903fd9e33c18d12c6b4c95fcdeb9c403d04e5459c5d0b69d49158352d3a17ce4aef6a091f09069dc1a15d052c8c9ea6d67fefe421871e23ec1035035d14f53c035618ca81e328f196fd8ff2232528f0940be0ce65bae5e91c20d", 0xb0}, {&(0x7f00000009c0)="d9535469f23c2062d5f802080cf7022b5f48ca5de3c6b217528e21fe3433cb527c48a5e5ea0ea53a5524b63cf2c04593b4eabb8bb97cfd88768ce7a3aa2e0b3be7ee49ca0d6e076292219058fd78915527ecc9e689346faee747842403fb0e3951b1fe57ca2ab1b88a38675cad9f156da15ce81bf5e83e81521bc667f5593ae4c046f35d3e964f302c1b3cb03432a198f9d1e51987768f08bdcde8b558ad35ddda0138ce5cc9c6f24c275d4e3705d6242f90a0ed35cfa84fd964a558457cf6854ee29268abad2b752110433f23be5bb63133fe1c94006794e88c", 0xda}, {&(0x7f0000000ac0)="d801867aedea2097d9dac1bcb6454c711b90597e6acef4281b6a2121f6a24e85a118ce279e53948a44cf4a9845e9febc34d95edfa8714aa29e166f30", 0x3c}, {&(0x7f0000000b00)="97355d1bf39da502f9b6e43bc86153e10b4c37527bada55cbae868c573716cf6cc8856b87334154d0b7ac55e3a679e2b85ce426817ebab1bdd336dbe55ebd533e403043ad13c5dc51e5aa6bf06b1962eec0d57a9c8ca5fde12ce346fa466d946c4100dd53151dad0b7aaaa8eba5b96d0c8d59f8518dd50bd99d741e5aad392d17a4bd729ad26c5fa17c0c7084358699921365dce4c5a51", 0x97}], 0x8}}, {{&(0x7f0000000c00)={0xa, 0x4e23, 0x3, @loopback, 0xf1d7}, 0x1c, &(0x7f0000000d40)=[{&(0x7f0000000c40)="d675d745286e29de833025aafc20cfaf7efeb8", 0x13}, {&(0x7f0000000c80)="01832229740647724e39d590b2d8e8a37e2cd055eac60a5234d17973829efb0ece0b5783f34e61eee38180d2932b6fa1e8e4099f01358eff810e077adac45667ea338ea6d80d466d67eafe26066104a3003bce561d06235632411e86a63be306e863069a558ce145f5efbba9487d75d359f1d673bccc29ab5b35a81bbc6b559e58fe9542b658f4e12ae72f63839b99418cd072f84d28afcb62b85fd4f26db04aecb8098a945aa3cb070aa3c2bfeddc934db433211ba2fe40fe", 0xb9}], 0x2, &(0x7f0000000d80)}}, {{&(0x7f0000000f80)={0xa, 0x4e23, 0xe2a8, @loopback, 0xf31c}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000fc0)="d5ad6544613cdb7de01592e16d8a7c3c7e7bec9dbd1bf92350fd9400c84c30e75117b58766eb361d3bed83ff1679d67876f2e6bee867e0510eb73dfae421c73da447a64bf5e7ae6d4c1a95a02bcb1546d4b57c577616af098405cb9ecfc5c729407df73bfd3620b117649eb3cd3aeed308dd45455f10060b946ca893d8e587cf", 0x80}, {&(0x7f0000001040)="28b8b85cf893c7bed58227db15f8c3b1c90ed4b4c9fb1cce949d10b25921d9c0cca62a2915d39d25d8b2b3d78b4fa86337ca496cb521f3e8775ba3ca1066731c6bb5dd791a66f5af6d7ce01e29b06cace4c75f1ea7e997b4cd8b0d482dd1af", 0x5f}, {&(0x7f00000010c0)="0f282eddf7c1b987ce0a224166482a0f3bdea99bafd9ba1444b3da0ba9b8449a3708828fe230deb9b5a9b5ab1ba105c373f96974993a1b0c22d4cb8b0ef6430245e76aac3066590d925c943a40c81e617671aabe101d995297ef369477a2d18c0e3e4d788219f96428ba205c462c04fdf3f34348bf2339c2c1e68fc4fa06a24879cc50d48d931269fe98d312264770c00652637fcbe2442c531df34ea7a66cc0bc145340760498465d4b40202649befb44f0ed4923d740d622fbe6b2f2ac68ac3a07562834a6cbcbf22cb5426371945d6afb7050119c1e62cb13bf36d0f44b46dd5cda3edbc16b879ce0f2", 0xeb}, {&(0x7f00000011c0)="a0fc4e3c08da4264bf01c927916424a8d78e9da59307d18e1d4778e781a6b0d882ebb68c193a1f5e06be040ad7a9e5e3dd63a3412f93d20ca9749e35c44f1833f484e095c2056d15055ce34f9f5440b37ab5bb0cc9a1d58f18f3897439d66f64f81d8ababfab7148cdc8f90a15ffd7658d667b72937b943bf65495e7ce4a720c5fca5e52be2325e85d5aa103380072d90e72877030c1c3abc1f6deba09dfc28f076a95a9b4a1eb421b785535b50effaa468639ddcad971b1a02d93336f0106e4a050e28352f8881d4f8d2e0cb98c3abbeaeac75936c1ffa02fb7ecd2046ab8be4a3771023197a52ce2c80112ddcca702", 0xf0}], 0x4, &(0x7f00000013c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x1c4}}], 0x4, 0x4000300)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d800000018002f25e6924c1b00e6b904021d080006007c09e8fe55a10a0015400400142602600e1208000f0000000401a8001600140003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001f180000000000000014d6d930dfe1d9d322303983a475730d16a4683f5aeb4edbb57a5025ccca1e10360000000000000080d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b9f65137743370e97039207", 0xd8}], 0x1}, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x5)
write$binfmt_aout(r1, 0x0, 0xff2e)
lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000240), 0x2, 0x1)

305.610067ms ago: executing program 4 (id=1256):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {0x0, 0x60020000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2})

305.222882ms ago: executing program 4 (id=1257):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$kcm(0x10, 0x2, 0x4)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x231, 0x0, 0x0, &(0x7f00000001c0))
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r5, @ANYBLOB="08001b"], 0x34}}, 0x4004010)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000010000108000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='fdinfo\x00')
fchdir(r6)
r7 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r7, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e", 0x11}], 0x1}, 0x0)
r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$packet(0x11, 0x2, 0x300)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3570], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet6(0xa, 0x80002, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffd6d, &(0x7f0000000700)=[{&(0x7f0000000800)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508097358582bdbb7d553b4e92155000000000000000000", 0x39}], 0x1}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'})

6.726964ms ago: executing program 3 (id=1258):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket(0x11, 0xa, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
pipe2$9p(&(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x0)
r7 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
splice(r6, 0x0, r7, 0x0, 0x10000000000016, 0x0)
r8 = open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a)
r9 = open(&(0x7f0000000080)='./bus\x00', 0x143042, 0x83)
ftruncate(r9, 0x3000000)
sendfile(r8, r9, 0x0, 0x80000001)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000073000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES64=r5, @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES8=r6, @ANYRESDEC=r5, @ANYRES8], 0x3c}}, 0x0)
r11 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r12=>0x0, &(0x7f00000001c0)=<r13=>0x0)
syz_io_uring_submit(r12, r13, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x40, 0x0, @fd=r7, 0x0, 0x0, 0x10001, 0x8, 0x1, {0x0, 0x0, r10}})
io_uring_enter(r11, 0x2ded, 0x4000, 0x0, 0x0, 0x0)

0s ago: executing program 4 (id=1259):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2], 0x64}}, 0x0)

kernel console output (not intermixed with test programs):

etting 0 bulk endpoint 0xB has invalid maxpacket 47
[  118.974411][ T5980] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  118.977218][ T5980] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.984816][ T8119] bond5: entered promiscuous mode
[  118.988150][ T8119] 8021q: adding VLAN 0 to HW filter on device bond5
[  118.993023][ T8113] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  118.996841][ T5980] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  119.028555][ T8119] netlink: 'syz.3.567': attribute type 2 has an invalid length.
[  119.046601][ T8121] 8021q: adding VLAN 0 to HW filter on device bond6
[  119.051340][ T8121] bond5: (slave bond6): making interface the new active one
[  119.055521][ T8121] bond6: entered promiscuous mode
[  119.058948][ T8121] bond5: (slave bond6): Enslaving as an active interface with an up link
[  119.093100][ T8109] Set syz1 is full, maxelem 65536 reached
[  119.153251][ T5983] usb 8-1: USB disconnect, device number 13
[  119.179795][ T5944] Bluetooth: hci2: unexpected event for opcode 0x1009
[  119.268614][ T8112] input: syz0 as /devices/virtual/input/input33
[  119.644644][ T8133] netlink: 'syz.1.570': attribute type 1 has an invalid length.
[  119.653157][ T5944] Bluetooth: hci3: command 0x0c1a tx timeout
[  119.685283][ T8133] 8021q: adding VLAN 0 to HW filter on device bond1
[  119.710089][ T8133] 8021q: adding VLAN 0 to HW filter on device bond1
[  119.726668][ T8133] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  119.742194][ T8133] bond1: (slave vcan1): Error -95 calling set_mac_address
[  120.331477][    T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  120.493071][    T8] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  120.497328][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.501770][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.505642][    T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  120.511693][    T8] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  120.515257][    T8] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  120.518275][    T8] usb 6-1: Manufacturer: syz
[  120.521643][    T8] usb 6-1: config 0 descriptor??
[  120.757770][   T64] usb 9-1: USB disconnect, device number 6
[  120.917033][ T8152] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  120.918952][ T8152] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  120.922721][ T8152] vhci_hcd vhci_hcd.0: Device attached
[  120.962422][    T8] appleir 0003:05AC:8243.0009: unknown main item tag 0x0
[  120.966272][    T8] appleir 0003:05AC:8243.0009: No inputs registered, leaving
[  120.982593][    T8] appleir 0003:05AC:8243.0009: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  121.101450][ T1328] vhci_hcd: vhci_device speed not set
[  121.171473][ T1328] usb 45-1: new full-speed USB device number 2 using vhci_hcd
[  121.324856][ T8160] fuse: Bad value for 'fd'
[  121.492519][   T58] usb 7-1: USB disconnect, device number 14
[  121.518875][ T8162] pim6reg: entered allmulticast mode
[  121.537261][ T8162] pim6reg: left allmulticast mode
[  121.758514][ T5944] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  121.871737][   T64] usb 8-1: new full-speed USB device number 14 using dummy_hcd
[  122.024904][   T64] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  122.028992][   T64] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2
[  122.032578][   T64] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  122.036067][   T64] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.040912][   T64] usb 8-1: config 0 descriptor??
[  122.045189][   T64] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  122.047786][   T64] dvb-usb: bulk message failed: -22 (3/0)
[  122.053345][   T64] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  122.056987][   T64] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  122.059747][   T64] usb 8-1: media controller created
[  122.062582][   T64] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  122.068796][   T64] dvb-usb: bulk message failed: -22 (6/0)
[  122.071083][   T64] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  122.075968][   T64] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input34
[  122.081474][   T64] dvb-usb: schedule remote query interval to 150 msecs.
[  122.084154][   T64] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  122.184392][ T8155] vhci_hcd: connection reset by peer
[  122.186182][   T11] vhci_hcd: stop threads
[  122.187459][   T11] vhci_hcd: release socket
[  122.189482][   T11] vhci_hcd: disconnect device
[  122.241758][   T64] dvb-usb: bulk message failed: -22 (1/0)
[  122.243899][   T64] dvb-usb: error while querying for an remote control event.
[  122.262412][   T64] usb 8-1: USB disconnect, device number 14
[  122.272122][   T64] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  122.366103][ T8182] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  122.702229][ T8192] fuse: Bad value for 'fd'
[  122.853698][ T8202] netlink: 'syz.3.587': attribute type 21 has an invalid length.
[  122.856676][ T8202] netlink: 156 bytes leftover after parsing attributes in process `syz.3.587'.
[  122.956625][   T58] usb 6-1: USB disconnect, device number 9
[  122.989060][ T5944] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  123.039810][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.591'.
[  123.046771][ T8211] netlink: 48 bytes leftover after parsing attributes in process `syz.4.591'.
[  123.049470][ T8211] netlink: 36 bytes leftover after parsing attributes in process `syz.4.591'.
[  123.055625][ T8211] vlan3: entered allmulticast mode
[  123.057253][ T8211] gretap0: entered allmulticast mode
[  123.108740][ T8218] netlink: 192 bytes leftover after parsing attributes in process `syz.3.590'.
[  123.119589][ T8222] netlink: 64 bytes leftover after parsing attributes in process `syz.4.593'.
[  123.381456][   T35] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  123.414903][ T8229] netlink: 'syz.3.595': attribute type 4 has an invalid length.
[  123.422607][ T8229] netlink: 'syz.3.595': attribute type 4 has an invalid length.
[  123.533404][   T35] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  123.539468][   T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.548973][   T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.553045][   T35] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  123.559506][   T35] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  123.562543][   T35] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  123.565092][   T35] usb 9-1: Manufacturer: syz
[  123.572171][   T35] usb 9-1: config 0 descriptor??
[  123.755761][ T5944] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  123.949581][ T8249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.953778][ T8249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.956360][ T8249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.959029][ T8249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.963645][ T8249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.966226][ T8249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.968819][ T8249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.971340][ T8249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.974304][ T8249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.976734][ T8249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.990775][   T35] appleir 0003:05AC:8243.000A: unknown main item tag 0x0
[  123.993358][   T35] appleir 0003:05AC:8243.000A: No inputs registered, leaving
[  123.997868][   T35] appleir 0003:05AC:8243.000A: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  124.372310][ T8264] netlink: 'syz.3.604': attribute type 3 has an invalid length.
[  124.382443][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.604'.
[  125.135074][ T8274] netlink: 'syz.2.606': attribute type 1 has an invalid length.
[  125.187901][ T8274] bond4: entered promiscuous mode
[  125.190474][ T8274] 8021q: adding VLAN 0 to HW filter on device bond4
[  125.255711][ T8283] netlink: 'syz.1.608': attribute type 10 has an invalid length.
[  125.256814][ T8276] 8021q: adding VLAN 0 to HW filter on device bond5
[  125.266991][ T8276] bond4: (slave bond5): making interface the new active one
[  125.267114][ T8274] netlink: 'syz.2.606': attribute type 2 has an invalid length.
[  125.269205][ T8276] bond5: entered promiscuous mode
[  125.274445][ T8276] bond4: (slave bond5): Enslaving as an active interface with an up link
[  125.293484][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.297081][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.305901][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.308584][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.311474][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.314161][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.319754][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.322517][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.326844][ T8283] netlink: 'syz.1.608': attribute type 10 has an invalid length.
[  125.330303][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.333094][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.335795][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.338479][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.349235][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.351418][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.354609][ T8286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'.
[  125.354698][ T8283] netlink: 'syz.1.608': attribute type 10 has an invalid length.
[  125.358119][ T8286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'.
[  125.365437][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.368204][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.371231][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.373910][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.383983][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.386600][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.390862][ T8283] netlink: 'syz.1.608': attribute type 10 has an invalid length.
[  125.395628][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.398514][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.401524][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.404287][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.414704][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.416863][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.419978][ T8283] netlink: 'syz.1.608': attribute type 10 has an invalid length.
[  125.426416][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.429100][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.431962][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.434744][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.441952][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.444881][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.449451][ T8283] netlink: 'syz.1.608': attribute type 10 has an invalid length.
[  125.455471][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.458397][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.461487][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.464292][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.469707][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.472595][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.479145][ T8283] netlink: 'syz.1.608': attribute type 10 has an invalid length.
[  125.483004][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.485855][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.488835][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.491781][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.499264][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.502262][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.507942][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.510939][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.514024][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.516891][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.526298][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.529263][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.534498][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.537393][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.540294][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.543114][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.548591][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.550977][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.554432][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.556558][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.558773][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.560991][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.565084][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.567163][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.571906][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.574515][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.576732][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.578808][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.583021][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.585118][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.588459][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.590834][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.593613][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.595660][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.599468][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.601651][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.606397][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.608547][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.611290][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.613982][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.623268][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.626304][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.634239][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.637228][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.640359][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.643443][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.649170][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.652194][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.657464][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.660283][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.663344][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.666176][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.671310][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.674334][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.679686][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.682667][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.685766][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.688653][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.694901][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.697559][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.702283][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.705138][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.708191][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.711189][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.716563][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.719241][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.724045][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.726624][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.729370][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.732036][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.736972][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.739657][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.745695][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.748308][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.751826][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.754383][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.760601][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.763213][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.767874][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.770337][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.772838][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.774888][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.779869][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.782663][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.788870][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.791603][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.794391][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.796995][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.803668][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.806355][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.810968][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.813643][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.816432][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.819018][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.837935][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.840688][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.845662][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.848214][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.850922][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.853595][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.858014][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.860739][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.865423][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.868024][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.870835][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.873499][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.880029][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.882696][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.886790][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.889381][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.892165][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.894697][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.900283][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.903085][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.907242][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.909857][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.912657][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.915279][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.934838][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.937794][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.942279][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.945257][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.948020][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.950706][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.980512][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.982691][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.022531][ T8290] 8021q: adding VLAN 0 to HW filter on device bond5
[  126.044828][ T8294] 8021q: adding VLAN 0 to HW filter on device bond5
[  126.050070][ T8294] bond5: (slave vcan1): The slave device specified does not support setting the MAC address
[  126.058498][ T8294] bond5: (slave vcan1): Error -95 calling set_mac_address
[  126.084619][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.086730][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.088968][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.091047][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.102794][   T58] usb 9-1: USB disconnect, device number 7
[  126.108653][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.110750][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.153084][ T5944] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  126.281478][ T1328] vhci_hcd: vhci_device speed not set
[  126.695743][ T8318] team0: Port device netdevsim0 added
[  126.707447][ T8318] team0: Port device netdevsim0 removed
[  126.959468][   T58] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  127.092263][ T8330] can0: slcan on ttyS3.
[  127.120115][   T58] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  127.124372][   T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.128628][   T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.133980][ T8332] rose0: entered allmulticast mode
[  127.136241][ T8332] bond0: (slave rose0): Enslaving as an active interface with an up link
[  127.141634][   T58] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  127.147519][   T58] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  127.151003][   T58] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  127.163388][   T58] usb 8-1: Manufacturer: syz
[  127.166547][   T58] usb 8-1: config 0 descriptor??
[  127.281164][ T8343] netlink: 16 bytes leftover after parsing attributes in process `syz.2.623'.
[  127.573726][   T58] appleir 0003:05AC:8243.000B: unknown main item tag 0x0
[  127.576196][   T58] appleir 0003:05AC:8243.000B: No inputs registered, leaving
[  127.579279][   T58] appleir 0003:05AC:8243.000B: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  127.671982][ T8324] can0 (unregistered): slcan off ttyS3.
[  127.757397][ T8369] team0: Port device geneve1 added
[  128.444957][ T5983] libceph: connect (1)[c::]:6789 error -101
[  128.447475][ T5983] libceph: mon0 (1)[c::]:6789 connect error
[  128.701681][ T5983] libceph: connect (1)[c::]:6789 error -101
[  128.703715][ T5983] libceph: mon0 (1)[c::]:6789 connect error
[  128.731480][ T1461] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[  128.763353][   T39] kauditd_printk_skb: 58 callbacks suppressed
[  128.763364][   T39] audit: type=1326 audit(1737195915.822:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8411 comm="syz.1.641" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ae579 code=0x0
[  128.880102][ T8419] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  128.882876][ T1461] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  128.885802][ T1461] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  128.888267][ T1461] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  128.890847][ T1461] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.894427][ T1461] usb 7-1: config 0 descriptor??
[  128.897327][ T1461] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  128.899229][ T1461] dvb-usb: bulk message failed: -22 (3/0)
[  128.902571][ T1461] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  128.905331][ T1461] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  128.908705][ T1461] usb 7-1: media controller created
[  128.911116][ T1461] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  128.915688][ T1461] dvb-usb: bulk message failed: -22 (6/0)
[  128.917481][ T1461] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  128.921026][ T1461] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input35
[  128.924646][ T1461] dvb-usb: schedule remote query interval to 150 msecs.
[  128.926587][ T1461] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  129.081960][    T8] dvb-usb: bulk message failed: -22 (1/0)
[  129.084362][    T8] dvb-usb: error while querying for an remote control event.
[  129.136472][ T8408] 9pnet: Could not find request transport: virtiocachetag=overlay
[  129.197353][   T35] usb 7-1: USB disconnect, device number 15
[  129.207591][   T35] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  129.213813][ T1461] libceph: connect (1)[c::]:6789 error -101
[  129.215587][ T1461] libceph: mon0 (1)[c::]:6789 connect error
[  129.264727][ T8401] ceph: No mds server is up or the cluster is laggy
[  129.555004][ T8431] validate_nla: 25 callbacks suppressed
[  129.555067][ T8431] netlink: 'syz.4.645': attribute type 1 has an invalid length.
[  129.682126][   T58] usb 8-1: USB disconnect, device number 15
[  129.901492][   T35] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  130.031496][ T1461] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  130.064198][   T35] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  130.068572][   T35] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  130.081414][   T35] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  130.085026][   T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.103097][ T8435] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  130.106868][   T35] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  130.182845][ T1461] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  130.185970][ T1461] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  130.188791][ T1461] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  130.191316][ T1461] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.196576][ T8438] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  130.202551][ T1461] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  130.292137][ T1271] net_ratelimit: 1022 callbacks suppressed
[  130.292154][ T1271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  130.383535][ T8442] __nla_validate_parse: 1 callbacks suppressed
[  130.383546][ T8442] netlink: 40 bytes leftover after parsing attributes in process `syz.3.649'.
[  130.396124][ T8434] input: syz0 as /devices/virtual/input/input36
[  130.483415][ T8437] input: syz0 as /devices/virtual/input/input37
[  131.401102][ T8446] tap0: tun_chr_ioctl cmd 1074025672
[  131.403354][ T8446] tap0: ignored: set checksum enabled
[  131.410598][   T39] audit: type=1804 audit(1737195918.462:160): pid=8446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.650" name="/newroot/147/file0/file0" dev="9p" ino=38535883 res=1 errno=0
[  131.571789][  T211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.201945][    T8] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  132.202692][ T1413] ieee802154 phy0 wpan0: encryption failed: -22
[  132.204798][ T1135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.206057][ T1413] ieee802154 phy1 wpan1: encryption failed: -22
[  132.364072][    T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  132.367828][    T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  132.371159][    T8] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  132.374094][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.377232][    T8] usb 6-1: config 0 descriptor??
[  132.380672][    T8] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  132.382786][    T8] dvb-usb: bulk message failed: -22 (3/0)
[  132.387005][    T8] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  132.391507][    T8] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  132.393568][    T8] usb 6-1: media controller created
[  132.396026][    T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  132.399737][    T8] dvb-usb: bulk message failed: -22 (6/0)
[  132.402027][    T8] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  132.405732][    T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input38
[  132.409858][    T8] dvb-usb: schedule remote query interval to 150 msecs.
[  132.411949][    T8] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  132.572396][ T5983] dvb-usb: bulk message failed: -22 (1/0)
[  132.574157][ T5983] dvb-usb: error while querying for an remote control event.
[  132.585371][ T8455] dvb-usb: bulk message failed: -22 (4/0)
[  132.588767][ T5983] usb 6-1: USB disconnect, device number 10
[  132.595376][ T5983] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  132.621997][   T25] usb 9-1: USB disconnect, device number 8
[  132.742004][ T8462] netlink: 'syz.4.656': attribute type 12 has an invalid length.
[  132.753491][ T1328] usb 7-1: USB disconnect, device number 16
[  132.910296][ T8481] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  132.942180][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'.
[  132.944791][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'.
[  133.475505][ T8493] netlink: 'syz.2.665': attribute type 1 has an invalid length.
[  133.481827][ T1135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  133.485200][  T211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  133.488234][   T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  133.501631][ T8493] bond6: entered promiscuous mode
[  133.503317][ T8493] 8021q: adding VLAN 0 to HW filter on device bond6
[  133.549769][ T8493] 8021q: adding VLAN 0 to HW filter on device bond7
[  133.565659][ T8493] bond6: (slave bond7): making interface the new active one
[  133.567824][ T8493] bond7: entered promiscuous mode
[  133.569630][ T8493] bond6: (slave bond7): Enslaving as an active interface with an up link
[  133.597959][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.668'.
[  133.600544][ T8501] netlink: 48 bytes leftover after parsing attributes in process `syz.1.668'.
[  133.603574][ T8501] netlink: 36 bytes leftover after parsing attributes in process `syz.1.668'.
[  133.632704][ T8503] netlink: 20 bytes leftover after parsing attributes in process `syz.4.669'.
[  133.639533][ T8493] netlink: 'syz.2.665': attribute type 2 has an invalid length.
[  133.759880][ T8522] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  134.406906][ T5944] Bluetooth: hci2: unexpected event for opcode 0x1009
[  134.619072][ T8548] netlink: 56 bytes leftover after parsing attributes in process `syz.1.685'.
[  134.654976][ T8550] Bluetooth: MGMT ver 1.23
[  134.675630][ T8552] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  134.833230][ T8567] netlink: 40 bytes leftover after parsing attributes in process `syz.1.693'.
[  134.870456][ T8558] tty tty27: ldisc open failed (-12), clearing slot 26
[  135.315658][ T8583] random: crng reseeded on system resumption
[  135.710994][ T8597] loop8: detected capacity change from 0 to 7
[  135.714962][ T8597] Dev loop8: unable to read RDB block 7
[  135.716784][ T8597]  loop8: unable to read partition table
[  135.718578][ T8597] loop8: partition table beyond EOD, truncated
[  135.720410][ T8597] loop_reread_partitions: partition scan of loop8 (�被x������ڬ��dƤ����ݡ�����
[  135.720410][ T8597] 
) failed (rc=-5)
[  136.042186][ T1146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  136.148807][ T8619] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  136.151279][ T8622] netlink: 'syz.2.707': attribute type 10 has an invalid length.
[  136.435488][ T8637] netlink: 'syz.2.709': attribute type 1 has an invalid length.
[  136.461690][ T8637] bond8: entered promiscuous mode
[  136.464196][ T8637] 8021q: adding VLAN 0 to HW filter on device bond8
[  136.495010][ T8637] 8021q: adding VLAN 0 to HW filter on device bond9
[  136.499619][ T8637] bond8: (slave bond9): making interface the new active one
[  136.501993][ T8637] bond9: entered promiscuous mode
[  136.506916][ T8637] bond8: (slave bond9): Enslaving as an active interface with an up link
[  136.524215][ T8637] netlink: 'syz.2.709': attribute type 2 has an invalid length.
[  136.602568][  T211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  136.995801][ T8656] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  137.017900][ T8658] netlink: 64 bytes leftover after parsing attributes in process `syz.4.714'.
[  137.146048][ T8656] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  137.275216][ T8665] vcan0: entered allmulticast mode
[  137.810700][ T8672] netlink: 6 bytes leftover after parsing attributes in process `syz.3.718'.
[  137.961705][  T211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  137.990932][ T8696] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  138.268350][ T8722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.272429][ T1328] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  138.301751][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.357105][ T8726] netlink: 'syz.1.726': attribute type 12 has an invalid length.
[  138.359564][ T8726] netlink: 'syz.1.726': attribute type 29 has an invalid length.
[  138.362853][ T8726] netlink: 148 bytes leftover after parsing attributes in process `syz.1.726'.
[  138.366611][ T8726] netlink: 'syz.1.726': attribute type 1 has an invalid length.
[  138.369719][ T8726] netlink: 'syz.1.726': attribute type 2 has an invalid length.
[  138.372890][ T8726] netlink: 19 bytes leftover after parsing attributes in process `syz.1.726'.
[  138.428024][ T5944] Bluetooth: hci2: unexpected event for opcode 0x0c56
[  138.454787][ T1328] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  138.461413][ T1328] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  138.464273][ T1328] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  138.466933][ T1328] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.471269][ T8702] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  138.477454][ T1328] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  138.575873][ T6001] libceph: connect (1)[c::]:6789 error -101
[  138.577772][ T6001] libceph: mon0 (1)[c::]:6789 connect error
[  138.612421][   T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.813252][ T8693] input: syz0 as /devices/virtual/input/input39
[  138.842022][    T8] libceph: connect (1)[c::]:6789 error -101
[  138.844362][    T8] libceph: mon0 (1)[c::]:6789 connect error
[  138.969220][ T1328] usb 8-1: USB disconnect, device number 16
[  139.011673][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.107667][ T8757] Cannot find add_set index 0 as target
[  139.243498][ T1271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.262135][ T8761] fuse: Bad value for 'group_id'
[  139.264064][ T8761] fuse: Bad value for 'group_id'
[  139.352769][    T8] libceph: connect (1)[c::]:6789 error -101
[  139.355746][    T8] libceph: mon0 (1)[c::]:6789 connect error
[  139.425981][ T8742] ceph: No mds server is up or the cluster is laggy
[  139.585346][ T1461] IPVS: starting estimator thread 0...
[  139.671498][ T8770] IPVS: using max 36 ests per chain, 86400 per kthread
[  139.688199][ T8774] loop8: detected capacity change from 0 to 7
[  139.690811][ T8774] Dev loop8: unable to read RDB block 7
[  139.692661][ T8774]  loop8: unable to read partition table
[  139.695933][ T8774] loop8: partition table beyond EOD, truncated
[  139.698528][ T8774] loop_reread_partitions: partition scan of loop8 (�被x������ڬ��dƤ����ݡ�����
[  139.698528][ T8774] 
) failed (rc=-5)
[  140.034484][ T5944] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  140.315894][ T8797] netlink: 72 bytes leftover after parsing attributes in process `syz.1.748'.
[  140.358448][ T8799] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  140.871444][   T25] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  141.032767][   T25] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  141.035596][   T25] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  141.038430][   T25] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  141.041470][   T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.046040][ T8824] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  141.049427][   T25] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  141.161977][  T211] net_ratelimit: 1 callbacks suppressed
[  141.161988][  T211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.371462][   T25] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  141.532998][   T25] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  141.536613][   T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  141.540758][   T25] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  141.549636][   T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.554481][   T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.558988][   T25] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  141.561926][   T25] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  141.564234][   T25] usb 6-1: Product: syz
[  141.565382][   T25] usb 6-1: Manufacturer: syz
[  141.573256][   T25] cdc_wdm 6-1:1.0: skipping garbage
[  141.574817][   T25] cdc_wdm 6-1:1.0: skipping garbage
[  141.581410][   T25] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  141.583197][   T25] cdc_wdm 6-1:1.0: Unknown control protocol
[  141.779438][ T8830] cdc_wdm 6-1:1.0: Error submitting int urb - -90
[  141.785216][ T8830] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.755'.
[  141.788776][ T8830] openvswitch: netlink: Flow actions attr not present in new flow.
[  141.795942][    T8] usb 6-1: USB disconnect, device number 11
[  142.111288][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.763'.
[  142.113986][ T8857] netlink: 48 bytes leftover after parsing attributes in process `syz.3.763'.
[  142.116531][ T8857] netlink: 36 bytes leftover after parsing attributes in process `syz.3.763'.
[  142.151119][ T8859] netlink: 20 bytes leftover after parsing attributes in process `syz.3.764'.
[  142.237931][ T8862] FAULT_INJECTION: forcing a failure.
[  142.237931][ T8862] name failslab, interval 1, probability 0, space 0, times 0
[  142.243600][ T8862] CPU: 2 UID: 0 PID: 8862 Comm: syz.3.765 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0
[  142.247764][ T8862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  142.251971][ T8862] Call Trace:
[  142.253335][ T8862]  <TASK>
[  142.254544][ T8862]  dump_stack_lvl+0x16c/0x1f0
[  142.256450][ T8862]  should_fail_ex+0x497/0x5b0
[  142.258421][ T8862]  ? fs_reclaim_acquire+0xae/0x150
[  142.260499][ T8862]  should_failslab+0xc2/0x120
[  142.262448][ T8862]  kmem_cache_alloc_noprof+0x6e/0x3b0
[  142.264636][ T8862]  ? security_file_alloc+0x34/0x2b0
[  142.266709][ T8862]  security_file_alloc+0x34/0x2b0
[  142.268602][ T8862]  init_file+0x93/0x480
[  142.270237][ T8862]  alloc_empty_file+0x91/0x1e0
[  142.272062][ T8862]  path_openat+0xe1/0x2d60
[  142.273507][ T8862]  ? hlock_class+0x4e/0x130
[  142.274889][ T8862]  ? __lock_acquire+0x15a9/0x3c40
[  142.276342][ T8862]  ? __pfx_path_openat+0x10/0x10
[  142.277787][ T8862]  ? __pfx___lock_acquire+0x10/0x10
[  142.279328][ T8862]  ? lock_acquire.part.0+0x11b/0x380
[  142.281137][ T8862]  ? find_held_lock+0x2d/0x110
[  142.282560][ T8862]  do_filp_open+0x20c/0x470
[  142.284172][ T8862]  ? __pfx_do_filp_open+0x10/0x10
[  142.285698][ T8862]  ? find_held_lock+0x2d/0x110
[  142.287096][ T8862]  ? alloc_fd+0x41f/0x760
[  142.288410][ T8862]  do_sys_openat2+0x17a/0x1e0
[  142.289794][ T8862]  ? __pfx_do_sys_openat2+0x10/0x10
[  142.291575][ T8862]  ? __fget_files+0x206/0x3a0
[  142.292951][ T8862]  __ia32_compat_sys_openat+0x16e/0x210
[  142.294613][ T8862]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  142.296605][ T8862]  ? ksys_write+0x1ba/0x250
[  142.297931][ T8862]  __do_fast_syscall_32+0x73/0x120
[  142.299488][ T8862]  do_fast_syscall_32+0x32/0x80
[  142.301243][ T8862]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  142.303368][ T8862] RIP: 0023:0xf7fa1579
[  142.304541][ T8862] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  142.310120][ T8862] RSP: 002b:00000000f50d555c EFLAGS: 00000296 ORIG_RAX: 0000000000000127
[  142.313243][ T8862] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000a80
[  142.315485][ T8862] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  142.317858][ T8862] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  142.320172][ T8862] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  142.322598][ T8862] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  142.325002][ T8862]  </TASK>
[  142.420763][ T8865] netlink: 'syz.1.766': attribute type 1 has an invalid length.
[  142.446247][   T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.448541][ T8865] 8021q: adding VLAN 0 to HW filter on device bond3
[  142.515296][ T8865] 8021q: adding VLAN 0 to HW filter on device bond3
[  142.517937][ T8865] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[  142.526954][ T8865] bond3: (slave vcan1): Error -95 calling set_mac_address
[  142.601760][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  143.008073][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.768'.
[  143.017912][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.768'.
[  143.263557][ T8877] netlink: 'syz.3.771': attribute type 1 has an invalid length.
[  143.266648][ T8879] netlink: 56 bytes leftover after parsing attributes in process `syz.1.770'.
[  143.330730][ T8886] netlink: 40 bytes leftover after parsing attributes in process `syz.3.773'.
[  143.340105][   T35] libceph: connect (1)[c::]:6789 error -101
[  143.342897][   T35] libceph: mon0 (1)[c::]:6789 connect error
[  143.363937][ T8882] ceph: No mds server is up or the cluster is laggy
[  143.575636][ T6001] usb 7-1: USB disconnect, device number 17
[  143.627809][ T8898] --map-set only usable from mangle table
[  143.641824][  T211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  143.731737][   T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  143.755213][ T8906] loop8: detected capacity change from 0 to 6
[  143.757323][ T8906] Dev loop8: unable to read RDB block 6
[  143.759108][ T8906]  loop8: unable to read partition table
[  143.760785][ T8906] loop8: partition table beyond EOD, truncated
[  143.763143][ T8906] loop_reread_partitions: partition scan of loop8 (�被x������ڬ��dƤ����ݡ�����
[  143.763143][ T8906] 
) failed (rc=-5)
[  144.371889][  T211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.399492][ T8912] random: crng reseeded on system resumption
[  144.518239][ T8928] netlink: 60 bytes leftover after parsing attributes in process `syz.3.788'.
[  144.767589][ T8936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.792275][ T8936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.897505][   T35] libceph: connect (1)[c::]:6789 error -101
[  144.899329][   T35] libceph: mon0 (1)[c::]:6789 connect error
[  145.001967][ T1271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.173306][   T35] libceph: connect (1)[c::]:6789 error -101
[  145.175575][   T35] libceph: mon0 (1)[c::]:6789 connect error
[  145.313303][ T8947] bridge0: port 3(hsr_slave_1) entered blocking state
[  145.315461][ T8947] bridge0: port 3(hsr_slave_1) entered disabled state
[  145.317599][ T8947] hsr_slave_1: entered allmulticast mode
[  145.320725][ T8947] hsr_slave_1: left allmulticast mode
[  145.452594][ T8951] netlink: 64 bytes leftover after parsing attributes in process `syz.3.794'.
[  145.681685][   T35] libceph: connect (1)[c::]:6789 error -101
[  145.683484][   T35] libceph: mon0 (1)[c::]:6789 connect error
[  145.729388][ T8938] ceph: No mds server is up or the cluster is laggy
[  145.772596][ T8958] fuse: Unknown parameter 'grou00000000000000000000'
[  146.514217][ T8977] netlink: 'syz.4.803': attribute type 1 has an invalid length.
[  146.546825][ T8977] bond8: entered promiscuous mode
[  146.548667][ T8977] 8021q: adding VLAN 0 to HW filter on device bond8
[  146.597322][   T39] audit: type=1326 audit(1737197472.655:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.2.802" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000
[  146.607909][   T39] audit: type=1326 audit(1737197472.655:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.2.802" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000
[  146.614580][   T39] audit: type=1326 audit(1737197472.665:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.2.802" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf712e579 code=0x7ffc0000
[  146.614897][ T8980] netlink: 'syz.4.803': attribute type 2 has an invalid length.
[  146.615198][ T8977] 8021q: adding VLAN 0 to HW filter on device bond9
[  146.616227][ T8977] bond8: (slave bond9): making interface the new active one
[  146.616239][ T8977] bond9: entered promiscuous mode
[  146.616552][ T8977] bond8: (slave bond9): Enslaving as an active interface with an up link
[  146.621613][   T39] audit: type=1326 audit(1737197472.665:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.2.802" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000
[  146.641205][   T39] audit: type=1326 audit(1737197472.665:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.2.802" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000
[  146.649193][   T39] audit: type=1326 audit(1737197472.665:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.2.802" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf712e579 code=0x7ffc0000
[  146.656309][   T39] audit: type=1326 audit(1737197472.665:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.2.802" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000
[  146.663626][   T39] audit: type=1326 audit(1737197472.665:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.2.802" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000
[  146.669742][   T39] audit: type=1326 audit(1737197472.665:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.2.802" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf712e579 code=0x7ffc0000
[  146.676085][   T39] audit: type=1326 audit(1737197472.665:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.2.802" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000
[  146.914947][ T8988] [U] 
[  146.954911][   T78] net_ratelimit: 2 callbacks suppressed
[  146.954922][   T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.069959][ T8990] netlink: 'syz.3.806': attribute type 10 has an invalid length.
[  147.081997][ T8990] team0: Port device netdevsim0 added
[  147.089324][ T8990] netlink: 'syz.3.806': attribute type 10 has an invalid length.
[  147.264513][ T8995] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  147.266410][ T8995] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  147.268503][ T8999] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11)
[  147.270370][ T8999] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  147.273997][ T8999] vhci_hcd vhci_hcd.0: Device attached
[  147.277074][ T8995] vhci_hcd vhci_hcd.0: Device attached
[  147.298904][ T8990] team0: Port device netdevsim0 removed
[  147.344020][ T9005] syz.2.808: attempt to access beyond end of device
[  147.344020][ T9005] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0
[  147.348280][ T9005] XFS (nbd2): SB validate failed with error -5.
[  147.493931][ T5944] Bluetooth: hci1: unexpected event for opcode 0x1009
[  147.534499][ T5289] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  147.538488][   T35] usb 45-1: new low-speed USB device number 3 using vhci_hcd
[  147.576937][ T9017] netlink: 112 bytes leftover after parsing attributes in process `syz.2.810'.
[  147.589824][ T9017] sg_write: data in/out 1836477195/60 bytes for SCSI command 0x0-- guessing data in;
[  147.589824][ T9017]    program syz.2.810 not setting count and/or reply_len properly
[  147.671532][ T5289] usb 9-1: device descriptor read/64, error -71
[  147.843414][ T9030] evm: overlay not supported
[  147.848806][ T9030] vlan4: entered allmulticast mode
[  147.850744][ T9030] bond0: entered allmulticast mode
[  147.852962][ T9030] bond_slave_0: entered allmulticast mode
[  147.854709][ T9030] bond_slave_1: entered allmulticast mode
[  147.860862][ T9030] bond0: left allmulticast mode
[  147.862531][ T9030] bond_slave_0: left allmulticast mode
[  147.864112][ T9030] bond_slave_1: left allmulticast mode
[  147.911537][ T5289] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  148.061510][ T5289] usb 9-1: device descriptor read/64, error -71
[  148.171770][ T5289] usb usb9-port1: attempt power cycle
[  148.201651][   T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.251531][ T5980] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  148.270232][ T9040] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  148.272783][ T9040] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  148.276802][ T9040] vhci_hcd vhci_hcd.0: Device attached
[  148.452767][ T5980] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  148.456024][ T5980] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  148.458881][ T5980] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  148.461626][ T5980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.504076][    T8] vhci_hcd: vhci_device speed not set
[  148.504930][ T9037] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  148.515794][ T5980] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  148.531592][ T5289] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  148.571816][    T8] usb 43-1: new full-speed USB device number 2 using vhci_hcd
[  148.580071][ T5289] usb 9-1: device descriptor read/8, error -71
[  148.782710][ T9036] input: syz0 as /devices/virtual/input/input40
[  148.821713][ T5289] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  148.842053][ T5289] usb 9-1: device descriptor read/8, error -71
[  148.842987][ T9048] netlink: 40 bytes leftover after parsing attributes in process `syz.2.817'.
[  148.865974][ T6001] usb 6-1: USB disconnect, device number 12
[  148.954229][ T5289] usb usb9-port1: unable to enumerate USB device
[  149.065235][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.819'.
[  149.068636][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.819'.
[  149.466420][ T9063] loop8: detected capacity change from 0 to 5
[  149.469421][ T9063] Dev loop8: unable to read RDB block 5
[  149.471066][ T9063]  loop8: unable to read partition table
[  149.473801][ T9063] loop8: partition table beyond EOD, truncated
[  149.475603][ T9063] loop_reread_partitions: partition scan of loop8 (�被x������ڬ��dƤ����ݡ�����
[  149.475603][ T9063] 
) failed (rc=-5)
[  149.481922][   T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.485151][   T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.487642][   T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.509067][ T9041] vhci_hcd: connection reset by peer
[  149.510810][   T45] vhci_hcd: stop threads
[  149.512228][   T45] vhci_hcd: release socket
[  149.521625][   T45] vhci_hcd: disconnect device
[  149.594962][ T9068] FAULT_INJECTION: forcing a failure.
[  149.594962][ T9068] name failslab, interval 1, probability 0, space 0, times 0
[  149.598828][ T9068] CPU: 0 UID: 0 PID: 9068 Comm: syz.3.824 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0
[  149.602031][ T9068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  149.605208][ T9068] Call Trace:
[  149.606207][ T9068]  <TASK>
[  149.607104][ T9068]  dump_stack_lvl+0x16c/0x1f0
[  149.608526][ T9068]  should_fail_ex+0x497/0x5b0
[  149.609996][ T9068]  ? fs_reclaim_acquire+0xae/0x150
[  149.611507][ T9068]  should_failslab+0xc2/0x120
[  149.612956][ T9068]  kmem_cache_alloc_noprof+0x6e/0x3b0
[  149.614628][ T9068]  ? __pfx_mark_lock+0x10/0x10
[  149.616074][ T9068]  ? __kvm_mmu_topup_memory_cache+0x18f/0x600
[  149.617892][ T9068]  __kvm_mmu_topup_memory_cache+0x18f/0x600
[  149.619645][ T9068]  mmu_topup_memory_caches+0x22/0xd0
[  149.621629][ T9068]  kvm_mmu_load+0xda/0x21f0
[  149.623500][ T9068]  ? mark_held_locks+0x9f/0xe0
[  149.625244][ T9068]  ? vmx_flush_tlb_guest+0x111/0x560
[  149.626871][ T9068]  ? rcu_is_watching+0x12/0xc0
[  149.628325][ T9068]  ? __pfx_kvm_mmu_load+0x10/0x10
[  149.629860][ T9068]  ? kvm_cpu_has_injectable_intr+0x12a/0x1a0
[  149.631685][ T9068]  ? kvm_check_and_inject_events+0x725/0x12e0
[  149.633552][ T9068]  ? record_steal_time+0x50/0xbe0
[  149.635076][ T9068]  vcpu_run+0x2e2e/0x4c00
[  149.636393][ T9068]  ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10
[  149.638111][ T9068]  ? __pfx_vcpu_run+0x10/0x10
[  149.639538][ T9068]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  149.641263][ T9068]  ? rcu_is_watching+0x12/0xc0
[  149.642761][ T9068]  ? trace_lock_acquire+0x14e/0x1f0
[  149.644377][ T9068]  ? __local_bh_enable_ip+0xa4/0x120
[  149.646037][ T9068]  ? lockdep_hardirqs_on+0x7c/0x110
[  149.647602][ T9068]  ? kvm_arch_vcpu_ioctl_run+0x150/0x1740
[  149.649404][ T9068]  ? lock_acquire+0x2f/0xb0
[  149.650781][ T9068]  ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740
[  149.652657][ T9068]  kvm_arch_vcpu_ioctl_run+0x44a/0x1740
[  149.654595][ T9068]  kvm_vcpu_ioctl+0x6ce/0x1520
[  149.656073][ T9068]  ? tomoyo_path_number_perm+0x46d/0x5b0
[  149.657790][ T9068]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  149.659384][ T9068]  ? tomoyo_path_number_perm+0x190/0x5b0
[  149.661116][ T9068]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  149.662945][ T9068]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  149.664739][ T9068]  ? do_vfs_ioctl+0x513/0x1950
[  149.666165][ T9068]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  149.667658][ T9068]  ? __pfx_lock_release+0x10/0x10
[  149.669100][ T9068]  ? trace_lock_acquire+0x14e/0x1f0
[  149.670653][ T9068]  kvm_vcpu_compat_ioctl+0x210/0x3f0
[  149.672172][ T9068]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  149.674034][ T9068]  ? __fget_files+0x206/0x3a0
[  149.675451][ T9068]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  149.677208][ T9068]  __do_compat_sys_ioctl+0x1cb/0x2c0
[  149.678823][ T9068]  __do_fast_syscall_32+0x73/0x120
[  149.680373][ T9068]  do_fast_syscall_32+0x32/0x80
[  149.681883][ T9068]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  149.683739][ T9068] RIP: 0023:0xf7fa1579
[  149.685162][ T9068] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  149.690929][ T9068] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  149.693492][ T9068] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80
[  149.695923][ T9068] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  149.698352][ T9068] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  149.700777][ T9068] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  149.703166][ T9068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  149.705568][ T9068]  </TASK>
[  149.754466][ T9073] netlink: 72 bytes leftover after parsing attributes in process `syz.2.825'.
[  149.806842][ T9079] xt_socket: unknown flags 0x4
[  149.990351][ T9081] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  150.095215][ T9088] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  150.183987][ T9002] vhci_hcd: connection closed
[  150.190394][ T9000] vhci_hcd: connection reset by peer
[  150.191467][   T45] vhci_hcd: stop threads
[  150.195516][   T45] vhci_hcd: release socket
[  150.197605][   T45] vhci_hcd: disconnect device
[  150.200244][   T45] vhci_hcd: stop threads
[  150.202298][   T45] vhci_hcd: release socket
[  150.204290][   T45] vhci_hcd: disconnect device
[  150.520470][ T5983] IPVS: starting estimator thread 0...
[  150.611580][ T9108] IPVS: using max 27 ests per chain, 64800 per kthread
[  150.762177][   T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.784760][ T9110] /dev/sr0: Can't open blockdev
[  151.001462][ T5983] usb 8-1: new full-speed USB device number 17 using dummy_hcd
[  151.124918][ T9118] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.127625][ T9118] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.130887][ T9118] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.135952][ T9118] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.153087][ T5983] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  151.155973][ T5983] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2
[  151.158468][ T5983] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  151.161680][ T5983] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.165861][ T5983] usb 8-1: config 0 descriptor??
[  151.168801][ T5983] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  151.170901][ T5983] dvb-usb: bulk message failed: -22 (3/0)
[  151.173407][ T5983] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  151.176585][ T5983] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  151.183416][ T5983] usb 8-1: media controller created
[  151.187044][ T5983] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  151.190690][ T9118] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  151.191910][ T5983] dvb-usb: bulk message failed: -22 (6/0)
[  151.194575][ T5983] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  151.196776][ T9118] vlan2: left promiscuous mode
[  151.199605][ T5983] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input41
[  151.205699][ T5983] dvb-usb: schedule remote query interval to 150 msecs.
[  151.208203][ T5983] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  151.241811][ T9118] gretap0: left allmulticast mode
[  151.249586][ T9118] vlan3: left allmulticast mode
[  151.252275][ T9119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.837'.
[  151.309435][ T9129] netlink: 'syz.4.841': attribute type 1 has an invalid length.
[  151.322547][ T9129] bond10: entered promiscuous mode
[  151.326144][ T9129] 8021q: adding VLAN 0 to HW filter on device bond10
[  151.333054][ T5944] Bluetooth: hci2: unexpected event for opcode 0x1009
[  151.371729][ T5983] dvb-usb: bulk message failed: -22 (1/0)
[  151.373428][ T5983] dvb-usb: error while querying for an remote control event.
[  151.377707][ T1016] usb 8-1: USB disconnect, device number 17
[  151.387003][ T9129] 8021q: adding VLAN 0 to HW filter on device bond11
[  151.394714][ T1016] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  151.396667][ T9129] bond10: (slave bond11): making interface the new active one
[  151.396732][ T9136] netlink: 'syz.4.841': attribute type 2 has an invalid length.
[  151.403437][ T9129] bond11: entered promiscuous mode
[  151.410078][ T9129] bond10: (slave bond11): Enslaving as an active interface with an up link
[  151.438160][ T9138] program syz.1.844 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  151.691485][ T5289] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  151.853621][ T5289] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  151.856654][ T5289] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  151.859308][ T5289] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  151.863172][ T5289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.871707][ T5289] usb 6-1: config 0 descriptor??
[  151.874603][ T5289] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  151.876626][ T5289] dvb-usb: bulk message failed: -22 (3/0)
[  151.879070][ T5289] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  151.882646][ T5289] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  151.884735][ T5289] usb 6-1: media controller created
[  151.886519][ T5289] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  151.890678][ T5289] dvb-usb: bulk message failed: -22 (6/0)
[  151.894136][ T5289] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  151.897885][ T5289] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input42
[  151.902851][ T5289] dvb-usb: schedule remote query interval to 150 msecs.
[  151.904981][ T5289] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  152.061479][ T5289] dvb-usb: bulk message failed: -22 (1/0)
[  152.063120][ T5289] dvb-usb: error while querying for an remote control event.
[  152.076728][ T5289] usb 6-1: USB disconnect, device number 13
[  152.104103][ T5289] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  152.151962][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'.
[  152.222874][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'.
[  152.281918][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'.
[  152.331905][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'.
[  152.434454][   T25] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  152.583283][   T25] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  152.586808][   T25] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  152.589754][   T25] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  152.592764][   T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.593706][ T9150] __nla_validate_parse: 4 callbacks suppressed
[  152.593720][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'.
[  152.601705][ T9151] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  152.610143][   T25] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  152.652805][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'.
[  152.671615][   T35] vhci_hcd: vhci_device speed not set
[  152.699431][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.851'.
[  152.711538][ T1016] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  152.762021][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'.
[  152.832655][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'.
[  152.882680][ T1016] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  152.885666][ T1016] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  152.888354][ T1016] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  152.890763][ T1016] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.894767][ T9157] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  152.898548][ T1016] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  152.942338][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'.
[  152.961165][ T9146] input: syz0 as /devices/virtual/input/input43
[  153.011450][ T5289] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  153.118877][ T5980] usb 9-1: USB disconnect, device number 13
[  153.165169][ T5289] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  153.169101][ T5289] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  153.174423][ T5289] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  153.177116][ T5289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.180792][ T5289] usb 6-1: config 0 descriptor??
[  153.184169][ T5289] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  153.186093][ T5289] dvb-usb: bulk message failed: -22 (3/0)
[  153.194553][ T5289] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  153.197342][ T5289] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  153.199400][ T5289] usb 6-1: media controller created
[  153.201285][ T5289] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  153.219933][ T5289] dvb-usb: bulk message failed: -22 (6/0)
[  153.221793][ T5289] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  153.224803][ T5289] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input44
[  153.229099][ T5289] dvb-usb: schedule remote query interval to 150 msecs.
[  153.231005][ T5289] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  153.381436][ T5289] dvb-usb: bulk message failed: -22 (1/0)
[  153.383161][ T5289] dvb-usb: error while querying for an remote control event.
[  153.387224][ T5289] usb 6-1: USB disconnect, device number 14
[  153.409324][ T5289] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  153.711438][    T8] vhci_hcd: vhci_device speed not set
[  154.074006][ T9200] netlink: 'syz.4.864': attribute type 1 has an invalid length.
[  154.098369][ T9200] 8021q: adding VLAN 0 to HW filter on device bond12
[  154.106550][ T9199] mkiss: ax0: crc mode is auto.
[  154.149542][ T9200] 8021q: adding VLAN 0 to HW filter on device bond12
[  154.152317][ T9200] bond12: (slave vcan1): The slave device specified does not support setting the MAC address
[  154.156757][ T9200] bond12: (slave vcan1): Error -95 calling set_mac_address
[  154.166498][ T9202] misc userio: No port type given on /dev/userio
[  154.173205][ T9202] misc userio: The device must be registered before sending interrupts
[  154.179329][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.863'.
[  154.193605][ T9199] can0: slcan on ttyS3.
[  154.248240][ T9199] misc userio: The device must be registered before sending interrupts
[  154.652219][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.871'.
[  154.655595][ T9230] netlink: 48 bytes leftover after parsing attributes in process `syz.4.871'.
[  154.658166][ T9230] netlink: 36 bytes leftover after parsing attributes in process `syz.4.871'.
[  154.788028][ T9236] netlink: 'syz.2.870': attribute type 4 has an invalid length.
[  154.810141][ T9236] netlink: 'syz.2.870': attribute type 4 has an invalid length.
[  154.842720][ T9195] can0 (unregistered): slcan off ttyS3.
[  154.876765][ T9244] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  155.439350][    T9] usb 8-1: USB disconnect, device number 18
[  155.517276][ T9266] netlink: 'syz.3.879': attribute type 1 has an invalid length.
[  155.532637][ T9266] bond8: entered promiscuous mode
[  155.542092][ T9266] 8021q: adding VLAN 0 to HW filter on device bond8
[  155.587088][ T9266] 8021q: adding VLAN 0 to HW filter on device bond9
[  155.592680][ T9266] bond8: (slave bond9): making interface the new active one
[  155.595264][ T9266] bond9: entered promiscuous mode
[  155.598565][ T9266] bond8: (slave bond9): Enslaving as an active interface with an up link
[  155.612976][ T9266] netlink: 'syz.3.879': attribute type 2 has an invalid length.
[  156.543113][ T9305] xt_TCPMSS: Only works on TCP SYN packets
[  156.559657][ T5944] Bluetooth: hci0: unexpected cc 0x0403 length: 9 > 1
[  156.563393][ T5944] Bluetooth: hci0: unexpected event for opcode 0x0403
[  156.821510][ T5983] usb 8-1: new full-speed USB device number 19 using dummy_hcd
[  156.994369][ T5983] usb 8-1: config 0 has an invalid interface number: 128 but max is 1
[  156.996889][ T5983] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.999897][ T5983] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2
[  157.003276][ T5983] usb 8-1: config 0 has no interface number 0
[  157.005206][ T5983] usb 8-1: config 0 interface 128 altsetting 42 has 0 endpoint descriptors, different from the interface descriptor's value: 13
[  157.009174][ T5983] usb 8-1: config 0 interface 128 has no altsetting 0
[  157.011179][ T5983] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  157.014690][ T5983] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.029696][ T5983] usb 8-1: config 0 descriptor??
[  157.296794][ T5983] usb 8-1: string descriptor 0 read error: -71
[  157.299663][ T5983] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  157.303157][ T5983] dvb-usb: bulk message failed: -22 (3/0)
[  157.321442][ T5983] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  157.339198][ T5983] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  157.345804][ T5983] usb 8-1: media controller created
[  157.349760][ T5983] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  157.356774][ T5983] dvb-usb: bulk message failed: -22 (6/0)
[  157.358517][ T5983] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  157.361524][ T5983] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input45
[  157.365334][ T5983] dvb-usb: schedule remote query interval to 150 msecs.
[  157.367296][ T5983] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  157.370902][ T5983] usb 8-1: USB disconnect, device number 19
[  157.391649][ T9315] lo speed is unknown, defaulting to 1000
[  157.395121][ T9315] lo speed is unknown, defaulting to 1000
[  157.397656][ T5983] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  157.397728][ T9315] lo speed is unknown, defaulting to 1000
[  157.408607][ T9315] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  157.416059][ T9315] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  157.432128][ T9315] lo speed is unknown, defaulting to 1000
[  157.434762][ T9315] lo speed is unknown, defaulting to 1000
[  157.436863][ T9315] lo speed is unknown, defaulting to 1000
[  157.438907][ T9315] lo speed is unknown, defaulting to 1000
[  157.440908][ T9315] lo speed is unknown, defaulting to 1000
[  157.482593][ T9320] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  158.137740][   T25] IPVS: starting estimator thread 0...
[  158.221540][ T9352] IPVS: using max 23 ests per chain, 55200 per kthread
[  158.339225][ T9357] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  158.627778][ T9362] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  158.845805][ T9374] netlink: 'syz.1.909': attribute type 1 has an invalid length.
[  158.897335][ T9374] bond4: entered promiscuous mode
[  158.899113][ T9374] 8021q: adding VLAN 0 to HW filter on device bond4
[  158.925462][ T9379] 8021q: adding VLAN 0 to HW filter on device bond5
[  158.931641][ T9379] bond4: (slave bond5): making interface the new active one
[  158.933875][ T9379] bond5: entered promiscuous mode
[  158.936448][ T9379] bond4: (slave bond5): Enslaving as an active interface with an up link
[  158.957610][ T9374] netlink: 'syz.1.909': attribute type 2 has an invalid length.
[  159.055141][ T9377] __nla_validate_parse: 4 callbacks suppressed
[  159.055154][ T9377] netlink: 56 bytes leftover after parsing attributes in process `syz.3.911'.
[  159.258929][ T9384] netlink: 40 bytes leftover after parsing attributes in process `syz.2.912'.
[  159.673383][ T9389] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  159.743966][ T9394] netlink: 'syz.4.916': attribute type 1 has an invalid length.
[  160.238241][ T5289] libceph: connect (1)[c::]:6789 error -101
[  160.240007][ T5289] libceph: mon0 (1)[c::]:6789 connect error
[  160.501621][   T35] libceph: connect (1)[c::]:6789 error -101
[  160.503445][   T35] libceph: mon0 (1)[c::]:6789 connect error
[  160.541493][   T25] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  160.584290][ T9435] netlink: 'syz.3.924': attribute type 3 has an invalid length.
[  160.586683][ T9435] netlink: 44 bytes leftover after parsing attributes in process `syz.3.924'.
[  160.603683][ T5944] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  160.606989][ T5944] Bluetooth: hci0: Injecting HCI hardware error event
[  160.610765][ T5944] Bluetooth: hci0: hardware error 0x00
[  160.649521][ T9439] netlink: 40 bytes leftover after parsing attributes in process `syz.3.926'.
[  160.701499][ T5983] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  160.706324][   T25] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  160.710649][   T25] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  160.714979][   T25] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  160.718402][   T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.729958][ T9428] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  160.735598][   T25] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  160.852578][ T5983] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  160.855648][ T5983] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  160.858332][ T5983] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  160.860797][ T5983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.865359][ T9433] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  160.868834][ T5983] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  161.003478][ T9426] input: syz0 as /devices/virtual/input/input46
[  161.011697][   T35] libceph: connect (1)[c::]:6789 error -101
[  161.013953][   T35] libceph: mon0 (1)[c::]:6789 connect error
[  161.054285][ T9422] ceph: No mds server is up or the cluster is laggy
[  161.557283][   T39] kauditd_printk_skb: 13 callbacks suppressed
[  161.557293][   T39] audit: type=1326 audit(1737197487.615:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9444 comm="syz.2.928" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7fc00000
[  161.999537][ T9463] can0: slcan on ttyS3.
[  162.622162][ T9459] can0 (unregistered): slcan off ttyS3.
[  162.691441][ T5944] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  163.155133][ T9486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.933'.
[  163.274730][   T35] usb 9-1: USB disconnect, device number 14
[  163.294682][ T9495] loop8: detected capacity change from 0 to 3
[  163.297032][ T9495] Dev loop8: unable to read RDB block 3
[  163.299088][ T9495]  loop8: unable to read partition table
[  163.303524][ T9495] loop8: partition table beyond EOD, truncated
[  163.305429][ T9495] loop_reread_partitions: partition scan of loop8 (�被x������ڬ��dƤ����ݡ�����
[  163.305429][ T9495] 
) failed (rc=-5)
[  163.435692][ T5289] usb 6-1: USB disconnect, device number 15
[  163.480326][ T9504] netlink: 16 bytes leftover after parsing attributes in process `syz.4.939'.
[  163.483988][ T9504] netlink: 16 bytes leftover after parsing attributes in process `syz.4.939'.
[  163.871425][ T5289] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  163.884986][ T9518] netlink: 'syz.4.944': attribute type 10 has an invalid length.
[  163.958570][ T9518] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.032880][ T5289] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  164.041482][ T5289] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  164.045326][ T5289] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  164.049001][ T5289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.054612][ T9509] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  164.059587][ T5289] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  164.282720][ T9505] input: syz0 as /devices/virtual/input/input47
[  164.351457][   T25] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  164.503471][   T25] usb 7-1: config 0 has no interfaces?
[  164.506539][   T25] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  164.510227][   T25] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  164.513770][   T25] usb 7-1: Manufacturer: syz
[  164.517284][   T25] usb 7-1: config 0 descriptor??
[  164.551459][ T5996] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  164.703329][ T5996] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  164.707945][ T5996] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  164.712579][ T5996] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  164.716364][ T5996] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.723354][ T9527] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  164.728477][ T5996] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  164.929176][ T9534] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  165.112245][ T9545] xt_TCPMSS: Only works on TCP SYN packets
[  165.119276][ T5944] Bluetooth: hci3: unexpected cc 0x0403 length: 9 > 1
[  165.123335][ T5944] Bluetooth: hci3: unexpected event for opcode 0x0403
[  165.372253][ T5983] usb 9-1: new full-speed USB device number 15 using dummy_hcd
[  165.523002][ T5983] usb 9-1: config 0 has an invalid interface number: 128 but max is 1
[  165.525380][ T5983] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  165.528353][ T5983] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2
[  165.531047][ T5983] usb 9-1: config 0 has no interface number 0
[  165.533450][ T5983] usb 9-1: config 0 interface 128 altsetting 42 has 0 endpoint descriptors, different from the interface descriptor's value: 13
[  165.538087][ T5983] usb 9-1: config 0 interface 128 has no altsetting 0
[  165.540563][ T5983] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  165.544100][ T5983] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.551023][ T5983] usb 9-1: config 0 descriptor??
[  165.758169][ T5983] usb 9-1: string descriptor 0 read error: -71
[  165.762979][ T5983] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  165.765854][ T5983] dvb-usb: bulk message failed: -22 (3/0)
[  165.769638][ T5983] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  165.773310][ T5983] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  165.775350][ T5983] usb 9-1: media controller created
[  165.777403][ T5983] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  165.783336][ T5983] dvb-usb: bulk message failed: -22 (6/0)
[  165.785091][ T5983] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  165.788968][ T5983] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input48
[  165.795868][ T5983] dvb-usb: schedule remote query interval to 150 msecs.
[  165.797950][ T5983] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  165.801778][ T5983] usb 9-1: USB disconnect, device number 15
[  165.813087][ T5983] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  166.324866][ T9549] fuse: Bad value for 'fd'
[  166.491556][ T5980] usb 6-1: USB disconnect, device number 16
[  166.867905][ T9555] fuse: Unknown parameter '	'
[  166.996755][ T9561] netlink: 2 bytes leftover after parsing attributes in process `syz.1.958'.
[  167.056108][ T5944] Bluetooth: hci2: unexpected event for opcode 0x1009
[  167.140398][ T5980] usb 7-1: USB disconnect, device number 18
[  167.266626][    T9] usb 8-1: USB disconnect, device number 20
[  167.434071][ T9573] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  167.513476][ T9573] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  167.527688][ T9572] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  167.806870][ T9579] xt_TCPMSS: Only works on TCP SYN packets
[  168.061481][ T5983] usb 8-1: new full-speed USB device number 21 using dummy_hcd
[  168.151681][ T5289] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  168.233321][ T5983] usb 8-1: config 0 has an invalid interface number: 128 but max is 1
[  168.236541][ T5983] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  168.240517][ T5983] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2
[  168.244108][ T5983] usb 8-1: config 0 has no interface number 0
[  168.246420][ T5983] usb 8-1: config 0 interface 128 altsetting 42 has 0 endpoint descriptors, different from the interface descriptor's value: 13
[  168.250987][ T5983] usb 8-1: config 0 interface 128 has no altsetting 0
[  168.254173][ T5983] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  168.257803][ T5983] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.263262][ T5983] usb 8-1: config 0 descriptor??
[  168.302556][ T5289] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  168.305762][ T5289] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  168.308608][ T5289] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  168.311215][ T5289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.315290][ T9582] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  168.318872][ T5289] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  168.409419][ T9590] syz.2.967 (9590): drop_caches: 2
[  168.462907][ T1016] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  168.478172][ T5983] usb 8-1: string descriptor 0 read error: -71
[  168.482050][ T5983] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  168.484590][ T5983] dvb-usb: bulk message failed: -22 (3/0)
[  168.487180][ T5983] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  168.490340][ T5983] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  168.493288][ T5983] usb 8-1: media controller created
[  168.496117][ T5983] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  168.501646][ T5983] dvb-usb: bulk message failed: -22 (6/0)
[  168.504146][ T5983] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  168.508581][ T5983] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input49
[  168.514237][ T5983] dvb-usb: schedule remote query interval to 150 msecs.
[  168.517342][ T5983] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  168.525872][ T5983] usb 8-1: USB disconnect, device number 21
[  168.542331][ T5983] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  168.574291][ T9581] input: syz0 as /devices/virtual/input/input50
[  168.623940][ T1016] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  168.627943][ T1016] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  168.632015][ T1016] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  168.635506][ T1016] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.645974][ T9589] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  168.652822][ T1016] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  169.074411][ T9610] netlink: 64 bytes leftover after parsing attributes in process `syz.2.974'.
[  169.086043][ T9608] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  169.153202][ T9617] fuse: Invalid rootmode
[  169.163048][ T5944] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  169.166678][ T5944] Bluetooth: hci3: Injecting HCI hardware error event
[  169.171021][ T5951] Bluetooth: hci3: hardware error 0x00
[  169.485588][ T9636] xt_TCPMSS: Only works on TCP SYN packets
[  169.490600][ T5944] Bluetooth: hci1: unexpected cc 0x0403 length: 9 > 1
[  169.493725][ T5944] Bluetooth: hci1: unexpected event for opcode 0x0403
[  169.731586][ T5983] usb 7-1: new full-speed USB device number 19 using dummy_hcd
[  169.883242][ T5983] usb 7-1: config 0 has an invalid interface number: 128 but max is 1
[  169.886797][ T5983] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  169.890944][ T5983] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  169.894688][ T5983] usb 7-1: config 0 has no interface number 0
[  169.896526][ T5983] usb 7-1: config 0 interface 128 altsetting 42 has 0 endpoint descriptors, different from the interface descriptor's value: 13
[  169.900477][ T5983] usb 7-1: config 0 interface 128 has no altsetting 0
[  169.903329][ T5983] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  169.906687][ T5983] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.911088][ T5983] usb 7-1: config 0 descriptor??
[  170.021433][ T1016] usb 8-1: new full-speed USB device number 22 using dummy_hcd
[  170.117317][ T5983] usb 7-1: string descriptor 0 read error: -71
[  170.120483][ T5983] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  170.123735][ T5983] dvb-usb: bulk message failed: -22 (3/0)
[  170.127475][ T5983] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  170.130787][ T5983] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  170.133367][ T5983] usb 7-1: media controller created
[  170.135586][ T5983] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  170.140296][ T5983] dvb-usb: bulk message failed: -22 (6/0)
[  170.142376][ T5983] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  170.145586][ T5983] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input51
[  170.149556][ T5983] dvb-usb: schedule remote query interval to 150 msecs.
[  170.152004][ T5983] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  170.155087][ T5983] usb 7-1: USB disconnect, device number 19
[  170.171910][ T5983] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  170.173051][ T1016] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  170.177642][ T1016] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2
[  170.180342][ T1016] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  170.183090][ T1016] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.186682][ T1016] usb 8-1: config 0 descriptor??
[  170.189888][ T1016] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  170.192040][ T1016] dvb-usb: bulk message failed: -22 (3/0)
[  170.194618][ T1016] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  170.197575][ T1016] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  170.199770][ T1016] usb 8-1: media controller created
[  170.202104][ T1016] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  170.206044][ T1016] dvb-usb: bulk message failed: -22 (6/0)
[  170.207873][ T1016] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  170.211218][ T1016] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input52
[  170.215495][ T1016] dvb-usb: schedule remote query interval to 150 msecs.
[  170.217677][ T1016] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  170.381546][ T1016] dvb-usb: bulk message failed: -22 (1/0)
[  170.384095][ T1016] dvb-usb: error while querying for an remote control event.
[  170.391894][ T9641] dvb-usb: bulk message failed: -22 (4/0)
[  170.398100][    T9] usb 8-1: USB disconnect, device number 22
[  170.406648][    T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  170.882590][    T9] usb 6-1: USB disconnect, device number 17
[  170.950176][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.986'.
[  171.023855][ T9659] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  171.080808][ T9663] input: syz0 as /devices/virtual/input/input53
[  171.092655][ T9659] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  171.199572][ T5289] usb 9-1: USB disconnect, device number 16
[  171.243398][ T5951] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  172.141449][ T5289] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  172.211693][   T35] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  172.303273][ T5289] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  172.306453][ T5289] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  172.309279][ T5289] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  172.312159][ T5289] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.317011][ T9694] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  172.320369][ T5289] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  172.358315][ T9711] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1000'.
[  172.373187][   T35] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  172.377429][   T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.390144][   T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.394148][   T35] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  172.398821][   T35] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  172.401605][   T35] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  172.403993][   T35] usb 9-1: Manufacturer: syz
[  172.406237][   T35] usb 9-1: config 0 descriptor??
[  172.413274][ T9714] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  172.575971][ T9693] input: syz0 as /devices/virtual/input/input54
[  172.812631][    C3] raw-gadget.1 gadget.4: ignoring, device is not running
[  172.814930][    C3] raw-gadget.1 gadget.4: ignoring, device is not running
[  172.817280][   T35] usbhid 9-1:0.0: can't add hid device: -71
[  172.819242][   T35] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  172.829531][   T35] usb 9-1: USB disconnect, device number 17
[  173.110711][ T9732] sp0: Synchronizing with TNC
[  173.185351][ T9738] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  173.220128][ T9740] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1005'.
[  173.353693][ T9749] xt_TCPMSS: Only works on TCP SYN packets
[  173.562994][ T5951] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  173.566544][ T5951] Bluetooth: hci1: Injecting HCI hardware error event
[  173.570438][ T5951] Bluetooth: hci1: hardware error 0x00
[  173.611461][ T1461] usb 9-1: new full-speed USB device number 18 using dummy_hcd
[  173.691487][ T9760] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  173.763479][ T1461] usb 9-1: config 0 has an invalid interface number: 128 but max is 1
[  173.765857][ T1461] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  173.769024][ T1461] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2
[  173.772694][ T1461] usb 9-1: config 0 has no interface number 0
[  173.774462][ T1461] usb 9-1: config 0 interface 128 altsetting 42 has 0 endpoint descriptors, different from the interface descriptor's value: 13
[  173.778162][ T1461] usb 9-1: config 0 interface 128 has no altsetting 0
[  173.780268][ T1461] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  173.783079][ T1461] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.786176][ T1461] usb 9-1: config 0 descriptor??
[  173.992800][ T1461] usb 9-1: string descriptor 0 read error: -71
[  173.995408][ T1461] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  173.997450][ T1461] dvb-usb: bulk message failed: -22 (3/0)
[  173.999969][ T1461] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  174.004009][ T1461] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  174.006101][ T1461] usb 9-1: media controller created
[  174.008080][ T1461] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  174.012647][ T1461] dvb-usb: bulk message failed: -22 (6/0)
[  174.014393][ T1461] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  174.017392][ T1461] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input55
[  174.022104][ T1461] dvb-usb: schedule remote query interval to 150 msecs.
[  174.024126][ T1461] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  174.027376][ T1461] usb 9-1: USB disconnect, device number 18
[  174.043980][ T1461] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  174.600157][ T9777] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  174.841477][   T35] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  174.849759][ T5996] usb 7-1: USB disconnect, device number 20
[  174.920864][ T9783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1017'.
[  174.924702][ T9783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1017'.
[  174.965993][ T9785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1018'.
[  174.977186][ T9787] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1019'.
[  174.992920][   T35] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  174.996396][   T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  174.999521][   T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.002523][   T35] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  175.006883][   T35] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  175.009667][   T35] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  175.012099][   T35] usb 9-1: Manufacturer: syz
[  175.014296][   T35] usb 9-1: config 0 descriptor??
[  175.428224][    C3] raw-gadget.1 gadget.4: ignoring, device is not running
[  175.432054][   T35] usbhid 9-1:0.0: can't add hid device: -71
[  175.434108][   T35] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  175.437251][   T35] usb 9-1: USB disconnect, device number 19
[  175.507142][ T9794] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  175.641527][ T5951] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  176.110866][   T25] kernel write not supported for file /snd/midiC2D0 (pid: 25 comm: kworker/2:0)
[  176.133386][ T9842] netlink: zone id is out of range
[  176.135623][ T9842] netlink: zone id is out of range
[  176.137787][ T9842] netlink: zone id is out of range
[  176.139899][ T9842] netlink: zone id is out of range
[  176.142607][ T9842] netlink: zone id is out of range
[  176.144912][ T9842] netlink: zone id is out of range
[  176.147091][ T9842] netlink: zone id is out of range
[  176.149171][ T9842] netlink: zone id is out of range
[  176.183635][ T9845] netlink: 'syz.3.1031': attribute type 1 has an invalid length.
[  176.213467][ T9845] bond10: entered promiscuous mode
[  176.215477][ T9845] 8021q: adding VLAN 0 to HW filter on device bond10
[  176.292484][ T9850] netlink: 'syz.3.1031': attribute type 2 has an invalid length.
[  176.299295][   T39] audit: type=1326 audit(1737198015.355:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9847 comm="syz.1.1032" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x0
[  176.342203][ T9845] 8021q: adding VLAN 0 to HW filter on device bond11
[  176.347105][ T9845] bond10: (slave bond11): making interface the new active one
[  176.349817][ T9845] bond11: entered promiscuous mode
[  176.354120][ T9845] bond10: (slave bond11): Enslaving as an active interface with an up link
[  177.026766][ T9856] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  177.220065][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'.
[  177.222907][ T9872] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1038'.
[  177.225411][ T9872] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1038'.
[  177.262078][ T9878] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  177.334304][ T9882] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  177.371704][ T9882] afs: Unknown parameter 'Jyn�T'
[  177.377217][ T9895] netlink: 'syz.1.1046': attribute type 1 has an invalid length.
[  177.415902][ T9895] 8021q: adding VLAN 0 to HW filter on device bond6
[  177.463820][ T9895] 8021q: adding VLAN 0 to HW filter on device bond6
[  177.466108][ T9895] bond6: (slave vcan1): The slave device specified does not support setting the MAC address
[  177.475966][ T9895] bond6: (slave vcan1): Error -95 calling set_mac_address
[  177.802975][ T9914] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1050'.
[  177.831105][ T9916] netlink: 'syz.3.1051': attribute type 10 has an invalid length.
[  177.869904][ T9922] netlink: 'syz.3.1054': attribute type 1 has an invalid length.
[  177.877523][ T9925] netlink: 'syz.2.1053': attribute type 12 has an invalid length.
[  177.983686][ T9940] --map-set only usable from mangle table
[  178.026144][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.028807][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.031765][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.034044][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.036265][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.038522][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.040723][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.043498][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.045741][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.047828][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.049999][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.052526][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.055016][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.058175][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.060715][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.063399][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.065831][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.068013][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.070212][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.072510][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.074803][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.077007][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.079321][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.081658][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.083979][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.086405][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.088638][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.090766][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.093047][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.095386][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.097672][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.100091][ T1461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.107963][ T1461] hid-generic 0000:0000:0000.000C: hidraw1: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  178.299899][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1058'.
[  178.677857][ T9960] mmap: syz.4.1063 (9960) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  179.655323][T10002] fuse: Unknown parameter 'user_i00000000000000000000'
[  180.058696][T10025] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  180.567987][T10060] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  180.782020][T10075] netlink: 'syz.2.1095': attribute type 10 has an invalid length.
[  180.788238][T10075] team0: Port device netdevsim0 added
[  180.792393][T10075] netlink: 'syz.2.1095': attribute type 10 has an invalid length.
[  180.799998][T10075] team0: Port device netdevsim0 removed
[  180.805419][T10075] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  180.917731][T10078] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  181.172574][T10094] netlink: 'syz.4.1100': attribute type 1 has an invalid length.
[  181.216467][T10094] bond14: entered promiscuous mode
[  181.218974][T10094] 8021q: adding VLAN 0 to HW filter on device bond14
[  181.251057][T10094] 8021q: adding VLAN 0 to HW filter on device bond15
[  181.257271][T10094] bond14: (slave bond15): making interface the new active one
[  181.259453][T10094] bond15: entered promiscuous mode
[  181.261822][T10094] bond14: (slave bond15): Enslaving as an active interface with an up link
[  181.276836][T10094] netlink: 'syz.4.1100': attribute type 2 has an invalid length.
[  181.352526][T10103] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  181.385881][T10104] netlink: 'syz.1.1104': attribute type 4 has an invalid length.
[  181.403729][T10104] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  181.923347][T10129] net_ratelimit: 13 callbacks suppressed
[  181.923389][T10129] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  182.173586][T10131] lo speed is unknown, defaulting to 1000
[  182.179611][T10132] syz.1.1115 uses obsolete (PF_INET,SOCK_PACKET)
[  182.270662][T10137] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  182.410686][T10143] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1117'.
[  182.473952][T10152] netlink: 'syz.3.1120': attribute type 10 has an invalid length.
[  182.493734][T10157] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  182.699170][T10188] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1129'.
[  182.750008][T10191] binder: 10190:10191 ioctl c0306201 20000580 returned -22
[  183.334708][T10205] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1134'.
[  183.792027][   T57] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  183.942885][   T57] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  183.945997][   T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.949344][   T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.952367][   T57] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  183.957357][   T57] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  183.960066][   T57] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  183.962837][   T57] usb 6-1: Manufacturer: syz
[  183.965466][   T57] usb 6-1: config 0 descriptor??
[  184.375769][   T57] usbhid 6-1:0.0: can't add hid device: -71
[  184.375820][   T57] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  184.377945][   T57] usb 6-1: USB disconnect, device number 18
[  184.761178][T10258] fuse: Bad value for 'fd'
[  184.886332][T10260] vlan4: entered allmulticast mode
[  184.888878][T10260] bond0: entered allmulticast mode
[  184.890798][T10260] bond_slave_0: entered allmulticast mode
[  184.893793][T10260] bond_slave_1: entered allmulticast mode
[  184.901911][T10260] bond0: left allmulticast mode
[  184.903414][T10260] bond_slave_0: left allmulticast mode
[  184.905077][T10260] bond_slave_1: left allmulticast mode
[  185.149816][T10272] netlink: 'syz.1.1154': attribute type 10 has an invalid length.
[  185.156867][T10272] team0: Port device netdevsim0 added
[  185.159768][T10272] netlink: 'syz.1.1154': attribute type 10 has an invalid length.
[  185.166340][T10272] team0: Port device netdevsim0 removed
[  185.172054][T10272] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  185.360226][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1162'.
[  185.363590][T10290] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1162'.
[  185.366502][T10290] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1162'.
[  185.400053][T10296] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1165'.
[  185.549952][T10302] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  185.572530][T10305] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  185.733327][T10311] program syz.3.1170 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  185.895795][T10315] netlink: 'syz.1.1171': attribute type 1 has an invalid length.
[  185.928421][T10315] bond7: entered promiscuous mode
[  185.931220][T10315] 8021q: adding VLAN 0 to HW filter on device bond7
[  185.970287][T10315] 8021q: adding VLAN 0 to HW filter on device bond8
[  185.977888][T10315] bond7: (slave bond8): making interface the new active one
[  185.980813][T10315] bond8: entered promiscuous mode
[  185.985007][T10315] bond7: (slave bond8): Enslaving as an active interface with an up link
[  185.999648][T10315] netlink: 'syz.1.1171': attribute type 2 has an invalid length.
[  186.021795][ T1016] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  186.171849][ T1016] usb 8-1: Using ep0 maxpacket: 8
[  186.174569][ T1016] usb 8-1: config 0 has no interfaces?
[  186.176073][ T1016] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  186.178681][ T1016] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.181984][ T1016] usb 8-1: config 0 descriptor??
[  186.388151][ T1016] usb 8-1: USB disconnect, device number 23
[  186.685694][T10337] can0: slcan on ttyS3.
[  186.774136][T10339] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1180'.
[  187.122326][ T5289] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  187.282735][ T5289] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  187.287404][ T5289] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  187.292109][T10321] can0 (unregistered): slcan off ttyS3.
[  187.292744][ T5289] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  187.341427][ T5289] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.348174][T10345] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  187.358762][ T5289] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  187.398064][T10371] mkiss: ax0: crc mode is auto.
[  187.428847][T10371] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1184'.
[  187.431551][T10371] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1184'.
[  187.469638][T10374] netlink: 'syz.2.1185': attribute type 10 has an invalid length.
[  187.683388][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1187'.
[  187.687357][T10379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1187'.
[  187.714245][T10379] pim6reg: entered allmulticast mode
[  187.725273][T10379] vxcan0: entered allmulticast mode
[  187.727230][T10379] vxcan0: left allmulticast mode
[  188.053349][T10394] netlink: 'syz.3.1191': attribute type 12 has an invalid length.
[  188.347941][T10396] lo speed is unknown, defaulting to 1000
[  188.570829][T10414] __nla_validate_parse: 1 callbacks suppressed
[  188.570845][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1194'.
[  188.576367][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1194'.
[  188.839741][T10418] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  189.294330][T10451] FAULT_INJECTION: forcing a failure.
[  189.294330][T10451] name failslab, interval 1, probability 0, space 0, times 0
[  189.299299][T10451] CPU: 0 UID: 0 PID: 10451 Comm: syz.2.1205 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0
[  189.303677][T10451] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  189.308016][T10451] Call Trace:
[  189.309404][T10451]  <TASK>
[  189.310578][T10451]  dump_stack_lvl+0x16c/0x1f0
[  189.312462][T10451]  should_fail_ex+0x497/0x5b0
[  189.314237][T10451]  ? fs_reclaim_acquire+0xae/0x150
[  189.316241][T10451]  should_failslab+0xc2/0x120
[  189.318124][T10451]  kmem_cache_alloc_noprof+0x6e/0x3b0
[  189.320311][T10451]  ? __pfx_mark_lock+0x10/0x10
[  189.322286][T10451]  ? __kvm_mmu_topup_memory_cache+0x18f/0x600
[  189.324747][T10451]  __kvm_mmu_topup_memory_cache+0x18f/0x600
[  189.327120][T10451]  mmu_topup_memory_caches+0x22/0xd0
[  189.329253][T10451]  kvm_mmu_load+0xda/0x21f0
[  189.331086][T10451]  ? mark_held_locks+0x9f/0xe0
[  189.333041][T10451]  ? vmx_flush_tlb_guest+0x111/0x560
[  189.335124][T10451]  ? rcu_is_watching+0x12/0xc0
[  189.337044][T10451]  ? __pfx_kvm_mmu_load+0x10/0x10
[  189.339060][T10451]  ? kvm_cpu_has_injectable_intr+0x12a/0x1a0
[  189.341489][T10451]  ? kvm_check_and_inject_events+0x725/0x12e0
[  189.343962][T10451]  ? record_steal_time+0x50/0xbe0
[  189.346044][T10451]  vcpu_run+0x2e2e/0x4c00
[  189.347829][T10451]  ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10
[  189.350103][T10451]  ? __pfx_vcpu_run+0x10/0x10
[  189.352018][T10451]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  189.354292][T10451]  ? rcu_is_watching+0x12/0xc0
[  189.356279][T10451]  ? trace_lock_acquire+0x14e/0x1f0
[  189.358371][T10451]  ? __local_bh_enable_ip+0xa4/0x120
[  189.360544][T10451]  ? lockdep_hardirqs_on+0x7c/0x110
[  189.362648][T10451]  ? kvm_arch_vcpu_ioctl_run+0x150/0x1740
[  189.364983][T10451]  ? lock_acquire+0x2f/0xb0
[  189.366829][T10451]  ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740
[  189.369148][T10451]  kvm_arch_vcpu_ioctl_run+0x44a/0x1740
[  189.371419][T10451]  kvm_vcpu_ioctl+0x6ce/0x1520
[  189.373355][T10451]  ? tomoyo_path_number_perm+0x46d/0x5b0
[  189.375578][T10451]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  189.377425][T10451]  ? tomoyo_path_number_perm+0x190/0x5b0
[  189.379468][T10451]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  189.381232][T10451]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  189.383131][T10451]  ? do_vfs_ioctl+0x513/0x1950
[  189.384529][T10451]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  189.386010][T10451]  ? __pfx_lock_release+0x10/0x10
[  189.387472][T10451]  ? trace_lock_acquire+0x14e/0x1f0
[  189.389059][T10451]  kvm_vcpu_compat_ioctl+0x210/0x3f0
[  189.390604][T10451]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  189.392551][T10451]  ? __fget_files+0x206/0x3a0
[  189.394467][T10451]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  189.396275][T10451]  __do_compat_sys_ioctl+0x1cb/0x2c0
[  189.397843][T10451]  __do_fast_syscall_32+0x73/0x120
[  189.399376][T10451]  do_fast_syscall_32+0x32/0x80
[  189.400985][T10451]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  189.403574][T10451] RIP: 0023:0xf712e579
[  189.405227][T10451] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  189.410892][T10451] RSP: 002b:00000000f512055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  189.413654][T10451] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80
[  189.415952][T10451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  189.418275][T10451] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  189.420612][T10451] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  189.423128][T10451] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  189.425424][T10451]  </TASK>
[  189.426582][    C0] vkms_vblank_simulate: vblank timer overrun
[  189.431443][ T1016] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  189.576175][T10454] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  189.593106][ T1016] usb 6-1: Using ep0 maxpacket: 16
[  189.597684][ T1016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.602043][ T1016] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  189.611493][ T1016] usb 6-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0
[  189.613873][ T1016] usb 6-1: Manufacturer: syz
[  189.615977][ T1016] usb 6-1: config 0 descriptor??
[  189.620177][ T1016] usbhid 6-1:0.0: can't add hid device: -22
[  189.622453][ T1016] usbhid 6-1:0.0: probe with driver usbhid failed with error -22
[  189.812897][ T5289] usb 9-1: USB disconnect, device number 20
[  189.932796][T10477] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1210'.
[  190.017534][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1214'.
[  190.031130][T10487] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  190.155741][T10508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1222'.
[  190.159413][T10508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1222'.
[  190.245963][T10523] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1204'.
[  190.421526][ T5996] usb 9-1: new full-speed USB device number 21 using dummy_hcd
[  190.583915][ T5996] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  190.588167][ T5996] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2
[  190.592534][ T5996] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  190.595235][ T5996] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.598741][ T5996] usb 9-1: config 0 descriptor??
[  190.602436][ T5996] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  190.604533][ T5996] dvb-usb: bulk message failed: -22 (3/0)
[  190.607904][ T5996] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  190.610615][ T5996] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  190.612832][ T5996] usb 9-1: media controller created
[  190.614821][ T5996] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  190.621252][ T5996] dvb-usb: bulk message failed: -22 (6/0)
[  190.623145][ T5996] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  190.626478][ T5996] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input57
[  190.630875][ T5996] dvb-usb: schedule remote query interval to 150 msecs.
[  190.633212][ T5996] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  190.793801][ T5996] dvb-usb: bulk message failed: -22 (1/0)
[  190.795554][ T5996] dvb-usb: error while querying for an remote control event.
[  190.803432][T10512] dvb-usb: bulk message failed: -22 (4/0)
[  190.807063][ T5289] usb 9-1: USB disconnect, device number 21
[  190.817316][ T5289] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  191.054197][ T5996] libceph: connect (1)[c::]:6789 error -13
[  191.056787][ T5996] libceph: mon0 (1)[c::]:6789 connect error
[  191.155241][T10538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1228'.
[  191.311839][ T5996] libceph: connect (1)[c::]:6789 error -13
[  191.314470][ T5996] libceph: mon0 (1)[c::]:6789 connect error
[  191.431751][T10551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'.
[  191.435365][T10551] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1232'.
[  191.442479][T10551] vlan3: entered allmulticast mode
[  191.444721][T10551] gretap0: entered allmulticast mode
[  191.710258][T10563] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  191.821829][    T8] libceph: connect (1)[c::]:6789 error -13
[  191.824513][    T8] libceph: mon0 (1)[c::]:6789 connect error
[  191.859921][T10533] ceph: No mds server is up or the cluster is laggy
[  191.917761][T10583] tipc: Can't bind to reserved service type 2
[  191.919774][   T39] audit: type=1326 audit(1737199056.969:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10575 comm="syz.2.1240" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000
[  191.926848][T10583] 9pnet_fd: Insufficient options for proto=fd
[  191.933987][   T39] audit: type=1326 audit(1737199056.969:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10575 comm="syz.2.1240" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf712e579 code=0x7ffc0000
[  191.940165][   T39] audit: type=1326 audit(1737199056.969:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10575 comm="syz.2.1240" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf712e579 code=0x7ffc0000
[  191.947171][   T39] audit: type=1326 audit(1737199056.969:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10575 comm="syz.2.1240" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf712e579 code=0x7ffc0000
[  191.953907][   T39] audit: type=1326 audit(1737199056.969:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10575 comm="syz.2.1240" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf712e579 code=0x7ffc0000
[  191.960066][   T39] audit: type=1326 audit(1737199056.969:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10575 comm="syz.2.1240" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf712e579 code=0x7ffc0000
[  191.966207][   T39] audit: type=1326 audit(1737199056.969:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10575 comm="syz.2.1240" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000
[  191.973027][   T39] audit: type=1326 audit(1737199056.979:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10575 comm="syz.2.1240" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf712e579 code=0x7ffc0000
[  191.979049][   T39] audit: type=1326 audit(1737199056.979:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10575 comm="syz.2.1240" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000
[  191.985775][   T39] audit: type=1326 audit(1737199056.979:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10575 comm="syz.2.1240" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf712e579 code=0x7ffc0000
[  192.152219][ T1016] usb 6-1: USB disconnect, device number 19
[  192.419341][T10597] can0: slcan on ttyS3.
[  192.612508][T10599] can0 (unregistered): slcan off ttyS3.
[  192.623712][T10601] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  193.200183][   T25] libceph: connect (1)[c::]:6789 error -13
[  193.202040][   T25] libceph: mon0 (1)[c::]:6789 connect error
[  193.207019][T10640] netlink: 'syz.1.1251': attribute type 10 has an invalid length.
[  193.461878][   T25] libceph: connect (1)[c::]:6789 error -13
[  193.465952][   T25] libceph: mon0 (1)[c::]:6789 connect error
[  193.624518][T10647] __nla_validate_parse: 2 callbacks suppressed
[  193.624532][T10647] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1253'.
[  193.644873][ T1413] ieee802154 phy0 wpan0: encryption failed: -22
[  193.647224][ T1413] ieee802154 phy1 wpan1: encryption failed: -22
[  193.837464][T10658] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  193.846784][T10657] netlink: 'syz.2.1255': attribute type 21 has an invalid length.
[  193.849109][T10657] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1255'.
[  193.868103][T10658] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  193.971842][   T25] libceph: connect (1)[c::]:6789 error -13
[  193.973774][   T25] libceph: mon0 (1)[c::]:6789 connect error
[  194.010703][T10635] ceph: No mds server is up or the cluster is laggy
[  194.078093][T10662] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1259'.
[  194.123958][T10665] 
[  194.124789][T10665] ======================================================
[  194.126846][T10665] WARNING: possible circular locking dependency detected
[  194.128953][T10665] 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 Not tainted
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  194.132116][T10665] ------------------------------------------------------
[  194.135445][T10665] syz.3.1258/10665 is trying to acquire lock:
[  194.137406][T10665] ffff888065dcfc68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80
[  194.140099][T10665] 
[  194.140099][T10665] but task is already holding lock:
[  194.142307][T10665] ffff888067010420 (sb_writers#5){.+.+}-{0:0}, at: ovl_splice_write+0x38e/0x630
[  194.145285][T10665] 
[  194.145285][T10665] which lock already depends on the new lock.
[  194.145285][T10665] 
[  194.148560][T10665] 
[  194.148560][T10665] the existing dependency chain (in reverse order) is:
[  194.151230][T10665] 
[  194.151230][T10665] -> #3 (sb_writers#5){.+.+}-{0:0}:
[  194.153508][T10665]        mnt_want_write+0x6f/0x450
[  194.155073][T10665]        ovl_create_object+0x12e/0x300
[  194.156763][T10665]        lookup_open.isra.0+0x1174/0x14c0
[  194.158559][T10665]        path_openat+0x904/0x2d60
[  194.160109][T10665]        do_filp_open+0x20c/0x470
[  194.161629][T10665]        do_sys_openat2+0x17a/0x1e0
[  194.163230][T10665]        __ia32_sys_creat+0xcc/0x120
[  194.164852][T10665]        __do_fast_syscall_32+0x73/0x120
[  194.166586][T10665]        do_fast_syscall_32+0x32/0x80
[  194.168331][T10665]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  194.170846][T10665] 
[  194.170846][T10665] -> #2 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}:
[  194.173739][T10665]        down_read+0x9a/0x330
[  194.175319][T10665]        walk_component+0x342/0x5b0
[  194.177061][T10665]        path_lookupat+0x17f/0x770
[  194.178865][T10665]        filename_lookup+0x221/0x5f0
[  194.180631][T10665]        kern_path+0x35/0x50
[  194.182152][T10665]        lookup_bdev+0xd9/0x280
[  194.183826][T10665]        resume_store+0x1d8/0x460
[  194.185505][T10665]        kobj_attr_store+0x55/0x80
[  194.187335][T10665]        sysfs_kf_write+0x117/0x170
[  194.189133][T10665]        kernfs_fop_write_iter+0x33d/0x500
[  194.190912][T10665]        vfs_write+0x5ae/0x1150
[  194.192320][T10665]        ksys_write+0x12b/0x250
[  194.193849][T10665]        __do_fast_syscall_32+0x73/0x120
[  194.195679][T10665]        do_fast_syscall_32+0x32/0x80
[  194.197446][T10665]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  194.199715][T10665] 
[  194.199715][T10665] -> #1 (&of->mutex){+.+.}-{4:4}:
[  194.202032][T10665]        __mutex_lock+0x19b/0xa60
[  194.203711][T10665]        kernfs_fop_write_iter+0x27b/0x500
[  194.205623][T10665]        iter_file_splice_write+0x90f/0x10b0
[  194.207572][T10665]        do_splice+0x145c/0x1f60
[  194.209214][T10665]        __do_splice+0x327/0x360
[  194.210830][T10665]        __ia32_sys_splice+0x189/0x250
[  194.212513][T10665]        __do_fast_syscall_32+0x73/0x120
[  194.214349][T10665]        do_fast_syscall_32+0x32/0x80
[  194.216154][T10665]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  194.218403][T10665] 
[  194.218403][T10665] -> #0 (&pipe->mutex){+.+.}-{4:4}:
[  194.220820][T10665]        __lock_acquire+0x249e/0x3c40
[  194.222469][T10665]        lock_acquire.part.0+0x11b/0x380
[  194.224217][T10665]        __mutex_lock+0x19b/0xa60
[  194.225679][T10665]        pipe_lock+0x64/0x80
[  194.227084][T10665]        iter_file_splice_write+0x1eb/0x10b0
[  194.228847][T10665]        backing_file_splice_write+0x277/0x880
[  194.230619][T10665]        ovl_splice_write+0x38e/0x630
[  194.232224][T10665]        do_splice+0x145c/0x1f60
[  194.233663][T10665]        __do_splice+0x327/0x360
[  194.235103][T10665]        __ia32_sys_splice+0x189/0x250
[  194.236696][T10665]        __do_fast_syscall_32+0x73/0x120
[  194.238324][T10665]        do_fast_syscall_32+0x32/0x80
[  194.239870][T10665]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  194.241849][T10665] 
[  194.241849][T10665] other info that might help us debug this:
[  194.241849][T10665] 
[  194.244961][T10665] Chain exists of:
[  194.244961][T10665]   &pipe->mutex --> &ovl_i_mutex_dir_key[depth]#2 --> sb_writers#5
[  194.244961][T10665] 
[  194.248826][T10665]  Possible unsafe locking scenario:
[  194.248826][T10665] 
[  194.250965][T10665]        CPU0                    CPU1
[  194.252507][T10665]        ----                    ----
[  194.254083][T10665]   rlock(sb_writers#5);
[  194.255291][T10665]                                lock(&ovl_i_mutex_dir_key[depth]#2);
[  194.257621][T10665]                                lock(sb_writers#5);
[  194.259530][T10665]   lock(&pipe->mutex);
[  194.260750][T10665] 
[  194.260750][T10665]  *** DEADLOCK ***
[  194.260750][T10665] 
[  194.263061][T10665] 3 locks held by syz.3.1258/10665:
[  194.264903][T10665]  #0: ffff888043704420 (sb_writers#18){.+.+}-{0:0}, at: __do_splice+0x327/0x360
[  194.267900][T10665]  #1: ffff88806755a9e0 (&ovl_i_mutex_key[depth]){+.+.}-{4:4}, at: ovl_splice_write+0x194/0x630
[  194.271234][T10665]  #2: ffff888067010420 (sb_writers#5){.+.+}-{0:0}, at: ovl_splice_write+0x38e/0x630
[  194.274346][T10665] 
[  194.274346][T10665] stack backtrace:
[  194.276647][T10665] CPU: 1 UID: 0 PID: 10665 Comm: syz.3.1258 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0
[  194.280478][T10665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  194.283867][T10665] Call Trace:
[  194.285020][T10665]  <TASK>
[  194.286467][T10665]  dump_stack_lvl+0x116/0x1f0
[  194.287862][T10665]  print_circular_bug+0x41c/0x610
[  194.289743][T10665]  check_noncircular+0x31a/0x400
[  194.291674][T10665]  ? __pfx_check_noncircular+0x10/0x10
[  194.293807][T10665]  ? bpf_ksym_find+0x124/0x1c0
[  194.295661][T10665]  ? lockdep_lock+0xc6/0x200
[  194.297523][T10665]  ? __pfx_lockdep_lock+0x10/0x10
[  194.299586][T10665]  ? lockdep_hardirqs_on+0x7c/0x110
[  194.301650][T10665]  __lock_acquire+0x249e/0x3c40
[  194.303568][T10665]  ? __pfx___lock_acquire+0x10/0x10
[  194.305594][T10665]  ? __pfx_mark_lock+0x10/0x10
[  194.307363][T10665]  lock_acquire.part.0+0x11b/0x380
[  194.308978][T10665]  ? pipe_lock+0x64/0x80
[  194.310605][T10665]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  194.312749][T10665]  ? rcu_is_watching+0x12/0xc0
[  194.314175][T10665]  ? trace_lock_acquire+0x14e/0x1f0
[  194.315687][T10665]  ? pipe_lock+0x64/0x80
[  194.316970][T10665]  ? lock_acquire+0x2f/0xb0
[  194.318298][T10665]  ? pipe_lock+0x64/0x80
[  194.319538][T10665]  __mutex_lock+0x19b/0xa60
[  194.320882][T10665]  ? pipe_lock+0x64/0x80
[  194.322135][T10665]  ? pipe_lock+0x64/0x80
[  194.323388][T10665]  ? __pfx___mutex_lock+0x10/0x10
[  194.324856][T10665]  ? rcu_is_watching+0x12/0xc0
[  194.326243][T10665]  ? trace_kmalloc+0x2d/0xd0
[  194.327608][T10665]  ? pipe_lock+0x64/0x80
[  194.328845][T10665]  pipe_lock+0x64/0x80
[  194.330042][T10665]  iter_file_splice_write+0x1eb/0x10b0
[  194.331672][T10665]  ? __pfx___lock_acquire+0x10/0x10
[  194.333201][T10665]  ? __pfx_iter_file_splice_write+0x10/0x10
[  194.334941][T10665]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  194.336581][T10665]  ? ovl_splice_write+0x38e/0x630
[  194.338083][T10665]  backing_file_splice_write+0x277/0x880
[  194.339709][T10665]  ovl_splice_write+0x38e/0x630
[  194.341160][T10665]  ? __pfx_ovl_splice_write+0x10/0x10
[  194.342728][T10665]  ? __pfx_ovl_file_end_write+0x10/0x10
[  194.344341][T10665]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  194.345955][T10665]  ? rcu_is_watching+0x12/0xc0
[  194.347354][T10665]  ? __do_splice+0x327/0x360
[  194.348733][T10665]  ? __pfx_ovl_splice_write+0x10/0x10
[  194.350315][T10665]  do_splice+0x145c/0x1f60
[  194.351772][T10665]  ? __pfx_do_splice+0x10/0x10
[  194.353178][T10665]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  194.354754][T10665]  ? __pfx_lock_release+0x10/0x10
[  194.356228][T10665]  ? trace_lock_acquire+0x14e/0x1f0
[  194.357783][T10665]  ? __pfx_do_sys_openat2+0x10/0x10
[  194.359295][T10665]  __do_splice+0x327/0x360
[  194.360565][T10665]  ? __pfx___do_splice+0x10/0x10
[  194.361916][T10665]  ? __fget_files+0x206/0x3a0
[  194.363284][T10665]  __ia32_sys_splice+0x189/0x250
[  194.364729][T10665]  __do_fast_syscall_32+0x73/0x120
[  194.366207][T10665]  do_fast_syscall_32+0x32/0x80
[  194.367618][T10665]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  194.369459][T10665] RIP: 0023:0xf7fa1579
[  194.370694][T10665] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  194.376191][T10665] RSP: 002b:00000000f50d555c EFLAGS: 00000296 ORIG_RAX: 0000000000000139
[  194.378598][T10665] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000
[  194.380884][T10665] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000016
[  194.383163][T10665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  194.385412][T10665] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  194.387706][T10665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  194.389983][T10665]  </TASK>

VM DIAGNOSIS:
10:00:42  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff888074803f58 RCX=ffffffff817649e9 RDX=0000000000000000
RSI=ffffffff8bb17300 RDI=ffff888022fa8444 RBP=0000000000000200 RSP=ffffc9002a067ae0
R8 =0000000000000000 R9 =fffffbfff2039f0a R10=ffffffff901cf857 R11=00000000000a201e
R12=0000000000000000 R13=0000000000000008 R14=ffff88801ac88c00 R15=ffff888022e83f00
RIP=ffffffff81994e40 RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000205c7000 CR3=00000000741d8000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a800000000 0000000300000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85146355 RDI=ffffffff9a66a200 RBP=ffffffff9a66a1c0 RSP=ffffc900263d6f10
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d
R12=0000000000000000 R13=0000000000000031 R14=ffffffff851462f0 R15=0000000000000000
RIP=ffffffff8514637f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000000c3a0a27 CR3=00000000741d8000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=00000000001d03a4 RBX=0000000000000002 RCX=ffffffff8b1a8889 RDX=ffffed10056c6fee
RSI=ffffffff8bb17300 RDI=ffffffff81703079 RBP=ffffed10039df000 RSP=ffffc9000048fe08
R8 =0000000000000000 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=0000000000000001
R12=0000000000000002 R13=ffff88801cef8000 R14=ffffffff901cf850 R15=0000000000000000
RIP=ffffffff8b1a9c6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000002f71fffc CR3=0000000068458000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=000000000028ad34 RBX=0000000000000003 RCX=ffffffff8b1a8889 RDX=ffffed10056e6fee
RSI=ffffffff8bb17300 RDI=ffffffff81703079 RBP=ffffed10039df488 RSP=ffffc9000049fe08
R8 =0000000000000000 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=ffff88802b63fb10
R12=0000000000000003 R13=ffff88801cefa440 R14=ffffffff901cf850 R15=0000000000000000
RIP=ffffffff8b1a9c6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007ffdfb5d0f74 CR3=000000004b6c0000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865
ZMM17=b6d143a9473ef9b7 a2b082c0a829590b b6d143a9473ef9b7 a2b082c0a829590b b6d143a9473ef9b7 a2b082c0a829590b b6d143a9473ef9b7 a2b082c0a829590b
ZMM18=5b173721626ef244 8b0d36632e109914 5b173721626ef244 8b0d36632e109914 5b173721626ef244 8b0d36632e109914 5b173721626ef244 8b0d36632e109914
ZMM19=a90c000000000000 0000000000000009 a90c000000000000 0000000000000008 a90c000000000000 0000000000000007 a90c000000000000 0000000000000006
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=ec3c0c04ec3c0c04 ec3c0c04ec3c0c04 ec3c0c04ec3c0c04 ec3c0c04ec3c0c04 ec3c0c04ec3c0c04 ec3c0c04ec3c0c04 ec3c0c04ec3c0c04 ec3c0c04ec3c0c04
ZMM22=1c36f49b1c36f49b 1c36f49b1c36f49b 1c36f49b1c36f49b 1c36f49b1c36f49b 1c36f49b1c36f49b 1c36f49b1c36f49b 1c36f49b1c36f49b 1c36f49b1c36f49b
ZMM23=8bdea1ea8bdea1ea 8bdea1ea8bdea1ea 8bdea1ea8bdea1ea 8bdea1ea8bdea1ea 8bdea1ea8bdea1ea 8bdea1ea8bdea1ea 8bdea1ea8bdea1ea 8bdea1ea8bdea1ea
ZMM24=66c35e0366c35e03 66c35e0366c35e03 66c35e0366c35e03 66c35e0366c35e03 66c35e0366c35e03 66c35e0366c35e03 66c35e0366c35e03 66c35e0366c35e03
ZMM25=a713f650a713f650 a713f650a713f650 a713f650a713f650 a713f650a713f650 a713f650a713f650 a713f650a713f650 a713f650a713f650 a713f650a713f650
ZMM26=6143809861438098 6143809861438098 6143809861438098 6143809861438098 6143809861438098 6143809861438098 6143809861438098 6143809861438098
ZMM27=4562edbb4562edbb 4562edbb4562edbb 4562edbb4562edbb 4562edbb4562edbb 4562edbb4562edbb 4562edbb4562edbb 4562edbb4562edbb 4562edbb4562edbb
ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=8e0800008e080000 8e0800008e080000 8e0800008e080000 8e0800008e080000 8e0800008e080000 8e0800008e080000 8e0800008e080000 8e0800008e080000