last executing test programs:

4.47123209s ago: executing program 3 (id=389):
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000000)={0x5, 0x0, [{0xa9b, 0x0, 0x2}, {}, {0x325, 0x0, 0xfffffffeffffffff}, {0x265, 0x0, 0x8000000000000001}, {0x9bc, 0x0, 0x4}]})
r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r3=>0x0})
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x3, 0x7, 0x401, 0x0, 0x0, {0xa}, [@NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe71}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x52fa}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffffaa}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async)
r4 = openat$cachefiles(0xffffff9c, &(0x7f0000000380), 0x200, 0x0) (async)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r2)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r5, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xdff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffc}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc0}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4)
sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r6, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x80) (async)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001c40)={0x9, 0x0, [{0x80a0000, 0x4f, &(0x7f00000006c0)=""/79}, {0x8000000, 0xa9, &(0x7f0000000740)=""/169}, {0xdddd0000, 0xdc, &(0x7f0000000800)=""/220}, {0x70000, 0xca, &(0x7f0000000900)=""/202}, {0x4, 0x1000, &(0x7f0000000a00)=""/4096}, {0x58000, 0x83, &(0x7f0000001a00)=""/131}, {0x10000, 0xa, &(0x7f0000001ac0)=""/10}, {0x2, 0x28, &(0x7f0000001b00)=""/40}, {0x50000, 0xcd, &(0x7f0000001b40)=""/205}]})
setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000001d80)={0x0, 0xea60}, 0x8)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x24, r6, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc801)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ec0)) (async)
ioctl$SOUND_MIXER_INFO(r4, 0x805c4d65, &(0x7f0000001f00)) (async)
syz_kvm_setup_cpu$x86(r4, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000001fc0)=[@text32={0x20, &(0x7f0000001f80)="0f201ac4e29d9f6a00640f38027f6c6666660f38828906000000c4c11b7c46dd360fc7ff1bc70f72e0e06464260f09c4c1fd5a3532000000", 0x38}], 0x1, 0x24, &(0x7f0000002000), 0x0) (async)
ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000002240)={0x2, 0x837, &(0x7f0000002040)="65fd98816b73e611fc552398abe26e37eba5ac7f91357edb30bef99e8e7b0bc681aa200dec427350d8e55b796af9213869605291ec5526b761824d83acfe2cb71a4a1a2c93dca77c482c22b8ae3ec043d1371337267a9c47d707e145e71037429342d41e837829bb6507321e4c9d39a78941c56293355b3544629e6b21ad217df92b87ba58b7d0b379ee6dd9dfb585dbf8576fa4ecee711c4ee6b0c246657885d80c3e448bc5fee7b5db9d997eefa2214d425961531ff69dc5db94cf7e612fe4ad595de5782c", &(0x7f0000002140)="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", 0xc6, 0xfc})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_KEY(r7, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x34, r6, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c8e59f99c5"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async)
ioctl$VIDIOC_G_STD(r4, 0x80085617, &(0x7f0000002380)) (async)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000002400), r2)
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x2c, r8, 0x400, 0x70bd29, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'macvtap0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async)
bind$netlink(r7, &(0x7f0000002500)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002580)={'wlan1\x00', <r9=>0x0}) (rerun: 32)
sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f00000027c0)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002780)={&(0x7f00000025c0)={0x1b0, r6, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x280, 0x1e}}}}, [@NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x40}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x100, 0x3, 0x5, 0x10, 0xa]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5b0}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x61}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x100}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3ff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x400}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xc1}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x527}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x250}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7fffffff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xb7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x10000}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x5b14, 0x6]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x57}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x5, 0x1, 0x8, 0x0, 0x2]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x55}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ce}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x52}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x555}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x8e2, 0x0]}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x90)

4.364219503s ago: executing program 3 (id=391):
listen(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00000e6000/0x2000)=nil, 0x2000, 0x3000, 0x7, &(0x7f0000038000/0x3000)=nil)
io_uring_setup(0x549c, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
unshare(0x6a040000)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r2, 0xbbc5e000)
r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0)
pwrite64(r4, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2)
r5 = syz_open_procfs(0xffffffffffffffff, 0x0)
write$binfmt_format(r5, &(0x7f0000000040)='1\x00', 0x2)
ioctl$BLKRRPART(r4, 0x125f, 0x1f)
syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4386dd600a3ff200140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRESOCT=r0, @ANYBLOB], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

3.878947158s ago: executing program 1 (id=394):
socket$nl_generic(0x10, 0x3, 0x10)
rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x8000, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000600)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e21, 0x6, @private2, 0xf68f}, @in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, @in6={0xa, 0x6, 0x4, @empty, 0x80001001}, @in={0x2, 0x4e22, @empty}], 0x74)
sendto$inet6(r0, &(0x7f00000009c0)='\\', 0x1, 0x20000081, &(0x7f000005ffe4)={0xa, 0x4e23, 0x57bc3377, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x92, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
faccessat2(0xffffffffffffffff, 0x0, 0x44, 0x1000)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r3=>r1, {0xfffff5d4}}, './file0\x00'})
ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000003c0)=0x4)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r4 = socket$unix(0x1, 0x1, 0x0)
listen(r4, 0x0)
r5 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x7, 0xd44, 0x6})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000)
clock_gettime(0x0, &(0x7f0000000180))
pselect6(0x40, &(0x7f0000000080)={0x1, 0x3, 0x4, 0x5d92, 0x9, 0x1, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0xd325, 0x0, 0x105, 0x4, 0x5, 0x1}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x1000, 0x8]}, 0x8})
fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1)

3.630132722s ago: executing program 0 (id=395):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
write(r0, &(0x7f0000000540)="05000000018000b362c7a4f513c2cbe2c2e58c236389b2ec27c2898c15cb0a013d71f8c76015b79625ccbe6c8891e78aacfea1a4863a7bd261841ad37eac90bfd6d1cc8483e9d96eb25cc7051aa8838462d285c67952ae85fc834b90b6e8d17fda4639ffea121ce2e1286e94d6499e8740290c1d702df349ed4e97b10d0895b02a14a0e70115410b72465e3437bfc116b63481fd1b303f8eab92824c3c8f14ea288fea8e", 0xa4)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x3, &(0x7f0000000000))
r2 = openat$ttynull(0xffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000380)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x67, 0x0, 0x7, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x21}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0x2}]}}}}}}}, 0x0)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x94, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x40021)
chroot(&(0x7f0000000200)='./file0\x00')

3.295502068s ago: executing program 3 (id=397):
r0 = io_uring_setup(0x68f7, &(0x7f00000002c0)={0x0, 0x8d0b, 0x80, 0x0, 0x8100016b})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c)
socket$key(0xf, 0x3, 0x2)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x70bd2c, 0x25df9bfc, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x3, 0x4, {@in6_addr=@empty, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
recvmmsg$unix(r3, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/42, 0x2a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001e40)}}], 0x2, 0x40000100, 0x0)
r6 = dup(r1)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10)
sendmsg$inet(r6, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f00000008c0)='G', 0x1}], 0x1}, 0x8000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c)
write$FUSE_POLL(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
r7 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_FREE_MR(r7, 0x114, 0x3, &(0x7f0000000100)={{0x1, 0x7ff}, 0x18}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

3.119575287s ago: executing program 3 (id=398):
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x21800, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000002000000ffff0000000000001c250800000000000080000000000000f5ffffffffffffff0000000000000000060000000000000000000000000000001f00000004000000000000800000000002000000fcffffff090000002abd7000043500000a0001fd20000000"], 0xec}, 0x1, 0x0, 0x0, 0x8801}, 0x40810)
syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x840)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r4, 0x0, 0x4004)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0)
write(r5, &(0x7f0000000140)='0000:00:02.0', 0xc)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0)
write(r6, &(0x7f0000000140)='0000:00:02.0', 0xc)

2.966839397s ago: executing program 1 (id=399):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x19)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x4, 0x207, 0x5, 0x7fff, r4}, 0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000180)={0x5, 0x4, 0x204, 0x9, 0x4, 0x7500, 0xfffffff9, 0x9, r4}, &(0x7f0000000200)=0x20)
sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14)
r6 = signalfd(r1, &(0x7f0000000140)={[0x429, 0x200]}, 0x8)
readv(r6, &(0x7f0000002e00)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/246, 0xf6}, {&(0x7f0000001b80)=""/147, 0x93}, {&(0x7f0000001c40)=""/139, 0x8b}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x6)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70fd2c, 0x25dfdbfc, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000380)=ANY=[@ANYRES64=r1, @ANYRES8=r1, @ANYRESHEX=r2, @ANYRESHEX=r1, @ANYRES8=0x0, @ANYRESOCT=r1, @ANYRESOCT=r2], 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x0)

2.916881326s ago: executing program 1 (id=400):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0)
stat(&(0x7f0000000000)='./mnt_trace/trace_pipe\x00', &(0x7f00000000c0))
openat(0xffffffffffffff9c, &(0x7f0000001140)='./mnt_trace/trace_pipe\x00', 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f000000b1c0)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r2, &(0x7f0000000400)={0x50, 0x0, r3, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xfffffffffffffffb, {0x6, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0xffffffff, 0x8000000000, 0x0, 0x0, 0xfffff7fffffffffd, 0x0, 0x4, 0x2, 0x4000, 0xd, r4, 0x0, 0x800001}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0xd, {0x0, 0x8, 0xfffffffffffffffd, 0x200, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, 0x2000, 0x101, r4, r5, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb0000008500000073000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000180001bd000000000000000002000000fc00bd0900000000060015000200000014001680"], 0x38}}, 0x0)

2.759461272s ago: executing program 1 (id=401):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x8, 0x8, 0x8, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x44)
write(0xffffffffffffffff, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$nci(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="e87d1120c34370074c8c3159e585e1e7d9d64a51aed756c6943ef9fd32f2845cbdf2adf9b97e6be3d8dea2bee1471e88037c2ffb589116b46549ed728fa80200000000000000565d0879d80203c98a72320180f58b97c9e7006bc20e6abd9264e308eca7ef78d98a2d6b410d2b15e6e085cca6a169fd5801b79b5e5dd5ca55277a42df43f04fb6a3bcc1a6632b89f49f93df860cfc"], 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000440))
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
prlimit64(0x0, 0xb, 0x0, &(0x7f0000000080))
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000540)='.\x00', 0x850003d1)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004)
mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000180), 0x14804, &(0x7f0000000340)={[{@uuid_on, 0x3a}], [{@uid_gt}, {@fowner_eq}], 0x2f})
openat$snapshot(0xffffff9c, &(0x7f0000000480), 0x1, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
getdents64(r6, 0x0, 0x0)

2.758974597s ago: executing program 3 (id=402):
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc01c586a, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000340)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\a\x00\x8f7?\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\\\x14//\\\xff\xea\xa7\xfb\xf6\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xaeF\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\x00R\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x02\x00\x00\x00[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\x00/o\xb2\xad\xb8\x89i@&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\xe5\xa8Q\xc9\xe75Q\xea\xd8\xa2=F\x9b\x8f\x8d\xfc\' {e\x949X\xda\xe8H\x1a\x85\xd7%\x93?w}\xfb\xd9t\xea\xbb\xbe\x9b\\\xd7\xd7\xd4\xe2\xd6c(`(r\xd2\xb1G\xe3\xda&\xca\xaa\xba\v\xc5\xa3H\xb1\x11G\xab\xa2\x1f\xa0\xc3\xd9\xcd\xfb\x1a,\x13S\xf1\xfe\xe5F\xf4\xfb\xc8|\x89\x0fNq\x97J\xb9J\x88S\xc5\xb8\x12\x93\xbe\xb9b\xc7\xbc\x03\x03.E\xab\x82\x1c\xbc1\x9d\x14\xfa\x1f\xdd\x1e*\x03`\x91\xe8x\x0f\x05\x1e\xf5\xbfNo\xd4\x0f]S\x85\x89@\xa9f\x05\xfe\x9fkM\xa5\xf6\xc2\x04\xbf\xc7\x00', 0x2000, &(0x7f0000000580)={@align=0x10001, {0x8df, 0x0, 0x9, 0x4}}, 0x4, &(0x7f00000005c0)={@_ha_fsid}, &(0x7f0000000600)=0x43d6})
syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r1=>0x0})
r2 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0xbff4, 0x100000002, 0x0, 0x1})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1})
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r6=>0x0})
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r6})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001a80)="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", 0x2000, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='vxfs\x00', 0x12080c0, 0x0)
ptrace(0x10, 0x1)
r8 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="010000000000fedbdf255f000200"], 0x14}, 0x1, 0x40030000000000, 0x0, 0x20040841}, 0x8000)
ioctl$EVIOCSKEYCODE_V2(r8, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x98, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"})

2.580560122s ago: executing program 0 (id=403):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x58)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0x6)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x2)
write(r5, &(0x7f0000000100)='1\n\x00', 0x2)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r7, 0x0}, 0x20)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r6, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x38}}, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@dstopts={{0x18, 0x29, 0x37, {0x87}}}], 0x18}, 0x200440d0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r9=>0x0})
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r10, @ANYRES32=r10], 0x44}}, 0x2000800)
socket$packet(0x11, 0x3, 0x300)
r11 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0)
readv(r11, &(0x7f0000000140)=[{&(0x7f0000000480)=""/211, 0xd3}], 0x1)
syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)

2.417211082s ago: executing program 2 (id=404):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000340), 0x4a45c3, &(0x7f0000000240)=ANY=[@ANYBLOB='mpo,=preatic:,\x00\x00\x00\x00\x00\x00\x00'])
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000121401002dbd7000fedbdf25080003000400000008004f000100000008004b0013000000080001000200000008001500"], 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x4004000)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001ac0), 0x80001, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0/file0\x00', 0x138)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
r1 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
mkdirat(r1, &(0x7f0000000100)='./cgroup\x00', 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x7}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r2 = getpid()
sched_setaffinity(0x0, 0xffffff95, &(0x7f00000002c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f00006ca000/0xa000)=nil, 0xa000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
sync()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x6)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040), 0x0)

2.16900598s ago: executing program 0 (id=405):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000340)={0x84}, 0x8)
getsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, &(0x7f00000002c0))
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r2 = socket(0x1d, 0x2, 0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r4=>0x0})
bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r4, 0x3, {0x0, 0x1}}, 0x18)
sendmmsg$inet(r2, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171e4c4c55f79", 0x7}], 0x1}}], 0x1, 0x0)
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r4, 0x2, {0x0, 0xf0, 0x3}, 0x1}, 0x18)
syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x64, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @loopback}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2, 0x0, 0x0, 0x10}}}}}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800410100000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x3c}}, 0x40)
syz_emit_ethernet(0x36, &(0x7f00000006c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @icmp={{0x0, 0x4, 0x2, 0x4, 0x0, 0x64, 0x0, 0x6, 0x1, 0x0, @loopback, @multicast2, {[@end]}}, @info_reply={0x10, 0x0, 0x0, 0x7fff, 0x6}}}}}, 0x0)
r6 = openat$udambuf(0xffffff9c, &(0x7f0000000100), 0x2)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r8 = dup(r7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x2000)
ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000040)={0x0, 0x7fff, 0x6})
r9 = memfd_create(&(0x7f0000000180)='\\&@\x00', 0x3)
ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000480)=<r10=>0x0)
r11 = syz_open_procfs(r10, 0x0)
syz_io_uring_setup(0x7175, &(0x7f00000003c0)={0x0, 0x2992, 0x40, 0x2, 0x800d1, 0x0, r11}, &(0x7f00000004c0), &(0x7f0000000100), &(0x7f0000000280))
r12 = openat$vcsu(0xffffff9c, &(0x7f0000000240), 0x101000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r13=>r1}, './file0\x00'})
r14 = openat$nmem0(0xffffff9c, &(0x7f0000000300), 0x2000, 0x0)
ioctl$UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f0000000380)={0x0, 0x9, [{r8, 0x0, 0x8000, 0x8000}, {r9, 0x0, 0x8000, 0x1000000}, {r5, 0x0, 0xfffffffffffff000, 0xa000}, {r11, 0x0, 0x2000, 0x19000}, {r12, 0x0, 0x1000000000000, 0x8000}, {r13, 0x0, 0x1000000000000, 0xffffffff0001b000}, {r0, 0x0, 0x1000, 0x10000}, {r5, 0x0, 0x10000, 0x10000}, {r14, 0x0, 0x4000, 0x2000}]})

1.679698868s ago: executing program 0 (id=406):
r0 = io_uring_setup(0x68f7, &(0x7f00000002c0)={0x0, 0x8d0b, 0x80, 0x0, 0x8100016b})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c)
socket$key(0xf, 0x3, 0x2)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x70bd2c, 0x25df9bfc, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x3, 0x4, {@in6_addr=@empty, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
recvmmsg$unix(r3, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/42, 0x2a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001e40)}}], 0x2, 0x40000100, 0x0)
r6 = dup(r1)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10)
sendmsg$inet(r6, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f00000008c0)='G', 0x1}], 0x1}, 0x8000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c)
write$FUSE_POLL(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
r7 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_FREE_MR(r7, 0x114, 0x3, &(0x7f0000000100)={{0x1, 0x7ff}, 0x18}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

1.588307192s ago: executing program 1 (id=407):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="180200000500000000000000000000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.510157205s ago: executing program 0 (id=408):
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000480)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}})
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0xc, 0xd64, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x2}}}, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, 0x0, 0x1)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084)
r8 = syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x0, 0x400)
ioctl$FE_GET_INFO(r8, 0x80a86f3d, &(0x7f0000000140))
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
unshare(0x22020400)
r10 = memfd_create(&(0x7f0000000580)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x05\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r&pzS\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6[M\xbe\x19\xea#\xff[\xd1\xc3\x9a\x86\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\x00\x00\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000e6949dac5aaf43b0eb95ba50c916937d000000000000000000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r11}, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r11, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000180)='GPL\x00', 0x8}, 0x94)
execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r12 = dup(r9)
write$UHID_INPUT(r12, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)
epoll_pwait(r0, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0)

1.360004214s ago: executing program 2 (id=409):
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x21800, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64042, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000001c0)=0xb18, 0x4)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="ec00000010000100feffffbf00010000e00000020000000000000000000000007f000001000000000000000000000000000103944e23000d0000a0003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000100000000000057bc15b4000004d46c00008000000000000000000000000000000000000000000000000009000000000000000600000002000000ffff0000000000001c250800000000000080000000000000f5ffffffffffffff0000000000000000060000000000000000000000000000001f00000004000000ff0100000000000002100000fcffffff000000002abd7000043500000a0001fd20000000"], 0xec}, 0x1, 0x0, 0x0, 0x8801}, 0x40810)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r3, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r3, r4, 0x1, 0x800, 0x81, 0x3, {0xc, 0xfacd, 0xd, 0xa2a4, 0xfff9, 0x7, 0x8, 0x81, 0xff, 0x0, 0x1000, 0x7, 0x4800000, 0x6, "0bcc13d30df5fd54520c2e0db22142cf8957703ef62a79518b9d7ff3a31faf87"}})
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x840)
ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0xb8f7)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x6, &(0x7f0000000080)={0x0, "14abd83463604d70b41d4008e300000000fcffffff000000000000006d803e8800"}})
socket$inet_sctp(0x2, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r5 = syz_open_dev$loop(&(0x7f0000000080), 0x440, 0x888e2)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000003c0)={r6, 0x1000, {0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffb, 0x0, 0x0, 0x1c, 0x0, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061a74df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce6, 0xa]}})
ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x1000)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
epoll_create(0x5)

1.226948798s ago: executing program 2 (id=410):
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x21800, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000002000000ffff0000000000001c250800000000000080000000000000f5ffffffffffffff0000000000000000060000000000000000000000000000001f00000004000000000000800000000002000000fcffffff090000002abd7000043500000a0001fd20000000"], 0xec}, 0x1, 0x0, 0x0, 0x8801}, 0x40810)
syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x840)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r4, 0x0, 0x4004)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0)
write(r5, &(0x7f0000000140)='0000:00:02.0', 0xc)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0)
write(r6, &(0x7f0000000140)='0000:00:02.0', 0xc)

1.059920411s ago: executing program 2 (id=411):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
listen(0xffffffffffffffff, 0x0)
listen(0xffffffffffffffff, 0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
recvmmsg(r1, &(0x7f0000001e80), 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c)
sendmsg$nl_generic(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x82004}, 0x90000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="f572c10000a88c43c226f0a6380778c72739a0", @ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs(0xffffffffffffffff, 0x0)
mmap(&(0x7f00005f7000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r5 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0)
pwrite64(r5, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2)
write$binfmt_format(0xffffffffffffffff, &(0x7f0000000040)='1\x00', 0x2)
ioctl$BLKRRPART(r5, 0x125f, 0x1f)
ioctl$NILFS_IOCTL_GET_SUSTAT(r2, 0x80306e85, &(0x7f0000000180))
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x1, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x1, 0x723, 0x400, 0x2, 0x3562bc0d, 0x100, 0xffffffa7, 0x5, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0x4aa14, 0x1, 0x4, 0x0, 0x6, 0xf58, 0x1]})

680.291674ms ago: executing program 1 (id=412):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000006000079b005000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff)
ptrace(0x10, r1)
ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70})
r2 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f0000000040))
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402)
ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000340)={&(0x7f0000000380)=[{0x1e, 0x5011, 0x0, 0x0}], 0x1})
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffff9, 0x0, 0x100, 0x0, 0x200400}}]})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x81})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
write(r6, &(0x7f0000000140)='1\x00', 0x1)
r7 = openat(r6, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0xfc94c54f54391741, 0x188)
r8 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/ipc\x00')
open_by_handle_at(r8, &(0x7f00000001c0)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0xc, 0x0, 0x103, 0xfffffff8, 0x3d}}, 0x0)
write(r7, &(0x7f00000001c0)='1\x00', 0x1)

609.330143ms ago: executing program 0 (id=413):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000480)='GPL\x00'}, 0x94)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0)
socket(0xa, 0x1, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000280)={0x80000000, 0x2, 0x0, 0x85, 0xffffffff})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0x56)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
mount(&(0x7f0000000580)=@sr0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='ext3\x00', 0x3230014, &(0x7f00000000c0)='d*\xf42\xef\x1f}:!kZ\x1fg')
r4 = syz_io_uring_setup(0x17af, &(0x7f00000005c0)={0x0, 0x5ccd, 0x13290, 0x0, 0x41e1}, &(0x7f0000000300), &(0x7f0000000100), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000200), 0x1)
r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000140)=0x2000)
ppoll(&(0x7f0000000040)=[{r5, 0x20}, {r5, 0x13}], 0x2, 0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1}, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'veth0_to_team\x00'})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000640)=0x7fff)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="00f8ffff00"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="020000000100000002000000000000000000000000000000000000002b7d72b4aa05615f736b6f2419cd13601759acf37c3f9a36e2abe8ca2d9b07941486d663a8e13bc04063bf9048fb988de7bf64fe19b283ad440b21c8bf38a759a9c2ecc3511ff8773b15ea4be73c3ce00b130ede64846028fe7cea0d15289da94c106e7674b7ee35743c39f9199a5b946dd00e222d2c74cf72cee60000000000"], 0x50)
fsmount(0xffffffffffffffff, 0x0, 0x77)
pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
r7 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="ff", 0x1, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0xffffffffffffffff)
add_key$keyring(&(0x7f0000000440), &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, r7)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f00000019c0), &(0x7f0000001a00)='%pK    \x00'}, 0x1c)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001a80), 0x4)

391.621439ms ago: executing program 3 (id=414):
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0)
ioctl$I2C_PEC(r0, 0x708, 0x2)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x1, 0x6, 0x8, &(0x7f0000000000)={0x15, "0700b0090000000000000064ebcddff888cf0437600c9212860500"}})
r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffe, 0x6, 0xb4, @scatter={0x0, 0x100000, 0x0}, &(0x7f0000000400)="5af17e1763c3", 0x0, 0x5, 0x10023, 0xfffffffd, 0x0})
socket(0x10, 0x80d, 0x2)
r2 = syz_ublk_setup_io_uring(0x14b5, &(0x7f0000000300)={0x0, 0x3612, 0x400e0, 0x3, 0x2de}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, r2, 0x0)
r3 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x0, 0x181})
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
r6 = syz_open_dev$vim2m(&(0x7f0000000240), 0xa4d1, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}})
ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000100)=0x1)
setsockopt$inet_mtu(r5, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4)
r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)
pwritev2(r8, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x73b2abab56ff3d7e)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="749a9b7c", @ANYRES16=r7, @ANYBLOB="000227bd7000fcdbdf25210000000c00990003000000700000000400ec0044002c800800000000010000080000000000000008000000020000000800000010000000080000000000000008000000f9ffffff080000000400000008000000080000000400ff0008009e0002000000"], 0x74}}, 0x48008)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68)
syz_usbip_server_init(0x1)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_FILES(r3, 0x20, &(0x7f0000000000)=[r3], 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r9, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

91.99451ms ago: executing program 2 (id=415):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) (async)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
memfd_secret(0x80000)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0)
r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$read(0xb, r5, &(0x7f0000000040)=""/131, 0x83)
sendfile(r4, r4, 0x0, 0xb) (async)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0)
sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030527bd70000207000000000000", @ANYRES32=0x0, @ANYBLOB="0060000006180000180012800b0001006970366772650000080002800400120008000a00", @ANYRES32=r6, @ANYBLOB="3bfa83c58119d1cb8715fd75b12be1e7a1624d145f5a0aabd8bc2fabc025d485c0af77ed0610630a0aea"], 0x40}, 0x1, 0x0, 0x0, 0xc005}, 0x440b0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r7=>0x0})
socket$netlink(0x10, 0x3, 0x0) (async)
r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, r6, 0x25, 0x1, @void}, 0x10)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async)
connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @window={0x3, 0x0, 0x401}, @window], 0x5) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async)
sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async)
recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0x100, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r7, {0x0, 0x7}, {0xf, 0x4}, {0x0, 0x9}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
syz_emit_ethernet(0x26, &(0x7f0000000140)={@empty, @local, @val={@val={0x88a8, 0x4, 0x0, 0x3}, {0x8100, 0x7, 0x1}}, {@can={0xc, {{0x2, 0x1}, 0x4, 0x3, 0x0, 0x0, "90884889ea795acd"}}}}, &(0x7f0000000200)={0x0, 0x3, [0x434, 0xdd0, 0x7e, 0xea9]}) (async)
close(r8)

0s ago: executing program 2 (id=416):
r0 = io_uring_setup(0x68f7, &(0x7f00000002c0)={0x0, 0x8d0b, 0x80, 0x0, 0x8100016b})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c)
socket$key(0xf, 0x3, 0x2)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x70bd2c, 0x25df9bfc, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x3, 0x4, {@in6_addr=@empty, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
recvmmsg$unix(r3, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/42, 0x2a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001e40)}}], 0x2, 0x40000100, 0x0)
r6 = dup(r1)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10)
sendmsg$inet(r6, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f00000008c0)='G', 0x1}], 0x1}, 0x8000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c)
write$FUSE_POLL(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000100)={{0x1, 0x7ff}, 0x18}, 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c)
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:50164' (ED25519) to the list of known hosts.
[   40.933037][ T5703] cgroup: Unknown subsys name 'net'
[   41.087650][ T5703] cgroup: Unknown subsys name 'cpuset'
[   41.094111][ T5703] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.033081][ T5703] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.663128][ T5753] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.664633][ T5752] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.666422][ T5753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.673363][ T5753] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.673361][ T5752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.676010][ T5753] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   45.678482][ T5755] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.681866][ T5753] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   45.683990][ T5755] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.685756][ T5753] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   45.686717][ T5759] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.688058][ T5759] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.688139][ T5755] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.688667][ T5752] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.690062][ T5753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.690872][ T5752] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   45.690967][ T5752] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.693661][ T5752] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   45.695197][ T5753] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.695403][ T5748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.244696][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.247446][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.249823][ T5744] bridge_slave_0: entered allmulticast mode
[   46.252474][ T5744] bridge_slave_0: entered promiscuous mode
[   46.277063][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.279552][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.281840][ T5744] bridge_slave_1: entered allmulticast mode
[   46.284693][ T5744] bridge_slave_1: entered promiscuous mode
[   46.325026][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.327322][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.329857][ T5742] bridge_slave_0: entered allmulticast mode
[   46.332553][ T5742] bridge_slave_0: entered promiscuous mode
[   46.344798][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.369914][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.372201][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.374645][ T5742] bridge_slave_1: entered allmulticast mode
[   46.377738][ T5742] bridge_slave_1: entered promiscuous mode
[   46.381667][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.418018][ T5744] team0: Port device team_slave_0 added
[   46.433817][ T5744] team0: Port device team_slave_1 added
[   46.441979][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.458601][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.478942][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.481149][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.483572][ T5743] bridge_slave_0: entered allmulticast mode
[   46.486148][ T5743] bridge_slave_0: entered promiscuous mode
[   46.500205][ T5742] team0: Port device team_slave_0 added
[   46.503102][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.505250][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   46.513471][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.519259][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.521560][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.523929][ T5743] bridge_slave_1: entered allmulticast mode
[   46.527794][ T5743] bridge_slave_1: entered promiscuous mode
[   46.553501][ T5742] team0: Port device team_slave_1 added
[   46.561784][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.564239][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   46.571900][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.602792][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.612821][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.615140][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   46.623575][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.629513][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.651000][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.654023][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   46.665563][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.716331][ T5743] team0: Port device team_slave_0 added
[   46.725689][ T5744] hsr_slave_0: entered promiscuous mode
[   46.729564][ T5744] hsr_slave_1: entered promiscuous mode
[   46.733277][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.735566][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.737858][ T5756] bridge_slave_0: entered allmulticast mode
[   46.740531][ T5756] bridge_slave_0: entered promiscuous mode
[   46.744439][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.747280][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.749529][ T5756] bridge_slave_1: entered allmulticast mode
[   46.752057][ T5756] bridge_slave_1: entered promiscuous mode
[   46.757739][ T5743] team0: Port device team_slave_1 added
[   46.805050][ T5756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.822902][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.825838][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   46.836460][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.846904][ T5756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.853143][ T5742] hsr_slave_0: entered promiscuous mode
[   46.855375][ T5742] hsr_slave_1: entered promiscuous mode
[   46.857524][ T5742] debugfs: 'hsr0' already exists in 'hsr'
[   46.859425][ T5742] Cannot create hsr debugfs directory
[   46.862054][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.864426][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   46.874130][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.921319][ T5756] team0: Port device team_slave_0 added
[   46.924866][ T5756] team0: Port device team_slave_1 added
[   46.960797][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.963824][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   46.974075][ T5756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.999722][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.002281][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.010244][ T5756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.044678][ T5743] hsr_slave_0: entered promiscuous mode
[   47.047912][ T5743] hsr_slave_1: entered promiscuous mode
[   47.050140][ T5743] debugfs: 'hsr0' already exists in 'hsr'
[   47.051870][ T5743] Cannot create hsr debugfs directory
[   47.127405][ T5756] hsr_slave_0: entered promiscuous mode
[   47.130009][ T5756] hsr_slave_1: entered promiscuous mode
[   47.132386][ T5756] debugfs: 'hsr0' already exists in 'hsr'
[   47.134403][ T5756] Cannot create hsr debugfs directory
[   47.321725][ T5744] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.331365][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   47.334313][ T5744] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.338385][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   47.359132][ T5744] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.365098][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   47.377117][ T5744] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.384082][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   47.420004][ T5742] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.426844][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   47.430129][ T5742] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.437667][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   47.446948][ T5742] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.453842][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   47.457588][ T5742] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.464822][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   47.506904][ T5756] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   47.511579][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   47.521433][ T5756] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   47.530279][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   47.538340][ T5756] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   47.543724][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   47.546516][ T5756] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   47.550753][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   47.622470][ T5743] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.627539][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   47.630341][ T5743] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.634637][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   47.643807][ T5743] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.649697][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   47.653586][ T5743] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.660289][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   47.681396][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.727446][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.731091][ T5744] 8021q: adding VLAN 0 to HW filter on device team0
[   47.745595][ T5099] Bluetooth: hci3: command tx timeout
[   47.747736][ T5752] Bluetooth: hci2: command tx timeout
[   47.748054][ T5753] Bluetooth: hci0: command tx timeout
[   47.756639][ T5099] Bluetooth: hci1: command tx timeout
[   47.763488][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.767049][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.782341][ T5742] 8021q: adding VLAN 0 to HW filter on device team0
[   47.790968][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.794328][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.802114][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.804434][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.824322][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.827377][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.838017][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.867695][ T5756] 8021q: adding VLAN 0 to HW filter on device team0
[   47.890787][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.893784][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.906482][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.916665][  T220] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.919388][  T220] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.946182][ T5743] 8021q: adding VLAN 0 to HW filter on device team0
[   47.958903][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.961300][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.973260][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.975590][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.261582][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.343668][ T5744] veth0_vlan: entered promiscuous mode
[   48.352549][ T5744] veth1_vlan: entered promiscuous mode
[   48.360667][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.376892][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.389301][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.416903][ T5744] veth0_macvtap: entered promiscuous mode
[   48.428825][ T5744] veth1_macvtap: entered promiscuous mode
[   48.459464][ T5742] veth0_vlan: entered promiscuous mode
[   48.465095][ T5743] veth0_vlan: entered promiscuous mode
[   48.472416][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.482019][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.488136][ T5743] veth1_vlan: entered promiscuous mode
[   48.493598][ T5742] veth1_vlan: entered promiscuous mode
[   48.508415][ T5554] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.512376][ T5554] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.522598][ T5756] veth0_vlan: entered promiscuous mode
[   48.525841][ T5554] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.529081][ T5554] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.554244][ T5756] veth1_vlan: entered promiscuous mode
[   48.577668][ T5742] veth0_macvtap: entered promiscuous mode
[   48.604781][ T5742] veth1_macvtap: entered promiscuous mode
[   48.617154][  T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.620678][  T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.622222][ T5743] veth0_macvtap: entered promiscuous mode
[   48.634239][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.651461][ T5743] veth1_macvtap: entered promiscuous mode
[   48.656267][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.663330][ T5756] veth0_macvtap: entered promiscuous mode
[   48.670538][ T5756] veth1_macvtap: entered promiscuous mode
[   48.675034][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.678777][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.682566][ T5554] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.688202][ T5554] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.699577][ T5554] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.702275][ T5554] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.726558][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.730903][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.744656][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.748596][ T5744] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.755695][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.768003][ T5744] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   48.771120][ T5554] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.775979][ T5554] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.777024][ T5744] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   48.782550][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.783588][ T5554] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.785229][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.788019][ T5744] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   48.801925][ T5554] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.804535][ T5744] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   48.808696][ T5554] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.829738][ T5554] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.834620][ T5554] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x17b000)
[   48.851345][ T5554] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.860162][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.866248][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.894225][ T1132] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[   48.895782][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.896604][ T1132] ata1: failed to read log page 10h (errno=-5)
[   48.900289][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.900926][ T1132] ata1.00: exception Emask 0x1 SAct 0x804000 SErr 0x0 action 0x0
[   48.907280][ T1132] ata1.00: irq_stat 0x41000000
[   48.908802][ T1132] ata1.00: failed command: READ FPDMA QUEUED
[   48.910868][ T1132] ata1.00: cmd 60/d8:70:0e:99:03/0b:00:00:00:00/40 tag 14 ncq dma 1552384 in
[   48.910868][ T1132]          res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[   48.917688][ T1132] ata1.00: status: { DRDY }
[   48.918491][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.919170][ T1132] ata1.00: error: { ABRT }
[   48.921789][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.923323][ T1132] ata1.00: failed command: READ FPDMA QUEUED
[   48.927210][ T1132] ata1.00: cmd 60/a0:b8:3e:aa:02/01:00:00:00:00/40 tag 23 ncq dma 212992 in
[   48.927210][ T1132]          res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[   48.932083][ T1132] ata1.00: status: { DRDY }
[   48.933862][ T1132] ata1.00: error: { ABRT }
[   48.938794][ T1132] ata1.00: configured for UDMA/100
[   48.941896][ T1132] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[   48.947765][ T1132] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] 
[   48.955016][ T1132] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information
[   48.963147][ T1132] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 03 99 0e 00 0b d8 00
[   48.966095][ T1132] I/O error, dev sda, sector 235790 op 0x0:(READ) flags 0x80700 phys_seg 26 prio class 2
[   48.969858][ T1132] sd 0:0:0:0: [sda] tag#23 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[   48.972766][ T1132] sd 0:0:0:0: [sda] tag#23 Sense Key : Aborted Command [current] 
[   48.975660][ T1132] sd 0:0:0:0: [sda] tag#23 Add. Sense: No additional sense information
[   48.980056][ T1132] sd 0:0:0:0: [sda] tag#23 CDB: Read(10) 28 00 00 02 aa 3e 00 01 a0 00
[   48.985200][ T1132] I/O error, dev sda, sector 174654 op 0x0:(READ) flags 0x80700 phys_seg 52 prio class 2
[   48.988565][ T1132] ata1: EH complete
[   49.009216][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.011841][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.012453][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.017315][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.144565][ T5903] usb usb8: usbfs: process 5903 (syz.0.6) did not claim interface 0 before use
[   49.227664][ T5906] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   49.281299][ T5905] x_tables: duplicate underflow at hook 3
[   49.292703][ T5905] ./bus: Can't lookup blockdev
[   49.324409][ T5910] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   49.342648][ T5912] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   49.438109][ T5914] loop7: detected capacity change from 0 to 7
[   49.446120][ T5914] Dev loop7: unable to read RDB block 7
[   49.449150][ T5914]  loop7: AHDI p1 p2 p3
[   49.451403][ T5914] loop7: partition table partially beyond EOD, truncated
[   49.457574][ T5914] loop7: p1 start 1601398130 is beyond EOD, truncated
[   49.460517][ T5914] loop7: p2 start 1702059890 is beyond EOD, truncated
[   49.528189][   T42] audit: type=1800 audit(1785352673.850:2): pid=5914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.9" name="/newroot/2" dev="tmpfs" ino=27 res=0 errno=0
[   49.544317][ T5921] Zero length message leads to an empty skb
[   49.559281][   T42] audit: type=1804 audit(1785352673.880:3): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.10" name="bus" dev="ramfs" ino=8757 res=1 errno=0
[   49.576972][   T42] audit: type=1804 audit(1785352673.890:4): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.10" name="bus" dev="ramfs" ino=8757 res=1 errno=0
[   49.621327][ T5923] overlayfs: missing 'lowerdir'
[   49.694494][ T5923] uhci_hcd 0000:00:1d.0: remove, state 4
[   49.697398][ T5923] usb usb2: USB disconnect, device number 1
[   49.712992][ T5850] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   49.723584][ T5923] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered
[   49.797229][ T5924] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint
[   49.810174][ T5924] pci 0000:00:1d.0: BAR 4 [io  0xc0e0-0xc0ff]
[   49.823017][ T5752] Bluetooth: hci2: command tx timeout
[   49.823157][ T5099] Bluetooth: hci0: command tx timeout
[   49.823213][ T5753] Bluetooth: hci1: command tx timeout
[   49.823352][ T5753] Bluetooth: hci3: command tx timeout
[   49.839300][ T5924] pci 0000:00:1d.0: Adding to iommu group 7
[   49.865495][ T5924] pci 0000:00:1d.0: BAR 4 [io  0x2000-0x201f]: assigned
[   49.874465][ T5850] usb 5-1: Using ep0 maxpacket: 8
[   49.894949][ T5923] syz.3.12 uses obsolete (PF_INET,SOCK_PACKET)
[   49.897417][ T5850] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   49.903919][ T5850] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   49.907051][ T5850] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   49.915103][ T5850] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   49.919095][ T5850] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   49.922016][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.978233][ T5923] vxcan1: tx drop: invalid da for name 0x0000000000000003
[   50.032599][ T5924] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 156202 usecs
[   50.095934][ T5924] uhci_hcd 0000:00:1d.0: UHCI Host Controller
[   50.106985][ T5924] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2
[   50.110175][ T5924] uhci_hcd 0000:00:1d.0: detected 2 ports
[   50.118858][ T5924] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000
[   50.127603][ T5924] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02
[   50.131293][ T5924] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[   50.134469][ T5924] usb usb2: Product: UHCI Host Controller
[   50.136607][ T5924] usb usb2: Manufacturer: Linux syzkaller uhci_hcd
[   50.140888][ T5924] usb usb2: SerialNumber: 0000:00:1d.0
[   50.226120][ T5850] usb 5-1: GET_CAPABILITIES returned 0
[   50.228224][ T5850] usbtmc 5-1:16.0: can't read capabilities
[   50.244011][ T5924] hub 2-0:1.0: USB hub found
[   50.251097][ T5924] hub 2-0:1.0: 2 ports detected
[   50.430284][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   50.434121][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   50.436967][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   50.439795][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   50.442682][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   50.445538][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   50.448393][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   50.451188][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   50.453992][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   50.459152][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   50.462000][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   50.464821][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   50.467623][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   50.470379][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   50.473185][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   50.476015][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   50.491221][ T5918] process 'syz.0.11' launched '/dev/fd/8' with NULL argv: empty string added
[   50.506871][ T5822] usb 5-1: USB disconnect, device number 2
[   51.441594][ T5931] netlink: 27 bytes leftover after parsing attributes in process `syz.1.14'.
[   51.469599][ T5931] /dev/sr0: Can't open blockdev
[   51.479111][ T5931] netlink: 'syz.1.14': attribute type 1 has an invalid length.
[   51.481874][ T5931] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14'.
[   51.803689][ T5937] kvm: pic: non byte read
[   51.811042][ T5937] kvm: pic: non byte read
[   51.828533][ T5937] kvm: pic: non byte read
[   51.832608][ T5937] kvm: pic: non byte read
[   51.845267][ T5937] kvm: pic: non byte read
[   51.849195][ T5937] kvm: pic: non byte read
[   51.851707][ T5937] kvm: pic: non byte read
[   51.858875][ T5937] kvm: pic: non byte read
[   51.912973][ T5099] Bluetooth: hci3: command tx timeout
[   51.915650][ T5754] Bluetooth: hci1: command tx timeout
[   51.915680][ T5753] Bluetooth: hci0: command tx timeout
[   51.918355][ T5752] Bluetooth: hci2: command tx timeout
[   51.919003][ T5937] kvm: pic: non byte read
[   52.068013][ T5937] kvm: pic: non byte read
[   52.808458][ T5941] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   52.992932][ T5948] netlink: 'syz.0.20': attribute type 2 has an invalid length.
[   53.465337][ T5958] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   53.770343][   T24] IPVS: starting estimator thread 0...
[   53.802936][ T5850] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   53.872969][ T5969] IPVS: using max 43 ests per chain, 103200 per kthread
[   53.952994][ T5850] usb 7-1: Using ep0 maxpacket: 8
[   53.959776][ T5850] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[   53.969356][ T5850] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   53.976759][ T5850] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.983157][ T5752] Bluetooth: hci0: command tx timeout
[   53.993219][ T5752] Bluetooth: hci2: command tx timeout
[   53.993250][ T5753] Bluetooth: hci3: command tx timeout
[   53.995048][ T5099] Bluetooth: hci1: command tx timeout
[   54.533065][   T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   54.704631][   T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   54.707600][   T24] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[   54.710885][   T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[   54.714291][   T24] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   54.718180][   T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   54.721718][   T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   54.726985][   T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   54.730180][   T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   54.733813][   T24] usb 5-1: Product: syz
[   54.735858][   T24] usb 5-1: Manufacturer: syz
[   54.747874][ T5978] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   54.755255][   T24] cdc_wdm 5-1:1.0: skipping garbage
[   54.757072][   T24] cdc_wdm 5-1:1.0: skipping garbage
[   54.762519][   T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[   54.764520][   T24] cdc_wdm 5-1:1.0: Unknown control protocol
[   54.971480][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[   54.975304][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[   54.978745][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[   54.981417][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[   54.984113][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[   54.986837][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[   54.989532][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[   54.992241][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[   54.995854][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[   54.998567][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[   55.002129][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[   55.004874][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[   55.008258][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[   55.010994][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[   55.014107][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[   55.016824][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[   55.019901][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[   55.022588][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[   55.025114][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[   55.027663][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[   55.144107][ T5985] netlink: 532 bytes leftover after parsing attributes in process `syz.0.28'.
[   55.222955][   T34] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   55.291296][   T24] usb 5-1: USB disconnect, device number 3
[   55.291460][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[   55.293787][ T5984] cdc_wdm 5-1:1.0: Tx URB error: -19
[   55.338923][ T5991] faux_driver vkms: [drm] Unknown color mode 52685; guessing buffer size.
[   55.398300][   T34] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00
[   55.402427][   T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.032636][   T34] usb 8-1: Firmware version (0.0) predates our first public release.
[   56.042656][   T34] usb 8-1: Please update to version 0.2 or newer
[   56.045455][   T34] usb 8-1: Firmware: build 

[   56.301902][ T6002] syzkaller0: entered promiscuous mode
[   56.543047][ T5812] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   56.563789][ T5850] usb 7-1: USB disconnect, device number 2
[   56.630995][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.635199][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.716416][ T5812] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   56.719610][ T5812] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   56.722993][ T5812] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[   56.725999][ T5812] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[   56.729552][ T5812] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[   56.736739][ T5812] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   56.740129][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   56.742960][ T5812] usb 5-1: Product: syz
[   56.744497][ T5812] usb 5-1: Manufacturer: syz
[   56.763658][ T5812] cdc_wdm 5-1:1.0: skipping garbage
[   56.766095][ T5812] cdc_wdm 5-1:1.0: skipping garbage
[   56.773786][ T5812] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[   56.775917][ T5812] cdc_wdm 5-1:1.0: Unknown control protocol
[   57.605504][ T6022] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size
[   57.953038][ T5849] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   58.113721][ T5849] usb 7-1: Using ep0 maxpacket: 8
[   58.118193][ T5849] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   58.122906][ T5849] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   58.126763][ T5849] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   58.130710][ T5849] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   58.131636][ T5892] usb 8-1: USB disconnect, device number 2
[   58.135880][ T5849] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   58.143654][ T5849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.172449][ T6030] ip6_tunnel: non-ECT from 2001:0000:0000:0000:0000:0000:0000:0001 with DS=0x7
[   58.273019][   T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   58.331924][ T6034] bond0: (slave macvlan2): Error -98 calling set_mac_address
[   58.355455][ T5849] usb 7-1: GET_CAPABILITIES returned 0
[   58.357220][ T5849] usbtmc 7-1:16.0: can't read capabilities
[   58.432283][   T24] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00
[   58.436597][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.638518][ T1356] usb 7-1: USB disconnect, device number 3
[   59.060869][   T24] usb 6-1: Firmware version (0.0) predates our first public release.
[   59.063540][   T24] usb 6-1: Please update to version 0.2 or newer
[   59.065922][   T24] usb 6-1: Firmware: build 

[   59.251719][ T1356] usb 5-1: USB disconnect, device number 4
[   59.402043][ T6052] loop0: detected capacity change from 0 to 128
[   59.425297][ T6053] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   60.325798][ T6063] fuse: Bad value for 'fd'
[   60.338195][ T6061] veth3: entered allmulticast mode
[   60.383267][   T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   60.544813][   T24] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00
[   60.548585][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.131277][   T34] usb 6-1: USB disconnect, device number 2
[   61.173669][   T24] usb 7-1: Firmware version (0.0) predates our first public release.
[   61.176251][   T24] usb 7-1: Please update to version 0.2 or newer
[   61.180165][   T24] usb 7-1: Firmware: build 

[   61.304173][ T6078] netlink: 28 bytes leftover after parsing attributes in process `syz.0.50'.
[   61.544328][ T6083] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   61.553572][ T6083] CIFS: Attempting to mount //127.0.0.1/share
[   61.604484][ T6084] MINIX-fs: blocksize too small for device
[   62.179039][ T6083] CIFS: VFS: Error connecting to socket. Aborting operation.
[   62.182193][ T6083] CIFS: VFS: cifs_mount failed w/return code = -4
[   62.329649][ T6092] netlink: 20 bytes leftover after parsing attributes in process `syz.1.58'.
[   62.407363][ T6096] zonefs (nullb0) ERROR: Not a zoned block device
[   62.822929][  T975] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   62.902999][   T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   62.974793][  T975] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   62.977909][  T975] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   62.981876][  T975] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[   62.985569][  T975] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[   62.989818][  T975] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[   62.994578][  T975] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   62.997860][  T975] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   63.000400][  T975] usb 8-1: Product: syz
[   63.001717][  T975] usb 8-1: Manufacturer: syz
[   63.007859][  T975] cdc_wdm 8-1:1.0: skipping garbage
[   63.009616][  T975] cdc_wdm 8-1:1.0: skipping garbage
[   63.013457][  T975] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[   63.015424][  T975] cdc_wdm 8-1:1.0: Unknown control protocol
[   63.032935][   T10] usb 6-1: device descriptor read/64, error -71
[   63.272948][   T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   63.279181][ T5115] usb 7-1: USB disconnect, device number 4
[   63.402967][   T10] usb 6-1: device descriptor read/64, error -71
[   63.435882][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.65'.
[   63.442306][ T6110] mmap: syz.3.62 (6110) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   63.514386][   T10] usb usb6-port1: attempt power cycle
[   63.630058][ T6117] tipc: Started in network mode
[   63.631787][ T6117] tipc: Node identity 2007ff, cluster identity 4711
[   63.634122][ T6117] tipc: Node number set to 2099199
[   63.852920][   T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   63.873320][   T10] usb 6-1: device descriptor read/8, error -71
[   64.112936][   T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   64.133698][   T10] usb 6-1: device descriptor read/8, error -71
[   64.243376][   T10] usb usb6-port1: unable to enumerate USB device
[   64.832219][ T6138] binder: 6137:6138 ioctl c0306201 80000080 returned -14
[   64.844214][ T6136] netlink: 52 bytes leftover after parsing attributes in process `syz.0.72'.
[   64.847521][ T6138] binder: 6137:6138 ioctl c0306201 800004c0 returned -14
[   64.852094][ T6138] binder: 6137:6138 ioctl c0306201 800001c0 returned -14
[   65.133024][   T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   65.282891][   T24] usb 7-1: Using ep0 maxpacket: 8
[   65.286223][   T24] usb 7-1: config index 0 descriptor too short (expected 30, got 18)
[   65.290693][   T24] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[   65.293604][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.296173][   T24] usb 7-1: Product: syz
[   65.297547][   T24] usb 7-1: Manufacturer: syz
[   65.299162][   T24] usb 7-1: SerialNumber: syz
[   65.302437][   T24] usb 7-1: config 0 descriptor??
[   65.307440][   T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[   65.310171][   T24] usb 7-1: setting power ON
[   65.311989][   T24] dvb-usb: bulk message failed: -22 (2/0)
[   65.320542][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   65.324069][   T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[   65.326881][   T24] usb 7-1: media controller created
[   65.338155][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   65.353203][   T24] usb 7-1: selecting invalid altsetting 6
[   65.355175][   T24] usb 7-1: digital interface selection failed (-22)
[   65.357280][   T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[   65.360702][   T24] usb 7-1: setting power OFF
[   65.362800][   T24] dvb-usb: bulk message failed: -22 (2/0)
[   65.364877][   T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[   65.367828][   T24] (NULL device *): no alternate interface
[   65.393035][   T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[   65.430831][ T6146] xt_NFQUEUE: number of queues (62232) out of range (got 67565)
[   65.547120][   T24] kernel read not supported for file /dummy_udc (pid: 24 comm: kworker/2:0)
[   65.616881][   T34] usb 7-1: USB disconnect, device number 5
[   65.617174][   T24] usb 8-1: USB disconnect, device number 3
[   65.818910][ T6172] openvswitch: netlink: Missing key (keys=c0, expected=480)
[   66.181123][ T6187] syzkaller1: entered promiscuous mode
[   66.183140][ T6187] syzkaller1: entered allmulticast mode
[   66.192188][ T6187] input: syz0 as /devices/virtual/input/input5
[   66.274148][ T6189] netlink: 'syz.3.88': attribute type 1 has an invalid length.
[   66.276595][ T6189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.88'.
[   66.290832][ T6189] FAULT_INJECTION: forcing a failure.
[   66.290832][ T6189] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   66.295443][ T6189] CPU: 1 UID: 0 PID: 6189 Comm: syz.3.88 Not tainted syzkaller #0 PREEMPT(full) 
[   66.295472][ T6189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   66.295480][ T6189] Call Trace:
[   66.295496][ T6189]  <TASK>
[   66.295500][ T6189]  dump_stack_lvl+0x100/0x190
[   66.295519][ T6189]  should_fail_ex.cold+0x5/0xa
[   66.295533][ T6189]  ? __pfx_event_filter_write+0x10/0x10
[   66.295546][ T6189]  _copy_from_user+0x2e/0xd0
[   66.295565][ T6189]  memdup_user_nul+0x6c/0x120
[   66.295580][ T6189]  event_filter_write+0x47/0x290
[   66.295592][ T6189]  vfs_writev+0x5ed/0xdd0
[   66.295613][ T6189]  ? __pfx_vfs_writev+0x10/0x10
[   66.295639][ T6189]  ? __fget_files+0x21f/0x3d0
[   66.295654][ T6189]  ? do_writev+0x13e/0x340
[   66.295669][ T6189]  do_writev+0x13e/0x340
[   66.295685][ T6189]  ? __pfx_do_writev+0x10/0x10
[   66.295700][ T6189]  ? ksys_write+0x1ac/0x250
[   66.295710][ T6189]  ? __pfx_ksys_write+0x10/0x10
[   66.295723][ T6189]  __do_fast_syscall_32+0xe7/0x970
[   66.295738][ T6189]  ? lockdep_hardirqs_on+0x78/0x100
[   66.295753][ T6189]  do_fast_syscall_32+0x32/0x70
[   66.295767][ T6189]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   66.295781][ T6189] RIP: 0023:0xf6feefec
[   66.295797][ T6189] Code: Unable to access opcode bytes at 0xf6feefc2.
[   66.295809][ T6189] RSP: 002b:00000000f539b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000092
[   66.295820][ T6189] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800000c0
[   66.295832][ T6189] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[   66.295838][ T6189] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   66.295843][ T6189] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   66.295849][ T6189] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   66.295863][ T6189]  </TASK>
[   66.418999][ T6191] netlink: 20 bytes leftover after parsing attributes in process `syz.2.90'.
[   66.454141][ T6191] nbd: socks must be embedded in a SOCK_ITEM attr
[   66.463553][ T5751] block nbd64: NBD_DISCONNECT
[   66.529005][ T5751] udevd[5751]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[   66.878407][ T6213] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   67.294155][ T6225] bpf: Bad value for 'mode'
[   67.353074][ T5850] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   67.501903][ T6228] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   67.503000][ T5850] usb 8-1: Using ep0 maxpacket: 8
[   67.513461][ T5850] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   67.518094][ T5850] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   67.522240][ T5850] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   67.526473][ T5850] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   67.531702][ T5850] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   67.535600][ T5850] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.745689][ T5850] usb 8-1: GET_CAPABILITIES returned 0
[   67.748361][ T5850] usbtmc 8-1:16.0: can't read capabilities
[   67.935204][ T6239] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   68.502961][   T41] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   68.507004][   T10] usb 8-1: USB disconnect, device number 4
[   68.633812][   T41] usb 5-1: device descriptor read/64, error -71
[   68.882973][   T41] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   69.033032][   T41] usb 5-1: device descriptor read/64, error -71
[   69.094058][ T6261] lapbether: lapb_data_request error - 4
[   69.155347][   T41] usb usb5-port1: attempt power cycle
[   69.291217][ T6272] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   69.476415][ T6275] netlink: 'syz.1.116': attribute type 2 has an invalid length.
[   69.542969][   T41] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   69.749898][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.117'.
[   70.123517][   T41] usb 5-1: device descriptor read/8, error -71
[   70.382958][   T41] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   70.413618][   T41] usb 5-1: device descriptor read/8, error -71
[   70.533842][   T41] usb usb5-port1: unable to enumerate USB device
[   70.955429][ T1441] ieee802154 phy1 wpan1: encryption failed: -22
[   70.974957][ T6321] e1000e 0000:00:02.0 eth1: removed PHC
[   71.098478][ T6321] e1000e 0000:00:02.0 eth1: NIC Link is Down
[   71.213011][ T6317] FAULT_INJECTION: forcing a failure.
[   71.213011][ T6317] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   71.251056][ T6317] CPU: 3 UID: 0 PID: 6317 Comm: syz.1.123 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   71.251076][ T6317] Tainted: [L]=SOFTLOCKUP
[   71.251080][ T6317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   71.251086][ T6317] Call Trace:
[   71.251090][ T6317]  <TASK>
[   71.251095][ T6317]  dump_stack_lvl+0x100/0x190
[   71.251114][ T6317]  should_fail_ex.cold+0x5/0xa
[   71.251128][ T6317]  _copy_from_user+0x2e/0xd0
[   71.251147][ T6317]  snd_pcm_oss_write2+0x1c2/0x400
[   71.251160][ T6317]  ? __pfx_snd_pcm_oss_write2+0x10/0x10
[   71.251170][ T6317]  ? snd_pcm_kernel_ioctl+0x12e/0x280
[   71.251185][ T6317]  ? snd_pcm_oss_prepare+0x11e/0x240
[   71.251205][ T6317]  snd_pcm_oss_write+0x729/0xa30
[   71.251217][ T6317]  ? security_file_permission+0x76/0x210
[   71.251236][ T6317]  vfs_write+0x2aa/0x1050
[   71.251248][ T6317]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[   71.251261][ T6317]  ? __pfx_vfs_write+0x10/0x10
[   71.251269][ T6317]  ? find_held_lock+0x2b/0x80
[   71.251283][ T6317]  ? __fget_files+0x215/0x3d0
[   71.251293][ T6317]  ? __fget_files+0x215/0x3d0
[   71.251305][ T6317]  ? __fget_files+0x21f/0x3d0
[   71.251318][ T6317]  ksys_write+0x12a/0x250
[   71.251328][ T6317]  ? __pfx_ksys_write+0x10/0x10
[   71.251337][ T6317]  ? ksys_write+0x1ac/0x250
[   71.251346][ T6317]  ? __pfx_ksys_write+0x10/0x10
[   71.251358][ T6317]  __do_fast_syscall_32+0xe7/0x970
[   71.251373][ T6317]  ? lockdep_hardirqs_on+0x78/0x100
[   71.251388][ T6317]  do_fast_syscall_32+0x32/0x70
[   71.251402][ T6317]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   71.251416][ T6317] RIP: 0023:0xf7f24fec
[   71.251430][ T6317] Code: Unable to access opcode bytes at 0xf7f24fc2.
[   71.251435][ T6317] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[   71.251445][ T6317] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800012c0
[   71.251452][ T6317] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000
[   71.251457][ T6317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   71.251463][ T6317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   71.251469][ T6317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   71.251482][ T6317]  </TASK>
[   71.458691][ T6336] 9p: Unknown Cache mode or invalid value mm
[   71.463548][ T6333] tun0: tun_chr_ioctl cmd 1074025676
[   71.469875][ T6333] tun0: owner set to 0
[   71.505836][ T6344] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   71.952990][   T41] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   72.008208][ T6379] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[   72.014410][ T6379] Falling back ldisc for ttyS3.
[   72.104856][   T41] usb 5-1: too many configurations: 16, using maximum allowed: 8
[   72.120098][   T41] usb 5-1: unable to read config index 0 descriptor/start: -61
[   72.142737][   T41] usb 5-1: can't read configurations, error -61
[   72.188807][ T6395] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   72.275771][   T41] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   72.434061][   T41] usb 5-1: too many configurations: 16, using maximum allowed: 8
[   72.437800][   T41] usb 5-1: unable to read config index 0 descriptor/start: -61
[   72.440347][   T41] usb 5-1: can't read configurations, error -61
[   72.442578][   T41] usb usb5-port1: attempt power cycle
[   72.782955][   T41] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   72.804260][   T41] usb 5-1: too many configurations: 16, using maximum allowed: 8
[   72.809360][   T41] usb 5-1: unable to read config index 0 descriptor/start: -61
[   72.812740][   T41] usb 5-1: can't read configurations, error -61
[   72.943013][   T41] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   72.964273][   T41] usb 5-1: too many configurations: 16, using maximum allowed: 8
[   72.968169][   T41] usb 5-1: unable to read config index 0 descriptor/start: -61
[   72.971224][   T41] usb 5-1: can't read configurations, error -61
[   72.974279][   T41] usb usb5-port1: unable to enumerate USB device
[   74.412613][ T6457] xt_CT: You must specify a L4 protocol and not use inversions on it
[   74.869426][ T6467] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   74.932149][ T6468] kernel profiling enabled (shift: 7)
[   75.014268][ T6470] dwc3 dwc3.2.auto: this is not a DesignWare USB3 DRD Core
[   75.307455][ T6477] netlink: 512 bytes leftover after parsing attributes in process `syz.2.155'.
[   75.325322][   T42] audit: type=1326 audit(1785352699.640:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.3.160" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[   75.341551][   T42] audit: type=1326 audit(1785352699.650:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.3.160" exe="/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf6feefec code=0x7ffc0000
[   75.357801][   T42] audit: type=1326 audit(1785352699.650:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.3.160" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[   75.371096][   T42] audit: type=1326 audit(1785352699.650:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.3.160" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6feefec code=0x7ffc0000
[   75.389000][   T42] audit: type=1326 audit(1785352699.650:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.3.160" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[   75.412783][   T42] audit: type=1326 audit(1785352699.650:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.3.160" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf6feefec code=0x7ffc0000
[   75.431274][   T42] audit: type=1326 audit(1785352699.650:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.3.160" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[   75.450576][   T42] audit: type=1326 audit(1785352699.650:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.3.160" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6feefec code=0x7ffc0000
[   75.470501][   T42] audit: type=1326 audit(1785352699.660:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.3.160" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[   75.480301][ T6468] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   75.489646][   T42] audit: type=1326 audit(1785352699.660:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.3.160" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[   75.917559][ T6489] netlink: 36 bytes leftover after parsing attributes in process `syz.0.163'.
[   76.150078][ T6495] FAULT_INJECTION: forcing a failure.
[   76.150078][ T6495] name failslab, interval 1, probability 0, space 0, times 1
[   76.154165][ T6495] CPU: 0 UID: 0 PID: 6495 Comm: syz.0.167 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   76.154182][ T6495] Tainted: [L]=SOFTLOCKUP
[   76.154185][ T6495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   76.154192][ T6495] Call Trace:
[   76.154196][ T6495]  <TASK>
[   76.154201][ T6495]  dump_stack_lvl+0x100/0x190
[   76.154219][ T6495]  should_fail_ex.cold+0x5/0xa
[   76.154233][ T6495]  should_failslab+0xc2/0x120
[   76.154249][ T6495]  kmem_cache_alloc_noprof+0x91/0x6a0
[   76.154264][ T6495]  ? p9_tag_alloc+0x9c/0x860
[   76.154281][ T6495]  p9_tag_alloc+0x9c/0x860
[   76.154297][ T6495]  ? __pfx_p9_tag_alloc+0x10/0x10
[   76.154311][ T6495]  ? kasan_save_stack+0x3f/0x50
[   76.154325][ T6495]  ? kasan_save_stack+0x30/0x50
[   76.154338][ T6495]  ? kasan_save_track+0x14/0x30
[   76.154350][ T6495]  ? __kasan_kmalloc+0xaa/0xb0
[   76.154362][ T6495]  ? __kmalloc_cache_noprof+0x2e5/0x6c0
[   76.154372][ T6495]  ? p9_client_getattr_dotl+0x4c/0x1e0
[   76.154387][ T6495]  ? v9fs_vfs_getattr_dotl+0x15f/0x430
[   76.154410][ T6495]  ? vfs_getattr_nosec+0x2d4/0x430
[   76.154427][ T6495]  ? vfs_statx+0x148/0x3f0
[   76.154443][ T6495]  ? vfs_fstatat+0x77/0xe0
[   76.154454][ T6495]  ? __do_compat_sys_ia32_stat64+0x92/0x110
[   76.154470][ T6495]  p9_client_prepare_req+0x19b/0x4d0
[   76.154485][ T6495]  ? __pfx_p9_client_prepare_req+0x10/0x10
[   76.154506][ T6495]  p9_client_rpc+0x1c4/0xd60
[   76.154522][ T6495]  ? __pfx_p9_client_rpc+0x10/0x10
[   76.154540][ T6495]  ? __kasan_kmalloc+0xaa/0xb0
[   76.154553][ T6495]  ? __kmalloc_cache_noprof+0x2e5/0x6c0
[   76.154564][ T6495]  ? p9_client_getattr_dotl+0x4c/0x1e0
[   76.154582][ T6495]  p9_client_getattr_dotl+0xba/0x1e0
[   76.154624][ T6495]  v9fs_vfs_getattr_dotl+0x15f/0x430
[   76.154642][ T6495]  vfs_getattr_nosec+0x2d4/0x430
[   76.154654][ T6495]  ? __pfx_v9fs_vfs_getattr_dotl+0x10/0x10
[   76.154671][ T6495]  vfs_statx+0x148/0x3f0
[   76.154683][ T6495]  ? __pfx_vfs_statx+0x10/0x10
[   76.154696][ T6495]  ? do_getname+0x191/0x390
[   76.154711][ T6495]  vfs_fstatat+0x77/0xe0
[   76.154724][ T6495]  __do_compat_sys_ia32_stat64+0x92/0x110
[   76.154736][ T6495]  ? __pfx___do_compat_sys_ia32_stat64+0x10/0x10
[   76.154755][ T6495]  ? ksys_write+0x1ac/0x250
[   76.154765][ T6495]  ? __pfx_ksys_write+0x10/0x10
[   76.154777][ T6495]  __do_fast_syscall_32+0xe7/0x970
[   76.154791][ T6495]  ? lockdep_hardirqs_on+0x78/0x100
[   76.154805][ T6495]  do_fast_syscall_32+0x32/0x70
[   76.154818][ T6495]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   76.154837][ T6495] RIP: 0023:0xf7fe3fec
[   76.154851][ T6495] Code: Unable to access opcode bytes at 0xf7fe3fc2.
[   76.154856][ T6495] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c3
[   76.154866][ T6495] RAX: ffffffffffffffda RBX: 00000000800002c0 RCX: 0000000080000240
[   76.154873][ T6495] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   76.154879][ T6495] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   76.154884][ T6495] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   76.154890][ T6495] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   76.154903][ T6495]  </TASK>
[   76.183689][ T6497] netlink: 28 bytes leftover after parsing attributes in process `syz.2.166'.
[   76.287254][ T6497] batadv_slave_1: entered promiscuous mode
[   76.328880][ T6496] batadv_slave_1: left promiscuous mode
[   76.443030][ T5812] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[   76.445010][ T6506] program syz.1.170 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   76.478775][ T6507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.171'.
[   76.601493][ T5812] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   76.611528][ T5812] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   76.621947][ T5812] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[   76.651972][ T5812] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[   76.659504][ T5812] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.665856][ T5812] usb 8-1: Product: syz
[   76.671196][ T5812] usb 8-1: Manufacturer: syz
[   76.672779][ T5812] usb 8-1: SerialNumber: syz
[   76.755302][ T5812] usb 8-1: config 0 descriptor??
[   76.768764][ T6499] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   76.883059][ T5812] rc_core: IR keymap rc-streamzap not found
[   76.889204][ T5812] Registered IR keymap rc-empty
[   76.928662][ T5812] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0
[   76.960300][ T5812] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input7
[   77.026008][ T6499] =======================================================
[   77.026008][ T6499] WARNING: The mand mount option has been deprecated and
[   77.026008][ T6499]          and is ignored by this kernel. Remove the mand
[   77.026008][ T6499]          option from the mount to silence this warning.
[   77.026008][ T6499] =======================================================
[   77.049978][ T6499] ptrace attach of "/syz-executor exec"[5756] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               
[   77.074572][ T6546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.174'.
[   77.129433][ T6546] team0 (unregistering): Port device team_slave_0 removed
[   77.138837][ T6546] team0 (unregistering): Port device team_slave_1 removed
[   77.547710][   T34] usb 8-1: USB disconnect, device number 5
[   77.682303][ T6588] netlink: 'syz.0.180': attribute type 3 has an invalid length.
[   77.699732][ T6582] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[   77.702040][ T6582] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   77.707513][ T6582] vhci_hcd vhci_hcd.0: Device attached
[   77.732419][ T6590] vhci_hcd: connection closed
[   77.744289][   T12] vhci_hcd vhci_hcd.2: stop threads
[   77.752730][   T12] vhci_hcd vhci_hcd.2: release socket
[   77.755504][   T12] vhci_hcd vhci_hcd.2: disconnect device
[   77.839971][ T6599] netlink: 48 bytes leftover after parsing attributes in process `syz.2.182'.
[   77.930301][ T6605] FAULT_INJECTION: forcing a failure.
[   77.930301][ T6605] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   77.934517][ T6605] CPU: 3 UID: 0 PID: 6605 Comm: syz.0.183 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   77.934534][ T6605] Tainted: [L]=SOFTLOCKUP
[   77.934537][ T6605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   77.934544][ T6605] Call Trace:
[   77.934548][ T6605]  <TASK>
[   77.934553][ T6605]  dump_stack_lvl+0x100/0x190
[   77.934571][ T6605]  should_fail_ex.cold+0x5/0xa
[   77.934604][ T6605]  _copy_from_user+0x2e/0xd0
[   77.934624][ T6605]  snd_seq_oss_write+0x3d5/0x8b0
[   77.934640][ T6605]  ? __pfx_snd_seq_oss_write+0x10/0x10
[   77.934654][ T6605]  ? apparmor_file_permission+0x13f/0x1c0
[   77.934670][ T6605]  ? bpf_lsm_file_permission+0x9/0x10
[   77.934683][ T6605]  odev_write+0x51/0xa0
[   77.934700][ T6605]  vfs_write+0x2aa/0x1050
[   77.934712][ T6605]  ? __pfx_odev_write+0x10/0x10
[   77.934729][ T6605]  ? __pfx_vfs_write+0x10/0x10
[   77.934737][ T6605]  ? find_held_lock+0x2b/0x80
[   77.934751][ T6605]  ? __fget_files+0x215/0x3d0
[   77.934762][ T6605]  ? __fget_files+0x215/0x3d0
[   77.934773][ T6605]  ? __fget_files+0x21f/0x3d0
[   77.934786][ T6605]  ksys_write+0x12a/0x250
[   77.934796][ T6605]  ? __pfx_ksys_write+0x10/0x10
[   77.934809][ T6605]  ? ksys_write+0x1ac/0x250
[   77.934818][ T6605]  ? __pfx_ksys_write+0x10/0x10
[   77.934830][ T6605]  __do_fast_syscall_32+0xe7/0x970
[   77.934845][ T6605]  ? lockdep_hardirqs_on+0x78/0x100
[   77.934858][ T6605]  do_fast_syscall_32+0x32/0x70
[   77.934872][ T6605]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   77.934887][ T6605] RIP: 0023:0xf7fe3fec
[   77.934901][ T6605] Code: Unable to access opcode bytes at 0xf7fe3fc2.
[   77.934906][ T6605] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[   77.934916][ T6605] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000d00
[   77.934923][ T6605] RDX: 00000000fffffe8e RSI: 0000000000000000 RDI: 0000000000000000
[   77.934928][ T6605] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   77.934934][ T6605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   77.934940][ T6605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   77.934952][ T6605]  </TASK>
[   79.239868][ T6628] netlink: 'syz.0.186': attribute type 49 has an invalid length.
[   79.406760][ T6628] ip6gretap0: entered promiscuous mode
[   79.409086][ T6628] ip6gretap0: entered allmulticast mode
[   79.780791][ T6656] overlayfs: failed lookup in lower (newroot/49, name='file0', err=-40): overlapping layers
[   80.057199][ T6667] tipc: Started in network mode
[   80.058893][ T6667] tipc: Node identity 0010000000080000002000000006, cluster identity 1
[   80.544500][ T6611] Process accounting resumed
[   80.571399][ T6680] 9pnet_fd: Insufficient options for proto=fd
[   80.592941][   T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[   80.731255][ T6683] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   80.762921][   T10] usb 5-1: Using ep0 maxpacket: 8
[   80.768196][   T10] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[   80.771496][   T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   80.774827][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   80.777856][   T10] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   80.781845][   T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   80.784947][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.791351][   T10] usbtmc 5-1:16.0: bulk endpoints not found
[   81.324878][   T50] cfg80211: failed to load regulatory.db
[   82.041789][ T6694] netlink: 20 bytes leftover after parsing attributes in process `syz.1.202'.
[   82.069924][ T6696] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[   82.072678][ T6696] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   82.076654][ T6696] vhci_hcd vhci_hcd.0: Device attached
[   82.363037][ T5812] usb 42-1: SetAddress Request (2) to port 0
[   82.366016][ T5812] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd
[   82.722405][ T6697] vhci_hcd: connection reset by peer
[   82.728245][   T12] vhci_hcd vhci_hcd.2: stop threads
[   82.730506][   T12] vhci_hcd vhci_hcd.2: release socket
[   82.734523][   T12] vhci_hcd vhci_hcd.2: disconnect device
[   83.017479][ T6708] netlink: 'syz.1.203': attribute type 10 has an invalid length.
[   83.036550][ T6708] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.042608][ T6708] team0: Port device bond0 added
[   83.347748][   T10] usb 5-1: USB disconnect, device number 13
[   83.481448][ T6714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.205'.
[   83.627533][ T6257] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[   83.774422][ T6726] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   83.788330][ T6257] usb 8-1: config 0 has an invalid interface number: 205 but max is 0
[   83.803092][ T6257] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   83.813025][ T6257] usb 8-1: config 0 has no interface number 0
[   83.823888][ T6257] usb 8-1: config 0 interface 205 has no altsetting 0
[   83.827790][ T6257] usb 8-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[   83.831359][ T6257] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.835163][ T6257] usb 8-1: Product: syz
[   83.836729][ T6257] usb 8-1: Manufacturer: syz
[   83.843204][ T6257] usb 8-1: SerialNumber: syz
[   83.853920][ T6257] usb 8-1: config 0 descriptor??
[   83.869530][ T6257] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[   83.874392][ T6257] dvb-usb: bulk message failed: -22 (3/0)
[   83.897465][ T6257] dvb-usb: will use the device's hardware PID filter (table count: 16).
[   83.910284][ T6257] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[   83.915834][ T6257] usb 8-1: media controller created
[   83.918390][ T6257] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   83.926645][ T6257] dvb-usb: bulk message failed: -22 (6/0)
[   83.929047][ T6257] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[   83.933925][ T6257] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input8
[   83.939128][ T6257] dvb-usb: schedule remote query interval to 150 msecs.
[   83.941452][ T6257] dvb-usb: bulk message failed: -22 (3/0)
[   83.963114][ T6257] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[   84.096046][ T6257] dvb-usb: bulk message failed: -22 (1/0)
[   84.101595][ T6257] dvb-usb: error while querying for an remote control event.
[   84.272923][ T6257] dvb-usb: bulk message failed: -22 (1/0)
[   84.275840][ T6257] dvb-usb: error while querying for an remote control event.
[   84.442912][ T6257] dvb-usb: bulk message failed: -22 (1/0)
[   84.444862][ T6257] dvb-usb: error while querying for an remote control event.
[   84.563416][ T6737] fuse: Unknown parameter ''
[   84.603974][ T6257] dvb-usb: bulk message failed: -22 (1/0)
[   84.606719][ T6257] dvb-usb: error while querying for an remote control event.
[   84.744595][ T6742] netlink: 32 bytes leftover after parsing attributes in process `syz.2.215'.
[   84.773067][ T6257] dvb-usb: bulk message failed: -22 (1/0)
[   84.775520][ T6257] dvb-usb: error while querying for an remote control event.
[   84.933002][   T41] dvb-usb: bulk message failed: -22 (1/0)
[   84.935582][   T41] dvb-usb: error while querying for an remote control event.
[   85.105528][   T41] dvb-usb: bulk message failed: -22 (1/0)
[   85.107921][   T41] dvb-usb: error while querying for an remote control event.
[   85.197141][ T6767] Cannot find del_set index 14804 as target
[   85.250759][ T6771] tipc: Started in network mode
[   85.253459][ T6771] tipc: Node identity 0e277762201b, cluster identity 4711
[   85.257054][ T6771] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.260594][ T6771] syzkaller0: entered promiscuous mode
[   85.263127][ T6771] syzkaller0: entered allmulticast mode
[   85.283071][   T41] dvb-usb: bulk message failed: -22 (1/0)
[   85.283397][ T6771] tipc: Resetting bearer <eth:syzkaller0>
[   85.284934][   T41] dvb-usb: error while querying for an remote control event.
[   85.292568][ T6770] tipc: Resetting bearer <eth:syzkaller0>
[   85.304934][ T6770] tipc: Disabling bearer <eth:syzkaller0>
[   85.334094][ T6773] nbd: must specify at least one socket
[   85.443019][   T41] dvb-usb: bulk message failed: -22 (1/0)
[   85.445368][   T41] dvb-usb: error while querying for an remote control event.
[   85.604532][   T41] dvb-usb: bulk message failed: -22 (1/0)
[   85.608387][   T41] dvb-usb: error while querying for an remote control event.
[   85.739539][ T6790] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[   85.742286][ T6790] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   85.752083][ T6790] vhci_hcd vhci_hcd.0: Device attached
[   85.774196][ T6257] dvb-usb: bulk message failed: -22 (1/0)
[   85.780123][ T6257] dvb-usb: error while querying for an remote control event.
[   85.921042][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.232'.
[   85.963512][ T6257] dvb-usb: bulk message failed: -22 (1/0)
[   85.968672][ T6257] dvb-usb: error while querying for an remote control event.
[   86.032978][ T5115] usb 40-1: SetAddress Request (2) to port 0
[   86.036162][ T5115] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd
[   86.132942][ T6257] dvb-usb: bulk message failed: -22 (1/0)
[   86.137454][ T6257] dvb-usb: error while querying for an remote control event.
[   86.149530][ T6257] usb 8-1: USB disconnect, device number 6
[   86.260558][ T6794] vhci_hcd: connection reset by peer
[   86.276434][   T12] vhci_hcd vhci_hcd.1: stop threads
[   86.281028][   T12] vhci_hcd vhci_hcd.1: release socket
[   86.287033][   T12] vhci_hcd vhci_hcd.1: disconnect device
[   86.658944][ T6818] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[   86.661573][ T6818] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   86.664875][ T6818] vhci_hcd vhci_hcd.0: Device attached
[   86.705120][ T6825] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   86.712528][ T6257] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[   86.716819][ T6821] vhci_hcd: connection closed
[   86.717143][   T12] vhci_hcd vhci_hcd.3: stop threads
[   86.720593][   T12] vhci_hcd vhci_hcd.3: release socket
[   86.723127][   T12] vhci_hcd vhci_hcd.3: disconnect device
[   87.008328][ T6840] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[   87.009009][ T6840] ALSA: mixer_oss: invalid index 137438
[   87.027010][ T6842] syzkaller1: entered promiscuous mode
[   87.035183][ T6842] syzkaller1: entered allmulticast mode
[   87.046291][ T6844] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   87.092673][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.248'.
[   87.248868][ T6861] binder: 6860:6861 ioctl c0306201 80000080 returned -14
[   87.333012][ T1356] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[   87.406673][ T5099] Bluetooth: hci0: ACL packet for unknown connection handle 0
[   87.424168][ T5812] usb 42-1: device descriptor read/8, error -110
[   87.482969][ T1356] usb 8-1: Using ep0 maxpacket: 8
[   87.487710][ T1356] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   87.493541][ T1356] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   87.497846][ T1356] usb 8-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   87.502967][ T1356] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   87.507340][ T1356] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   87.510424][ T1356] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.521873][ T1356] usbtmc 8-1:16.0: bulk endpoints not found
[   87.833769][ T5812] usb usb42-port1: attempt power cycle
[   88.403786][ T5812] usb usb42-port1: unable to enumerate USB device
[   88.469133][ T6884] overlayfs: missing 'workdir'
[   88.597971][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'.
[   88.853815][ T6257] hid-generic 0000:0001:0005.0002: unknown main item tag 0x0
[   88.856278][ T6257] hid-generic 0000:0001:0005.0002: unknown main item tag 0x0
[   88.867263][ T6257] hid-generic 0000:0001:0005.0002: hidraw1: <UNKNOWN> HID v8.06 Device [syz1] on syz0
[   88.981879][ T6900] fido_id[6900]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   89.041195][ T6908] [U] ¥
[   89.042335][ T6908] [U] 
[   89.043337][ T6908] [U] 
[   89.044295][ T6908] [U] 
[   89.045178][ T6908] [U] 
[   89.046040][ T6908] [U] 
[   89.046965][ T6908] [U] 
[   89.048134][ T6908] [U] 
[   89.050001][ T6908] [U] 
[   89.050933][ T6908] [U] 
[   89.051865][ T6908] [U] 
[   89.052754][ T6908] [U] 
[   89.053778][ T6908] [U] 
[   89.054673][ T6908] [U] 
[   89.055554][ T6908] [U] 
[   89.056448][ T6908] [U] 
[   89.057529][ T6908] [U] 
[   89.058609][ T6908] [U] 
[   89.059511][ T6908] [U] 
[   89.060396][ T6908] [U] 
[   89.061255][ T6908] [U] 
[   89.062143][ T6908] [U] 
[   89.063037][ T6908] [U] 
[   89.063940][ T6908] [U] 
[   89.065279][ T6908] [U] 
[   89.066175][ T6908] [U] 
[   89.067151][ T6908] [U] 
[   89.068326][ T6908] [U] 
[   89.069518][ T6908] [U] 
[   89.070720][ T6908] [U] 
[   89.071915][ T6908] [U] 
[   89.073062][ T6908] [U] 
[   89.076065][ T6908] [U] 
[   89.077064][ T6908] [U] 
[   89.077996][ T6908] [U] 
[   89.078911][ T6908] [U] 
[   89.079800][ T6908] [U] 
[   89.080686][ T6908] [U] 
[   89.081601][ T6908] [U] 
[   89.082486][ T6908] [U] 
[   89.083662][ T6908] [U] 
[   89.084560][ T6908] [U] 
[   89.085455][ T6908] [U] 
[   89.086364][ T6908] [U] 
[   89.087310][ T6908] [U] 
[   89.088195][ T6908] [U] 
[   89.089082][ T6908] [U] 
[   89.089968][ T6908] [U] 
[   89.092302][ T6908] [U] 
[   89.093227][ T6908] [U] 
[   89.094112][ T6908] [U] 
[   89.095014][ T6908] [U] 
[   89.095915][ T6908] [U] 
[   89.096826][ T6908] [U] 
[   89.097747][ T6908] [U] 
[   89.098651][ T6908] [U] 
[   89.099757][ T6908] [U] 
[   89.100652][ T6908] [U] 
[   89.101564][ T6908] [U] 
[   89.102453][ T6908] [U] 
[   89.103384][ T6908] [U] 
[   89.104270][ T6908] [U] 
[   89.105155][ T6908] [U] 
[   89.106042][ T6908] [U] 
[   89.107045][ T6908] [U] 
[   89.107987][ T6908] [U] 
[   89.108887][ T6908] [U] 
[   89.109774][ T6908] [U] 
[   89.110671][ T6908] [U] 
[   89.111579][ T6908] [U] 
[   89.112476][ T6908] [U] 
[   89.113395][ T6908] [U] 
[   89.114712][ T6908] [U] 
[   89.115621][ T6908] [U] 
[   89.116524][ T6908] [U] 
[   89.117629][ T6908] [U] 
[   89.118845][ T6908] [U] 
[   89.120039][ T6908] [U] 
[   89.121183][ T6908] [U] 
[   89.122377][ T6908] [U] 
[   89.123725][ T6908] [U] 
[   89.124882][ T6908] [U] 
[   89.126080][ T6908] [U] 
[   89.127282][ T6908] [U] 
[   89.128490][ T6908] [U] 
[   89.129668][ T6908] [U] 
[   89.130874][ T6908] [U] 
[   89.132051][ T6908] [U] 
[   89.133412][ T6908] [U] 
[   89.134343][ T6908] [U] 
[   89.135223][ T6908] [U] 
[   89.136111][ T6908] [U] 
[   89.137047][ T6908] [U] 
[   89.137961][ T6908] [U] 
[   89.139002][ T6908] [U] 
[   89.139899][ T6908] [U] 
[   89.140802][ T6908] [U] 
[   89.141707][ T6908] [U] 
[   89.142606][ T6908] [U] 
[   89.143530][ T6908] [U] 
[   89.144415][ T6908] [U] 
[   89.145302][ T6908] [U] 
[   89.146161][ T6908] [U] 
[   89.151515][ T6907] [U] 
[   89.799051][ T6929] netlink: 'syz.2.272': attribute type 1 has an invalid length.
[   89.802181][ T6929] netlink: 7226 bytes leftover after parsing attributes in process `syz.2.272'.
[   89.867922][ T6932] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[   89.870599][ T6932] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   89.874391][ T6932] vhci_hcd vhci_hcd.0: Device attached
[   89.889086][ T6932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.272'.
[   90.085642][   T50] usb 8-1: USB disconnect, device number 7
[   90.172985][ T5850] usb 42-1: SetAddress Request (6) to port 0
[   90.177870][ T5850] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd
[   90.413964][  T975] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   90.502958][ T5812] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[   90.564970][  T975] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   90.568383][  T975] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   90.571774][  T975] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[   90.576090][  T975] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[   90.580268][  T975] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[   90.586476][  T975] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   90.590569][  T975] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   90.594048][  T975] usb 6-1: Product: syz
[   90.595843][  T975] usb 6-1: Manufacturer: syz
[   90.603942][  T975] cdc_wdm 6-1:1.0: skipping garbage
[   90.606627][  T975] cdc_wdm 6-1:1.0: skipping garbage
[   90.612486][  T975] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[   90.615255][  T975] cdc_wdm 6-1:1.0: Unknown control protocol
[   90.631289][ T6933] vhci_hcd: connection reset by peer
[   90.634248][   T12] vhci_hcd vhci_hcd.2: stop threads
[   90.637335][   T12] vhci_hcd vhci_hcd.2: release socket
[   90.640488][   T12] vhci_hcd vhci_hcd.2: disconnect device
[   90.683073][ T5812] usb 5-1: Using ep0 maxpacket: 8
[   90.687042][ T5812] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.691548][ T5812] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.695827][ T5812] usb 5-1: config 0 interface 0 has no altsetting 0
[   90.698455][ T5812] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   90.702122][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.709482][ T5812] usb 5-1: config 0 descriptor??
[   91.112971][ T5115] usb 40-1: device descriptor read/8, error -110
[   91.339214][ T5812] usbhid 5-1:0.0: can't add hid device: -71
[   91.345035][ T5812] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   91.361857][ T5812] usb 5-1: USB disconnect, device number 14
[   91.472619][ T6968] netlink: 52 bytes leftover after parsing attributes in process `syz.2.282'.
[   91.503818][ T5115] usb usb40-port1: attempt power cycle
[   92.077821][ T5115] usb usb40-port1: unable to enumerate USB device
[   93.196604][   T24] usb 6-1: USB disconnect, device number 7
[   93.212129][ T7010] netlink: 'syz.0.294': attribute type 10 has an invalid length.
[   93.215465][ T7010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.294'.
[   93.219509][ T7010] dummy0: entered promiscuous mode
[   93.232510][ T7010] bridge0: port 3(dummy0) entered blocking state
[   93.235835][ T7010] bridge0: port 3(dummy0) entered disabled state
[   93.238722][ T7010] dummy0: entered allmulticast mode
[   93.250871][ T7010] bridge0: port 3(dummy0) entered blocking state
[   93.250942][ T7012] capability: warning: `syz.1.295' uses 32-bit capabilities (legacy support in use)
[   93.255356][ T7010] bridge0: port 3(dummy0) entered listening state
[   93.277402][ T7016] fuse: Bad value for 'group_id'
[   93.279101][ T7016] fuse: Bad value for 'group_id'
[   93.424032][ T7018] netlink: 'syz.1.296': attribute type 32 has an invalid length.
[   93.426680][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'.
[   93.432391][ T7018] netlink: 'syz.1.296': attribute type 32 has an invalid length.
[   93.742145][ T7027] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   93.999934][ T7034] netlink: 'syz.2.302': attribute type 1 has an invalid length.
[   94.003606][ T7034] netlink: 224 bytes leftover after parsing attributes in process `syz.2.302'.
[   94.136703][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.300'.
[   94.140059][ T7037] bridge_slave_1: left allmulticast mode
[   94.141976][ T7037] bridge_slave_1: left promiscuous mode
[   94.145797][ T7037] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.184891][ T7039] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   94.200429][ T7037] bridge_slave_0: left allmulticast mode
[   94.205689][ T7037] bridge_slave_0: left promiscuous mode
[   94.212225][ T7037] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.225223][ T7043] efs: cannot read volume header
[   94.423012][ T6257] usb 5-1: new low-speed USB device number 15 using dummy_hcd
[   94.461901][ T7045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.305'.
[   94.479191][ T7045] warning: `syz.3.305' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   94.553031][ T6257] usb 5-1: device descriptor read/64, error -71
[   94.700961][ T7049] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058)
[   94.721291][ T7049] random: crng reseeded on system resumption
[   94.792978][ T6257] usb 5-1: new low-speed USB device number 16 using dummy_hcd
[   94.934183][ T6257] usb 5-1: device descriptor read/64, error -71
[   94.940482][ T7045] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   94.992516][ T7044] tipc: Disabling bearer <eth:syzkaller0>
[   95.046444][ T6257] usb usb5-port1: attempt power cycle
[   95.273134][ T5850] usb 42-1: device descriptor read/8, error -110
[   95.373235][ T7070] program syz.2.309 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   95.668820][ T5850] usb usb42-port1: attempt power cycle
[   96.245458][ T5850] usb usb42-port1: unable to enumerate USB device
[   96.303999][ T6257] usb 5-1: new low-speed USB device number 17 using dummy_hcd
[   96.325048][ T6257] usb 5-1: device descriptor read/8, error -71
[   96.562944][ T6257] usb 5-1: new low-speed USB device number 18 using dummy_hcd
[   96.583552][ T6257] usb 5-1: device descriptor read/8, error -71
[   96.693292][ T6257] usb usb5-port1: unable to enumerate USB device
[   97.125023][ T7088] trusted_key: syz.3.317 sent an empty control message without MSG_MORE.
[   97.443151][ T5115] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[   97.594913][ T5115] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.599510][ T5115] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.604187][ T5115] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   97.609721][ T5115] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   97.613514][ T5115] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.620196][ T5115] usb 8-1: config 0 descriptor??
[   97.881052][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'.
[   97.883901][ T7100] bridge_slave_1: left allmulticast mode
[   97.885704][ T7100] bridge_slave_1: left promiscuous mode
[   97.889038][ T7100] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.894457][ T7100] bridge_slave_0: left allmulticast mode
[   97.896290][ T7100] bridge_slave_0: left promiscuous mode
[   97.898156][ T7100] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.972188][ T7102] efs: cannot read volume header
[   97.979091][ T7103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   98.091245][ T5115] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   98.093919][ T5115] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   98.097741][ T5115] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   98.100380][ T5115] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   98.103026][ T5115] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   98.105491][ T5115] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   98.108346][ T5115] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   98.110943][ T5115] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   98.113977][ T5115] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   98.116560][ T5115] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   98.155296][ T5115] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   98.336418][ T5115] usb 8-1: USB disconnect, device number 8
[   98.497846][ T7104] fido_id[7104]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/report_descriptor': No such file or directory
[   98.661113][ T7106] FAULT_INJECTION: forcing a failure.
[   98.661113][ T7106] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   98.666719][ T7106] CPU: 0 UID: 0 PID: 7106 Comm: syz.0.323 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   98.666744][ T7106] Tainted: [L]=SOFTLOCKUP
[   98.666751][ T7106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   98.666760][ T7106] Call Trace:
[   98.666766][ T7106]  <TASK>
[   98.666775][ T7106]  dump_stack_lvl+0x100/0x190
[   98.666803][ T7106]  should_fail_ex.cold+0x5/0xa
[   98.666826][ T7106]  _copy_from_iter+0x1f4/0x1690
[   98.666857][ T7106]  ? trace_kmem_cache_alloc+0xdd/0x100
[   98.666885][ T7106]  ? __kasan_slab_alloc+0x89/0x90
[   98.666912][ T7106]  ? __pfx__copy_from_iter+0x10/0x10
[   98.666934][ T7106]  ? __kvmalloc_node_noprof+0x616/0x970
[   98.666954][ T7106]  ? __asan_memset+0x23/0x50
[   98.666971][ T7106]  ? __build_skb_around+0x278/0x390
[   98.666990][ T7106]  ? is_vmalloc_addr+0x86/0xa0
[   98.667009][ T7106]  netlink_sendmsg+0x808/0xda0
[   98.667032][ T7106]  ? __pfx_netlink_sendmsg+0x10/0x10
[   98.667055][ T7106]  ? apparmor_socket_sendmsg+0x15b/0x270
[   98.667077][ T7106]  ____sys_sendmsg+0xa4d/0xbe0
[   98.667093][ T7106]  ? __pfx_netlink_sendmsg+0x10/0x10
[   98.667114][ T7106]  ? __pfx_____sys_sendmsg+0x10/0x10
[   98.667142][ T7106]  ___sys_sendmsg+0x190/0x1e0
[   98.667163][ T7106]  ? __pfx____sys_sendmsg+0x10/0x10
[   98.667194][ T7106]  ? find_held_lock+0x2b/0x80
[   98.667233][ T7106]  __sys_sendmsg+0x160/0x210
[   98.667255][ T7106]  ? __pfx___sys_sendmsg+0x10/0x10
[   98.667282][ T7106]  ? __pfx_ksys_write+0x10/0x10
[   98.667302][ T7106]  __do_fast_syscall_32+0xe7/0x970
[   98.667327][ T7106]  ? lockdep_hardirqs_on+0x78/0x100
[   98.667351][ T7106]  do_fast_syscall_32+0x32/0x70
[   98.667375][ T7106]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   98.667396][ T7106] RIP: 0023:0xf7fe3fec
[   98.667413][ T7106] Code: Unable to access opcode bytes at 0xf7fe3fc2.
[   98.667421][ T7106] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[   98.667436][ T7106] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000100
[   98.667445][ T7106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   98.667454][ T7106] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   98.667462][ T7106] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   98.667471][ T7106] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   98.667492][ T7106]  </TASK>
[   99.118752][ T7121] fuse: Bad value for 'fd'
[   99.122692][ T7121] xt_CT: You must specify a L4 protocol and not use inversions on it
[   99.259142][ T7126] /dev/sr0: Can't open blockdev
[   99.268469][ T7125] program syz.2.328 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.220333][ T7139] comedi comedi3: pcl818: I/O base address or length out of range
[  100.364885][ T7133] syz.0.334 (7133) used greatest stack depth: 19104 bytes left
[  100.842978][   T41] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  100.992822][   T24] kernel read not supported for file /video9 (pid: 24 comm: kworker/2:0)
[  101.021673][   T41] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.028651][ T7159] tipc: Enabled bearer <udp:syz2>, priority 10
[  101.031010][   T41] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.041383][ T7159] netlink: 104 bytes leftover after parsing attributes in process `syz.3.342'.
[  101.045239][   T41] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  101.052052][   T41] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  101.059448][ T7159] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  101.077815][   T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.091613][ T7159] tipc: Enabled bearer <udp:syz0>, priority 10
[  101.094874][   T41] usb 6-1: config 0 descriptor??
[  101.385806][ T7167] FAULT_INJECTION: forcing a failure.
[  101.385806][ T7167] name failslab, interval 1, probability 0, space 0, times 0
[  101.390000][ T7167] CPU: 3 UID: 0 PID: 7167 Comm: syz.3.344 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  101.390024][ T7167] Tainted: [L]=SOFTLOCKUP
[  101.390044][ T7167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  101.390055][ T7167] Call Trace:
[  101.390062][ T7167]  <TASK>
[  101.390069][ T7167]  dump_stack_lvl+0x100/0x190
[  101.390099][ T7167]  should_fail_ex.cold+0x5/0xa
[  101.390121][ T7167]  should_failslab+0xc2/0x120
[  101.390140][ T7167]  __kmalloc_noprof+0xfc/0x820
[  101.390154][ T7167]  ? __lock_acquire+0x49f/0x1a40
[  101.390173][ T7167]  ? tomoyo_encode2+0xfb/0x3c0
[  101.390194][ T7167]  tomoyo_encode2+0xfb/0x3c0
[  101.390211][ T7167]  tomoyo_encode+0x29/0x50
[  101.390226][ T7167]  tomoyo_mount_acl+0x14c/0x8b0
[  101.390240][ T7167]  ? is_bpf_text_address+0x8a/0x1a0
[  101.390257][ T7167]  ? is_bpf_text_address+0x8a/0x1a0
[  101.390273][ T7167]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  101.390289][ T7167]  ? __pfx_tomoyo_mount_acl+0x10/0x10
[  101.390303][ T7167]  ? kernel_text_address+0x8d/0x100
[  101.390321][ T7167]  ? unwind_get_return_address+0x59/0xa0
[  101.390337][ T7167]  ? arch_stack_walk+0xa6/0xf0
[  101.390365][ T7167]  ? tomoyo_domain+0xb2/0x150
[  101.390376][ T7167]  ? tomoyo_profile+0x47/0x60
[  101.390387][ T7167]  tomoyo_mount_permission+0x214/0x460
[  101.390401][ T7167]  ? tomoyo_mount_permission+0x1f6/0x460
[  101.390417][ T7167]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  101.390440][ T7167]  security_sb_mount+0xdd/0x270
[  101.390454][ T7167]  path_mount+0x158/0x23d0
[  101.390472][ T7167]  ? __pfx_path_mount+0x10/0x10
[  101.390503][ T7167]  ? lockdep_hardirqs_on+0x78/0x100
[  101.390519][ T7167]  ? putname+0xb1/0x110
[  101.390530][ T7167]  ? kmem_cache_free+0x127/0x6b0
[  101.390545][ T7167]  ? __ia32_sys_mount+0x292/0x310
[  101.390558][ T7167]  __ia32_sys_mount+0x292/0x310
[  101.390571][ T7167]  ? __pfx___ia32_sys_mount+0x10/0x10
[  101.390583][ T7167]  ? ksys_write+0x1ac/0x250
[  101.390593][ T7167]  ? __pfx_ksys_write+0x10/0x10
[  101.390606][ T7167]  __do_fast_syscall_32+0xe7/0x970
[  101.390619][ T7167]  ? lockdep_hardirqs_on+0x78/0x100
[  101.390633][ T7167]  do_fast_syscall_32+0x32/0x70
[  101.390646][ T7167]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  101.390661][ T7167] RIP: 0023:0xf6feefec
[  101.390679][ T7167] Code: Unable to access opcode bytes at 0xf6feefc2.
[  101.390685][ T7167] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015
[  101.390695][ T7167] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800005c0
[  101.390701][ T7167] RDX: 0000000000000000 RSI: 0000000000100000 RDI: 0000000000000000
[  101.390707][ T7167] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  101.390713][ T7167] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  101.390719][ T7167] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  101.390732][ T7167]  </TASK>
[  101.527364][   T41] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  101.805077][   T41] usb 6-1: USB disconnect, device number 8
[  101.809171][ T7184] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  102.076065][   T41] tipc: Node number set to 4063232
[  102.369315][ T7197] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  102.389447][ T7199] FAULT_INJECTION: forcing a failure.
[  102.389447][ T7199] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  102.399746][ T7199] CPU: 3 UID: 0 PID: 7199 Comm: syz.1.354 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  102.399764][ T7199] Tainted: [L]=SOFTLOCKUP
[  102.399768][ T7199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  102.399774][ T7199] Call Trace:
[  102.399780][ T7199]  <TASK>
[  102.399784][ T7199]  dump_stack_lvl+0x100/0x190
[  102.399805][ T7199]  should_fail_ex.cold+0x5/0xa
[  102.399818][ T7199]  _copy_from_user+0x2e/0xd0
[  102.399837][ T7199]  input_event_from_user+0x137/0x290
[  102.399855][ T7199]  ? __pfx_input_event_from_user+0x10/0x10
[  102.399873][ T7199]  ? input_inject_event+0x198/0x380
[  102.399891][ T7199]  evdev_write+0x27a/0x430
[  102.399909][ T7199]  ? __pfx_evdev_write+0x10/0x10
[  102.399925][ T7199]  ? bpf_lsm_file_permission+0x9/0x10
[  102.399936][ T7199]  ? security_file_permission+0x76/0x210
[  102.399953][ T7199]  ? rw_verify_area+0xce/0x6d0
[  102.399970][ T7199]  vfs_write+0x2aa/0x1050
[  102.399980][ T7199]  ? __pfx_evdev_write+0x10/0x10
[  102.399997][ T7199]  ? __pfx_vfs_write+0x10/0x10
[  102.400005][ T7199]  ? find_held_lock+0x2b/0x80
[  102.400020][ T7199]  ? __fget_files+0x215/0x3d0
[  102.400030][ T7199]  ? __fget_files+0x215/0x3d0
[  102.400041][ T7199]  ? __fget_files+0x21f/0x3d0
[  102.400055][ T7199]  ksys_write+0x1f8/0x250
[  102.400064][ T7199]  ? __pfx_ksys_write+0x10/0x10
[  102.400073][ T7199]  ? ksys_write+0x1ac/0x250
[  102.400082][ T7199]  ? __pfx_ksys_write+0x10/0x10
[  102.400095][ T7199]  __do_fast_syscall_32+0xe7/0x970
[  102.400109][ T7199]  ? lockdep_hardirqs_on+0x78/0x100
[  102.400123][ T7199]  do_fast_syscall_32+0x32/0x70
[  102.400137][ T7199]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  102.400151][ T7199] RIP: 0023:0xf7f24fec
[  102.400167][ T7199] Code: Unable to access opcode bytes at 0xf7f24fc2.
[  102.400172][ T7199] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  102.400182][ T7199] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040
[  102.400188][ T7199] RDX: 000000000000ff0f RSI: 0000000000000000 RDI: 0000000000000000
[  102.400194][ T7199] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  102.400200][ T7199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  102.400206][ T7199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  102.400219][ T7199]  </TASK>
[  103.025936][ T7204] Illegal XDP return value 4294967274 on prog  (id 49) dev N/A, expect packet loss!
[  103.199985][ T7210] 9pnet_fd: Insufficient options for proto=fd
[  103.563949][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.363'.
[  103.597265][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.363'.
[  103.674891][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.363'.
[  103.923869][ T7230] binder: 7229:7230 ioctl c0306201 80000040 returned -14
[  104.107862][ T7232] capability: warning: `syz.2.365' uses deprecated v2 capabilities in a way that may be insecure
[  104.193483][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.367'.
[  104.196689][ T7240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.367'.
[  104.258186][ T7242] fuse: Bad value for 'fd'
[  104.301114][ T7242] 9p: Bad value for 'rfdno'
[  104.365091][ T7242] xt_CT: You must specify a L4 protocol and not use inversions on it
[  104.522979][   T50] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  104.697955][   T50] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  104.702581][   T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  104.703503][ T7265] binder_alloc: 7259: binder_alloc_buf, no vma
[  104.710452][   T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  104.715763][   T50] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  104.720151][   T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.724689][   T50] usb 7-1: Product: syz
[  104.726058][   T50] usb 7-1: Manufacturer: syz
[  104.731142][   T50] usb 7-1: SerialNumber: syz
[  104.734237][   T50] usb 7-1: config 0 descriptor??
[  104.738218][ T7244] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  104.784190][   T50] rc_core: IR keymap rc-streamzap not found
[  104.786167][   T50] Registered IR keymap rc-empty
[  104.791773][   T50] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0
[  104.799689][   T50] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input10
[  104.990199][ T7244] ptrace attach of "/syz-executor exec"[5742] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               
[  105.003942][   T10] usb 7-1: USB disconnect, device number 6
[  105.172925][ T6257] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  105.215635][ T7274] syzkaller0: entered promiscuous mode
[  105.217936][ T7274] syzkaller0: entered allmulticast mode
[  105.322971][ T6257] usb 5-1: Using ep0 maxpacket: 32
[  105.327346][ T6257] usb 5-1: unable to get BOS descriptor or descriptor too short
[  105.331815][ T6257] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[  105.335385][ T6257] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[  105.338877][ T6257] usb 5-1: config 14 has no interface number 0
[  105.341544][ T6257] usb 5-1: config 14 has no interface number 1
[  105.344453][ T6257] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  105.348902][ T6257] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  105.353735][ T6257] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  105.358285][ T6257] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  105.362948][ T6257] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  105.367606][ T6257] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  105.373117][ T6257] usb 5-1: config 14 interface 57 has no altsetting 0
[  105.375897][ T6257] usb 5-1: config 14 interface 228 has no altsetting 0
[  105.380832][ T6257] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  105.384242][ T6257] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.386659][ T6257] usb 5-1: Product: syz
[  105.387927][ T6257] usb 5-1: Manufacturer: syz
[  105.389361][ T6257] usb 5-1: SerialNumber: syz
[  105.809667][ T6257] legousbtower 5-1:14.57: interrupt endpoints not found
[  105.941075][ T7288] netlink: 16 bytes leftover after parsing attributes in process `syz.3.380'.
[  106.086132][ T7283] comedi comedi3: comedi_config --init_data is deprecated
[  106.574226][ T6257] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[  106.913630][ T6257] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  107.029280][ T7301] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  107.984315][ T7269] usb 5-1: LEGO USB Tower reset control request failed
[  107.992445][ T7293] usb 5-1: LEGO USB Tower reset control request failed
[  108.002530][   T24] usb 5-1: USB disconnect, device number 19
[  108.018411][   T24] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected
[  108.705114][    C3] bridge0: port 3(dummy0) entered learning state
[  108.826757][ T7339] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  108.994548][ T7345] hfsplus: unable to find HFS+ superblock
[  109.689848][ T7362] overlay: Bad value for 'uuid'
[  109.727893][ T7362] random: crng reseeded on system resumption
[  109.793500][ T6257] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[  110.144961][ T7376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.405'.
[  110.724928][ T6257] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  110.729876][ T6257] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  110.734674][ T6257] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  110.741824][ T6257] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  110.746233][ T6257] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.750549][ T6257] usb 8-1: Product: syz
[  110.752534][ T6257] usb 8-1: Manufacturer: syz
[  110.756045][ T6257] usb 8-1: SerialNumber: syz
[  110.773217][ T6257] usb 8-1: config 0 descriptor??
[  110.776502][ T7358] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  110.852974][ T6257] rc_core: IR keymap rc-streamzap not found
[  110.855886][ T6257] Registered IR keymap rc-empty
[  110.860877][ T6257] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0
[  110.877583][ T6257] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input11
[  110.989271][ T7358] ptrace attach of "/syz-executor exec"[5756] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               
[  111.251306][   T24] usb 8-1: USB disconnect, device number 9
[  111.843443][   T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  111.864972][ T7410] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11)
[  111.867109][ T7410] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  111.874185][ T7410] vhci_hcd vhci_hcd.0: Device attached
[  111.881461][ T7412] vhci_hcd: connection closed
[  111.884067][   T12] vhci_hcd vhci_hcd.3: stop threads
[  111.887445][   T12] vhci_hcd vhci_hcd.3: release socket
[  111.889149][   T12] vhci_hcd vhci_hcd.3: disconnect device
[  111.994863][   T24] usb 6-1: Using ep0 maxpacket: 32
[  112.004305][   T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  112.007022][   T24] usb 6-1: config 0 has no interface number 0
[  112.015451][   T24] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  112.026909][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.033023][   T24] usb 6-1: Product: syz
[  112.038175][   T24] usb 6-1: Manufacturer: syz
[  112.041742][   T24] usb 6-1: SerialNumber: syz
[  112.065599][   T24] usb 6-1: config 0 descriptor??
[  112.077040][   T24] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  112.101080][   T24] usb 6-1: selecting invalid altsetting 1
[  112.123122][   T24] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  112.135722][   T24] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  112.139869][   T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  112.143351][   T24] usb 6-1: media controller created
[  112.154228][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  112.366929][ T7424] kvm: apic: phys broadcast and lowest prio
[  112.392616][ T7424] ==================================================================
[  112.395215][ T7424] BUG: KASAN: slab-out-of-bounds in __release_resource+0x233/0x2c0
[  112.397703][ T7424] Read of size 8 at addr ffff888071d612f0 by task syz.1.412/7424
[  112.401386][ T7424] 
[  112.402950][ T7424] CPU: 1 UID: 0 PID: 7424 Comm: syz.1.412 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  112.402973][ T7424] Tainted: [L]=SOFTLOCKUP
[  112.402980][ T7424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  112.402991][ T7424] Call Trace:
[  112.402998][ T7424]  <TASK>
[  112.403006][ T7424]  dump_stack_lvl+0x100/0x190
[  112.403037][ T7424]  print_report+0x13d/0x4b0
[  112.403070][ T7424]  ? __virt_addr_valid+0x239/0x430
[  112.403083][ T7424]  ? __release_resource+0x233/0x2c0
[  112.403099][ T7424]  kasan_report+0xdf/0x1c0
[  112.403121][ T7424]  ? __release_resource+0x233/0x2c0
[  112.403141][ T7424]  __release_resource+0x233/0x2c0
[  112.403156][ T7424]  release_resource+0x26/0x40
[  112.403169][ T7424]  pci_remove_bus_device+0x2d3/0x3b0
[  112.403191][ T7424]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[  112.403206][ T7424]  remove_store+0x123/0x140
[  112.403223][ T7424]  ? __pfx_remove_store+0x10/0x10
[  112.403238][ T7424]  ? find_held_lock+0x2b/0x80
[  112.403252][ T7424]  ? sysfs_file_kobj+0xe4/0x290
[  112.403270][ T7424]  ? sysfs_file_kobj+0xe4/0x290
[  112.403284][ T7424]  ? __pfx_remove_store+0x10/0x10
[  112.403299][ T7424]  dev_attr_store+0x58/0x80
[  112.403319][ T7424]  ? __pfx_dev_attr_store+0x10/0x10
[  112.403335][ T7424]  sysfs_kf_write+0xf2/0x150
[  112.403350][ T7424]  kernfs_fop_write_iter+0x3e0/0x5f0
[  112.403363][ T7424]  ? __pfx_sysfs_kf_write+0x10/0x10
[  112.403377][ T7424]  vfs_write+0x6ac/0x1050
[  112.403390][ T7424]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  112.403403][ T7424]  ? __pfx_vfs_write+0x10/0x10
[  112.403413][ T7424]  ? find_held_lock+0x2b/0x80
[  112.403430][ T7424]  ksys_write+0x12a/0x250
[  112.403439][ T7424]  ? __pfx_ksys_write+0x10/0x10
[  112.403452][ T7424]  __do_fast_syscall_32+0xe7/0x970
[  112.403468][ T7424]  do_fast_syscall_32+0x32/0x70
[  112.403483][ T7424]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  112.403497][ T7424] RIP: 0023:0xf7f24fec
[  112.403507][ T7424] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  112.403518][ T7424] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  112.403530][ T7424] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000140
[  112.403537][ T7424] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  112.403543][ T7424] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  112.403550][ T7424] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  112.403556][ T7424] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  112.403566][ T7424]  </TASK>
[  112.403570][ T7424] 
[  112.404761][ T7426] syzkaller0: entered promiscuous mode
[  112.406730][ T7424] The buggy address belongs to the object at ffff888071d612c0
[  112.406730][ T7424]  which belongs to the cache IEEE-802.15.4-MAC of size 1440
[  112.492596][ T7424] The buggy address is located 48 bytes inside of
[  112.492596][ T7424]  allocated 1440-byte region [ffff888071d612c0, ffff888071d61860)
[  112.496950][ T7424] 
[  112.497716][ T7424] The buggy address belongs to the physical page:
[  112.499722][ T7424] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888071d644c0 pfn:0x71d60
[  112.502847][ T7424] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  112.505489][ T7424] memcg:ffff888071d67d01
[  112.506834][ T7424] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff)
[  112.509488][ T7424] page_type: f5(slab)
[  112.510695][ T7424] raw: 04fff00000000240 ffff88804baf6140 ffffea00012b6610 ffff88804be7a588
[  112.513315][ T7424] raw: ffff888071d644c0 000000080014000b 00000000f5000000 ffff888071d67d01
[  112.516009][ T7424] head: 04fff00000000240 ffff88804baf6140 ffffea00012b6610 ffff88804be7a588
[  112.518739][ T7424] head: ffff888071d644c0 000000080014000b 00000000f5000000 ffff888071d67d01
[  112.521335][ T7424] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  112.523872][ T7424] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  112.526559][ T7424] page dumped because: kasan: bad access detected
[  112.528503][ T7424] page_owner tracks the page as allocated
[  112.530280][ T7424] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6832, tgid 6831 (syz.2.239), ts 86852690253, free_ts 86813945174
[  112.536727][ T7424]  post_alloc_hook+0xfd/0x120
[  112.538175][ T7424]  get_page_from_freelist+0xf48/0x3530
[  112.540134][ T7424]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  112.542190][ T7424]  new_slab+0xa2/0x640
[  112.543745][ T7424]  refill_objects+0xe3/0x410
[  112.545315][ T7424]  __pcs_replace_empty_main+0x376/0x680
[  112.547244][ T7424]  kmem_cache_alloc_noprof+0x46e/0x6a0
[  112.549035][ T7424]  sk_prot_alloc+0x60/0x2a0
[  112.550448][ T7424]  sk_alloc+0x36/0xe80
[  112.551748][ T7424]  ieee802154_create+0xd9/0x350
[  112.553310][ T7424]  __sock_create+0x339/0x860
[  112.554783][ T7424]  __sys_socket+0x14d/0x260
[  112.556186][ T7424]  __ia32_sys_socket+0x72/0xb0
[  112.557619][ T7424]  __do_fast_syscall_32+0xe7/0x970
[  112.559156][ T7424]  do_fast_syscall_32+0x32/0x70
[  112.560814][ T7424]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  112.563191][ T7424] page last free pid 6827 tgid 6827 stack trace:
[  112.565125][ T7424]  __free_frozen_pages+0x79f/0x1090
[  112.566695][ T7424]  qlist_free_all+0x47/0xf0
[  112.568067][ T7424]  kasan_quarantine_reduce+0x1a0/0x1f0
[  112.569767][ T7424]  __kasan_slab_alloc+0x69/0x90
[  112.571276][ T7424]  __kmalloc_noprof+0x2bf/0x820
[  112.572789][ T7424]  tomoyo_encode2+0xfb/0x3c0
[  112.574228][ T7424]  tomoyo_encode+0x29/0x50
[  112.575580][ T7424]  tomoyo_path_perm+0x3a7/0x460
[  112.577091][ T7424]  tomoyo_path_symlink+0x97/0xe0
[  112.578563][ T7424]  security_path_symlink+0x152/0x2d0
[  112.580238][ T7424]  filename_symlinkat+0x122/0x560
[  112.581770][ T7424]  __ia32_sys_symlinkat+0x9b/0xe0
[  112.583369][ T7424]  __do_fast_syscall_32+0xe7/0x970
[  112.584983][ T7424]  do_fast_syscall_32+0x32/0x70
[  112.586543][ T7424]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  112.588454][ T7424] 
[  112.589200][ T7424] Memory state around the buggy address:
[  112.590961][ T7424]  ffff888071d61180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  112.593485][ T7424]  ffff888071d61200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  112.596252][ T7424] >ffff888071d61280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  112.599385][ T7424]                                                              ^
[  112.601848][ T7424]  ffff888071d61300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  112.604373][ T7424]  ffff888071d61380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  112.606883][ T7424] ==================================================================
[  112.610339][ T7424] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  112.612658][ T7424] CPU: 1 UID: 0 PID: 7424 Comm: syz.1.412 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  112.616016][ T7424] Tainted: [L]=SOFTLOCKUP
[  112.617398][ T7424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  112.621248][ T7424] Call Trace:
[  112.622620][ T7424]  <TASK>
[  112.623906][ T7424]  dump_stack_lvl+0x100/0x190
[  112.625773][ T7424]  vpanic+0x552/0x970
[  112.627081][ T7424]  ? __pfx_vpanic+0x10/0x10
[  112.628567][ T7424]  ? mark_held_locks+0x40/0x70
[  112.630092][ T7424]  ? irqentry_exit+0x24d/0xa00
[  112.631875][ T7424]  ? __release_resource+0x233/0x2c0
[  112.633619][ T7424]  panic+0xd1/0xe0
[  112.634955][ T7424]  ? __pfx_panic+0x10/0x10
[  112.636602][ T7424]  check_panic_on_warn.cold+0x19/0x34
[  112.638489][ T7424]  end_report.part.0+0x3a/0x90
[  112.640092][ T7424]  kasan_report.cold+0xe/0x18
[  112.641568][ T7424]  ? __release_resource+0x233/0x2c0
[  112.643517][ T7424]  __release_resource+0x233/0x2c0
[  112.645523][ T7424]  release_resource+0x26/0x40
[  112.647487][ T7424]  pci_remove_bus_device+0x2d3/0x3b0
[  112.649626][ T7424]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[  112.652244][ T7424]  remove_store+0x123/0x140
[  112.654042][ T7424]  ? __pfx_remove_store+0x10/0x10
[  112.655743][ T7424]  ? find_held_lock+0x2b/0x80
[  112.657592][ T7424]  ? sysfs_file_kobj+0xe4/0x290
[  112.659176][ T7424]  ? sysfs_file_kobj+0xe4/0x290
[  112.660727][ T7424]  ? __pfx_remove_store+0x10/0x10
[  112.662393][ T7424]  dev_attr_store+0x58/0x80
[  112.663900][ T7424]  ? __pfx_dev_attr_store+0x10/0x10
[  112.665595][ T7424]  sysfs_kf_write+0xf2/0x150
[  112.667138][ T7424]  kernfs_fop_write_iter+0x3e0/0x5f0
[  112.668817][ T7424]  ? __pfx_sysfs_kf_write+0x10/0x10
[  112.670504][ T7424]  vfs_write+0x6ac/0x1050
[  112.671914][ T7424]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  112.673821][ T7424]  ? __pfx_vfs_write+0x10/0x10
[  112.675434][ T7424]  ? find_held_lock+0x2b/0x80
[  112.677111][ T7424]  ksys_write+0x12a/0x250
[  112.678647][ T7424]  ? __pfx_ksys_write+0x10/0x10
[  112.680570][ T7424]  __do_fast_syscall_32+0xe7/0x970
[  112.682705][ T7424]  do_fast_syscall_32+0x32/0x70
[  112.684326][ T7424]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  112.686522][ T7424] RIP: 0023:0xf7f24fec
[  112.687805][ T7424] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  112.693872][ T7424] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  112.696622][ T7424] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000140
[  112.699211][ T7424] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  112.701852][ T7424] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  112.704463][ T7424] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  112.707307][ T7424] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  112.710061][ T7424]  </TASK>
[  112.711781][ T7424] Kernel Offset: disabled
[  112.713187][ T7424] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:18:56  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000208149 RBX=ffffffff8e891480 RCX=ffffffff8bb872d5 RDX=0000000000000000
RSI=ffffffff8e1a87b4 RDI=ffffffff8c400a80 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10
R8 =0000000000000001 R9 =ffffed100564678d R10=ffff88802b233c6b R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000
RIP=ffffffff8bb8589f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096be3000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000033e22ff8 CR3=0000000025d17000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000104080 Opmask01=00000000fffffc00 Opmask02=00000000ffffffff Opmask03=0000000002082001
Opmask04=00000000ffdfffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ac4214bc20
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ac4214baa0
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 ffffff00ff0000ff
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73730c5983ac51b3 737326df316f6d83
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737126d2 73737342730a0773
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e32303a30303a 303030302f30303a 303030306963702f 736563697665642f
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e32303a30303a 303030302f30303a 303030306963702f 736563697665642f
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000071 0000000000000000 0000000000003078 756d65642e316276
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2af0df2210 000055ac42144810 0000000000002d81 0000003100797400
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3139312c3039312c 4638312c4538312c 4238312c3938312c 3838312c3538312c
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3438312c3138312c 3937312c3737312c 3437312c4436312c 4336312c3636312c
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3336312c3136312c 3036312c30462c46 442c30442c46432c 38412c37412c4639
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85a129e5 RDI=ffffffff9b9f31a0 RBP=ffffffff9b9f3160 RSP=ffffc9000382f530
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552
R12=0000000000000000 R13=000000000000002e R14=ffffffff9b6f322c R15=ffffffff85a12980
RIP=ffffffff85a12a0f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096ce3000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7fda190 CR3=0000000072970000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c800000000 0000000200000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=ffffffff97fc4c38 RBX=0000000000000010 RCX=0000000000000011 RDX=ffffffff966b2828
RSI=0000000000000011 RDI=ffffffff97f21238 RBP=0000000000000030 RSP=ffffc900037c6d58
R8 =ffffffff966b2858 R9 =0000000000000002 R10=ffffc900037c6ee8 R11=0000000000000000
R12=ffffffff81e4e5a0 R13=ffffc900037c6e00 R14=ffffffff81e4f3b0 R15=ffffffff97f21238
RIP=ffffffff81e4fe77 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096de3000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000033e19ff8 CR3=0000000071b29000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c800000000 0000000200000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=000000000015431f RBX=ffff88801c7f2540 RCX=ffffffff8bb872d5 RDX=0000000000000000
RSI=ffffffff8e1a87b4 RDI=ffffffff8c400a80 RBP=ffffed10038fe4a8 RSP=ffffc9000048fe00
R8 =0000000000000001 R9 =ffffed10056a678d R10=ffff88802b533c6b R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000
RIP=ffffffff8bb8589f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096ee3000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000800012c0 CR3=0000000071b29000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c800000000 0000000200000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000