last executing test programs:

9.614046449s ago: executing program 2 (id=895):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000)
mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3})
ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="d7888530a45a9e", 0x200e4}, {0x0, 0xe4}], 0x2)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r5=>0x0)
io_submit(r5, 0x0, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002400010026060000fcdbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)

8.955247505s ago: executing program 2 (id=900):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x13, 0x200, &(0x7f00000003c0)="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"})
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b805509dbba9b374d59c9e2ad7a786fd8766d6935a31e49", 0x35}, {&(0x7f0000000540)="0276dd894f", 0x5}], 0x2}, 0x24004010)
socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_usb_connect(0x5, 0x490, &(0x7f0000000880)={{0x12, 0x1, 0x250, 0x88, 0xa5, 0xac, 0x8, 0x489, 0xe036, 0xa222, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47e, 0x1, 0x5, 0xcf, 0x10, 0x1, "", [{{0x9, 0x4, 0xfa, 0x4, 0xd, 0xbd, 0x52, 0x4a, 0x7f, [@hid_hid={0x9, 0x21, 0xffc7, 0x1, 0x1, {0x22, 0xc4f}}], [{{0x9, 0x5, 0x2, 0x10, 0x40, 0xb2, 0xb3, 0x81, [@generic={0x47, 0xc, "d7cc9efceafecdffb39ac2d4bb708fe3004f117a4a6ca2cfe93e59b94a6345c1872436de2c0e3cc81bcbe72937dfa6e2a8addb7fc73654a93d83fd4d0d17e2acceb4563eef"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0x10, 0x1, 0x81}}, {{0x9, 0x5, 0x1, 0x1, 0x38, 0x6, 0xe0, 0x3}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x2, 0x3, 0x9, [@generic={0x42, 0xf, "2cd9f50c71b26cb2dcf2758aac846f6f02103de9517d6042df807bad0b10f8f87ec1c11a124845fae1bc538cdd05dd7e27f3fc56da170f42902cd217e8d3957e"}, @generic={0xac, 0x9, "53cfc27b2e7e564eb89a79a576b08adc822b0b3897f5e421d780c9940c20e8e4c632a5b592fee6109adf1e08c7384b6cc4aa69087126ebb73b98febf4ea4d9d3d6008f9aff79fb4704e94d16894495f80551e8fcd9e2a71140f03ad1fa84594ed64c3525ccb493cd4db393a68b7fdb1459f11bccdf1b071c7b076e5dc694a0ebcaac3163b97b4b34a847eecce43eaeb10da0502d80b11c183dac02ba51247266931a336a706468cce75a"}]}}, {{0x9, 0x5, 0xa3e10eab650f8778, 0x0, 0x200, 0xb, 0xa, 0x4, [@generic={0x12, 0x4, "64d43e82cd5bb12d9ee549b3d2768015"}, @generic={0x95, 0x6, "31c95a5295a1fecc6ef960e8fff19797195638310f08dab13d195481427a5827d5bc7ab92b5b2f269dc116e553fc18b7484c9fdc42bd7e914fa381b205e9860bbd233c363f8ad641c97380212997b97fee03d44e5daebe536333dd0cbac777458f0837faa94c71d88771c264567008de4853fac860f5e764e244aaa2463c286898652618fe08c0226aa2345f5dac5b7575fa8e"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x9, 0x6, 0xc, [@generic={0xd6, 0x8, "78fa6958205d4b91fe8ba94a1ee460cbdd4cbbf2c180184f878e1f0c6f53b7bcaf1cc66abb61ac9fdc724470fe669c6d2494242dc8deacffadfbe557ae546b2974bec6d3831f7d207ddb6b421db3597166bb36289718e38012b2b47ea95b45a2fe5524d42a55d3d38401cac9eb6c980e0b19124cc369c36c1ac88635f059a2005e11ca508dc3fee205cc7f3e4e7e8485b7fd1d005d260616e172eb59ae656df14e80354bc6df4f4621151fe439f0d73dc5a749edf0e2acbec079c2f97179ead26990ed7c42972a5d00e962f93339e6ed87540f57"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x20, 0x5, 0x81, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x3030}]}}, {{0x9, 0x5, 0xe, 0xc, 0x400, 0x6, 0x9, 0x6}}, {{0x9, 0x5, 0x1, 0xc, 0x10, 0x1, 0xb8, 0x5, [@generic={0x57, 0x0, "a8d2c6d2bc8ef13144e8874a07d81416121e867333280de4b549095fd1ee9b492360ed319b2d9d4a2ab0c7335ae037be0e462c4473e05794191f1bf00aff11390867dab80a0fe98d5a19947d13ce26d2d4f07d50f3"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x440, 0x5, 0x6, 0x53, [@generic={0xc9, 0x23, "11a0812b1e361b23259938bd0f28b6fbd530805e18c3abf929e26105080d91cb0dc79f28050c3e4283e398f9c2fe62cf62674d63668177f9d0bbdcccf3592e2f0ffaab80a3a13742fd1a99cdf6c4de9bf98fecd030678ed94031bd967244c601bdcf63c8db3a1ffaeca9c9da8b9316e25032d10bd89987ad712870a72328bce2307ce23a17e18c0623afe8cdf43fcc26e6128f8f7a86d5b12333fa72ea64bfee1ace64cd9890eef0fa0a9dda1d9c4e619758abd64fa3a69e503625aab451d8970d2073c51ec8ec"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x4}]}}, {{0x9, 0x5, 0xe, 0xc, 0x400, 0x7, 0x3, 0x2}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x7f, 0xe8, 0x1}}, {{0x9, 0x5, 0x2, 0x8, 0x20, 0x8, 0xe, 0x2a, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x5}]}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x300, 0x9, 0x9e, 0x2, 0x0, 0x4}, 0x51, &(0x7f0000000d80)=ANY=[]})
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400000011"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r4}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, 0x0, 0x0}, 0x20)
write$usbip_server(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000003"], 0x35)
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc0189436, 0x1ffffffe)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000005c0)=0xd)
sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="680000003b0002002cbd7000fbdbdf250a000000262ad272cbe564653eb05cc1608fa3887e69449329fe625f2a555078093a7d6a13c939701bb4118da061aa0f2999ae83bc80b369bcb568f9ffffffffffffffe5616e28a52e374f62fc53571139213a7ccb58c6006bd89f93e58555cdfbf5c22f2396ea427632cac496c4e46ee6c5456902a3cfafbc39b7eff6e4f0b77a82deb80000"], 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x40000)

8.796968505s ago: executing program 1 (id=901):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, 0xa, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40c0040}, 0x408c4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"})
syz_emit_ethernet(0x56, &(0x7f0000000380)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x7, 0x2}]}}}}}}}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x48810)
recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f0000002180)=""/4089, 0xff9}, {&(0x7f00000003c0)=""/63, 0x3f}, {0x0}], 0x3}, 0x40000020)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r6, 0x5, 0x0, 0x21dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004044}, 0x0)
r8 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)
r10 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r10, &(0x7f0000002040)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0xe, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@tclass={{0x14, 0x29, 0x43, 0x9}}, @rthdr={{0x18, 0x29, 0x39, {0x99, 0x0, 0x1, 0x2}}}], 0x30}}], 0x1, 0x40000000)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x1010, r9, 0xf78bd000)
socket$nl_netfilter(0x10, 0x3, 0xc)

8.628452169s ago: executing program 1 (id=902):
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = add_key(0x0, 0x0, &(0x7f0000000100)="307106092a864886f70d010702a0643062020101310f300d06096086480165030402010500300b06092a864886f70d010701313f303d0201013014300f310d300b0603550403130454657374020101300d060960864801650304020105", 0x5d, 0xffffffffffffffff)
r2 = add_key$user(&(0x7f0000002100), 0x0, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe)
keyctl$reject(0x13, r2, 0x5, 0xffff, r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x4a, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x8}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r7}, &(0x7f00000008c0)=ANY=[@ANYBLOB="656e633d706b63733120686173683d6d6435290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005419a81690ced2afb3b3671179dec10e8b6ec46acf736d6a6ee1dae1b129b3133ee3fd0d814b0fb404a252391712779801b6fcd84cd616beecbaa395fd12ad3f61616d80a32efc"], 0x0, 0x0)

7.24000658s ago: executing program 0 (id=906):
modify_ldt$write2(0x11, &(0x7f0000000100)={0x5, 0x20001000, 0xffffffffffffffff, 0x1}, 0x10)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_emit_ethernet(0x6e, &(0x7f00000024c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\b\x00\b', 0x38, 0x2b, 0x0, @private2, @local, {[@hopopts={0x67}], {0x2100, 0x3, 0x30, 0x0, @gue={{0x1, 0x1, 0x0, 0x1, 0x0, @void}, "8fbab2e630c3e6a031fd2ad9265431d968f1028b8c7271bda9f785aa6887dd17aea49bf2"}}}}}}}, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
shutdown(0xffffffffffffffff, 0x1)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a)
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40408c0}, 0x20000000)
syz_clone(0x48020100, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x3, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3)
getsockopt$bt_hci(r1, 0x11a, 0x5, 0x0, &(0x7f0000000040))
r2 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000180)={0x0, 0xf, 0xc, 0x1000, 0x4, "5a1c966bcd4b7448"})
write$UHID_INPUT(r2, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000300)=@ccm_128={{0x303}, "fa840e2fa1d09051", "efbf2ffdc02ad333eff00eeeae2c9bfc", "cc04abb3", "0c6dde20dea3b536"}, 0x28)
sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005a000d00"], 0x1c}], 0x1, 0x0, 0x0, 0x40804}, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x20000000, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10)
modify_ldt$read(0x0, &(0x7f0000000040)=""/2, 0x2)

6.920470718s ago: executing program 0 (id=908):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000)
mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3})
ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="d7888530a45a9e", 0x200e4}, {0x0, 0xe4}], 0x2)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r5=>0x0)
io_submit(r5, 0x0, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)

6.030037699s ago: executing program 1 (id=909):
syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x48885)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
getpid()
mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1f7)
r1 = syz_open_dev$usbfs(0x0, 0x80, 0x113201)
read$usbfs(r1, &(0x7f0000000600)=""/234, 0xea)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r2, &(0x7f00000000c0)='1\x00', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r3, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d28", 0x96)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0)
ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x8}]})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000240), 0x106, 0x1}}, 0x20)

5.970698123s ago: executing program 2 (id=910):
r0 = socket(0xa, 0x3, 0x3a)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)
statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d)
r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4)
renameat(r2, &(0x7f0000000080)='./file0\x00', r3, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x8)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f00000000c0)='./file1\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
lseek(r4, 0x5, 0x4)

4.463659799s ago: executing program 0 (id=911):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
socket$kcm(0x2, 0xa, 0x2)
write$tun(r1, &(0x7f0000000040)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@rr={0x7, 0x3, 0x47}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef)
ptrace$peekuser(0x3, r0, 0x5975)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x9, &(0x7f0000000440)=@framed={{}, [@generic={0xc0, 0x9, 0x4, 0x0, 0x2}, @exit, @jmp={0x5, 0x1, 0x1, 0xb, 0x3, 0x6, 0xfffffffffffffffc}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @generic={0x2, 0x6, 0x1, 0x3884, 0x9}]}, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x80)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r4, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000005c0), 0x2, 0x0)
ioctl$DRM_IOCTL_VERSION(r5, 0xc0406400, 0x0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0, r3}, 0x18)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x80000, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffff1fc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003802800008008000340000000021c0002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000840}, 0x40)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

3.520808665s ago: executing program 2 (id=913):
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f00000002c0)={0x2, 0x4, 0x5f8f, 0x3, 0x0, 0x8, 0x7})
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r0 = socket(0x28, 0x5, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x0, &(0x7f00000001c0)={0xb645, 0x9, 0x10, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x2, 0x1000, 0x0, 0x81, 0x7, 0x3})
setns(0xc9, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

3.338140105s ago: executing program 0 (id=914):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4d, 0x2, 0xfe, 0x49, 0x0, 0x82, 0x60, 0xa, 0x9, 0x3d, [0x0, 0x1, 0xd, 0xfff, 0x2, 0x9, 0x8001, 0x7]}})
r1 = socket(0x1e, 0x1, 0x0)
connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000d8425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000240012800b00010062726964676500001400028008000200060000000800030017"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)
write$binfmt_misc(r1, 0x0, 0x0)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x4ff9c, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240))
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000001c0)=0x1)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c01000010000100000000000000000000000000000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}}, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r6 = syz_open_dev$vbi(0x0, 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x4})

3.233344107s ago: executing program 3 (id=915):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4d, 0x2, 0xfe, 0x49, 0x0, 0x82, 0x60, 0xa, 0x9, 0x3d, [0x0, 0x1, 0xd, 0xfff, 0x2, 0x9, 0x8001, 0x7]}})
r1 = socket(0x1e, 0x1, 0x0)
connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000d8425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000240012800b00010062726964676500001400028008000200060000000800030017"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)
write$binfmt_misc(r1, 0x0, 0x0)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x4ff9c, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240))
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000001c0)=0x1)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c01000010000100000000000000000000000000000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000004c001400636d6163286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d7fdffff000000000f8ffdef7cebcc6b66ec2da20a2c629e699f38088cf764d77a6f0dbf85ecb43100"], 0x13c}}, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x4})

3.038840764s ago: executing program 0 (id=916):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000)
mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3})
ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="d7888530a45a9e", 0x200e4}, {0x0, 0xe4}], 0x2)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r5=>0x0)
io_submit(r5, 0x0, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002400010026060000fcdbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)

2.93971739s ago: executing program 1 (id=917):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000)
mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3})
ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="d7888530a45a9e", 0x200e4}, {0x0, 0xe4}], 0x2)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r5=>0x0)
io_submit(r5, 0x0, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002400010026060000fc"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)

2.840554097s ago: executing program 3 (id=918):
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f00000002c0)={0x2, 0x4, 0x5f8f, 0x3, 0x0, 0x8, 0x7})
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r0 = socket(0x28, 0x5, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x0, &(0x7f00000001c0)={0xb645, 0x9, 0x10, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x2, 0x1000, 0x0, 0x81, 0x7, 0x3})
setns(0xc9, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

2.687427228s ago: executing program 2 (id=919):
r0 = socket(0xa, 0x3, 0x3a)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0)
statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d)
r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4)
renameat(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000180)='./file1\x00')
mkdir(&(0x7f0000000240)='./file1\x00', 0x8)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f00000000c0)='./file1\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
lseek(r4, 0x5, 0x4)

2.010583399s ago: executing program 0 (id=920):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000)
mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3})
ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="d7888530a45a9e", 0x200e4}, {0x0, 0xe4}], 0x2)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r5=>0x0)
io_submit(r5, 0x0, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)

1.812196122s ago: executing program 1 (id=921):
r0 = socket(0xa, 0x3, 0x3a)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)
statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d)
r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4)
renameat(r2, &(0x7f0000000080)='./file0\x00', r3, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x8)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f00000000c0)='./file1\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
lseek(r4, 0x5, 0x4)

1.808297311s ago: executing program 3 (id=922):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
writev(r1, &(0x7f0000005900)=[{0x0}, {&(0x7f0000005880)='\\', 0x1}], 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$XFS_IOC_FSGEOMETRY_V1(0xffffffffffffffff, 0x806c5864, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000019080)=@req={0x7, 0x50d, 0x0, 0x6}, 0x10)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000001c0)='devpts\x00', 0x200d410, &(0x7f0000000240)='$\x00')
sendmsg$nl_generic(r6, 0x0, 0x4004000)
syz_io_uring_setup(0x264a, &(0x7f00000190c0)={0x0, 0x8847, 0x40, 0x2, 0x8c, 0x0, r4}, &(0x7f0000019140), &(0x7f0000000180), &(0x7f00000191c0))
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000100005ff00000008000000000000004a", @ANYRES32=0x0, @ANYBLOB="134cb3f600000000140012800b0001006261746164760000040002800a000100bbbbbbbbbbbb99089a895f731da0d7187c23ab62488020e59c1a462fb8259da46c91131fcaee1271b11eaae93844f47fcbbdb75d9a1a521107752d01f5804a58"], 0x40}}, 0x20000840)
sendmsg$nl_route_sched(r0, 0x0, 0x2000400c)

1.605685615s ago: executing program 2 (id=923):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x3, 0x7fff0000}]})
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141042, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x40580, 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000400)={0xbf7ffffc, "7561447b9cc9427cb6b339ede6dbfff20000130001f007ff00e4d57a7c00", <r4=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", <r5=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"e53a915582f97f2635b44039cbfab4fca0633619087f2a8af8765d9ac20f4331", r4})
r6 = eventfd2(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10044, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r6, @ANYBLOB=',wfdno', @ANYRESHEX=r1])
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
close_range(r0, 0xffffffffffffffff, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
r10 = fsmount(r9, 0x0, 0xa)
fchdir(r10)
r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
lseek(r11, 0x5, 0x1)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b080003"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x44004000)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a0104000000003cec7c68913540e8d1483f00000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a32000000000900010073797a31000040000c000580080001400000003c1400000011000100"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040840)

213.890624ms ago: executing program 1 (id=924):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4d, 0x2, 0xfe, 0x49, 0x0, 0x82, 0x60, 0xa, 0x9, 0x3d, [0x0, 0x1, 0xd, 0xfff, 0x2, 0x9, 0x8001, 0x7]}})
r1 = socket(0x1e, 0x1, 0x0)
connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000d8425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000240012800b00010062726964676500001400028008000200060000000800030017"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)
write$binfmt_misc(r1, 0x0, 0x0)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x4ff9c, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240))
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000001c0)=0x1)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c01000010000100000000000000000000000000000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}}, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r6 = syz_open_dev$vbi(0x0, 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x4})

213.492236ms ago: executing program 3 (id=925):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
unshare(0x28000600)
r5 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x100087, 0x0, 0x100000, {r5}}, 0x20)
r6 = getpid()
syz_pidfd_open(r6, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan1\x00', <r7=>0x0})
r8 = syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/4\x00')
read$FUSE(r8, &(0x7f0000001f40)={0x2020}, 0x2020)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4042)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r9)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000002c0)={'wpan1\x00', <r12=>0x0})
sendmsg$NL802154_CMD_SET_CCA_MODE(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r10, 0x11f90aaf22dbaef5, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x80)
sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x40}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
eventfd2(0xfffffffd, 0xc0000)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r2, 0xd02, 0x70bd29, 0x401, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc})
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)

90.821988ms ago: executing program 3 (id=926):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4d, 0x2, 0xfe, 0x49, 0x0, 0x82, 0x60, 0xa, 0x9, 0x3d, [0x0, 0x1, 0xd, 0xfff, 0x2, 0x9, 0x8001, 0x7]}})
r1 = socket(0x1e, 0x1, 0x0)
connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000d8425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000240012800b00010062726964676500001400028008000200060000000800030017"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)
write$binfmt_misc(r1, 0x0, 0x0)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x4ff9c, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240))
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000001c0)=0x1)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c01000010000100000000000000000000000000000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}}, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x4})

0s ago: executing program 3 (id=927):
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f00000002c0)={0x2, 0x4, 0x5f8f, 0x3, 0x0, 0x8, 0x7})
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r0 = socket(0x28, 0x5, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x0, &(0x7f00000001c0)={0xb645, 0x9, 0x10, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x2, 0x1000, 0x0, 0x81, 0x7, 0x3})
setns(0xc9, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

0s ago: executing program 2 (id=928):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6aff9bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0xd, 0x41}, 0x10002, [0x200000000000de99, 0x8c9, 0xfffffffffffffffc, 0x20000000000000c4, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x1000000028, 0x8, 0x6, 0x9, 0x9, 0x0, 0x3, 0x8, 0x7, 0x4]})
write$cgroup_subtree(r0, 0x0, 0x10448)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x800)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r8, {0x2}, {0x8}, {0xfff2, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r11 = epoll_create(0x7f)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r1, &(0x7f0000000740)={0x40000004})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r12 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r12, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x6}, &(0x7f00000000c0)=0x8)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)

kernel console output (not intermixed with test programs):

nk: 60 bytes leftover after parsing attributes in process `syz.2.237'.
[  134.896787][ T7057] netlink: 60 bytes leftover after parsing attributes in process `syz.3.240'.
[  134.910904][ T7058] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.911458][ T7058] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.913977][ T5850] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  134.915007][ T5850] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  134.915033][ T5850] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  134.915063][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.918252][ T7048] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  134.950799][ T7058] Console: switching to colour dummy device 80x25
[  134.954136][ T5850] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  134.963525][ T7060] overlayfs: missing 'lowerdir'
[  135.065275][ T7061] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  135.083240][ T7061] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  135.083376][ T7061] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  135.083829][ T7061] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  135.084921][ T7061] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  135.105035][ T7061] pci 0000:00:01.0: Adding to iommu group 1
[  135.107369][ T7061] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  135.107382][ T7061] pci 0000:00:01.0: vgaarb: bridge control possible
[  135.107390][ T7061] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  135.118771][ T7061] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  135.118885][ T7061] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  135.122356][ T7061] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  135.130821][ T7061] [drm] Found bochs VGA, ID 0xb0c5.
[  135.130873][ T7061] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  135.141262][ T7061] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  135.557515][ T7065] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.577497][ T7065] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.759806][ T7065] bridge1: left promiscuous mode
[  135.759875][ T7065] bridge1: left allmulticast mode
[  135.761273][ T7065] bridge2: left promiscuous mode
[  135.761286][ T7065] bridge2: left allmulticast mode
[  135.761395][ T7065] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  135.774321][ T7065] ip6gretap1: left allmulticast mode
[  135.789561][ T5822] wg2 speed is unknown, defaulting to 1000
[  135.793390][ T5813] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.793459][ T5813] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.793533][ T5813] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.793579][ T5813] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.810122][ T5822] syz2: Port: 1 Link DOWN
[  135.814031][ T5822] wg2 speed is unknown, defaulting to 1000
[  135.852761][ T7061] Console: switching to colour frame buffer device 160x50
[  135.892109][ T7061] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  136.471880][ T7078] bond0: Error: Cannot enslave bond to itself.
[  136.586850][ T1158] IPVS: starting estimator thread 0...
[  136.717848][ T7081] IPVS: using max 35 ests per chain, 84000 per kthread
[  137.679685][ T5816] usb 5-1: USB disconnect, device number 7
[  137.881275][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.247'.
[  137.881348][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.247'.
[  137.898628][ T5813] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  137.898808][ T5813] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  137.898837][ T5813] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  137.898854][ T5813] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  137.909201][ T7092] netlink: 60 bytes leftover after parsing attributes in process `syz.1.247'.
[  139.349988][ T7112] netlink: 60 bytes leftover after parsing attributes in process `syz.2.250'.
[  139.467338][ T7117] overlayfs: missing 'lowerdir'
[  139.643219][   T63] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  139.732744][ T7119] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.739580][ T7119] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.793288][   T63] usb 6-1: Using ep0 maxpacket: 16
[  139.795738][   T63] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  139.798883][   T63] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.798909][   T63] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  139.798941][   T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.808859][   T63] usb 6-1: config 0 descriptor??
[  139.958277][ T7123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.252'.
[  140.006670][ T7119] mac80211_hwsim hwsim3 wlan0: left allmulticast mode
[  140.049905][ T7119] bridge1: left promiscuous mode
[  140.050032][ T7119] bridge1: left allmulticast mode
[  140.050495][ T7119] bridge2: left promiscuous mode
[  140.050509][ T7119] bridge2: left allmulticast mode
[  140.133251][   T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  140.133309][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.133370][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  140.133409][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.133454][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  140.133493][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.133538][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  140.133576][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.367601][ T7126] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.374418][ T7126] 8021q: adding VLAN 0 to HW filter on device team0
[  140.399148][ T7126] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.568448][ T7126] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.577335][ T7126] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.598923][ T7126] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  140.598980][ T7126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  140.699685][ T7126] veth1_vlan: left promiscuous mode
[  140.702808][ T7126] veth0_vlan: left promiscuous mode
[  140.706060][ T7126] veth0_vlan: entered promiscuous mode
[  140.715677][ T7126] veth1_vlan: entered promiscuous mode
[  140.723797][ T7126] veth1_macvtap: left promiscuous mode
[  140.732322][ T7126] veth0_macvtap: left promiscuous mode
[  140.736736][ T7126] veth0_macvtap: entered promiscuous mode
[  140.741834][ T7126] veth1_macvtap: entered promiscuous mode
[  140.749584][ T7126] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  140.754937][ T7126] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  140.760438][ T7126] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  140.768436][ T7126] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  140.852291][ T7126] batman_adv: batadv0: Interface activated: ip6gretap1
[  140.872566][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.872653][ T1168] bridge0: port 1(bridge_slave_0) entered listening state
[  140.873982][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.874024][ T1168] bridge0: port 2(bridge_slave_1) entered listening state
[  140.902231][  T988] wg2 speed is unknown, defaulting to 1000
[  140.902307][  T988] syz2: Port: 1 Link ACTIVE
[  140.909064][  T988] wg2 speed is unknown, defaulting to 1000
[  140.930875][ T7139] pim6reg: entered allmulticast mode
[  140.942843][ T7137] pim6reg: left allmulticast mode
[  140.966991][ T7146] Console: switching to colour dummy device 80x25
[  140.970696][ T7143] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.971121][ T7143] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.994781][ T5813] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.994867][ T5813] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.994898][ T5813] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.994926][ T5813] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.012311][   T63] usbhid 6-1:0.0: can't add hid device: -71
[  141.015333][   T63] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  141.025922][   T63] usb 6-1: USB disconnect, device number 5
[  141.084936][ T7143] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  141.102495][ T7143] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  141.102657][ T7143] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  141.106035][ T7143] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  141.106594][ T7143] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  141.114322][ T7143] pci 0000:00:01.0: Adding to iommu group 1
[  141.116718][ T7143] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  141.116730][ T7143] pci 0000:00:01.0: vgaarb: bridge control possible
[  141.116737][ T7143] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  141.120858][ T7143] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  141.121091][ T7143] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  141.122304][ T7143] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  141.129424][ T7143] [drm] Found bochs VGA, ID 0xb0c5.
[  141.129435][ T7143] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  141.137586][ T7143] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  141.280145][ T7143] Console: switching to colour frame buffer device 160x50
[  141.302169][ T7143] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  141.983067][ T7169] netlink: 60 bytes leftover after parsing attributes in process `syz.1.261'.
[  142.070559][ T7173] file system registered
[  142.166351][ T7174] set match dimension is over the limit!
[  142.244230][ T7178] read descriptors
[  142.725309][   T43] kauditd_printk_skb: 1 callbacks suppressed
[  142.725390][   T43] audit: type=1800 audit(1788399812.268:218): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.264" name="c_srate" dev="configfs" ino=17700 res=0 errno=0
[  143.069983][ T5740] ffs_data_put(): freeing
[  143.145305][ T7188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.217084][ T7188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.277272][ T7188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.312568][ T7192] netfs: Cache "CacheFiles" added (type cachefiles)
[  143.312651][ T7192] CacheFiles: File cache on CacheFiles registered
[  143.396854][ T7192] CacheFiles: File cache on CacheFiles unregistering
[  143.396920][ T7192] netfs: Withdrawing cache "CacheFiles" (0 objs)
[  143.414221][ T7188] ip6gretap1: entered allmulticast mode
[  143.417610][ T7188] batman_adv: batadv0: Adding interface: ip6gretap1
[  143.420357][ T7188] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  143.429200][ T7188] batman_adv: batadv0: Interface activated: ip6gretap1
[  143.663209][   T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  143.813258][   T25] usb 5-1: Using ep0 maxpacket: 16
[  143.945804][   T25] usb 5-1: unable to get BOS descriptor or descriptor too short
[  143.945890][   T25] usb 5-1: New USB device found, idVendor=1b3d, idProduct=013b, bcdDevice=da.94
[  143.967271][ T7201] kAFS: unable to lookup cell '/,c¾ûL'
[  144.005507][ T7201] binder: BINDER_SET_CONTEXT_MGR already set
[  144.005549][ T7201] binder: 7198:7201 ioctl 4018620d 80004a80 returned -16
[  144.099948][   T25] usb 5-1: config 172 has an invalid interface number: 82 but max is 0
[  144.100002][   T25] usb 5-1: config 172 has no interface number 0
[  144.100074][   T25] usb 5-1: config 172 interface 82 has no altsetting 0
[  144.213356][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.213429][   T25] usb 5-1: Product: syz
[  144.213470][   T25] usb 5-1: Manufacturer: syz
[  144.213484][   T25] usb 5-1: SerialNumber: syz
[  144.235366][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'.
[  144.235818][ T7203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'.
[  144.276370][ T7203] netlink: 60 bytes leftover after parsing attributes in process `syz.3.270'.
[  145.063875][   T25] ftdi_sio 5-1:172.82: FTDI USB Serial Device converter detected
[  145.064503][   T25] ftdi_sio ttyUSB0: unknown device type: 0xda94
[  145.067702][   T25] usb 5-1: USB disconnect, device number 8
[  145.069606][   T25] ftdi_sio 5-1:172.82: device disconnected
[  146.682418][ T7236] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size.
[  148.364498][    C2] bridge0: port 1(bridge_slave_0) entered learning state
[  148.365826][    C2] bridge0: port 2(bridge_slave_1) entered learning state
[  148.570670][ T7268] netlink: 76 bytes leftover after parsing attributes in process `syz.1.290'.
[  149.642968][ T7298] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  149.643112][ T7298] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  149.669164][ T7298] vhci_hcd vhci_hcd.0: Device attached
[  150.083226][   T42] usb 38-1: SetAddress Request (2) to port 0
[  150.083300][   T42] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd
[  150.340766][ T7298] rdma_rxe: rxe_newlink: failed to add wg2
[  151.062420][ T7300] vhci_hcd: connection reset by peer
[  151.065338][ T5813] vhci_hcd vhci_hcd.0: stop threads
[  151.065392][ T5813] vhci_hcd vhci_hcd.0: release socket
[  151.065498][ T5813] vhci_hcd vhci_hcd.0: disconnect device
[  151.831906][ T7344] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  151.831934][ T7344] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  151.843028][ T7344] vhci_hcd vhci_hcd.0: Device attached
[  151.846771][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.846789][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.123641][ T5228] usb 40-1: SetAddress Request (6) to port 0
[  152.123762][ T5228] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd
[  152.493124][ T7345] vhci_hcd: connection reset by peer
[  152.499250][   T13] vhci_hcd vhci_hcd.1: stop threads
[  152.501326][   T13] vhci_hcd vhci_hcd.1: release socket
[  152.501538][   T13] vhci_hcd vhci_hcd.1: disconnect device
[  152.785098][ T7364] overlayfs: missing 'lowerdir'
[  152.959905][ T7365] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.016487][ T7365] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.224799][ T7365] bridge1: left allmulticast mode
[  153.233648][   T43] audit: type=1800 audit(1788399822.778:219): pid=7371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.295" name="zoned" dev="configfs" ino=17888 res=0 errno=0
[  153.234721][   T43] audit: type=1800 audit(1788399822.778:220): pid=7371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.295" name="zone_nr_conv" dev="configfs" ino=17889 res=0 errno=0
[  153.373243][   T43] audit: type=1800 audit(1788399822.898:221): pid=7374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.295" name="power" dev="configfs" ino=18810 res=0 errno=0
[  153.523292][   T25] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  153.674156][   T25] usb 7-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=71.2b
[  153.675046][   T25] usb 7-1: config 4 has an invalid interface number: 201 but max is 0
[  153.675060][   T25] usb 7-1: config 4 has no interface number 0
[  153.675074][   T25] usb 7-1: config 4 interface 201 has no altsetting 0
[  153.676765][   T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.676777][   T25] usb 7-1: Product: syz
[  153.676785][   T25] usb 7-1: Manufacturer: syz
[  153.676792][   T25] usb 7-1: SerialNumber: syz
[  153.893989][   T13] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  153.900755][   T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.934514][   T13] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  153.935077][   T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.935245][   T13] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  153.935506][   T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.936168][   T13] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  153.936808][   T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.178440][   T25] usb-storage 7-1:4.201: USB Mass Storage device detected
[  154.193603][   T25] usb-storage 7-1:4.201: Quirks match for vid 0781 pid 55e8: 800000
[  154.234247][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'.
[  154.234292][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'.
[  154.244575][ T7384] netlink: 60 bytes leftover after parsing attributes in process `syz.0.298'.
[  154.691219][ T7389] fuse: Bad value for 'fd'
[  155.105979][ T7393] pim6reg: entered allmulticast mode
[  155.173247][   T42] usb 38-1: device descriptor read/8, error -110
[  155.559346][   T25] usb 7-1: USB disconnect, device number 5
[  155.574991][   T42] usb usb38-port1: attempt power cycle
[  156.081439][ T7406] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.099134][ T7406] 8021q: adding VLAN 0 to HW filter on device team0
[  156.185924][   T42] usb usb38-port1: unable to enumerate USB device
[  156.224094][ T7406] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.610320][ T7406] batman_adv: batadv0: Interface activated: batadv_slave_0
[  156.653629][ T7406] batman_adv: batadv0: Interface activated: batadv_slave_1
[  156.740141][ T7406] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  156.745467][ T7406] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  156.809008][ T7406] veth1_vlan: left promiscuous mode
[  156.827374][ T7406] veth0_vlan: left promiscuous mode
[  156.863323][ T7406] veth0_vlan: entered promiscuous mode
[  156.898147][ T7406] veth1_vlan: entered promiscuous mode
[  156.982522][ T7406] veth1_macvtap: left promiscuous mode
[  157.013583][ T7406] veth0_macvtap: left promiscuous mode
[  157.041717][ T7406] veth0_macvtap: entered promiscuous mode
[  157.070528][ T7406] veth1_macvtap: entered promiscuous mode
[  157.144927][ T7406] 8021q: adding VLAN 0 to HW filter on device eth0
[  157.149987][ T7406] 8021q: adding VLAN 0 to HW filter on device eth1
[  157.152838][ T7406] 8021q: adding VLAN 0 to HW filter on device eth2
[  157.153501][ T7406] 8021q: adding VLAN 0 to HW filter on device eth3
[  157.159271][ T5787] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  157.159304][ T5787] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.159343][ T5787] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  157.159362][ T5787] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.159390][ T5787] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  157.159408][ T5787] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.159436][ T5787] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  157.159454][ T5787] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.200671][ T5228] usb 40-1: device descriptor read/8, error -110
[  157.224088][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.224236][ T1159] bridge0: port 1(bridge_slave_0) entered listening state
[  157.225865][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.225940][ T1159] bridge0: port 2(bridge_slave_1) entered listening state
[  157.595290][ T5228] usb usb40-port1: attempt power cycle
[  158.025614][ T7440] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.541182][ T5228] usb usb40-port1: unable to enumerate USB device
[  159.644958][   T25] usb 7-1: new low-speed USB device number 6 using dummy_hcd
[  159.713912][ T5997] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  159.807347][   T25] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  159.812766][   T25] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  159.812848][   T25] usb 7-1: config 0 has no interface number 0
[  159.812879][   T25] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  159.812898][   T25] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  159.812920][   T25] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  159.812942][   T25] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  159.812962][   T25] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  159.812984][   T25] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  159.813017][   T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.816233][   T25] usb 7-1: config 0 descriptor??
[  159.823860][ T7445] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  159.823953][ T7445] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  159.884895][ T5997] usb 6-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=71.2b
[  159.889610][   T25] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  159.903723][ T5997] usb 6-1: config 4 has an invalid interface number: 201 but max is 0
[  159.903774][ T5997] usb 6-1: config 4 has no interface number 0
[  159.903826][ T5997] usb 6-1: config 4 interface 201 has no altsetting 0
[  159.915874][ T5997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.915930][ T5997] usb 6-1: Product: syz
[  159.915997][ T5997] usb 6-1: Manufacturer: syz
[  159.916029][ T5997] usb 6-1: SerialNumber: syz
[  160.074166][ T7449] netlink: 'syz.0.312': attribute type 10 has an invalid length.
[  160.167361][ T7449] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  160.179631][ T7449] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  160.589651][ T5997] usb-storage 6-1:4.201: USB Mass Storage device detected
[  160.610239][ T5997] usb-storage 6-1:4.201: Quirks match for vid 0781 pid 55e8: 800000
[  160.675822][ T5997] usb 6-1: USB disconnect, device number 6
[  161.198891][ T5997] usb 7-1: USB disconnect, device number 6
[  161.207413][ T5997] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  161.506009][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'.
[  161.509822][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'.
[  161.520173][ T7461] netlink: 60 bytes leftover after parsing attributes in process `syz.1.315'.
[  161.641913][ T7462] pim6reg: entered allmulticast mode
[  161.999874][ T7466] ptrace attach of ""[7467] was attempted by "/syz-executor exec"[7466]
[  162.238654][ T7470] input: syz0 as /devices/virtual/input/input12
[  163.183306][   T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  163.333270][   T25] usb 5-1: Using ep0 maxpacket: 16
[  163.334057][   T25] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  163.336911][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.336936][   T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  163.336968][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.339380][   T25] usb 5-1: config 0 descriptor??
[  165.775752][   T25] usbhid 5-1:0.0: can't add hid device: -71
[  165.775893][   T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  165.780856][   T25] usb 5-1: USB disconnect, device number 9
[  167.037428][ T7503] jffs2: notice: (7503) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  167.183294][ T7503] tipc: Started in network mode
[  167.183353][ T7503] tipc: Node identity ac14140f, cluster identity 4711
[  167.191415][ T7503] tipc: New replicast peer: 255.255.255.255
[  167.200071][ T7503] tipc: Enabled bearer <udp:syz2>, priority 10
[  167.623187][ T5834] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  167.794714][ T5834] usb 5-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=71.2b
[  167.796498][ T5834] usb 5-1: config 4 has an invalid interface number: 201 but max is 0
[  167.796530][ T5834] usb 5-1: config 4 has no interface number 0
[  167.796556][ T5834] usb 5-1: config 4 interface 201 has no altsetting 0
[  167.799470][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.799490][ T5834] usb 5-1: Product: syz
[  167.799501][ T5834] usb 5-1: Manufacturer: syz
[  167.799512][ T5834] usb 5-1: SerialNumber: syz
[  168.161067][ T5834] usb-storage 5-1:4.201: USB Mass Storage device detected
[  168.164837][ T5834] usb-storage 5-1:4.201: Quirks match for vid 0781 pid 55e8: 800000
[  168.248813][ T5834] usb 5-1: USB disconnect, device number 10
[  168.308705][  T854] tipc: Node number set to 2886997007
[  169.125969][ T7528] bond1 (unregistering): Released all slaves
[  169.141586][ T7530] ptrace attach of ""[7531] was attempted by "/syz-executor exec"[7530]
[  170.057769][ T7547] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  170.070068][ T7547] overlayfs: failed to decode file handle (len=32, type=0, flags=0, err=-22)
[  170.070330][ T7547] overlayfs: failed to decode file handle (len=32, type=0, flags=0, err=-22)
[  170.254394][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'.
[  171.293262][ T5997] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  171.404357][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  171.404534][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  171.453255][ T5997] usb 8-1: Using ep0 maxpacket: 16
[  171.454200][ T5997] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  171.458788][ T5997] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.458810][ T5997] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  171.458831][ T5997] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.488512][ T5997] usb 8-1: config 0 descriptor??
[  172.447571][ T7563] pim6reg: left allmulticast mode
[  172.767394][ T5997] usbhid 8-1:0.0: can't add hid device: -71
[  172.767472][ T5997] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  172.772024][ T5997] usb 8-1: USB disconnect, device number 6
[  173.143704][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'.
[  173.143761][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'.
[  173.145664][ T7569] netlink: 80 bytes leftover after parsing attributes in process `syz.1.339'.
[  173.224856][ T7531] syz.3.328 (7531) used greatest stack depth: 18360 bytes left
[  173.493263][   T25] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  173.655725][   T25] usb 6-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=71.2b
[  173.657190][   T25] usb 6-1: config 4 has an invalid interface number: 201 but max is 0
[  173.657210][   T25] usb 6-1: config 4 has no interface number 0
[  173.657231][   T25] usb 6-1: config 4 interface 201 has no altsetting 0
[  173.659409][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.659428][   T25] usb 6-1: Product: syz
[  173.659439][   T25] usb 6-1: Manufacturer: syz
[  173.659451][   T25] usb 6-1: SerialNumber: syz
[  173.809297][  T223] IPVS: starting estimator thread 0...
[  173.923606][ T7584] IPVS: using max 20 ests per chain, 48000 per kthread
[  174.027133][   T43] audit: type=1800 audit(1788399843.568:222): pid=7590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.344" name="idProduct" dev="configfs" ino=19112 res=0 errno=0
[  174.087854][ T5452] veth0_vlan: left promiscuous mode
[  174.102802][ T7138] veth0_vlan: entered promiscuous mode
[  174.105680][ T5834] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  174.125572][   T25] usb-storage 6-1:4.201: USB Mass Storage device detected
[  174.128324][   T25] usb-storage 6-1:4.201: Quirks match for vid 0781 pid 55e8: 800000
[  174.207956][   T25] usb 6-1: USB disconnect, device number 7
[  174.257037][ T5834] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  174.264385][ T5834] usb 7-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config
[  174.270515][ T5834] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  174.277206][ T5834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  174.281184][ T5834] usb 7-1: SerialNumber: syz
[  174.370292][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'.
[  174.370427][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.346'.
[  174.375885][ T7606] netlink: 60 bytes leftover after parsing attributes in process `syz.0.346'.
[  174.465690][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'.
[  174.469102][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'.
[  174.499368][ T7612] netlink: 60 bytes leftover after parsing attributes in process `syz.0.347'.
[  174.528833][ T7583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.529506][ T7583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.560091][ T5834] usb 7-1: 0:2 : does not exist
[  174.602223][ T5834] usb 7-1: USB disconnect, device number 7
[  174.858579][ T5452] veth1_vlan: left promiscuous mode
[  175.021174][ T7633] pim6reg: entered allmulticast mode
[  175.076727][ T7622] pim6reg: left allmulticast mode
[  175.087744][ T6461] udevd[6461]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  175.513205][ T5822] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  175.673491][ T5822] usb 7-1: Using ep0 maxpacket: 16
[  175.674257][ T5822] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  175.675326][ T5822] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.675353][ T5822] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  175.675388][ T5822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.680929][ T5822] usb 7-1: config 0 descriptor??
[  176.208410][ T7654] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.217463][ T7654] 8021q: adding VLAN 0 to HW filter on device team0
[  176.233548][ T7654] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.880794][ T7664] __nla_validate_parse: 3 callbacks suppressed
[  176.884810][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.355'.
[  176.884880][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.355'.
[  177.236817][ T7654] batman_adv: batadv0: Interface activated: batadv_slave_0
[  177.244271][ T7654] batman_adv: batadv0: Interface activated: batadv_slave_1
[  177.256173][ T7654] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  177.256244][ T7654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  177.260530][ T7654] veth1_vlan: left promiscuous mode
[  177.261792][ T7654] veth0_vlan: left promiscuous mode
[  177.264046][ T7654] veth0_vlan: entered promiscuous mode
[  177.266401][ T7654] veth1_vlan: entered promiscuous mode
[  177.270907][ T7654] veth1_macvtap: left promiscuous mode
[  177.271794][ T7654] veth0_macvtap: left promiscuous mode
[  177.272582][ T7654] veth0_macvtap: entered promiscuous mode
[  177.273543][ T7654] veth1_macvtap: entered promiscuous mode
[  177.277835][ T7654] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  177.278514][ T7654] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  177.279911][ T7654] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  177.280573][ T7654] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  177.282400][ T7654] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  177.294399][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.294443][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.294478][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.294509][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.339746][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.339869][ T1168] bridge0: port 1(bridge_slave_0) entered listening state
[  177.355233][ T5822] usbhid 7-1:0.0: can't add hid device: -71
[  177.355340][ T5822] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  177.365830][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.365945][ T1168] bridge0: port 2(bridge_slave_1) entered listening state
[  177.388729][ T5822] usb 7-1: USB disconnect, device number 8
[  177.642960][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'.
[  177.646352][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'.
[  177.653434][ T7676] netlink: 60 bytes leftover after parsing attributes in process `syz.1.358'.
[  177.730173][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'.
[  177.730238][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.359'.
[  177.732313][ T7679] netlink: 80 bytes leftover after parsing attributes in process `syz.1.359'.
[  177.800048][ T7682] Invalid ELF header magic: != ELF
[  178.113256][ T5834] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  178.266821][ T5834] usb 6-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=71.2b
[  178.271671][ T5834] usb 6-1: config 4 has an invalid interface number: 201 but max is 0
[  178.276482][ T5834] usb 6-1: config 4 has no interface number 0
[  178.280194][ T5834] usb 6-1: config 4 interface 201 has no altsetting 0
[  178.287016][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.290784][ T5834] usb 6-1: Product: syz
[  178.290802][ T5834] usb 6-1: Manufacturer: syz
[  178.290815][ T5834] usb 6-1: SerialNumber: syz
[  178.443364][    C2] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.443401][    C2] bridge0: topology change detected, propagating
[  178.443591][    C2] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.443612][    C2] bridge0: topology change detected, propagating
[  178.948544][ T5834] usb-storage 6-1:4.201: USB Mass Storage device detected
[  179.046689][ T5834] usb-storage 6-1:4.201: Quirks match for vid 0781 pid 55e8: 800000
[  179.203437][ T5834] usb 6-1: USB disconnect, device number 8
[  179.350788][ T7700] pim6reg: entered allmulticast mode
[  179.357952][ T7700] pim6reg: left allmulticast mode
[  179.731845][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'.
[  179.738728][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'.
[  181.051899][ T7723] vcan0: tx drop: invalid sa for name 0x0004000000000000
[  181.185787][   T63] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  181.333494][   T63] usb 6-1: Using ep0 maxpacket: 16
[  181.336168][   T63] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  181.354030][   T63] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.358309][   T63] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  181.363268][   T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.368575][   T63] usb 6-1: config 0 descriptor??
[  181.683548][  T854] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  181.854690][  T854] usb 7-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=71.2b
[  181.855560][  T854] usb 7-1: config 4 has an invalid interface number: 201 but max is 0
[  181.855574][  T854] usb 7-1: config 4 has no interface number 0
[  181.855588][  T854] usb 7-1: config 4 interface 201 has no altsetting 0
[  181.857352][  T854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.857364][  T854] usb 7-1: Product: syz
[  181.857371][  T854] usb 7-1: Manufacturer: syz
[  181.857379][  T854] usb 7-1: SerialNumber: syz
[  182.146340][ T7744] __nla_validate_parse: 11 callbacks suppressed
[  182.146792][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.376'.
[  182.146814][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.376'.
[  182.158146][ T7744] netlink: 60 bytes leftover after parsing attributes in process `syz.3.376'.
[  182.200326][  T854] usb-storage 7-1:4.201: USB Mass Storage device detected
[  182.201944][  T854] usb-storage 7-1:4.201: Quirks match for vid 0781 pid 55e8: 800000
[  182.256150][  T854] usb 7-1: USB disconnect, device number 9
[  182.256723][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.377'.
[  182.256755][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.377'.
[  182.260705][ T7748] netlink: 80 bytes leftover after parsing attributes in process `syz.3.377'.
[  182.284568][   T63] usbhid 6-1:0.0: can't add hid device: -71
[  182.286797][   T63] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  182.293569][   T63] usb 6-1: USB disconnect, device number 9
[  182.319340][ T7750] tmpfs: Unknown parameter 'ípol?prefer:ÈØ'
[  182.462880][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'.
[  182.462960][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.379'.
[  182.853394][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  183.263497][ T5834] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  183.425521][ T5834] usb 7-1: Using ep0 maxpacket: 8
[  183.428269][ T5834] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  183.431312][ T5834] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  183.431325][ T5834] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  183.431335][ T5834] usb 7-1: config 1 has no interface number 0
[  183.435289][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.435309][ T5834] usb 7-1: Product: syz
[  183.435316][ T5834] usb 7-1: Manufacturer: syz
[  183.435324][ T5834] usb 7-1: SerialNumber: syz
[  183.724539][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'.
[  183.724601][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'.
[  183.904862][ T5834] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22
[  183.909134][ T5834] usb 7-1: USB disconnect, device number 10
[  183.934799][ T7783] netlink: 'syz.0.387': attribute type 9 has an invalid length.
[  183.963338][ T7783] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  183.995367][ T6960] udevd[6960]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  184.354183][ T7791] xt_CT: You must specify a L4 protocol and not use inversions on it
[  184.370342][ T7789] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  184.714568][ T7801] IPv6: NLM_F_CREATE should be specified when creating new route
[  184.717363][ T7801] IPv6: Can't replace route, no match found
[  185.289504][ T7803] netlink: 'syz.2.392': attribute type 4 has an invalid length.
[  186.375096][ T7843] jffs2: notice: (7843) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  186.595939][ T7843] overlayfs: upper fs does not support tmpfile.
[  186.600101][ T7843] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  187.293365][   T10] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  187.403200][    C2] bridge0: port 2(bridge_slave_1) entered learning state
[  187.404730][    C2] bridge0: port 1(bridge_slave_0) entered learning state
[  187.454127][   T10] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  187.455040][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  187.455081][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  187.456759][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.456786][   T10] usb 7-1: Product: syz
[  187.456814][   T10] usb 7-1: Manufacturer: syz
[  187.456835][   T10] usb 7-1: SerialNumber: syz
[  187.458080][   T10] usb 7-1: config 0 descriptor??
[  187.552506][   T10] hub 7-1:0.0: bad descriptor, ignoring hub
[  187.552558][   T10] hub 7-1:0.0: probe with driver hub failed with error -5
[  187.554604][   T10] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input13
[  187.725629][ T7879] __nla_validate_parse: 21 callbacks suppressed
[  187.730095][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.406'.
[  187.734088][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.406'.
[  187.788561][ T7879] netlink: 60 bytes leftover after parsing attributes in process `syz.3.406'.
[  188.061169][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.408'.
[  188.065870][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.408'.
[  188.236186][ T5098] Bluetooth: hci3: unexpected event for opcode 0x4ad0
[  188.981941][ T7896] LUN: removable file: (no medium)
[  189.002299][ T7896] LUN: removable file: (no medium)
[  189.334376][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'.
[  189.334458][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.413'.
[  189.340106][ T7904] netlink: 60 bytes leftover after parsing attributes in process `syz.0.413'.
[  189.407994][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'.
[  189.411964][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.414'.
[  190.292084][ T7923] netlink: 'syz.3.419': attribute type 4 has an invalid length.
[  190.708246][ T5850] usb 7-1: USB disconnect, device number 11
[  191.943294][   T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  192.093756][   T25] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03
[  192.098131][   T25] usb 5-1: Dual-Role OTG device on HNP port
[  192.101313][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.120049][   T25] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[  192.928015][ T7955] __nla_validate_parse: 15 callbacks suppressed
[  192.928080][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.425'.
[  192.928102][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'.
[  192.931914][ T7955] netlink: 80 bytes leftover after parsing attributes in process `syz.3.425'.
[  193.805496][ T1440] ieee802154 phy1 wpan1: encryption failed: -22
[  194.234541][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.431'.
[  194.238542][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'.
[  194.243562][ T7969] netlink: 80 bytes leftover after parsing attributes in process `syz.3.431'.
[  194.286402][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.432'.
[  194.286496][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'.
[  194.289431][ T7972] netlink: 60 bytes leftover after parsing attributes in process `syz.3.432'.
[  194.620478][ T7980] overlayfs: missing 'lowerdir'
[  194.991189][ T7975] pim6reg: left allmulticast mode
[  195.105559][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'.
[  195.968118][ T8009] binder: BINDER_SET_CONTEXT_MGR already set
[  195.968160][ T8009] binder: 8005:8009 ioctl 4018620d 80004a80 returned -16
[  196.053371][ T5834] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  196.206000][ T5834] usb 8-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[  196.207197][ T5834] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  196.207217][ T5834] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  196.208776][ T5834] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  196.208795][ T5834] usb 8-1: Product: syz
[  196.208807][ T5834] usb 8-1: Manufacturer: syz
[  196.410936][   T43] audit: type=1800 audit(1788399865.948:223): pid=8011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.443" name="zoned" dev="configfs" ino=22127 res=0 errno=0
[  196.435020][   T43] audit: type=1800 audit(1788399865.978:224): pid=8011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.443" name="zone_nr_conv" dev="configfs" ino=22842 res=0 errno=0
[  196.846377][   T25] usb 8-1: USB disconnect, device number 7
[  197.815410][ T8032] pim6reg: entered allmulticast mode
[  197.858977][ T8024] pim6reg: left allmulticast mode
[  199.721547][ T8068] __nla_validate_parse: 20 callbacks suppressed
[  199.721605][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.457'.
[  199.722376][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'.
[  199.958023][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'.
[  199.958089][ T8070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'.
[  200.255518][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'.
[  200.255596][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'.
[  200.271469][ T8073] netlink: 60 bytes leftover after parsing attributes in process `syz.2.460'.
[  200.311915][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.459'.
[  200.311973][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'.
[  201.400240][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'.
[  201.483468][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.483511][    C0] bridge0: topology change detected, propagating
[  201.483744][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.483767][    C0] bridge0: topology change detected, propagating
[  203.107015][ T8137] pim6reg: entered allmulticast mode
[  203.171887][ T8107] pim6reg: left allmulticast mode
[  205.330142][ T8184] __nla_validate_parse: 18 callbacks suppressed
[  205.330211][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'.
[  205.330233][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'.
[  205.334471][ T8184] netlink: 60 bytes leftover after parsing attributes in process `syz.0.488'.
[  205.656054][ T8189] wg2 speed is unknown, defaulting to 1000
[  206.053156][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'.
[  206.058116][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'.
[  206.323831][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'.
[  206.323871][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.492'.
[  207.163357][ T8213] pim6reg: entered allmulticast mode
[  207.333275][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  207.413971][ T8178] pim6reg: left allmulticast mode
[  207.433156][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  207.743153][    T0] NOHZ tick-stop error: local softirq work is pending, handler #206!!!
[  207.763128][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  207.813147][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  207.823139][    T0] NOHZ tick-stop error: local softirq work is pending, handler #204!!!
[  207.883299][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  207.883504][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  208.109860][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.498'.
[  208.114546][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'.
[  208.120305][ T8229] netlink: 60 bytes leftover after parsing attributes in process `syz.2.498'.
[  208.343315][ T5834] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  208.623329][ T5834] usb 6-1: Using ep0 maxpacket: 32
[  208.626478][ T5834] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40
[  208.635179][ T5834] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  208.640488][ T5834] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  208.643135][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  208.655762][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.655814][ T5834] usb 6-1: Product: syz
[  208.655843][ T5834] usb 6-1: Manufacturer: syz
[  208.655873][ T5834] usb 6-1: SerialNumber: syz
[  209.691851][ T5834] usb 6-1: USB disconnect, device number 10
[  210.362043][ T8260] __nla_validate_parse: 5 callbacks suppressed
[  210.365429][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'.
[  210.368758][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'.
[  210.379024][ T8260] netlink: 60 bytes leftover after parsing attributes in process `syz.2.507'.
[  210.393153][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  210.545264][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'.
[  210.545325][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.509'.
[  210.547379][ T8264] netlink: 80 bytes leftover after parsing attributes in process `syz.1.509'.
[  211.786871][ T8293] pim6reg: entered allmulticast mode
[  212.357866][ T8287] pim6reg: left allmulticast mode
[  212.473205][    T0] NOHZ tick-stop error: local softirq work is pending, handler #84!!!
[  213.429360][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.516'.
[  213.429417][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.516'.
[  213.443675][ T8311] netlink: 60 bytes leftover after parsing attributes in process `syz.3.516'.
[  213.805961][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'.
[  216.580962][ T8337] comedi comedi1: dt2814: I/O base address not correctly aligned
[  217.483428][    C2] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.483519][    C2] bridge0: topology change detected, propagating
[  217.483810][    C2] bridge0: port 2(bridge_slave_1) entered forwarding state
[  217.483841][    C2] bridge0: topology change detected, propagating
[  217.523414][ T8345] __nla_validate_parse: 2 callbacks suppressed
[  217.523662][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.525'.
[  217.523721][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'.
[  217.526265][ T8345] netlink: 60 bytes leftover after parsing attributes in process `syz.3.525'.
[  217.985002][ T8354] pim6reg: entered allmulticast mode
[  218.074884][ T8350] pim6reg: left allmulticast mode
[  218.682064][ T8365] ceph: No mds server is up or the cluster is laggy
[  219.137746][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.529'.
[  219.137815][ T8371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.529'.
[  219.141642][ T8371] netlink: 80 bytes leftover after parsing attributes in process `syz.1.529'.
[  220.590113][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'.
[  220.594532][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.535'.
[  220.601561][ T8395] netlink: 60 bytes leftover after parsing attributes in process `syz.2.535'.
[  220.717665][ T1159] IPVS: starting estimator thread 0...
[  220.826417][   T43] audit: type=1804 audit(1788399890.368:225): pid=8401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.536" name="file1" dev="ramfs" ino=26944 res=1 errno=0
[  220.833537][ T8398] IPVS: using max 32 ests per chain, 76800 per kthread
[  221.395964][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'.
[  223.159403][ T8432] __nla_validate_parse: 2 callbacks suppressed
[  223.162327][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'.
[  223.166336][ T8432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.544'.
[  223.176277][ T8432] netlink: 60 bytes leftover after parsing attributes in process `syz.3.544'.
[  223.592152][   T43] audit: type=1800 audit(1788399893.128:226): pid=8442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.546" name="c_srate" dev="configfs" ino=25388 res=0 errno=0
[  223.702686][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.547'.
[  223.706940][ T8444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'.
[  223.714340][ T8444] netlink: 80 bytes leftover after parsing attributes in process `syz.2.547'.
[  223.787483][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.548'.
[  223.787559][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'.
[  223.794657][ T8447] netlink: 80 bytes leftover after parsing attributes in process `syz.2.548'.
[  225.570717][ T8465] pim6reg: entered allmulticast mode
[  225.648944][ T8435] pim6reg: left allmulticast mode
[  225.748858][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.553'.
[  226.596983][ T8492] netfs: Cache "CacheFiles" added (type cachefiles)
[  226.599091][ T8492] CacheFiles: File cache on CacheFiles registered
[  226.650569][ T8492] CacheFiles: File cache on CacheFiles unregistering
[  226.650649][ T8492] netfs: Withdrawing cache "CacheFiles" (0 objs)
[  227.577603][ T1168] IPVS: starting estimator thread 0...
[  227.663311][ T8515] IPVS: using max 41 ests per chain, 98400 per kthread
[  228.278462][ T8532] __nla_validate_parse: 23 callbacks suppressed
[  228.281459][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'.
[  228.286690][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.570'.
[  228.294030][ T8532] netlink: 80 bytes leftover after parsing attributes in process `syz.2.570'.
[  228.984935][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'.
[  228.985014][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'.
[  228.987571][ T8546] netlink: 80 bytes leftover after parsing attributes in process `syz.1.575'.
[  229.556719][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.577'.
[  229.556795][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.577'.
[  229.559897][ T8556] netlink: 60 bytes leftover after parsing attributes in process `syz.0.577'.
[  229.645734][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'.
[  230.662097][ T8585] futex_wake_op: syz.2.585 tries to shift op by 144; fix this program
[  233.013244][ T5822] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  233.163227][ T5822] usb 6-1: Using ep0 maxpacket: 8
[  233.163929][ T5822] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  233.164850][ T5822] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  233.164868][ T5822] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  233.164894][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.166626][ T5822] usb 6-1: config 0 descriptor??
[  233.339222][ T8627] __nla_validate_parse: 20 callbacks suppressed
[  233.339428][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.597'.
[  233.339456][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'.
[  233.342336][ T8627] netlink: 60 bytes leftover after parsing attributes in process `syz.2.597'.
[  233.390129][ T5822] usb 6-1: USB disconnect, device number 11
[  235.245123][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.602'.
[  235.245186][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.602'.
[  235.247990][ T8648] netlink: 80 bytes leftover after parsing attributes in process `syz.0.602'.
[  235.272177][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.604'.
[  235.272229][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.604'.
[  235.274791][ T8651] netlink: 80 bytes leftover after parsing attributes in process `syz.2.604'.
[  235.332448][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.605'.
[  236.193208][   T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  236.345965][   T10] usb 8-1: Using ep0 maxpacket: 8
[  236.447031][   T10] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  236.594430][   T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  236.594482][   T10] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  236.594554][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.088987][   T10] usb 8-1: config 0 descriptor??
[  237.455037][ T5822] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  237.963195][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.963253][    C0] bridge0: topology change detected, propagating
[  237.963583][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.963621][    C0] bridge0: topology change detected, propagating
[  238.197162][ T5822] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  238.745314][ T5822] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0xC has an invalid bInterval 0, changing to 7
[  238.745373][ T5822] usb 7-1: config 0 interface 0 has no altsetting 0
[  238.767850][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  238.767914][ T5822] usb 7-1: Product: syz
[  238.767959][ T5822] usb 7-1: Manufacturer: syz
[  238.767984][ T5822] usb 7-1: SerialNumber: syz
[  238.770668][ T5822] usb 7-1: config 0 descriptor??
[  238.778927][ T5822] usb 7-1: selecting invalid altsetting 0
[  238.899803][ T8688] __nla_validate_parse: 6 callbacks suppressed
[  238.899872][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.613'.
[  238.899896][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'.
[  238.906778][ T8688] netlink: 80 bytes leftover after parsing attributes in process `syz.1.613'.
[  238.936859][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.614'.
[  238.936922][ T8690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.614'.
[  238.943726][ T8690] netlink: 80 bytes leftover after parsing attributes in process `syz.0.614'.
[  239.024758][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'.
[  239.024795][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.616'.
[  239.028117][ T8694] netlink: 80 bytes leftover after parsing attributes in process `syz.0.616'.
[  239.111029][ T8696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'.
[  239.153872][ T5822] usb 7-1: USB disconnect, device number 12
[  239.277721][ T8672] Set syz1 is full, maxelem 65536 reached
[  239.291048][  T854] usb 8-1: USB disconnect, device number 8
[  241.573312][ T5822] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  241.733655][ T5822] usb 7-1: Using ep0 maxpacket: 8
[  241.737275][ T5822] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  241.746336][ T5822] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  241.746393][ T5822] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  241.746475][ T5822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.766799][ T5822] usb 7-1: config 0 descriptor??
[  242.149704][ T8740] Set syz1 is full, maxelem 6117 reached
[  242.191419][ T5822] usb 7-1: USB disconnect, device number 13
[  243.053219][ T5831] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  243.219440][ T5831] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  243.259615][ T5831] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0xC has an invalid bInterval 0, changing to 7
[  243.264576][ T5831] usb 6-1: config 0 interface 0 has no altsetting 0
[  243.281898][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  243.282016][ T5831] usb 6-1: Product: syz
[  243.282075][ T5831] usb 6-1: Manufacturer: syz
[  243.282118][ T5831] usb 6-1: SerialNumber: syz
[  243.358504][ T5831] usb 6-1: config 0 descriptor??
[  243.524458][ T5831] usb 6-1: selecting invalid altsetting 0
[  243.588386][ T8761] futex_wake_op: syz.0.635 tries to shift op by 144; fix this program
[  244.511564][ T8769] __nla_validate_parse: 18 callbacks suppressed
[  244.511820][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'.
[  244.511835][ T8769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.636'.
[  244.514389][ T8769] netlink: 60 bytes leftover after parsing attributes in process `syz.0.636'.
[  244.945978][ T5831] usb 6-1: USB disconnect, device number 12
[  245.040020][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'.
[  245.040128][ T8775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.637'.
[  245.045003][ T8775] netlink: 80 bytes leftover after parsing attributes in process `syz.0.637'.
[  245.149422][ T6460] udevd[6460]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  245.529705][   T43] audit: type=1326 audit(1788399915.068:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.2.640" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57fec code=0x7ffc0000
[  245.540238][   T43] audit: type=1326 audit(1788399915.078:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.2.640" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57fec code=0x7ffc0000
[  245.548315][   T43] audit: type=1326 audit(1788399915.078:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.2.640" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f57fec code=0x7ffc0000
[  245.559136][   T43] audit: type=1326 audit(1788399915.098:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.2.640" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57fec code=0x7ffc0000
[  245.569655][   T43] audit: type=1326 audit(1788399915.108:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.2.640" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f57fec code=0x7ffc0000
[  245.578348][   T43] audit: type=1326 audit(1788399915.118:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.2.640" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57fec code=0x7ffc0000
[  245.615294][   T43] audit: type=1326 audit(1788399915.158:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.2.640" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7f57fec code=0x7ffc0000
[  245.625913][   T43] audit: type=1326 audit(1788399915.168:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.2.640" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57fec code=0x7ffc0000
[  245.626015][   T43] audit: type=1326 audit(1788399915.168:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.2.640" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f57fec code=0x7ffc0000
[  245.645894][   T43] audit: type=1326 audit(1788399915.188:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.2.640" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57fec code=0x7ffc0000
[  246.280573][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.642'.
[  246.284415][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.642'.
[  246.289417][ T8791] netlink: 80 bytes leftover after parsing attributes in process `syz.1.642'.
[  247.059159][ T8801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.644'.
[  249.182614][ T8826] input: syz0 as /devices/virtual/input/input16
[  249.556747][ T8840] read descriptors
[  249.700927][ T8841] bridge3: entered promiscuous mode
[  249.703978][ T8841] bridge3: entered allmulticast mode
[  250.175112][ T5745] ffs_data_put(): freeing
[  250.905831][ T8858] __nla_validate_parse: 5 callbacks suppressed
[  250.907336][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'.
[  250.907407][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'.
[  250.922739][ T8858] netlink: 80 bytes leftover after parsing attributes in process `syz.2.657'.
[  251.219725][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.661'.
[  251.219947][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.661'.
[  254.505127][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'.
[  254.505190][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'.
[  254.630076][ T8915] kAFS: unable to lookup cell '/,c¾ûL'
[  254.643683][ T8915] binder: BINDER_SET_CONTEXT_MGR already set
[  254.652571][ T8915] binder: 8911:8915 ioctl 4018620d 80004a80 returned -16
[  255.250113][ T1440] ieee802154 phy1 wpan1: encryption failed: -22
[  259.109333][ T8956] Console: switching to colour dummy device 80x25
[  259.109535][ T8963] futex_wake_op: syz.3.680 tries to shift op by 144; fix this program
[  260.282524][ T8960] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  260.312445][ T8960] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  260.312633][ T8960] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  260.319741][ T8960] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  260.324416][ T8960] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  260.339859][ T8960] pci 0000:00:01.0: Adding to iommu group 1
[  260.346934][ T8960] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  260.346959][ T8960] pci 0000:00:01.0: vgaarb: bridge control possible
[  260.346968][ T8960] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  260.361921][ T8960] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  260.367394][ T8960] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  260.371561][ T8960] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  260.382751][ T8960] [drm] Found bochs VGA, ID 0xb0c5.
[  260.385497][ T8960] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  260.404114][ T8960] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  260.588627][ T8960] Console: switching to colour frame buffer device 160x50
[  260.595223][ T8983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.683'.
[  260.615797][ T8960] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  260.657616][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.693'.
[  260.658145][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'.
[  260.856759][ T8988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.866656][ T8988] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  262.171374][ T8994] kAFS: unable to lookup cell '/,c¾ûL'
[  262.273574][ T8994] binder: BINDER_SET_CONTEXT_MGR already set
[  262.273638][ T8994] binder: 8991:8994 ioctl 4018620d 80004a80 returned -16
[  264.757539][ T9024] netfs: Cache "CacheFiles" added (type cachefiles)
[  264.757593][ T9024] CacheFiles: File cache on CacheFiles registered
[  264.771553][ T9024] CacheFiles: File cache on CacheFiles unregistering
[  264.771630][ T9024] netfs: Withdrawing cache "CacheFiles" (0 objs)
[  264.917705][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'.
[  264.917760][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.697'.
[  264.919995][ T9028] netlink: 60 bytes leftover after parsing attributes in process `syz.3.697'.
[  264.970537][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'.
[  264.970581][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'.
[  264.972258][ T9032] netlink: 80 bytes leftover after parsing attributes in process `syz.0.698'.
[  265.009306][ T9034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.699'.
[  266.273191][ T5816] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  266.429914][ T5816] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  266.435611][ T5816] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0xC has an invalid bInterval 0, changing to 7
[  266.435651][ T5816] usb 8-1: config 0 interface 0 has no altsetting 0
[  266.444295][ T5816] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  266.444379][ T5816] usb 8-1: Product: syz
[  266.444408][ T5816] usb 8-1: Manufacturer: syz
[  266.444429][ T5816] usb 8-1: SerialNumber: syz
[  266.453054][ T5816] usb 8-1: config 0 descriptor??
[  266.460666][ T5816] usb 8-1: selecting invalid altsetting 0
[  266.690427][ T5834] usb 8-1: USB disconnect, device number 9
[  268.627727][ T9061] netfs: Cache "CacheFiles" added (type cachefiles)
[  268.627797][ T9061] CacheFiles: File cache on CacheFiles registered
[  268.651750][ T9061] CacheFiles: File cache on CacheFiles unregistering
[  268.651814][ T9061] netfs: Withdrawing cache "CacheFiles" (0 objs)
[  268.682111][ T9066] netlink: 'syz.2.707': attribute type 4 has an invalid length.
[  268.682191][ T9066] __nla_validate_parse: 3 callbacks suppressed
[  268.682255][ T9066] netlink: 17 bytes leftover after parsing attributes in process `syz.2.707'.
[  268.772280][ T9071] 9pnet_virtio: no channels available for device c:::
[  268.813253][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.708'.
[  268.813460][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.708'.
[  268.934465][ T9069] netlink: 60 bytes leftover after parsing attributes in process `syz.3.708'.
[  269.245918][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'.
[  269.246148][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.709'.
[  269.268991][ T9075] netlink: 80 bytes leftover after parsing attributes in process `syz.1.709'.
[  270.758384][ T9100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.716'.
[  271.353947][ T7138] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  271.526924][ T7138] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  271.545248][ T7138] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0xC has an invalid bInterval 0, changing to 7
[  271.546243][ T7138] usb 6-1: config 0 interface 0 has no altsetting 0
[  271.560132][ T7138] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  271.560294][ T7138] usb 6-1: Product: syz
[  271.560345][ T7138] usb 6-1: Manufacturer: syz
[  271.560481][ T7138] usb 6-1: SerialNumber: syz
[  271.632418][ T7138] usb 6-1: config 0 descriptor??
[  271.739583][ T7138] usb 6-1: selecting invalid altsetting 0
[  272.327157][ T5834] usb 6-1: USB disconnect, device number 13
[  272.587360][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'.
[  272.590259][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'.
[  273.221172][ T9132] netlink: 'syz.1.725': attribute type 1 has an invalid length.
[  273.221229][ T9132] netlink: 'syz.1.725': attribute type 1 has an invalid length.
[  273.862164][ T9152] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request
[  273.916127][ T9153] kAFS: unable to lookup cell '/,c¾ûL'
[  273.950995][ T9153] binder: BINDER_SET_CONTEXT_MGR already set
[  273.951338][ T9153] binder: 9148:9153 ioctl 4018620d 80004a80 returned -16
[  274.019023][   T43] kauditd_printk_skb: 15 callbacks suppressed
[  274.023924][   T43] audit: type=1326 audit(1788399943.558:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.3.729" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000
[  274.024359][   T43] audit: type=1326 audit(1788399943.558:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.3.729" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000
[  274.027413][   T43] audit: type=1326 audit(1788399943.568:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.3.729" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000
[  274.027623][   T43] audit: type=1326 audit(1788399943.568:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.3.729" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000
[  274.033297][ T9149] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  274.040667][   T43] audit: type=1326 audit(1788399943.568:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.3.729" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f27fec code=0x7ffc0000
[  274.046800][   T43] audit: type=1326 audit(1788399943.578:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.3.729" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000
[  274.048775][   T43] audit: type=1326 audit(1788399943.588:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.3.729" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000
[  274.049411][   T43] audit: type=1326 audit(1788399943.588:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.3.729" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f27fec code=0x7ffc0000
[  274.107525][   T43] audit: type=1326 audit(1788399943.638:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.3.729" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000
[  274.834325][ T9164] __nla_validate_parse: 9 callbacks suppressed
[  274.834523][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'.
[  274.834550][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.731'.
[  274.836100][ T9164] netlink: 60 bytes leftover after parsing attributes in process `syz.3.731'.
[  274.874775][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.732'.
[  274.874845][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.732'.
[  274.876512][ T9166] netlink: 80 bytes leftover after parsing attributes in process `syz.3.732'.
[  274.991877][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.733'.
[  274.991953][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.733'.
[  274.997000][ T9171] netlink: 60 bytes leftover after parsing attributes in process `syz.3.733'.
[  275.202217][ T9178] futex_wake_op: syz.1.735 tries to shift op by 144; fix this program
[  275.413455][ T9181] pim6reg: entered allmulticast mode
[  275.458636][ T9175] pim6reg: left allmulticast mode
[  276.068591][ T9187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.736'.
[  276.593311][ T5228] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  276.774056][ T5228] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  276.775166][ T5228] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0xC has an invalid bInterval 0, changing to 7
[  276.775220][ T5228] usb 8-1: config 0 interface 0 has no altsetting 0
[  276.777570][ T5228] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  276.777608][ T5228] usb 8-1: Product: syz
[  276.777646][ T5228] usb 8-1: Manufacturer: syz
[  276.777675][ T5228] usb 8-1: SerialNumber: syz
[  276.779953][ T5228] usb 8-1: config 0 descriptor??
[  276.788192][ T5228] usb 8-1: selecting invalid altsetting 0
[  277.004125][ T5228] usb 8-1: USB disconnect, device number 10
[  277.154189][ T9193] ieee802154 phy1 wpan1: encryption failed: -22
[  278.567129][ T9219] kAFS: unable to lookup cell '/,c¾ûL'
[  278.570841][ T9219] binder: BINDER_SET_CONTEXT_MGR already set
[  278.570902][ T9219] binder: 9215:9219 ioctl 4018620d 80004a80 returned -16
[  278.939317][ T9223] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  278.939345][ T9223] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  278.950095][ T9223] vhci_hcd vhci_hcd.0: Device attached
[  279.213604][   T25] usb 42-1: SetAddress Request (6) to port 0
[  279.213708][   T25] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd
[  280.203809][ T9235] pim6reg: entered allmulticast mode
[  280.205423][ T9235] pim6reg: left allmulticast mode
[  281.347939][ T9250] __nla_validate_parse: 3 callbacks suppressed
[  281.348225][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.750'.
[  281.348241][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.750'.
[  281.358604][ T9250] netlink: 60 bytes leftover after parsing attributes in process `syz.3.750'.
[  281.574615][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'.
[  281.587970][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'.
[  281.597393][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'.
[  281.602036][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'.
[  281.611890][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'.
[  281.929519][ T9225] vhci_hcd: connection reset by peer
[  281.940107][ T5813] vhci_hcd vhci_hcd.2: stop threads
[  281.940179][ T5813] vhci_hcd vhci_hcd.2: release socket
[  281.940242][ T5813] vhci_hcd vhci_hcd.2: disconnect device
[  282.668400][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.755'.
[  282.671637][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.755'.
[  283.519902][ T9277] pim6reg: entered allmulticast mode
[  283.589063][ T9276] pim6reg: left allmulticast mode
[  284.608722][   T25] usb 42-1: device descriptor read/8, error -110
[  284.994150][   T25] usb usb42-port1: attempt power cycle
[  285.224361][ T5834] usb 5-1: USB disconnect, device number 11
[  285.442833][ T9297] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  285.553674][   T25] usb usb42-port1: unable to enumerate USB device
[  286.729576][ T9314] pim6reg: entered allmulticast mode
[  286.751695][ T9314] pim6reg: left allmulticast mode
[  286.905620][ T9310] __nla_validate_parse: 7 callbacks suppressed
[  286.905826][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'.
[  287.513231][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'.
[  287.514704][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'.
[  287.554517][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'.
[  287.558615][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'.
[  288.720404][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'.
[  288.720506][ T9320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'.
[  288.723318][ T9320] netlink: 60 bytes leftover after parsing attributes in process `syz.0.769'.
[  288.886473][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.771'.
[  290.713430][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.775'.
[  291.153266][  T854] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  291.256040][   T43] audit: type=1800 audit(1788399960.798:261): pid=9342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.776" name="file0" dev="overlay" ino=1030 res=0 errno=0
[  291.304881][  T854] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  291.306758][  T854] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0xC has an invalid bInterval 0, changing to 7
[  291.306792][  T854] usb 8-1: config 0 interface 0 has no altsetting 0
[  291.309453][  T854] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  291.309478][  T854] usb 8-1: Product: syz
[  291.309491][  T854] usb 8-1: Manufacturer: syz
[  291.309504][  T854] usb 8-1: SerialNumber: syz
[  291.311666][  T854] usb 8-1: config 0 descriptor??
[  291.317939][  T854] usb 8-1: selecting invalid altsetting 0
[  291.587807][   T25] usb 8-1: USB disconnect, device number 11
[  291.688452][ T6460] udevd[6460]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  292.389656][ T9355] __nla_validate_parse: 2 callbacks suppressed
[  292.389953][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.779'.
[  292.389970][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.779'.
[  292.392997][ T9355] netlink: 60 bytes leftover after parsing attributes in process `syz.0.779'.
[  293.063558][ T5228] usb 7-1: new full-speed USB device number 14 using dummy_hcd
[  293.214349][ T5228] usb 7-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[  293.219726][ T5228] usb 7-1: config 0 has an invalid interface number: 205 but max is 0
[  293.223567][ T5228] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  293.228045][ T5228] usb 7-1: config 0 has no interface number 0
[  293.231075][ T5228] usb 7-1: config 0 interface 205 has no altsetting 0
[  293.259122][ T5228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.263445][ T5228] usb 7-1: Product: syz
[  293.265879][ T5228] usb 7-1: Manufacturer: syz
[  293.268408][ T5228] usb 7-1: SerialNumber: syz
[  293.273680][ T5228] usb 7-1: config 0 descriptor??
[  293.281123][ T5228] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[  293.286132][ T5228] dvb-usb: bulk message failed: -22 (3/0)
[  293.323776][ T5228] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  293.327197][ T5228] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[  293.334514][ T5228] usb 7-1: media controller created
[  293.338696][ T5228] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  293.369197][ T5228] dvb-usb: bulk message failed: -22 (6/0)
[  293.371665][ T5228] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[  293.378737][ T5228] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input17
[  293.391291][ T5228] dvb-usb: schedule remote query interval to 150 msecs.
[  293.394789][ T5228] dvb-usb: bulk message failed: -22 (3/0)
[  293.413316][ T5228] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[  293.555207][ T5228] dvb-usb: bulk message failed: -22 (1/0)
[  293.557585][ T5228] dvb-usb: error while querying for an remote control event.
[  293.713321][ T5228] dvb-usb: bulk message failed: -22 (1/0)
[  293.719273][ T5228] dvb-usb: error while querying for an remote control event.
[  293.873353][ T5228] dvb-usb: bulk message failed: -22 (1/0)
[  293.875595][ T5228] dvb-usb: error while querying for an remote control event.
[  294.037057][ T5228] dvb-usb: bulk message failed: -22 (1/0)
[  294.039989][ T5228] dvb-usb: error while querying for an remote control event.
[  294.203881][ T5228] dvb-usb: bulk message failed: -22 (1/0)
[  294.206656][ T5228] dvb-usb: error while querying for an remote control event.
[  294.364130][ T5228] dvb-usb: bulk message failed: -22 (1/0)
[  294.367277][ T5228] dvb-usb: error while querying for an remote control event.
[  294.523398][ T5228] dvb-usb: bulk message failed: -22 (1/0)
[  294.526585][ T5228] dvb-usb: error while querying for an remote control event.
[  294.683601][ T5228] dvb-usb: bulk message failed: -22 (1/0)
[  294.687627][ T5228] dvb-usb: error while querying for an remote control event.
[  294.843683][ T5228] dvb-usb: bulk message failed: -22 (1/0)
[  294.846688][ T5228] dvb-usb: error while querying for an remote control event.
[  295.003272][ T5228] dvb-usb: bulk message failed: -22 (1/0)
[  295.003371][ T5228] dvb-usb: error while querying for an remote control event.
[  295.163268][ T5228] dvb-usb: bulk message failed: -22 (1/0)
[  295.163379][ T5228] dvb-usb: error while querying for an remote control event.
[  295.225958][   T25] usb 7-1: USB disconnect, device number 14
[  295.300807][   T25] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[  295.610494][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.780'.
[  295.620879][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.780'.
[  295.621188][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.780'.
[  295.621962][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.780'.
[  295.622226][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.780'.
[  295.701084][ T9367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.788'.
[  296.063280][   T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  296.217742][   T25] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  296.221847][   T25] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0xA has an invalid bInterval 0, changing to 7
[  296.222323][   T25] usb 5-1: config 0 interface 0 has no altsetting 0
[  296.228568][   T25] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  296.228593][   T25] usb 5-1: Product: syz
[  296.228606][   T25] usb 5-1: Manufacturer: syz
[  296.228619][   T25] usb 5-1: SerialNumber: syz
[  296.236986][   T25] usb 5-1: config 0 descriptor??
[  296.266209][   T25] usb 5-1: selecting invalid altsetting 0
[  296.466378][  T854] usb 5-1: USB disconnect, device number 12
[  296.677943][ T6460] udevd[6460]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  296.729440][ T9370] netlink: 'syz.1.782': attribute type 10 has an invalid length.
[  296.755003][ T9370] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  296.764566][ T9370] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  296.801785][ T9370] netlink: 14 bytes leftover after parsing attributes in process `syz.1.782'.
[  296.849794][ T9370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  296.902527][ T9375] overlayfs: metacopy with no lower data found - abort lookup (/file1)
[  296.914715][ T9374] syz.1.782: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  296.915093][ T9374] CPU: 1 UID: 0 PID: 9374 Comm: syz.1.782 Not tainted syzkaller #0 PREEMPT(full) 
[  296.915128][ T9374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  296.915142][ T9374] Call Trace:
[  296.915149][ T9374]  <TASK>
[  296.915157][ T9374]  dump_stack_lvl+0x100/0x190
[  296.915255][ T9374]  warn_alloc.cold+0x9e/0xb2
[  296.915279][ T9374]  ? __pfx_warn_alloc+0x10/0x10
[  296.915370][ T9374]  ? __lock_acquire+0x4c5/0x1ec0
[  296.915404][ T9374]  __vmalloc_node_range_noprof+0x123b/0x1420
[  296.915430][ T9374]  ? __lock_acquire+0x4c5/0x1ec0
[  296.915457][ T9374]  ? __lock_acquire+0x4c5/0x1ec0
[  296.915487][ T9374]  ? do_replace+0x1c6/0x490
[  296.915534][ T9374]  ? do_raw_spin_lock+0x128/0x260
[  296.915566][ T9374]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  296.915594][ T9374]  ? __lock_acquire+0x4c5/0x1ec0
[  296.915623][ T9374]  ? do_raw_spin_unlock+0x145/0x1e0
[  296.915657][ T9374]  ? do_replace+0x1c6/0x490
[  296.915675][ T9374]  __vmalloc_node_noprof+0xad/0xf0
[  296.915700][ T9374]  ? do_replace+0x1c6/0x490
[  296.915722][ T9374]  __vmalloc_noprof+0xa3/0x120
[  296.915747][ T9374]  ? __pfx___vmalloc_noprof+0x10/0x10
[  296.915781][ T9374]  do_replace+0x1c6/0x490
[  296.915800][ T9374]  ? __pfx_do_replace+0x10/0x10
[  296.915830][ T9374]  ? register_lock_class+0x3f/0x7b0
[  296.915861][ T9374]  compat_do_replace+0x589/0x7a0
[  296.915884][ T9374]  ? __pfx_compat_do_replace+0x10/0x10
[  296.915920][ T9374]  ? bpf_lsm_capable+0x9/0x10
[  296.915947][ T9374]  ? security_capable+0x80/0x260
[  296.915972][ T9374]  do_ebt_set_ctl+0x3f4/0x4a0
[  296.915995][ T9374]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  296.916027][ T9374]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  296.916055][ T9374]  ? futex_wake+0x4ea/0x5e0
[  296.916083][ T9374]  ? nf_sockopt_find.isra.0+0x222/0x290
[  296.916110][ T9374]  nf_setsockopt+0x8d/0xf0
[  296.916135][ T9374]  ip_setsockopt+0xcb/0xf0
[  296.916161][ T9374]  tcp_setsockopt+0xa7/0x100
[  296.916177][ T9374]  smc_setsockopt+0x1b6/0xa40
[  296.916227][ T9374]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  296.916260][ T9374]  ? __pfx_smc_setsockopt+0x10/0x10
[  296.916285][ T9374]  ? aa_sock_opt_perm+0x114/0x1e0
[  296.916311][ T9374]  ? __pfx_smc_setsockopt+0x10/0x10
[  296.916334][ T9374]  do_sock_setsockopt+0xf3/0x1d0
[  296.916364][ T9374]  __sys_setsockopt+0x119/0x190
[  296.916391][ T9374]  __ia32_sys_setsockopt+0xbc/0x160
[  296.916412][ T9374]  ? __do_fast_syscall_32+0xb3/0x8b0
[  296.916440][ T9374]  ? lockdep_hardirqs_on+0x7d/0x110
[  296.916466][ T9374]  __do_fast_syscall_32+0x13a/0x8b0
[  296.916514][ T9374]  do_fast_syscall_32+0x32/0x70
[  296.916543][ T9374]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  296.916571][ T9374] RIP: 0023:0xf703efec
[  296.916594][ T9374] Code: Unable to access opcode bytes at 0xf703efc2.
[  296.916603][ T9374] RSP: 002b:00000000f540c50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e
[  296.916621][ T9374] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000
[  296.916634][ T9374] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108
[  296.916648][ T9374] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  296.916661][ T9374] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  296.916674][ T9374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  296.916701][ T9374]  </TASK>
[  296.924490][ T9370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  296.934407][ T9374] Mem-Info:
[  296.934421][ T9374] active_anon:10658 inactive_anon:20860 isolated_anon:0
[  296.934421][ T9374]  active_file:488 inactive_file:15890 isolated_file:0
[  296.934421][ T9374]  unevictable:1000 dirty:154 writeback:0
[  296.934421][ T9374]  slab_reclaimable:6424 slab_unreclaimable:60777
[  296.934421][ T9374]  mapped:22355 shmem:27277 pagetables:1186
[  296.934421][ T9374]  sec_pagetables:320 bounce:0
[  296.934421][ T9374]  kernel_misc_reclaimable:0
[  296.934421][ T9374]  free:33451 free_pcp:9618 free_cma:0
[  296.934524][ T9374] Node 0 active_anon:100kB inactive_anon:132kB active_file:48kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8736kB pagetables:1284kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  296.934579][ T9374] Node 1 active_anon:42532kB inactive_anon:83308kB active_file:1904kB inactive_file:63464kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:89388kB dirty:616kB writeback:0kB shmem:109108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5360kB pagetables:3460kB sec_pagetables:156kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  296.934635][ T9374] Node 0 DMA free:2004kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:32kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:464kB local_pcp:164kB free_cma:0kB
[  296.934693][ T9374] lowmem_reserve[]: 0 278 278 278 278
[  296.934726][ T9374] Node 0 DMA32 free:15740kB boost:0kB min:12628kB low:15784kB high:18940kB reserved_highatomic:0kB free_highatomic:0kB active_anon:100kB inactive_anon:100kB active_file:48kB inactive_file:96kB unevictable:0kB writepending:0kB zspages:328kB present:1032196kB managed:284672kB mlocked:0kB bounce:0kB free_pcp:12032kB local_pcp:3860kB free_cma:0kB
[  296.934779][ T9374] lowmem_reserve[]: 0 0 0 0 0
[  296.934813][ T9374] Node 1 DMA32 free:116060kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:42532kB inactive_anon:83308kB active_file:1904kB inactive_file:63464kB unevictable:4000kB writepending:616kB zspages:5472kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:25976kB local_pcp:16900kB free_cma:0kB
[  296.934895][ T9374] lowmem_reserve[]: 0 0 0 0 0
[  296.934927][ T9374] Node 0 DMA: 31*4kB (UM) 3*8kB (U) 8*16kB (U) 2*32kB (U) 6*64kB (UM) 4*128kB (UM) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2004kB
[  296.935107][ T9374] Node 0 DMA32: 199*4kB (UME) 48*8kB (UE) 18*16kB (UME) 30*32kB (ME) 30*64kB (UME) 11*128kB (UME) 9*256kB (UM) 5*512kB (ME) 3*1024kB (U) 1*2048kB (U) 0*4096kB = 15740kB
[  296.935249][ T9374] Node 1 DMA32: 413*4kB (U) 465*8kB (UE) 244*16kB (UE) 131*32kB (UME) 309*64kB (UME) 133*128kB (UME) 55*256kB (UME) 25*512kB (UME) 6*1024kB (UM) 10*2048kB (UM) 3*4096kB (UM) = 116060kB
[  296.935435][ T9374] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  296.935452][ T9374] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  296.935468][ T9374] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  296.935483][ T9374] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  296.935497][ T9374] 44494 total pagecache pages
[  296.935505][ T9374] 791 pages in swap cache
[  296.935512][ T9374] Free swap  = 88kB
[  296.935519][ T9374] Total swap = 124996kB
[  296.935526][ T9374] 524155 pages RAM
[  296.935533][ T9374] 0 pages HighMem/MovableOnly
[  296.935539][ T9374] 212095 pages reserved
[  296.935545][ T9374] 0 pages cma reserved
[  296.951771][ T9370] bond0 (unregistering): (slave netdevsim1): Releasing backup interface
[  296.960376][ T9370] bond0 (unregistering): Released all slaves
[  299.640658][ T9396] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  299.640713][ T9396] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  299.657380][ T9396] vhci_hcd vhci_hcd.0: Device attached
[  300.073297][ T5831] usb 40-1: SetAddress Request (10) to port 0
[  300.073372][ T5831] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd
[  300.189126][ T9399] vhci_hcd: connection reset by peer
[  300.189463][   T13] vhci_hcd vhci_hcd.1: stop threads
[  300.189481][   T13] vhci_hcd vhci_hcd.1: release socket
[  300.190004][   T13] vhci_hcd vhci_hcd.1: disconnect device
[  301.537050][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.793'.
[  301.581545][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.796'.
[  301.581623][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'.
[  301.586367][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.793'.
[  301.593616][ T9426] netlink: 80 bytes leftover after parsing attributes in process `syz.1.796'.
[  301.604059][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.793'.
[  301.610450][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.793'.
[  301.619002][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.793'.
[  301.681208][ T9428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.797'.
[  302.203451][ T5834] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  302.375000][ T5834] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  302.394164][ T5834] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0xC has an invalid bInterval 0, changing to 7
[  302.394252][ T5834] usb 6-1: config 0 interface 0 has no altsetting 0
[  302.428718][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  302.432986][ T5834] usb 6-1: Product: syz
[  302.437516][ T5834] usb 6-1: Manufacturer: syz
[  302.437657][ T5834] usb 6-1: SerialNumber: syz
[  302.655607][ T5834] usb 6-1: config 0 descriptor??
[  302.889810][ T5834] usb 6-1: selecting invalid altsetting 0
[  304.686327][ T5834] usb 6-1: USB disconnect, device number 14
[  304.715522][ T6460] udevd[6460]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  305.918130][ T5831] usb 40-1: device descriptor read/8, error -110
[  306.203906][ T7138] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  306.373262][ T7138] usb 6-1: Using ep0 maxpacket: 32
[  306.375885][ T7138] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  306.379516][ T7138] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.379838][ T7138] usb 6-1: config 0 has no interfaces?
[  306.391531][ T7138] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  306.391773][ T7138] usb 6-1: Product: syz
[  306.392536][ T7138] usb 6-1: Manufacturer: syz
[  306.392553][ T7138] usb 6-1: SerialNumber: syz
[  306.856354][ T5831] usb usb40-port1: attempt power cycle
[  306.872869][ T7138] usb 6-1: config 0 descriptor??
[  307.484101][ T7138] usb 6-1: USB disconnect, device number 15
[  307.633688][ T5831] usb usb40-port1: unable to enumerate USB device
[  307.714071][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.805'.
[  307.714142][ T9485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'.
[  307.716708][ T9485] netlink: 80 bytes leftover after parsing attributes in process `syz.2.805'.
[  308.662409][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'.
[  308.670855][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'.
[  308.673336][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'.
[  308.682157][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'.
[  308.686382][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'.
[  309.139686][ T9498] netlink: zone id is out of range
[  309.139963][ T9498] netlink: zone id is out of range
[  309.146118][ T9498] netlink: zone id is out of range
[  309.146359][ T9498] netlink: zone id is out of range
[  309.151338][ T9498] netlink: zone id is out of range
[  309.151439][ T9498] netlink: zone id is out of range
[  309.161369][ T9498] netlink: zone id is out of range
[  309.164798][ T9498] netlink: zone id is out of range
[  309.166739][ T9498] netlink: zone id is out of range
[  309.166875][ T9498] netlink: zone id is out of range
[  309.228449][ T9498] capability: warning: `syz.1.809' uses 32-bit capabilities (legacy support in use)
[  310.532115][ T5822] libceph: connect (1)[c::]:6789 error -101
[  310.532417][ T5822] libceph: mon0 (1)[c::]:6789 connect error
[  310.540537][ T9504] ceph: No mds server is up or the cluster is laggy
[  310.740600][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.812'.
[  310.748006][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.812'.
[  310.784244][ T5822] libceph: connect (1)[c::]:6789 error -101
[  310.784384][ T5822] libceph: mon0 (1)[c::]:6789 connect error
[  311.450426][ T9534] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem
[  313.413280][ T5746] Bluetooth: hci3: command 0x0c1a tx timeout
[  313.953988][ T9575] __nla_validate_parse: 8 callbacks suppressed
[  313.956892][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'.
[  313.960671][ T9575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.825'.
[  313.969866][ T9575] netlink: 80 bytes leftover after parsing attributes in process `syz.3.825'.
[  316.053680][ T9595] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  316.053727][ T9595] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  316.054994][ T9595] vhci_hcd vhci_hcd.0: Device attached
[  316.343331][ T5830] usb 38-1: SetAddress Request (6) to port 0
[  316.343787][ T5830] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd
[  316.448691][ T9605] capability: warning: `syz.1.831' uses deprecated v2 capabilities in a way that may be insecure
[  316.460578][ T9605] input: syz1 as /devices/virtual/input/input18
[  316.654799][ T9596] vhci_hcd: connection reset by peer
[  316.666573][ T5813] vhci_hcd vhci_hcd.0: stop threads
[  316.666679][ T5813] vhci_hcd vhci_hcd.0: release socket
[  316.666989][ T5813] vhci_hcd vhci_hcd.0: disconnect device
[  316.684939][ T1440] ieee802154 phy1 wpan1: encryption failed: -22
[  317.284103][ T9619] CIFS: Attempting to mount //127.0.0.1/share
[  317.285266][ T9619] CIFS: VFS: Error connecting to socket. Aborting operation.
[  317.285317][ T9619] CIFS: VFS: cifs_mount failed w/return code = -22
[  317.495606][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.836'.
[  317.499099][ T9624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.836'.
[  317.503820][ T9624] netlink: 80 bytes leftover after parsing attributes in process `syz.0.836'.
[  317.787267][ T9627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.837'.
[  318.407574][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'.
[  318.886493][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'.
[  318.886894][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'.
[  319.113263][ T5834] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  319.233975][   T25] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[  319.285717][ T5834] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  319.288532][ T5834] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0xC has an invalid bInterval 0, changing to 7
[  319.288576][ T5834] usb 5-1: config 0 interface 0 has no altsetting 0
[  319.294442][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  319.294510][ T5834] usb 5-1: Product: syz
[  319.294519][ T5834] usb 5-1: Manufacturer: syz
[  319.294891][ T5834] usb 5-1: SerialNumber: syz
[  319.370224][ T5834] usb 5-1: config 0 descriptor??
[  319.383835][   T25] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  319.388439][   T25] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  319.392213][   T25] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  319.396113][   T25] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  319.396142][   T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.461770][ T5834] usb 5-1: selecting invalid altsetting 0
[  319.614654][ T9634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.615415][ T9634] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  319.674529][ T5834] usb 5-1: USB disconnect, device number 13
[  319.813300][  T854] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  319.842077][ T5896] udevd[5896]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  319.963709][  T854] usb 6-1: Using ep0 maxpacket: 8
[  319.966045][  T854] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  319.970173][  T854] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  319.974136][  T854] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  319.977586][  T854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.979484][  T854] usb 6-1: config 0 descriptor??
[  320.194077][ T9636] loop8: detected capacity change from 0 to 7
[  320.273218][ T9636] Dev loop8: unable to read RDB block 7
[  320.273327][ T9636]  loop8: unable to read partition table
[  320.273485][ T9636] loop8: partition table beyond EOD, truncated
[  320.273497][ T9636] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[  320.275688][ T5822] usb 6-1: USB disconnect, device number 16
[  320.328000][ T9640] __nla_validate_parse: 2 callbacks suppressed
[  320.328308][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'.
[  320.328322][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'.
[  320.329498][ T9640] netlink: 96 bytes leftover after parsing attributes in process `syz.3.841'.
[  320.844895][   T25] usb 7-1: usb_control_msg returned -71
[  320.844961][   T25] usbtmc 7-1:16.0: can't read capabilities
[  320.879798][   T25] usb 7-1: USB disconnect, device number 15
[  321.342426][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.845'.
[  321.342518][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.845'.
[  321.356555][ T9653] netlink: 80 bytes leftover after parsing attributes in process `syz.3.845'.
[  321.403542][ T5830] usb 38-1: device descriptor read/8, error -110
[  321.633869][ T9658] kvm: emulating exchange as write
[  321.634468][ T9658] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  321.794006][ T5830] usb usb38-port1: attempt power cycle
[  321.992865][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'.
[  321.996047][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'.
[  321.996342][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'.
[  321.996571][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'.
[  322.144972][   T25] usb 8-1: new full-speed USB device number 12 using dummy_hcd
[  322.177873][ T9673] Console: switching to colour dummy device 80x25
[  322.295788][   T25] usb 8-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40
[  322.303860][   T25] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  322.307917][   T25] usb 8-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config
[  322.312421][   T25] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023
[  322.325775][   T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.330699][   T25] usb 8-1: Product: syz
[  322.330755][   T25] usb 8-1: Manufacturer: syz
[  322.334515][   T25] usb 8-1: SerialNumber: syz
[  322.567711][ T5830] usb usb38-port1: unable to enumerate USB device
[  322.645505][ T9674] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  322.654209][ T9674] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  322.654340][ T9674] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  322.654580][ T9674] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  322.655268][ T9674] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  322.665619][ T9674] pci 0000:00:01.0: Adding to iommu group 1
[  322.668253][ T9674] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  322.668291][ T9674] pci 0000:00:01.0: vgaarb: bridge control possible
[  322.668307][ T9674] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  322.681914][ T9674] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  322.682058][ T9674] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  322.683884][ T9674] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  322.689197][ T9674] [drm] Found bochs VGA, ID 0xb0c5.
[  322.689206][ T9674] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  322.715664][ T9674] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  322.732967][ T9669] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  322.733282][ T9669] qnx6: wrong signature (magic) in superblock #1.
[  322.742905][ T9669] qnx6: unable to read the first superblock
[  322.904340][ T9674] Console: switching to colour frame buffer device 160x50
[  322.937386][ T9674] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  323.129623][ T9680] bridge3: entered promiscuous mode
[  323.129741][ T9680] bridge3: entered allmulticast mode
[  323.577886][   T25] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  323.578106][   T25] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -2
[  323.793218][ T5830] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  323.943912][ T5830] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  323.944717][ T5830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  323.944739][ T5830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.946000][ T5830] usb 7-1: config 0 descriptor??
[  324.075109][   T25] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  324.075434][   T25] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -2
[  324.112419][   T25] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  324.133979][   T25] snd-usb-audio 8-1:1.2: probe with driver snd-usb-audio failed with error -2
[  324.135326][   T25] usb 8-1: USB disconnect, device number 12
[  324.154221][ T5830] usbhid 7-1:0.0: can't add hid device: -71
[  324.156809][ T5830] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  324.158302][ T6461] udevd[6461]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  324.184660][ T5830] usb 7-1: USB disconnect, device number 16
[  324.483890][ T5831] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  324.644085][ T5831] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  324.648111][ T5831] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0xC has an invalid bInterval 0, changing to 7
[  324.651940][ T5831] usb 6-1: config 0 interface 0 has no altsetting 0
[  324.657053][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  324.660573][ T5831] usb 6-1: Product: syz
[  324.662389][ T5831] usb 6-1: Manufacturer: syz
[  324.664365][ T5831] usb 6-1: SerialNumber: syz
[  324.671030][ T5831] usb 6-1: config 0 descriptor??
[  324.676049][ T5831] usb 6-1: selecting invalid altsetting 0
[  324.896255][ T5831] usb 6-1: USB disconnect, device number 17
[  325.522352][   T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  326.497111][ T9713] jffs2: notice: (9713) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (0 unchecked, 6 orphan) and 6 of xref (1 dead, 5 orphan) found.
[  326.622908][ T9713] __nla_validate_parse: 5 callbacks suppressed
[  326.622984][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'.
[  326.623006][ T9713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.863'.
[  327.060678][ T9731] block2mtd: error: cannot open device /dev/lo
[  327.095417][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.867'.
[  327.095466][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.867'.
[  327.101396][ T9733] netlink: 80 bytes leftover after parsing attributes in process `syz.2.867'.
[  327.157685][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.869'.
[  327.202838][ T5736] ffs_data_put(): freeing
[  327.529748][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.871'.
[  327.536690][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.871'.
[  327.536908][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.871'.
[  327.545314][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.871'.
[  328.023312][   T25] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  328.174557][   T25] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  328.176064][   T25] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0xC has an invalid bInterval 0, changing to 7
[  328.176090][   T25] usb 5-1: config 0 interface 0 has no altsetting 0
[  328.179656][   T25] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  328.179800][   T25] usb 5-1: Product: syz
[  328.179814][   T25] usb 5-1: Manufacturer: syz
[  328.180074][   T25] usb 5-1: SerialNumber: syz
[  328.187342][   T25] usb 5-1: config 0 descriptor??
[  328.221234][   T25] usb 5-1: selecting invalid altsetting 0
[  328.411949][   T25] usb 5-1: USB disconnect, device number 14
[  328.710117][ T9637] udevd[9637]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  330.640279][ T9781] 9p: Bad value for 'version'
[  331.366304][ T9797] netlink: 'syz.3.878': attribute type 4 has an invalid length.
[  333.783805][ T9826] fuse: Bad value for 'fd'
[  334.057781][ T9829] __nla_validate_parse: 5 callbacks suppressed
[  334.057829][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.886'.
[  334.057855][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.886'.
[  334.076313][ T9829] netlink: 80 bytes leftover after parsing attributes in process `syz.1.886'.
[  334.326608][ T9839] binder: BINDER_SET_CONTEXT_MGR already set
[  334.326808][ T9839] binder: 9836:9839 ioctl 4018620d 80004a80 returned -16
[  334.483206][ T5834] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  334.633168][ T5834] usb 6-1: Using ep0 maxpacket: 8
[  334.634863][ T5834] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  334.637057][ T5834] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  334.637071][ T5834] usb 6-1: config 0 has no interface number 0
[  334.637089][ T5834] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  334.637110][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.639022][ T5834] usb 6-1: config 0 descriptor??
[  334.977855][ T9835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  334.987281][ T9835] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.145002][ T5834] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  337.296828][   T25] usb 6-1: USB disconnect, device number 18
[  338.461342][   T43] audit: type=1326 audit(1788400007.998:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9866 comm="syz.3.897" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x0
[  338.644443][   T43] audit: type=1804 audit(1788400008.178:263): pid=9870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.897" name="/newroot/232/file1" dev="fuse" ino=1 res=1 errno=0
[  338.644809][   T43] audit: type=1804 audit(1788400008.188:264): pid=9872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.897" name="/newroot/232/file1" dev="fuse" ino=1 res=1 errno=0
[  338.645303][   T43] audit: type=1800 audit(1788400008.188:265): pid=9872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.897" name="/" dev="fuse" ino=1 res=0 errno=0
[  338.851479][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'.
[  338.851537][ T9876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.896'.
[  338.854269][ T9876] netlink: 60 bytes leftover after parsing attributes in process `syz.0.896'.
[  339.052919][ T9882] ip6t_rt: too many addresses specified
[  340.673376][ T5822] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  340.740384][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.905'.
[  340.740443][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.905'.
[  340.744495][ T9909] netlink: 60 bytes leftover after parsing attributes in process `syz.3.905'.
[  340.779041][ T9911] wg2 speed is unknown, defaulting to 1000
[  340.823224][ T5822] usb 7-1: Using ep0 maxpacket: 8
[  340.826850][ T5822] usb 7-1: unable to get BOS descriptor or descriptor too short
[  340.826949][ T5822] usb 7-1: New USB device found, idVendor=0489, idProduct=e036, bcdDevice=a2.22
[  340.835438][ T5822] usb 7-1: config 5 has an invalid interface number: 250 but max is 0
[  340.838176][ T5822] usb 7-1: config 5 has an invalid interface number: 100 but max is 0
[  340.838195][ T5822] usb 7-1: config 5 has 2 interfaces, different from the descriptor's value: 1
[  340.838206][ T5822] usb 7-1: config 5 has no interface number 0
[  340.838214][ T5822] usb 7-1: config 5 has no interface number 1
[  340.838246][ T5822] usb 7-1: config 5 interface 250 altsetting 4 has a duplicate endpoint with address 0x1, skipping
[  340.838257][ T5822] usb 7-1: config 5 interface 250 altsetting 4 has an endpoint descriptor with address 0x78, changing to 0x8
[  340.838270][ T5822] usb 7-1: config 5 interface 250 altsetting 4 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  340.838283][ T5822] usb 7-1: config 5 interface 250 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 13
[  340.838297][ T5822] usb 7-1: too many endpoints for config 5 interface 100 altsetting 212: 62, using maximum allowed: 30
[  340.838314][ T5822] usb 7-1: config 5 interface 100 altsetting 212 has a duplicate endpoint with address 0x1, skipping
[  340.838326][ T5822] usb 7-1: config 5 interface 100 altsetting 212 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  340.838339][ T5822] usb 7-1: config 5 interface 100 altsetting 212 has a duplicate endpoint with address 0x1, skipping
[  340.838350][ T5822] usb 7-1: config 5 interface 100 altsetting 212 has a duplicate endpoint with address 0x6, skipping
[  340.838361][ T5822] usb 7-1: config 5 interface 100 altsetting 212 has a duplicate endpoint with address 0xE, skipping
[  340.838372][ T5822] usb 7-1: config 5 interface 100 altsetting 212 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  340.838385][ T5822] usb 7-1: config 5 interface 100 altsetting 212 has a duplicate endpoint with address 0x2, skipping
[  340.838396][ T5822] usb 7-1: config 5 interface 100 altsetting 212 has 8 endpoint descriptors, different from the interface descriptor's value: 62
[  340.838409][ T5822] usb 7-1: config 5 interface 250 has no altsetting 0
[  340.838418][ T5822] usb 7-1: config 5 interface 100 has no altsetting 0
[  340.867566][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'.
[  340.897023][ T5822] usb 7-1: Dual-Role OTG device on HNP port
[  340.899287][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.899300][ T5822] usb 7-1: Product: syz
[  340.899308][ T5822] usb 7-1: Manufacturer: syz
[  340.899315][ T5822] usb 7-1: SerialNumber: syz
[  341.033499][   T25] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  341.185665][   T25] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  341.188625][   T25] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 33, changing to 9
[  341.234570][   T25] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 33, changing to 9
[  341.267865][   T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.267912][   T25] usb 8-1: Product: syz
[  341.267940][   T25] usb 8-1: Manufacturer: syz
[  341.267948][   T25] usb 8-1: SerialNumber: syz
[  341.316837][   T25] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected
[  341.334030][   T25] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  341.346039][   T25] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  341.370412][ T5822] usb 7-1: USB disconnect, device number 17
[  342.029328][ T9931] Console: switching to colour dummy device 80x25
[  342.175927][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.907'.
[  342.429725][ T9932] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  342.478331][ T9932] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  342.484667][ T9932] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  342.500307][ T9932] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  342.504887][ T9932] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  343.573611][ T9913] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110
[  343.617428][   T25] usb 8-1: USB disconnect, device number 13
[  343.644545][   T25] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  343.651004][   T25] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  343.656377][   T25] ti_usb_3410_5052 8-1:2.0: device disconnected
[  343.785660][ T9938] pim6reg: entered allmulticast mode
[  343.826246][ T9930] pim6reg: left allmulticast mode
[  343.998809][ T9932] pci 0000:00:01.0: Adding to iommu group 1
[  344.004405][ T9932] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  344.004431][ T9932] pci 0000:00:01.0: vgaarb: bridge control possible
[  344.004441][ T9932] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  344.020686][ T9932] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  344.020852][ T9932] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  344.027501][ T9932] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  344.037826][ T9932] [drm] Found bochs VGA, ID 0xb0c5.
[  344.037897][ T9932] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  344.093426][ T9932] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  344.252843][ T9932] Console: switching to colour frame buffer device 160x50
[  344.285122][ T9932] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  344.434005][ T9946] syzkaller1: entered promiscuous mode
[  344.434075][ T9946] syzkaller1: entered allmulticast mode
[  344.773517][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'.
[  344.777487][ T9952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.914'.
[  344.785331][ T9952] netlink: 60 bytes leftover after parsing attributes in process `syz.0.914'.
[  344.861223][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.915'.
[  344.861630][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.915'.
[  346.589845][ T9985] pim6reg: entered allmulticast mode
[  346.643259][ T9981] pim6reg: left allmulticast mode
[  346.709705][ T9985] 9pnet_virtio: no channels available for device syz
[  347.779651][ T9992] block nbd3: NBD_DISCONNECT
[  347.864260][ T9994] 9pnet_fd: Insufficient options for proto=fd
[  347.869662][ T9994] __nla_validate_parse: 1 callbacks suppressed
[  347.869987][ T9996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.926'.
[  347.870001][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.926'.
[  347.871770][ T9996] netlink: 80 bytes leftover after parsing attributes in process `syz.3.926'.
[  347.884418][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.923'.
[  347.889902][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.923'.
[  347.925861][ T9994] netlink: 96 bytes leftover after parsing attributes in process `syz.2.923'.
[  347.993420][T10000] BUG: unable to handle page fault for address: fffffffffffffc10
[  347.996351][T10000] #PF: supervisor read access in kernel mode
[  347.998944][T10000] #PF: error_code(0x0000) - not-present page
[  348.003814][T10000] PGD eb99067 P4D eb99067 PUD eb9b067 PMD 0 
[  348.005991][T10000] Oops: Oops: 0000 [#1] SMP KASAN NOPTI
[  348.008129][T10000] CPU: 0 UID: 0 PID: 10000 Comm: syz.2.928 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  348.012654][T10000] Tainted: [L]=SOFTLOCKUP
[  348.014214][T10000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  348.017670][T10000] RIP: 0010:strnlen+0x4b/0x80
[  348.019712][T10000] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c c3 cc cc cc cc 48
[  348.026658][T10000] RSP: 0018:ffffc90003e07110 EFLAGS: 00010246
[  348.028905][T10000] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000
[  348.032040][T10000] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10
[  348.034705][T10000] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000
[  348.037096][T10000] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10
[  348.039765][T10000] R13: ffff88801c6f3e00 R14: 0000000000000006 R15: 0000000000000010
[  348.042163][T10000] FS:  0000000000000000(0000) GS:ffff888096967000(0063) knlGS:00000000f5416b40
[  348.045448][T10000] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  348.047743][T10000] CR2: fffffffffffffc10 CR3: 0000000077871000 CR4: 0000000000352ef0
[  348.051352][T10000] Call Trace:
[  348.052586][T10000]  <TASK>
[  348.053562][T10000]  trace_event_raw_event_drv_net_setup_tc+0x101/0x5d0
[  348.055653][T10000]  ? __pfx_trace_event_raw_event_drv_net_setup_tc+0x10/0x10
[  348.057784][T10000]  ? __pfx___might_resched+0x10/0x10
[  348.059342][T10000]  ieee80211_netdev_setup_tc+0x2c6/0x3e0
[  348.061033][T10000]  ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10
[  348.062843][T10000]  tcf_block_offload_cmd.isra.0+0x1c4/0x310
[  348.064594][T10000]  ? __pfx_tcf_block_offload_cmd.isra.0+0x10/0x10
[  348.066779][T10000]  ? __pfx_down_write+0x10/0x10
[  348.068454][T10000]  tcf_block_get_ext+0x7ed/0x1950
[  348.070253][T10000]  tcf_block_get+0xa8/0x100
[  348.071934][T10000]  ? __pfx_tcf_block_get+0x10/0x10
[  348.073481][T10000]  ? __pfx_tcf_chain_head_change_dflt+0x10/0x10
[  348.075363][T10000]  ? lockdep_init_map_type+0x5c/0x250
[  348.076944][T10000]  ? __pfx_multiq_init+0x10/0x10
[  348.078440][T10000]  multiq_init+0x70/0x2b0
[  348.079739][T10000]  ? __pfx_multiq_init+0x10/0x10
[  348.081235][T10000]  qdisc_create+0x47b/0x1060
[  348.082638][T10000]  tc_modify_qdisc+0xdcf/0x2120
[  348.084198][T10000]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  348.086056][T10000]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  348.087795][T10000]  rtnetlink_rcv_msg+0x3c9/0xe90
[  348.089332][T10000]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  348.091024][T10000]  ? ref_tracker_free+0x37e/0x6c0
[  348.092664][T10000]  netlink_rcv_skb+0x159/0x420
[  348.094120][T10000]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  348.095989][T10000]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  348.097693][T10000]  ? netlink_deliver_tap+0x1ae/0xcc0
[  348.099360][T10000]  netlink_unicast+0x585/0x850
[  348.100867][T10000]  ? __pfx_netlink_unicast+0x10/0x10
[  348.102589][T10000]  netlink_sendmsg+0x8b0/0xda0
[  348.104272][T10000]  ? __pfx_netlink_sendmsg+0x10/0x10
[  348.105983][T10000]  ? apparmor_socket_sendmsg+0x165/0x280
[  348.107833][T10000]  ____sys_sendmsg+0xa4d/0xbe0
[  348.109350][T10000]  ? __pfx_netlink_sendmsg+0x10/0x10
[  348.110991][T10000]  ? __pfx_____sys_sendmsg+0x10/0x10
[  348.112776][T10000]  ___sys_sendmsg+0x190/0x1e0
[  348.114236][T10000]  ? __pfx____sys_sendmsg+0x10/0x10
[  348.115883][T10000]  ? futex_wait+0x11e/0x370
[  348.117413][T10000]  ? find_held_lock+0x2b/0x80
[  348.118934][T10000]  __sys_sendmsg+0x160/0x210
[  348.120571][T10000]  ? __pfx___sys_sendmsg+0x10/0x10
[  348.122364][T10000]  __do_fast_syscall_32+0x13a/0x8b0
[  348.124108][T10000]  do_fast_syscall_32+0x32/0x70
[  348.125717][T10000]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  348.127816][T10000] RIP: 0023:0xf7f57fec
[  348.129054][T10000] Code: Unable to access opcode bytes at 0xf7f57fc2.
[  348.131009][T10000] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  348.133542][T10000] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800012c0
[  348.136004][T10000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  348.138667][T10000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  348.141440][T10000] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  348.143866][T10000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  348.146175][T10000]  </TASK>
[  348.147110][T10000] Modules linked in:
[  348.148453][T10000] CR2: fffffffffffffc10
[  348.149707][T10000] ---[ end trace 0000000000000000 ]---
[  348.151348][T10000] RIP: 0010:strnlen+0x4b/0x80
[  348.151375][T10000] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c c3 cc cc cc cc 48
[  348.151388][T10000] RSP: 0018:ffffc90003e07110 EFLAGS: 00010246
[  348.151399][T10000] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000
[  348.151408][T10000] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10
[  348.151416][T10000] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000
[  348.151423][T10000] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10
[  348.151431][T10000] R13: ffff88801c6f3e00 R14: 0000000000000006 R15: 0000000000000010
[  348.151439][T10000] FS:  0000000000000000(0000) GS:ffff888096967000(0063) knlGS:00000000f5416b40
[  348.151464][T10000] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  348.151474][T10000] CR2: 00000000f7f58000 CR3: 0000000077871000 CR4: 0000000000352ef0
[  348.151483][T10000] Kernel panic - not syncing: Fatal exception
[  348.186631][T10000] Kernel Offset: disabled
[  348.188552][T10000] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:47:00  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85ae24d5 RDI=ffffffff9bc501e0 RBP=ffffffff9bc501a0 RSP=ffffc90003e06828
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023
R12=0000000000000000 R13=0000000000000034 R14=000000000000000c R15=ffffc90003e06b40
RIP=ffffffff85ae24ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096967000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=fffffffffffffc10 CR3=0000000077871000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffea00016fd6c0 RCX=ffffffff824ec473 RDX=0000000000000001
RSI=0000000000000004 RDI=ffffea00016fd6f4 RBP=0000000000000015 RSP=ffffc90004d1f0f0
R8 =0000000000000001 R9 =fffff940002dfade R10=ffffea00016fd6f7 R11=0000000000000000
R12=ffff88802b333ef0 R13=0000000000000054 R14=dffffc0000000000 R15=ffff88802b333fa0
RIP=ffffffff824ec47a RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096a67000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f56353225d0 CR3=0000000013eef000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff81fe8613 RDX=0000000000000001
RSI=0000000000000000 RDI=0000000000000005 RBP=ffff88802b243b00 RSP=ffffc90004caf620
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffffed10046d5c13 R13=0000000000000003 R14=ffffed1005648761 R15=0000000000000001
RIP=ffffffff820b34d0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096b67000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7416288 CR3=000000000eb96000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000103 RDX=0000000000000000
RSI=ffffffff8c622300 RDI=ffff8880254504c4 RBP=ffff888021a3a0e0 RSP=ffffc900005f8e38
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=ffffc900005f8ff8
R12=dffffc0000000000 R13=0000000000000001 R14=ffff888021a3a000 R15=dffffc0000000000
RIP=ffffffff89be0ad7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096c67000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000080009b40 CR3=000000005f6d8000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000