last executing test programs:

53.61476142s ago: executing program 3 (id=496):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$EXT4_IOC_MIGRATE(r2, 0xff07)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040))
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00', <r4=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000060210000", @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYBLOB="00000000000006000000000000000000000000000000000000000000afadf64411a3e5d80c43ac84362c5f3bece690c970ebc7ff0dbf918e70d547c0b137b65003d9095d059d16a4b032c021bcc2bc6d6f979acd75d8471971fd8b601af3f5e2453a7cbf09d9d806c44a53dcd05fcd32"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500000200000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000080)={0x335})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000400))
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0)

52.270185752s ago: executing program 3 (id=499):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x30)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_io_uring_setup(0x69ab, &(0x7f0000000200)={0x0, 0xae22, 0x40, 0x0, 0x40178}, &(0x7f0000000000), &(0x7f0000000180))
syz_io_uring_setup(0x67fd, &(0x7f0000000100)={0x0, 0x3400, 0x822a28cc43044cf8, 0x2, 0x0, 0x0, r2}, 0x0, 0x0)
r3 = io_uring_setup(0x4d63, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2d6})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{&(0x7f0000002700)=""/4095, 0xfff}, {&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000480)=""/124, 0x7c}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/101, 0x65}, {&(0x7f0000000580)=""/129, 0x81}], 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000b00000000040000", @ANYRES32, @ANYBLOB="000000000005000000e000000000387a04e4e1c8f3ed3405aa58d3423a649b5ccc084a8a6cff0e54d6af05bdbdec02cf947e5f19d4e08d4de94047cb4099d539b7563e74fe31ffd4d032d6c5ebb1cf74f849", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$char_usb(r4, &(0x7f0000000080)=""/139, 0x8b)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
r5 = getpid()
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r6)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
close(r6)
process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
process_vm_readv(r5, &(0x7f0000008400), 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xfffffffffffffda7)

39.771281037s ago: executing program 1 (id=519):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000240)=0xc)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x72, 0x0, &(0x7f0000000280))
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
r4 = open(&(0x7f00000000c0)='./file1\x00', 0x1298c2, 0x20)
write(r4, &(0x7f0000000300)="764afb01387683d58a407bc4dd40f6a005853cae09d05fbc6fcb9eef11b922e7d933e178e4b25548796d0c70e6058102b624edc016138dc9bad51fbc6b7bbf4a1949824f3e03adf82120111992969c18f422069d8c3bfb6dbe632542ccb28492b984492b10b990266f11550ab2b3", 0x6e)
ftruncate(r4, 0x200004)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x5327)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r3}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
brk(0x80000000007)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\x00\x00\x00\x00>\x00\x00\x00', @ANYRES32, @ANYBLOB="3f20ad32"], 0x20)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="0b726f6f746d6f64653d30303030040000003030692630303030303034303030302c757346725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])

39.599951526s ago: executing program 1 (id=521):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000340), 0x11000)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018}, './file0\x00'})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$unix(0x1, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$tipc(0x1e, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xe, 0x0, &(0x7f00000000c0))
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r9 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000180)={r4, r8})
sendmmsg$inet(r9, &(0x7f0000007fc0)=[{{0x0, 0x0, &(0x7f0000007b40)=[{&(0x7f0000000200)="e2", 0x1}], 0x1}, 0x700}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="6b489ca9f36e25ed4d1509000000000000e83fabc5", 0x15}, {&(0x7f00000004c0)}, {&(0x7f0000000400)="64bb51c1a84768ff26f551e4f43b007c4d7bc0e89562a85bed309eaeb933cde56850fd1028aea49108df470d6e768535d23b7bbc8bebea8c5f0f5b", 0x3b}], 0x3}}], 0x2, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x3e}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x6, 0x4e24, 0x23, 0x2, 0xa0, 0x0, 0x5e, r10, 0xee01}, {0x5, 0x38b5, 0x2, 0x88ac, 0x7, 0x9, 0x9, 0x800}, {0x76, 0x3, 0x9}, 0x0, 0x6e6bba, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0xe}, 0x4d2, 0xff}, 0xa, @in=@local, 0x3507, 0x4, 0x2, 0x2, 0x8, 0x0, 0x3}}, 0xe8)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000001050016000200000004001200050017"], 0x60}}, 0x0)
shutdown(r3, 0x0)

38.718815628s ago: executing program 1 (id=522):
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000010c0)={0x0, 0x9}, 0x8)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x5d)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x6000}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x33fe0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=r4, @ANYRES8, @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
r5 = msgget(0x3, 0x200)
msgctl$IPC_STAT(r5, 0x2, &(0x7f00000008c0)=""/102386)
r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
setresgid(0xee00, 0xee01, 0x0)
setgroups(0x0, 0x0)
setuid(0xee00)
write$FUSE_DIRENTPLUS(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='\r\x00\x00S\x00\x00\x00\x00', @ANYRES64=0x0], 0x10)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0)

35.388706361s ago: executing program 0 (id=527):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
unshare(0x2040400)
pipe(&(0x7f00000001c0)={<r4=>0xffffffffffffffff})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
ppoll(&(0x7f0000000480)=[{r2}, {r1}, {r4}], 0x3, &(0x7f0000000100)={0x77359400}, 0x0, 0x2000)
unshare(0x8050000)
socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
close(0xffffffffffffffff)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x72)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
syz_emit_ethernet(0x1b9, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "0961d3", 0x183, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, {[@dstopts={0x11, 0x1a, '\x00', [@ra={0x5, 0x2, 0x1}, @generic={0x0, 0x8a, "45b0422051ee9d3aa117c3bcfe54dd62155655aacf754ec3d6600279db61078675f9c4884c8bd30c1bf344277e35dd405f6b47aa24b4e50266e610bf7cbefcdcb428261286e1a53bfbe7a4ef0a89579d970681753b51ba391e591abface029f47a42105d13f3913aad090d197cff37da2197947bcc072b9b6666a92678ea030de0b57c5021b30c9ae69b"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x2, 0xa, 0x4, 0x101, [0x3, 0x9, 0x7, 0x12, 0xffffffffffffffff]}}, @pad1, @jumbo]}, @hopopts={0x29}, @routing={0x3c, 0x4, 0x2, 0x8, 0x0, [@mcast1, @mcast1]}, @fragment={0x0, 0x0, 0xf, 0x0, 0x0, 0x1a, 0x68}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x9, 0x6c13, 0x8]}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0xc], "b90fd33efda58dc2ad15cec9240820e5f03d71f1b15731135fbb838b000000"}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x8, 0x3, 0x0, 0x0, 0x3, 0x2}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x1, 0x3, 0x1, 0x3, 0x7, 0x6}, 0x2, {0x9, 0xe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}}}}}}}}}, 0x0)

31.635778516s ago: executing program 0 (id=528):
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x18b801, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r3 = getpid()
sched_setscheduler(r3, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001900), 0x802, 0x0)
r7 = timerfd_create(0x8, 0x80000)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
ptrace$getregset(0x4204, r8, 0x2, &(0x7f0000000740)={0x0})
fcntl$lock(r7, 0x25, &(0x7f0000000300)={0x2, 0x2, 0x9, 0x4, r8})
rt_tgsigqueueinfo(r8, r3, 0x1, &(0x7f0000000340)={0x8, 0x4, 0xf})
write$UHID_CREATE2(r6, &(0x7f00000005c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "80"}}, 0x119)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x28)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000013c0))
close_range(r2, 0xffffffffffffffff, 0x0)

26.434967967s ago: executing program 3 (id=515):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$EXT4_IOC_MIGRATE(r2, 0xff07)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040))
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00', <r4=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000060210000", @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYBLOB="00000000000006000000000000000000000000000000000000000000afadf64411a3e5d80c43ac84362c5f3bece690c970ebc7ff0dbf918e70d547c0b137b65003d9095d059d16a4b032c021bcc2bc6d6f979acd75d8471971fd8b601af3f5e2453a7cbf09d9d806c44a53dcd05fcd32"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500000200000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000080)={0x335})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000400))
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0)

26.19994968s ago: executing program 2 (id=532):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4, 0x0, 0xa, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e22, @rand_addr=0x64010102}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r3, 0x21eae}}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x7, 0x2, 0xb}}]}, 0x40}}, 0x0)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xffb7, 0x0)

25.939715768s ago: executing program 2 (id=533):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a010400000000000000000200ff0014000000110aa3af7d30fc198966a7a8e2979a80"], 0x3c}}, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r1 = syz_io_uring_setup(0x10d, &(0x7f00000003c0), &(0x7f0000000380)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0)
mount$afs(&(0x7f0000000540)=ANY=[@ANYRES16=r0], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r5, 0x1, 0x2e, &(0x7f0000000000)=r5, 0x4)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmsg(r5, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x40010102)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
r9 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
process_vm_readv(r9, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f00000008c0)={'team0\x00', 0xe761})
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2a442, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2a442, 0x0)

25.219940626s ago: executing program 3 (id=534):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000100)='cgroup2\x00', &(0x7f0000000180)="0ea5e5ab10be968af06736cfdf38759e4e8cc2695eed2f2e9d13b32c027b268fabf8756405d61fc3d044fa7406517797ba6272003b72dcfa8b6d44", 0x3b)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0585605, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
syz_open_procfs(0x0, 0x0)
dup(0xffffffffffffffff)
r4 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$inet(r4, 0x0, 0x240400c5)
r5 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x240000, 0x0)
socket$netlink(0x10, 0x3, 0x4)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
openat$cgroup_type(r5, &(0x7f00000000c0), 0x2, 0x0)
pipe2(&(0x7f0000000040), 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
listen(r6, 0x3)

3.926845489s ago: executing program 1 (id=529):
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x151780, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
syz_usb_disconnect(r2)
r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[], 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000000000000000)
write$char_usb(r4, &(0x7f0000000000)="954807", 0x3)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r3)
mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0)
syz_emit_ethernet(0x62, &(0x7f0000000500)={@local, @random, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\a\f', 0x2c, 0x2b, 0xfc, @local, @local, {[@srh], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x5, 0xf989, "90"}, @mptcp=@mp_join={0x1e, 0x3, 0xd}, @exp_smc={0xfe, 0x6}, @nop, @eol]}}}}}}}}, 0x0)

1.388786557s ago: executing program 2 (id=536):
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000806"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xb, 0xfe, 0xf8, @SEQ_NOTEON=@special})
prctl$PR_SET_MM_MAP(0x21, 0xe, 0x0, 0xfffffffffffffc84)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28)
recvmmsg(r3, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0)
recvfrom$inet6(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0)
io_setup(0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
syz_open_dev$sndpcmc(0x0, 0x0, 0x8000)
keyctl$search(0xa, 0x0, &(0x7f0000000500)='.request_key_auth\x00', 0x0, 0x0)
openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2503, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

1.382406082s ago: executing program 1 (id=543):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002840)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0)
socket$packet(0x11, 0x3, 0x300)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r3, 0x4048aec9, &(0x7f0000000080)={0x6, 0xffffffffffffffff, 0x20000000})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x26e1, 0x0)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
syz_emit_ethernet(0x9b, &(0x7f0000000180)=ANY=[@ANYBLOB="aafcaaaaaaaabbbbbbbbbbbb0004bc0e821daa1109723afd889984f38adbde400a0000000000000b5c2a1aa0021aec40d7e8d2176fdc7871d6ce5db416e1a9879a6694f48643329e3fdab5c1bc7596f272bdf90f8f4160f129c01b087235f6040000000000000058939e0d8e1d2ce6dbc22ca84e8bf7dcce88a493fe58302b4b1e34c9ba8318b11404f953a83c"], 0x0)
syz_emit_ethernet(0x2db, &(0x7f00000005c0)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @gre={{0x1a, 0x4, 0x0, 0x3, 0x2cd, 0x64, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @rand_addr=0x64010102, {[@cipso={0x86, 0x23, 0x3, [{0x7, 0x6, "fb6cd78a"}, {0x1, 0x8, "be29980a4fca"}, {0x1, 0xb, "561daf756330c60ad9"}, {0x7, 0x4, "67c3"}]}, @noop, @cipso={0x86, 0x20, 0x2, [{0x7, 0x4, "6003"}, {0x2, 0x2}, {0x1, 0x8, "a85f809c2913"}, {0x2, 0x4, "d7a5"}, {0x7, 0x8, "f17b2ed5e100"}]}, @timestamp={0x44, 0xc, 0xdf, 0x0, 0xf, [0x5, 0x9]}, @noop, @noop]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x63, 0x2, [0x9], "e269a55f9ad60e7207429dfa925d1261bffd6b8b91dd945168e863dcceb0f2bd7343063aa07aeac316aa55c4cc486428c25cbbe36cce7595246ea63fc612b61ad5881f0574a013129bb3c32f762b621d1f6d4f7c6ceb2f8128301ba6091e818e740b71"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x7], "551a5ea2c2f5f20e2ee9330a7ee3c4576a40c47f4a2855c8dc40ee328c00c450536cd4fad66b4a9287f7177e2ac18ab8354b6b0f46626b84d73557c8ecfdf567ef65ba222ce4916f695be4854d5fab4527c0e5b7f4feaaf2ab1c6ae8d567dc13b38e2c23a4a163c419df7eec2dbe8525020aeeb0501c33de0448027ec0af33b7a54b16cd12f22bf3441831123a27c917da0ef9dc8e805dd33ecb4121cc1b9f304c1c1a36ef2079171796e9043d85b31015de55b7d0c888d152b9b3cfa6d264ee7fa9bcf6b4e55a"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x0, 0x4], "a91027c80d3f85459a39ad8051d36a70a932123ecf6e95afc0178c171941e933681496c409e3d65ed8df286fc17c3b9b31b5c9e1e9a08a4b1acbcddf80ff299fc3481778b21c4cf4e729d393236f769a5d8a8368cca17d790f53fae1727728765d"}, {0x8, 0x88be, 0x0, {{0x3, 0x1, 0x2, 0x3, 0x1, 0x3, 0x7, 0x3}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x0, {{0x5, 0x2, 0x5, 0x2, 0x0, 0x1, 0x6, 0x5}, 0x2, {0x8, 0xfd17, 0x1, 0x6, 0x0, 0x0, 0x2}}}, {0x8, 0x6558, 0x2, "0a3c661a163bfc01c32b4aaa0ee85f0e64fbb8527a04ec1261d4ed3beebb197527e92168e99f3dc51671ab49acfc02e619eb748d60f13fdb9ea417d4e20c592d517c9e9ff2df8a97055ba1a555dcf384534d7a91f72ffca06c781b2f3447fadb4c689bf1475521987ae77bd3b35e5130748d4d315366fd09857c0e607b36dc151c5c7395d2b079d39f091abd040b"}}}}}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10)
clock_gettime(0x5, &(0x7f0000000280))
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @l2={0x1f, 0xc1d, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, @isdn={0x22, 0x0, 0x2, 0x6, 0xb8}, @isdn={0x22, 0x9, 0x0, 0xc5, 0x89}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdac, 0x1, 0x2})
ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0200002000"})

882.512523ms ago: executing program 0 (id=535):
socket$nl_generic(0x10, 0x3, 0x10)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000080)=@mgmt_frame=@action={{{}, {}, @device_a, @device_b}, @addba_req={0x3, 0x0, {0x0, {0x0, 0x0, 0xd}}}}, 0x21)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x561203)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af23, &(0x7f0000000540))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000100)={0x0, 0x6})
close(r0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000"], 0x398}}, 0x0)

475.622528ms ago: executing program 2 (id=538):
socket$kcm(0x10, 0x2, 0x4)
r0 = io_uring_setup(0x4980, &(0x7f00000001c0)={0x0, 0x7fffd, 0x0, 0x2, 0x38d})
r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
read$midi(r1, &(0x7f0000000240)=""/160, 0xa0)
pipe(&(0x7f0000000080))
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)=ANY=[@ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4084)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r4, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x810, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_SEQ_GETTIME(r3, 0x80045113, &(0x7f00000005c0))
read$midi(r1, 0x0, 0x14)
close_range(r0, 0xffffffffffffffff, 0x0)

475.374226ms ago: executing program 3 (id=537):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140)=0x9d, 0x4)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7", 0xf)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x101, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
io_setup(0x1, &(0x7f00000000c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000140)='-', 0x1}])
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fc000000000000000000000000000000ff02000000000000000000000000000100004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5047fca5612b98c1"], 0x0)

344.294083ms ago: executing program 1 (id=539):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc)
getsockopt$netlink(r2, 0x10e, 0x9, &(0x7f0000002440)=""/137, &(0x7f0000000040)=0x89)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="866f111425f89fa6ad3fae4a6d0eedde4400", @ANYRES16=r3, @ANYBLOB="010000000000000000002c00000008005800000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003003f000000"], 0x44}}, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58)
r4 = socket$igmp6(0xa, 0x3, 0x2)
recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
fanotify_mark(0xffffffffffffffff, 0x1, 0x8001022, 0xffffffffffffff9c, 0x0)
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xfe)
r7 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0xffffffff}, 0x4, 0x0, 0x7f, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
sendmsg(r7, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00')
read$FUSE(r9, &(0x7f00000003c0)={0x2020}, 0x2020)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r10 = socket(0x840000000002, 0x3, 0xfa)
sendmmsg$inet(r10, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f00000025c0)="c1200babe1cb01cfb56250c995a36475facd8b4404320661f05237e2efdee18626488b55847cda62c507c28e2ea4141dea5dedb80b0aa5e7f1dc40df5ac33e6437a813b88d7bdd9d402388fc8dd56d899e0783f9e404d2771f7f08a6938ce1b3e32f885f5d70a9e5533e0b00338fafe574f39eeefb51c1d1f9deba3f8462badd9de6aacbf83f06d70e0092cc1f90fd267a6e911f5a38309e3928d234c186f433da8fb51a48369df3b65e433578ed671e02616256c6c1a0f3ac61", 0xba}, {&(0x7f0000002b80)="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", 0x1000}, {&(0x7f0000002780)="284f447f8b254987b15ed728b57957a981ff84f299c67d181b1f0681ff371eefc2019da847c4a7b32be08f7bbd91d3d02e17b2d23486e09e51701a4599d4123669f0565353a1b67d1ee4653903af448853c0c5959facaa09867dbeb32e134d3244ddc40cd12c21b9f5b7b6c60bd2cd230e632d67d038944e9654cb2a3857c54e275cff45bfe66d6c83a76786285252a438d66af9b40abf6bee57fc6fa78edf76c4287b4742b1888d2dfea33a57f6ca46fd6b944d62bf069ac6b96f05d2ff9970006b0029d1268075262b0d08", 0xcc}, {&(0x7f0000004d00)="73f668054c6d22975097b0b830b8814a8f48ee0deab60eb7ceec533d3dfe7548fb69df51cbd984bfd904383d9e978017ea6ee22739af9882deae9210cc804d562d01e329178be59bd7ed4aa2c26b2157896928731fcb393bf44f9376fdbb2f3c3938740187daf1a27b0689bc0883039927d4581246fbfd69415cf7f2d83aef33f731cff1fb91b2921eaf414f91550cb74b2ca15935570ac945341af198de988b12e6045e3046f03ed1a084545a251a2aa07d8c03766277937e2980919968d107432e18be30ae0c0e9f676e503469975d77f7a20f6e96c92475cab156e54e484f78624259910d33c4d0c0f4fa555e8112c4c5d91b33f9b3a1894f2a3e8b858adfc72bec251c53375283818bcd97f3cd84c88d5f814c91791354cf42aa1802967ca265e846d54d1ed2a5c2c191decd71d60a8945986111ddc5c249399668a58fed81d4abab051ef274263813158c64012ee7a34934c8361ef7183aba97cde331d7f81fd146cba3a4e732dca9aefbb3450a5791af72a9aedebb9846c6e7cf43c253a6d346e5f7de6c5a473c7954b75916bb5c47754e7d20db39437c866a040badb6384ab193f3fcd523e5643a9bf1d0fc874d1384ada5f5eea46ab130ff11ecf9ea59b7305f38fd4316e5ee44c62b6d7b077133856b11d164892c84cca853e4ae20b138bc38ae1b41d3aaf2896484f99c7a9455264f2abd2fedb98877bb06272ba52127f241ec6c8d0138de1a5577e24ad906232b31e503c0a3d52ae811f6e94671bd9ef858355750e502abcbb251a7e10c41cae02f8886d6ab00a366fce9d597b7d3761e93fb2017788c7cb93f68673fffeeedd5d47c2c9f689b51461b993942752450a895a1ebcd6e8ec9f2ea4f4e2dc11fe72cbbfdda5a72d3861ae6ad71fc407436e27a4c2d6db8bfd184657e505aadc288fb7f9490614b09d94d46d505af44bd3f708cd962bcb2278e1f49d62662361f61bed05e2d38ca7279da3857200c35c0c2140b88979869aaf36d3883148520bfb1ca765a36678472dde01d001aa17238402580fdc46382396ed45efd5f9bf94d5292f18fb9e58607c5e421421c84ae6199b457961bfb008e3ddcd2e02051cc22ad2a69a364000b2bb86fb4be48ea8e081ee25bdff112600b447a1d7b8e47be685fae67efff7bc5b0b402b1009af65a6e8324723cbb4aa66cf59ebb5b6be75c7cad92528cafc2a0c7b7ba44c4f346062bda13f228b37e22e9261edd0f67bd0a0383d1f5271bff223ed1730bede6cad026072d01091bad00359518f8b41e4706cab9cf448c2af33001f967ec0b0e3ddc826d33019d870588841cefd9abd63397e7077438c2f85ad5ede125ec2d07fe5a55f0a88a7303146aa61c28d6eb9c2b63c76f35bdb9665331b071da3d7b46682bf40696c255c790aec1ec31987616d6fdb9ae8ea2a1d9fea7ffc0d8d969ab16d444fee685ed65dccbeb4261d5f13fa4d1c1e6465a4d85bf65b2be3deebed90baa83520c6367e67ae6f9707e9a213a505bc18d8af32d447b3ee4d7eccd012aaef8f725975d8330d226b8391886aa9d158bb095d34f2f6ba9042ee3b0a4e2871009836fee7ebf19b1fa7fe20c31270fcc4d2a560cf8f6e957544cd23815c756d97ba9fbdc074c770102ce0983c5b2cff20b9b0637b588dfc6aea49b9101cd4cd61b7de84dca64a3a27facbb38d0544a0e2cc95742b02d3cefa0d9ca378913ed4b58e7909d16248f67e99ee0cc753a5ac81d4182aca564ce75e8f0c103d547e7dc9f9aaaea81eb271e130235d6598ed6f32ab4ef852b53b7139a880e32069e265a943d2a3a68055e8c25351f0aaeffcce2353502cf45b226304f44c67ab8f6fe746594d6f2cef2e5ef695920f7c10244facb5c4ec96799ce6bedc3da8d7eb5c2ac889ce70e88b890c7b5acb936ea2d9d24fc4b8916271668b7daeb9c5b5ba32e4b762464ed696a2a6c37420ab591c5345333b6aed992e2c025ddb2ee96cb7a119dd46c0cb1ece908496299c6efb3a30e1442da5863cb06c73db2b6d0ba845fa929618fbf797471d38533a34256ed6cb5a853c80f3bd9792644693667fffcc39a513906dc4a6b64ac5ed9c6f8a847f0d1f84edcb885c43123b2a5bb11ebba5b052aee256e84b5c112ceaa7e08b9b7f48eeea75969ee76abde58200c6a22e168ccb27698e7f123b2583f97b777e8ddddd2bd429cb162fc61603379075b0b37b5fd263726dd8d4348c690d66b6c9c665521623cd5c993ac3445179fdb335d72076b6feed1f3101f2e2a7d2cdaf47204958cc066362b89b061b638c67585929f96437168fa320e048df333a21c4c724d9a48000c5d6bbf3aee29901ef57ff9746bd0dfd686c31140795da61e4d3188b705ca6d5f62f700de3064462e3a8694f1de52070b6772b5e6fcd8edf5ebce5765217434daf7620ea8e01bd7b31654e739747dbf2bc2b78dfaf32b21c34c4399270b90e87b8f13d54054bc01abacff0d6f9dc94ca14ab8bfd13b332580ae3ed69e894e11c5f55d240c9588c073460f0a8704caaa6b8fa634531a4d5e05db453a762c76f87ccedb981f60a2f91962ef00fbcb282aa4d239c7868cc849d159d4d046917e1b68bad383f211beaf81976f42e34d32c0fce6bf4a7fd3535819d5b18dec49fb9624dd571e64d642c4063a0cfb102af020fd9071948f0eeddc6de68033916c7879a66bc977c02abd4378699704684b0fad94e34f39b120dd93e93eec40fcb8659c3c25502aaa0fe44a69f8dbb03e7ab25309467080b86ff719f3e77070c28e024e53947d9acc4eb3b3d992462afb936ceb593ee4cc78d34c5219becce5ac6ec7b075da9c4a70ba1808d3b2e20e1338a964558841ffbe489d1e9a729cb3b17eb20b26f9ad84c69979e5db5069c33648b3afa1856ed196e01abb63b59cfc763dac1e737bcb80ad7a5fb7946cdb42fe117dafff591846fccbbf7cbf110a36f1ccc377075d57fdf9aa3e6d04e2458e2c4cbc6c41d73e894404e0692d8a512636723cd91966d536f65d2c736584f793f6b8fb712f0ccf7bd1bc16d97c7d22ead8e3e732bcaff36ef5ef4167e3c9f2b7e98f92afa084f80dc087bb94afe405fd5a8aae4b835d76fb6ef6387d6e1d9c5f486728536d2f356f59d58d10245e6bdf45ca3b188a35d020e26fa7be8f787a109c2d06465106ee6127bf8256d0250493c443937948c4fe1fbba2636a4899b840507d4d9e3739ebdcc3ce603756053a9a14dea608c74c892030238fcc5920068d910386bd7299af94809f876fd1aaa8cee4aa7d8da6049316b1b1b7ced1b89dd571f4fcd8e02a08c573d99b2203d805024e8efaf93f122e599ab8cd6a28bf1f7ad3bb1864c1bf1c29392ccfbf1c43b9e4177a5e82629efc4b1eccc553af3d94d92b011ca769c09a285044bc314eaabf6ec06cb0783f0aa4eedb74b52f3b6b7e1db5010d8b05f6767afabd3812c1b89a394967abfb6a7308ea1e7e373d2c1e27e94b8c4baa3242a8f6cfc14f515220ab88a943fd4c31c54e99459b99934a31597c0a35ea39a9fbc95f2ecf4b15a50fac0c7c7e80a7d613fd63ace403fabf672a6ddfd4f1285c98feaf4098364da934dab4f8b6198ac3876396eca718ca3031b57915c631b04f37cd418f283d83b4c991c91c9351d952f0337be23352600118d4a3625195d6cb8bd00ceafe04d18d9e9d494438a572b27d7479808ce16fd5e6e7193bf7f34f828012eca238d767ddc572d0f985c73f5e6f43e3c2b212ab108506ef2ccb2aff07d06f932b398829094b3a0b17d81f8f23344048a3affc519d29ecbd7f3d1cafd15850a1b99af0754146a170ea787915e85df36f24392b3df50646c68506d4ecd2a8fc4defffe764c77e455d5b8765651007799e54fb34b4d64ab4a140a5b42c58014020565b7515116c1c325ff168a7e89c69be4f6f372fde97c7969b0f2e202ccf20bdeb6878b2dfc56584f88d207486d3936da67816a46a4694221b92a2679b210a86b9f9f6bd6b79b83d289c11fa4350dfbce51f58afb037e7ccfc2eda98cf1cfe9a5ff5725a3b6589228606ac99e7f6cbde9bcaaa8bae4d684c6b45deeec691d6dcab9e593848e1c337741080fbf7e1ffba9c0ba1421031043088e45303d37f433ad90d03c4824a22e455b854eb9aa958d1049be72144e30759e1a621ab0014b100ba2bfab3213ed2ff29a32c3a4c7a375bc1ffb1eb5a8705193460c1752b03dd3bd505862d9cf3f84780aeeb5e41e489368acff31b1ab45397a15c57705f772fcf25aa30c9e3102d835f95b9740df11df437fdef1b940c8bb1818f8ad2346d7d6d9d5e16647c8882f8e778d011fe460a999434ba3f3c22a5a5d006aeb111433852b72eca632ff5ca69c516cf3d66196d3c4c08933c59050c026f82181c302e8988b8af7f877ffc4d8cdca83a56174fc3d5ad5c591f3f3e60498ab0748c6dd81e28769a79eb24e59b128045f9d7a4df1b9a630f3445df60abf469298995c229914ff2694c316b4db5b8fa1aad6f972559962a0c89e6f7d4aa23fc2a5cb63d3080235cd4a8d11f48b495f87ef065e3a586647d2fa57a4002aea7e610bc67323fc9b9dcd4ec542331eee2dfa731bafaf2433caa19e849e0af9f09cd879d17296be49007fa621f54a2de5ce2dc686f487e07520365f3d379df61caac4b5239b22aa0ee4d889ea9b68581ccf72200754bad8266ca91ce3b9ea7c577ff2e3f5517d233dd419181a93e23876d231664093977a8495a30cc1e5f63aaa0b379b710e31a46c63d8c28e998ce1a1e6f8bb5780d98d57225216dcef7b62b2b23a33fd5664670efa4ce194588b8f13f0ef0356c198e4da4fc0a0720633a8a0659156815f8af66d5935acd9fbf979ed4907b24cce6a2e5776e4b18fd685219b1e7d4b27d8c95c0b88c9d67c44c81f7312aa9c343ad090e1bee0760561f88951fdbd76db6f7ba823202d667ed5c033a22b7660cb34932fa65c47e16fc85286277c632aa043a3e2c1c4aaedd6a930293f4c1217238c1813ce82cef1ca7025cfcbf0304876884f97ec27efe1914124cdf8a6dd9869eb3e98662eeff73f830bc9fb62db9982b7828e8576c51bf6b2f97ef4625ea8c803aa009bdac35ac9b5e91bb28c97b86c4816946cdf48bfaaf2e8ce709356ceec501000f7dc32ca8bcf623809caefa5de9e58b0673d03c86ea5679ae12a4f3b53d1c71df04245e0d55672d5dc246bda147af52e105d2c66d36162da34f1c2853ce2f66ebb2dd269626a4cc9a0d56a89754fa702a9d26edd297fab5def65a212bcacc506a6e14e5bda703acca81e19e35311bcb3185b668f2843cba9b1565d5ae12961354e541371c474e07f7a34b41fccfdcda81ecce11af814a3be15c9174a2412a94d45729d395d43f3e26901e1dd8af6841a598bdd4c13befb7f2f43ef46a6b0e0b5efcf124785917c0f4c59b2a40b8de7ca36236da53972a1e9e7e5d5e74931dbc659371559b9f1acea0bccdc302b6ec1e3111b80e55013e3cee9e0432eacf4289bc4933e75f748f9057935588a5a0efa1ee5c0661d55e4278f077bfae6fa99768f1d0059f7725921cf0ae40e449cc104f4e2196a6084b79ee9b81d8abc6dabe589b3c369fe5cd9ac0ce57c9d33836e9752c283f06102ff5bfea0a990c20a5ecd0e250bf94bcc94e25e1019a99f791103d400f3c2e2b455ff4ebd971170b4fbf69702e8fbd8855bfc6c0f42bcdeaa7c1fde9e8400fd7dcdfeddc871f700de371c252ef38e70f18d463ecc83044f12fd7ea4d60f59198e156366f5039e26185b8775d94a01d2be1c484d7cdcbabaa6126903d60d3", 0x1004}, {0x0}, {&(0x7f0000002880)="539c5f78dd0a7f09", 0x8}], 0x6}}, {{&(0x7f0000002400)={0x2, 0x4e21, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000028c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7a6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @local}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@end, @rr={0x7, 0x2b, 0x82, [@rand_addr=0x64010102, @empty, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x31}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010101, @local, @multicast1]}]}}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x88, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x51, 0x0, 0xa, [0x7, 0x4, 0xd, 0xffffffff, 0x4, 0x3, 0x275]}, @timestamp_addr={0x44, 0x1c, 0x36, 0x1, 0x3, [{@loopback, 0x4}, {@loopback, 0xa}, {@remote, 0xce3}]}, @generic={0x83, 0xc, "4791b40e03540944b445"}, @lsrr={0x83, 0x17, 0x74, [@remote, @local, @multicast1, @empty, @private=0xa010101]}, @generic={0x7, 0xa, "54e4e23d299d80b1"}, @lsrr={0x83, 0x7, 0xb8, [@multicast2]}, @ssrr={0x89, 0x7, 0xae, [@multicast2]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x199d}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@rr={0x7, 0x1f, 0xb6, [@loopback, @empty, @rand_addr=0x64010100, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @generic={0x44, 0xf, "30280be2d1e83ffa4cece4fa95"}, @cipso={0x86, 0x16, 0x2, [{0x6, 0x10, "37fdf6e3773cf7a7d90ba91f5b54"}]}, @ssrr={0x89, 0x27, 0x93, [@dev={0xac, 0x14, 0x14, 0x9}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x17}, @broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010100, @rand_addr=0x64010102]}, @generic={0x89, 0x9, "47342217192e08"}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0xa, 0x1, 0x9, [{@broadcast, 0x7fffffff}, {@local, 0x9}, {@rand_addr=0x64010100, 0x6}, {@multicast2, 0x9}]}, @lsrr={0x83, 0xb, 0xc2, [@remote, @rand_addr=0x64010102]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x230}}], 0x2, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x1d, &(0x7f0000000040), 0x4)
ioctl$EVIOCGMASK(r6, 0x80045b10, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000002500)="07625d5cdf76f921c57ebb2e77a49fd423349f500bc15300e3e0442999f90c949338c7d70374f11899c424ef5005888c01756d06b15952b18ce42a43539662471f195a7f9bdaecc98f88d09f76781f7f5bcfaaa067c96a98c1f378ec44485e2d3a46005c75347f123189ab1cbcedb68453726255ce0098e7f1b5b1d4068c4409797ad87ba252bb78953e77463e7a47b659180de902d6e7bdf8fba274629dddf08798f7d9846ecf806ce7b47841ea5b8a6587cb1cd9038da5", 0xb8)

338.980885ms ago: executing program 3 (id=540):
socket$kcm(0x10, 0x2, 0x4)
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
read$midi(r0, &(0x7f0000000240)=""/160, 0xa0)
pipe(&(0x7f0000000080))
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/188, 0xbc}], 0x1, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)=ANY=[@ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4084)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r3, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x810, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_SEQ_GETTIME(r2, 0x80045113, &(0x7f00000005c0))
read$midi(r0, 0x0, 0x14)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

338.338102ms ago: executing program 0 (id=541):
socket$kcm(0x10, 0x2, 0x4)
r0 = io_uring_setup(0x4980, &(0x7f00000001c0)={0x0, 0x7fffd, 0x0, 0x2, 0x38d})
r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
read$midi(r1, &(0x7f0000000240)=""/160, 0xa0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r2, &(0x7f0000000100)=[{0x0}], 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x810, 0xffffffffffffffff, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

301.813009ms ago: executing program 0 (id=542):
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x8}]}}}]}, 0x3c}}, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chroot(&(0x7f0000000000)='./bus\x00')
sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0xe20, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x51)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)

268.408251ms ago: executing program 2 (id=544):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000000780)=""/102392, 0x18ff8)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0), 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x48082, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000000c0))
mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)='incremental-fs\x00', 0x40, &(0x7f0000000400)='&-[\x00')
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000008000005000000000000000000000000000004"])
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYRES16=0x0, @ANYBLOB="00000000000000000000050008"], 0x14}}, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = dup(r7)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008504"])
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000ffdbdf2501000a000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x0)
read$FUSE(r8, &(0x7f0000019780)={0x2020, 0x0, <r11=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000580)={0x50, 0x0, r11, {0x7, 0x28, 0x3, 0x80040, 0x9, 0x4, 0x6, 0xffffff7f}}, 0x50)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000010000eae2dc5d9735fe9a000046ce1030f86c5ed5"], 0x50)

179.438247ms ago: executing program 0 (id=545):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000000009041200010300000009210000000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000005ef04000734e239a9"], 0x0}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0)
timer_create(0x9, &(0x7f0000000380)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0))
timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0)
readv(r2, &(0x7f0000000000)=[{&(0x7f0000000200)=""/215, 0x7ffff000}], 0x6)
read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2020)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x6, &(0x7f0000000140)=[{0xb47, 0xe, 0x8}, {0x5, 0x26, 0x6e, 0xd}, {0x7, 0x0, 0x6, 0x167}, {0xe06, 0xe, 0x8, 0x5}, {0x10, 0x90, 0xa, 0x5}, {0x1ff, 0xa, 0xa, 0x4}]})
r4 = socket(0x2, 0x2, 0x2)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6)
write(r5, &(0x7f00000000c0)="510003000000", 0x6)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={<r6=>0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
socket$inet(0x2, 0x80001, 0x84)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r8 = socket$kcm(0x2, 0xf, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="050000000000006558", 0x2c}], 0x2)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x76, &(0x7f00000003c0)=@assoc_value={r6}, 0x8)
fcntl$setstatus(r3, 0x4, 0x2c00)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)=0x2)
r9 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r9, 0x0, 0x0)
r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r10)

0s ago: executing program 2 (id=546):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$EXT4_IOC_MIGRATE(r2, 0xff07)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040))
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00', <r5=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYRES64=r3, @ANYRES32=r5, @ANYRES32, @ANYBLOB="00000000000006000000000000000000000000000000000000000000afadf64411a3e5d80c43ac84362c5f3bece690c970ebc7ff0dbf918e70d547c0b137b65003d9095d059d16a4b032c021bcc2bc6d6f979acd75d8471971fd8b601af3f5e2453a7cbf09d9d806c44a53dcd05fcd32"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500000200000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x335})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000400))
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0)

kernel console output (not intermixed with test programs):

955][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.985469][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.988308][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.990826][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.993545][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.997387][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.003513][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.006340][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.015803][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.018558][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.021108][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.023816][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.026424][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.029098][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.031637][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.034344][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.037519][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.040247][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.042794][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.045636][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.049203][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.055402][ T6548] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.058056][ T6548] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.060370][ T6548] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.062711][ T6548] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.172614][ T1201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.179782][ T1201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.194252][ T1201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.198253][ T1201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.433581][ T6650] libceph: resolve '
[  150.433581][ T6650] -&õÌ×fÍY¹Ç�²a×ïÅ2iˆ
[  150.433581][ T6650] .ÖúÕ?Çý&�*»§&' (ret=-3): failed
[  150.761965][ T6661] netlink: 'syz.0.320': attribute type 5 has an invalid length.
[  150.801435][ T6667] fuse: Bad value for 'fd'
[  150.996077][ T5344] Bluetooth: hci4: command tx timeout
[  150.999210][ T6672] fuse: Bad value for 'fd'
[  151.067978][ T6674] overlayfs: missing 'lowerdir'
[  152.225675][ T1998] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  152.375710][ T1998] usb 5-1: Using ep0 maxpacket: 32
[  152.379517][ T1998] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  152.384398][ T1998] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  152.388782][ T1998] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  152.391611][ T1998] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  152.394952][ T1998] usb 5-1: config 0 interface 0 has no altsetting 0
[  152.400193][ T1998] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  152.403047][ T1998] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  152.405223][ T1998] usb 5-1: Product: syz
[  152.408902][ T1998] usb 5-1: Manufacturer: syz
[  152.410190][ T1998] usb 5-1: SerialNumber: syz
[  152.414316][ T1998] usb 5-1: config 0 descriptor??
[  152.421419][ T1998] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  152.425221][ T1998] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  152.583544][ T6701] warning: `syz.1.337' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  152.623847][ T1998] usb 5-1: USB disconnect, device number 7
[  152.629387][ T1998] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  152.724324][ T6706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  152.731122][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.331'.
[  152.831580][ T6707] fuse: Bad value for 'fd'
[  152.879311][ T6710] overlay: Unknown parameter '/'
[  153.095676][ T1998] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  153.167375][ T6713] tipc: Started in network mode
[  153.169149][ T6713] tipc: Node identity 4, cluster identity 4711
[  153.171490][ T6713] tipc: Node number set to 4
[  153.176486][ T6713] netlink: 'syz.3.333': attribute type 5 has an invalid length.
[  153.259356][ T1998] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  153.261545][ T1998] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  153.264438][ T1998] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  153.267477][ T1998] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  153.270981][ T1998] usb 5-1: config 0 interface 0 has no altsetting 0
[  153.274354][ T1998] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  153.277096][ T1998] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  153.279268][ T1998] usb 5-1: Product: syz
[  153.280313][ T1998] usb 5-1: Manufacturer: syz
[  153.281502][ T1998] usb 5-1: SerialNumber: syz
[  153.284363][ T1998] usb 5-1: config 0 descriptor??
[  153.287878][ T1998] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  153.290944][ T1998] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  153.643746][ T6692] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  153.646120][ T1998] usb 5-1: USB disconnect, device number 8
[  153.647587][    C3] ldusb 5-1:0.0: usb_submit_urb failed (-19)
[  153.649786][ T1998] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  154.908185][ T6736] libceph: resolve '
[  154.908185][ T6736] -&õÌ×fÍY¹Ç�²a×ïÅ2iˆ
[  154.908185][ T6736] .ÖúÕ?Çý&�*»§&' (ret=-3): failed
[  155.500640][ T6740] overlay: Unknown parameter '/'
[  155.880484][ T6749] netlink: 'syz.3.344': attribute type 5 has an invalid length.
[  155.973831][ T6751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  155.984340][ T6751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'.
[  156.714801][ T6760] netlink: 36 bytes leftover after parsing attributes in process `syz.3.348'.
[  156.945600][ T1294] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  157.246557][ T1294] usb 6-1: Using ep0 maxpacket: 32
[  157.249918][ T1294] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  157.252143][ T1294] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  157.254970][ T1294] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  157.258481][ T1294] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  157.261970][ T1294] usb 6-1: config 0 interface 0 has no altsetting 0
[  157.265348][ T1294] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  157.267820][ T1294] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  157.270080][ T1294] usb 6-1: Product: syz
[  157.271248][ T1294] usb 6-1: Manufacturer: syz
[  157.272544][ T1294] usb 6-1: SerialNumber: syz
[  157.275621][ T1294] usb 6-1: config 0 descriptor??
[  157.278346][ T1294] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  157.283434][ T1294] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  157.480410][ T1294] usb 6-1: USB disconnect, device number 7
[  157.484153][ T1294] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  157.631714][ T6770] overlay: Unknown parameter '/'
[  158.685654][ T5960] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  158.836983][ T5960] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  158.839204][ T5960] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  158.842139][ T5960] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  158.845037][ T5960] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  158.849129][ T5960] usb 6-1: config 0 interface 0 has no altsetting 0
[  158.852977][ T5960] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  158.855368][ T5960] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  158.857772][ T5960] usb 6-1: Product: syz
[  158.858925][ T5960] usb 6-1: Manufacturer: syz
[  158.860178][ T5960] usb 6-1: SerialNumber: syz
[  158.863226][ T5960] usb 6-1: config 0 descriptor??
[  158.866823][ T5960] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  158.871567][ T5960] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  159.229318][ T6758] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  159.231901][    C3] ldusb 6-1:0.0: usb_submit_urb failed (-19)
[  159.233513][ T1998] usb 6-1: USB disconnect, device number 8
[  159.237885][ T1998] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  159.480172][ T6790] overlayfs: missing 'lowerdir'
[  160.012855][ T6792] netlink: 36 bytes leftover after parsing attributes in process `syz.1.357'.
[  160.041505][ T6794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  160.048993][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'.
[  160.331181][ T6797] fuse: Bad value for 'fd'
[  160.515724][ T5343] Bluetooth: hci2: command 0x0406 tx timeout
[  160.525727][ T5346] Bluetooth: hci0: command 0x0406 tx timeout
[  160.527538][ T5343] Bluetooth: hci1: command 0x0406 tx timeout
[  161.845636][   T25] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  161.995920][   T25] usb 6-1: Using ep0 maxpacket: 32
[  162.005892][   T25] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  162.009391][   T25] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  162.012288][   T25] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  162.015357][   T25] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  162.021160][   T25] usb 6-1: config 0 interface 0 has no altsetting 0
[  162.029111][   T25] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  162.031500][   T25] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  162.033731][   T25] usb 6-1: Product: syz
[  162.034921][   T25] usb 6-1: Manufacturer: syz
[  162.036745][   T25] usb 6-1: SerialNumber: syz
[  162.040346][   T25] usb 6-1: config 0 descriptor??
[  162.046170][   T25] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  162.050889][   T25] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  162.257864][ T1998] usb 6-1: USB disconnect, device number 9
[  162.266351][ T1998] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  162.735617][   T25] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  162.897489][   T25] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  162.899755][   T25] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  162.902676][   T25] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  162.906028][   T25] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  162.909437][   T25] usb 6-1: config 0 interface 0 has no altsetting 0
[  162.914233][   T25] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  162.917359][   T25] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  162.919564][   T25] usb 6-1: Product: syz
[  162.920818][   T25] usb 6-1: Manufacturer: syz
[  162.922441][   T25] usb 6-1: SerialNumber: syz
[  162.928885][   T25] usb 6-1: config 0 descriptor??
[  162.932697][   T25] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  162.945391][   T25] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  163.332103][ T6818] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  163.334454][ T1998] usb 6-1: USB disconnect, device number 10
[  163.336004][    C3] ldusb 6-1:0.0: usb_submit_urb failed (-19)
[  163.339200][ T1998] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  164.188496][ T6832] overlayfs: missing 'lowerdir'
[  164.256336][ T6834] netlink: 36 bytes leftover after parsing attributes in process `syz.2.368'.
[  164.284330][ T6836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.291799][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.369'.
[  164.974374][ T5344] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  164.976319][ T5344] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  164.977670][ T5344] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  164.980519][ T5344] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  164.981145][ T5344] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  164.994896][ T5344] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  165.033654][ T6838] fuse: Bad value for 'fd'
[  165.215025][ T1201] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.254683][ T6843] chnl_net:caif_netlink_parms(): no params data found
[  165.456460][ T1201] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.541375][ T6860] fuse: Bad value for 'fd'
[  165.651689][ T1201] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.656887][ T6843] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.663380][ T6843] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.665213][ T6843] bridge_slave_0: entered allmulticast mode
[  165.670780][ T6843] bridge_slave_0: entered promiscuous mode
[  165.674089][ T6843] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.678195][ T6843] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.680078][ T6843] bridge_slave_1: entered allmulticast mode
[  165.682211][ T6843] bridge_slave_1: entered promiscuous mode
[  165.709583][ T6843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.713856][ T6843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.733238][ T1201] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.771850][ T6843] team0: Port device team_slave_0 added
[  165.774430][ T6843] team0: Port device team_slave_1 added
[  165.801923][ T6865] fuse: Bad value for 'fd'
[  165.821387][ T6843] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.824368][ T6843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.831496][ T6843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.835073][ T6843] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.836935][ T6843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.846046][ T6843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.097382][ T6872] overlayfs: missing 'lowerdir'
[  166.851813][ T6843] hsr_slave_0: entered promiscuous mode
[  166.857257][ T6874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  166.857288][ T6843] hsr_slave_1: entered promiscuous mode
[  166.867274][ T6843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  166.870178][ T6843] Cannot create hsr debugfs directory
[  166.933817][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'.
[  167.003863][ T1201] bridge_slave_1: left allmulticast mode
[  167.005562][ T1201] bridge_slave_1: left promiscuous mode
[  167.008569][ T1201] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.075701][ T5344] Bluetooth: hci8: command tx timeout
[  167.080010][ T1201] bridge_slave_0: left allmulticast mode
[  167.081707][ T1201] bridge_slave_0: left promiscuous mode
[  167.083672][ T1201] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.137741][ T6878] fuse: Bad value for 'fd'
[  168.153927][ T6892] fuse: Bad value for 'fd'
[  168.795691][ T6900] overlayfs: missing 'lowerdir'
[  168.996706][ T1201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.099270][ T6906] overlay: Unknown parameter '/'
[  169.106631][ T1201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.111738][ T1201] bond0 (unregistering): Released all slaves
[  169.127723][ T6908] overlayfs: missing 'lowerdir'
[  169.165575][ T5344] Bluetooth: hci8: command tx timeout
[  169.269336][ T1201] tipc: Left network mode
[  169.297296][ T6912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  169.375602][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.390'.
[  170.191648][ T1201] hsr_slave_0: left promiscuous mode
[  170.229862][ T1201] hsr_slave_1: left promiscuous mode
[  170.240343][ T1201] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.242864][ T1201] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.259678][ T1201] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.262294][ T1201] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.290299][ T6922] overlayfs: missing 'lowerdir'
[  170.355616][ T5344] Bluetooth: hci3: command 0x0406 tx timeout
[  170.409619][ T1201] veth1_macvtap: left promiscuous mode
[  170.411253][ T1201] veth0_macvtap: left promiscuous mode
[  170.413584][ T1201] veth1_vlan: left promiscuous mode
[  170.415194][ T1201] veth0_vlan: left promiscuous mode
[  170.496942][ T6928] fuse: Bad value for 'fd'
[  170.671077][ T6932] fuse: Bad value for 'fd'
[  170.833526][ T6940] fuse: Bad value for 'fd'
[  170.989493][ T6947] fuse: Bad value for 'fd'
[  171.235643][ T5340] Bluetooth: hci8: command tx timeout
[  172.611535][ T1201] team0 (unregistering): Port device team_slave_1 removed
[  172.727442][ T1201] team0 (unregistering): Port device team_slave_0 removed
[  173.189375][ T6957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  173.197865][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.400'.
[  173.315616][ T5340] Bluetooth: hci8: command tx timeout
[  174.649946][ T6973] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  174.652249][ T6973] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  174.911016][ T6977] overlay: Unknown parameter '/'
[  174.966035][ T6978] fuse: Bad value for 'fd'
[  175.215676][ T6983] fuse: Bad value for 'fd'
[  175.273372][ T6996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.279681][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'.
[  175.344062][ T6992] fuse: Bad value for 'fd'
[  175.373990][ T6843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  175.379056][ T6843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  175.387102][ T6997] fuse: Bad value for 'fd'
[  175.389823][ T6843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  175.402945][ T6843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  175.482370][ T6843] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.501294][ T6843] 8021q: adding VLAN 0 to HW filter on device team0
[  175.524883][  T106] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.526837][  T106] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.544709][  T106] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.546793][  T106] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.023597][ T6843] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.086166][ T6843] veth0_vlan: entered promiscuous mode
[  176.094957][ T6843] veth1_vlan: entered promiscuous mode
[  176.136850][ T6843] veth0_macvtap: entered promiscuous mode
[  176.148264][ T6843] veth1_macvtap: entered promiscuous mode
[  176.165642][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.169010][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.176777][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.180482][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.183240][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.191921][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.194713][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.201992][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.204848][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.222401][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.229430][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.232923][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.244369][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.251392][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.277233][ T6843] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.300719][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.316380][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.331407][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.336293][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.339890][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.343065][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.347923][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.351665][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.354478][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.358716][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.361787][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.365367][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.371558][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.374729][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.380715][ T6843] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.405009][ T6843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.409110][ T6843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.412454][ T6843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.415394][ T6843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.378559][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.394564][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.406541][ T7025] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  177.408838][ T7025] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  177.423830][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.427148][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.497002][   T40] audit: type=1400 audit(1729520405.746:311): avc:  denied  { bind } for  pid=7031 comm="syz.3.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  177.502159][   T40] audit: type=1400 audit(1729520405.746:312): avc:  denied  { getopt } for  pid=7031 comm="syz.3.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  177.508133][   T40] audit: type=1400 audit(1729520405.746:313): avc:  denied  { read } for  pid=7031 comm="syz.3.419" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  177.639492][ T7036] fuse: Bad value for 'fd'
[  177.825717][   T56] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  177.868034][ T7039] Falling back ldisc for ptm0.
[  177.969698][ T7041] netlink: 132 bytes leftover after parsing attributes in process `syz.1.421'.
[  177.985625][   T56] usb 8-1: Using ep0 maxpacket: 8
[  177.988607][   T56] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  177.990733][   T56] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  177.993170][   T56] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  177.995715][   T56] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  177.998200][   T56] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  178.001434][   T56] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  178.003705][   T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.085648][   T58] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  178.218185][   T56] usb 8-1: GET_CAPABILITIES returned 0
[  178.219630][   T56] usbtmc 8-1:16.0: can't read capabilities
[  178.235713][   T58] usb 7-1: Using ep0 maxpacket: 32
[  178.238309][   T58] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  178.240405][   T58] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  178.243188][   T58] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  178.246338][   T58] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  178.249683][   T58] usb 7-1: config 0 interface 0 has no altsetting 0
[  178.253009][   T58] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  178.255307][   T58] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  178.257728][   T58] usb 7-1: Product: syz
[  178.258802][   T58] usb 7-1: Manufacturer: syz
[  178.260007][   T58] usb 7-1: SerialNumber: syz
[  178.266511][   T58] usb 7-1: config 0 descriptor??
[  178.270711][   T58] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  178.278645][   T58] ldusb 7-1:0.0: LD USB Device #1 now attached to major 180 minor 1
[  178.440605][   T56] usb 8-1: USB disconnect, device number 7
[  178.470898][   T58] usb 7-1: USB disconnect, device number 8
[  178.478324][   T58] ldusb 7-1:0.0: LD USB Device #1 now disconnected
[  178.760085][ T7069] netlink: 'syz.1.425': attribute type 5 has an invalid length.
[  178.915708][   T58] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  178.965612][   T56] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  178.983107][ T7071] netlink: 36 bytes leftover after parsing attributes in process `syz.3.427'.
[  179.066785][   T58] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  179.068991][   T58] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  179.071804][   T58] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  179.074990][   T58] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  179.079147][   T58] usb 7-1: config 0 interface 0 has no altsetting 0
[  179.082463][   T58] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  179.084828][   T58] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  179.087187][   T58] usb 7-1: Product: syz
[  179.088301][   T58] usb 7-1: Manufacturer: syz
[  179.089520][   T58] usb 7-1: SerialNumber: syz
[  179.092935][   T58] usb 7-1: config 0 descriptor??
[  179.097867][   T58] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  179.101110][   T58] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  179.125616][   T56] usb 5-1: Using ep0 maxpacket: 8
[  179.128217][   T56] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  179.130343][   T56] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  179.132986][   T56] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  179.135897][   T56] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  179.139345][   T56] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  179.142854][   T56] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  179.145243][   T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.354071][   T56] usb 5-1: GET_CAPABILITIES returned 0
[  179.355854][   T56] usbtmc 5-1:16.0: can't read capabilities
[  179.455163][ T7042] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  179.456174][ T5960] usb 7-1: USB disconnect, device number 9
[  179.457118][    C3] ldusb 7-1:0.0: usb_submit_urb failed (-19)
[  179.464000][ T5960] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  179.565323][ T1998] usb 5-1: USB disconnect, device number 9
[  180.275928][ T7096] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  180.278401][ T7096] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  181.039504][ T7102] netlink: 36 bytes leftover after parsing attributes in process `syz.3.436'.
[  181.089638][ T7104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  181.105831][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.437'.
[  181.245308][ T7113] netlink: 'syz.2.440': attribute type 5 has an invalid length.
[  181.415671][   T56] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  181.565590][   T56] usb 8-1: Using ep0 maxpacket: 8
[  181.570243][   T56] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  181.572544][   T56] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  181.575182][   T56] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  181.578533][   T56] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  181.581473][   T56] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  181.584903][   T56] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  181.587545][   T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.806093][   T56] usb 8-1: GET_CAPABILITIES returned 0
[  181.808155][   T56] usbtmc 8-1:16.0: can't read capabilities
[  182.026489][   T58] usb 8-1: USB disconnect, device number 8
[  182.171580][ T7131] fuse: Bad value for 'fd'
[  182.609407][ T7136] netlink: 36 bytes leftover after parsing attributes in process `syz.2.447'.
[  182.735113][ T7141] overlayfs: missing 'lowerdir'
[  183.661882][ T7148] netlink: 'syz.1.453': attribute type 5 has an invalid length.
[  183.672776][ T7150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  183.703519][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'.
[  183.877230][ T7157] fuse: Bad value for 'fd'
[  184.055584][ T5960] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  184.235808][ T5960] usb 7-1: Using ep0 maxpacket: 32
[  184.241731][ T5960] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  184.244070][ T5960] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  184.247308][ T5960] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  184.250295][ T5960] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  184.253743][ T5960] usb 7-1: config 0 interface 0 has no altsetting 0
[  184.260233][ T5960] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  184.262592][ T5960] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  184.264806][ T5960] usb 7-1: Product: syz
[  184.266485][ T5960] usb 7-1: Manufacturer: syz
[  184.268208][ T5960] usb 7-1: SerialNumber: syz
[  184.271592][ T5960] usb 7-1: config 0 descriptor??
[  184.275669][   T58] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  184.276192][ T5960] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  184.283484][ T5960] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  184.435614][   T58] usb 8-1: Using ep0 maxpacket: 8
[  184.440368][   T58] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  184.442808][   T58] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  184.445430][   T58] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  184.452034][   T58] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  184.463113][   T58] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  184.466811][   T58] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  184.469232][   T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.680404][   T58] usb 8-1: GET_CAPABILITIES returned 0
[  184.681929][   T58] usbtmc 8-1:16.0: can't read capabilities
[  184.897092][   T58] usb 8-1: USB disconnect, device number 9
[  185.579868][ T7177] overlayfs: missing 'lowerdir'
[  186.401893][ T7185] netlink: 36 bytes leftover after parsing attributes in process `syz.0.465'.
[  186.437521][ T7189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  186.445151][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.467'.
[  186.510255][ T7192] netlink: 'syz.3.468': attribute type 5 has an invalid length.
[  187.374461][ T7199] fuse: Bad value for 'fd'
[  187.425563][ T5378] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  187.575634][ T5378] usb 6-1: Using ep0 maxpacket: 8
[  187.580245][ T5378] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  187.584358][ T5378] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  187.592872][ T5378] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  187.598963][ T5378] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  187.601724][ T5378] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  187.605054][ T5378] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  187.608341][ T5378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.818892][ T5378] usb 6-1: GET_CAPABILITIES returned 0
[  187.820512][ T5378] usbtmc 6-1:16.0: can't read capabilities
[  188.033693][ T5378] usb 6-1: USB disconnect, device number 11
[  188.721529][ T7208] overlayfs: missing 'lowerdir'
[  188.945745][ T7212] netlink: 36 bytes leftover after parsing attributes in process `syz.0.476'.
[  188.948219][ T7214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  188.954827][ T7214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.477'.
[  189.516976][ T7224] netlink: 'syz.1.479': attribute type 5 has an invalid length.
[  189.739457][   T58] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  189.885606][   T58] usb 8-1: Using ep0 maxpacket: 8
[  189.890411][   T58] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  189.892870][   T58] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  189.897716][   T58] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  189.900421][   T58] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  189.903165][   T58] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  189.906828][   T58] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  189.909464][   T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.962583][ T7227] fuse: Bad value for 'fd'
[  190.114217][   T58] usb 8-1: GET_CAPABILITIES returned 0
[  190.115833][   T58] usbtmc 8-1:16.0: can't read capabilities
[  190.322192][   T56] usb 8-1: USB disconnect, device number 10
[  190.415347][ T7235] overlayfs: missing 'workdir'
[  192.023236][ T7245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  192.057386][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'.
[  192.066876][  T829] usb 7-1: USB disconnect, device number 10
[  192.137316][  T829] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  192.579037][ T7252] fuse: Bad value for 'fd'
[  192.644032][ T7258] netlink: 'syz.1.493': attribute type 5 has an invalid length.
[  193.078694][ T7264] overlayfs: missing 'workdir'
[  193.140933][ T5344] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  193.146383][ T5344] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  193.149236][ T5344] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  193.152112][ T5344] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  193.154137][ T5344] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  193.156619][ T5344] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  193.877076][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  194.305244][   T40] audit: type=1400 audit(1729520422.546:314): avc:  denied  { ioctl } for  pid=7271 comm="syz.3.499" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21777 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  194.391559][ T7278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  194.398152][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.501'.
[  194.523176][ T1110] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.573215][ T7267] chnl_net:caif_netlink_parms(): no params data found
[  195.236190][ T5344] Bluetooth: hci7: command tx timeout
[  195.273561][ T1110] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.465877][ T1998] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  195.615659][ T1998] usb 6-1: Using ep0 maxpacket: 32
[  195.618925][ T1998] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  195.621112][ T1998] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  195.623983][ T1998] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  195.626940][ T1998] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  195.630803][ T1998] usb 6-1: config 0 interface 0 has no altsetting 0
[  195.634621][ T1998] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  195.637250][ T1998] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  195.639469][ T1998] usb 6-1: Product: syz
[  195.640588][ T1998] usb 6-1: Manufacturer: syz
[  195.641824][ T1998] usb 6-1: SerialNumber: syz
[  195.644087][ T1998] usb 6-1: config 0 descriptor??
[  195.646943][ T1998] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  195.650417][ T1998] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  195.848992][ T1998] usb 6-1: USB disconnect, device number 12
[  195.851349][ T1998] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  196.435767][ T1998] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  196.590473][ T1998] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  196.593386][ T1998] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  196.596401][ T1998] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  196.600251][ T1998] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  196.604320][ T1998] usb 6-1: config 0 interface 0 has no altsetting 0
[  196.607926][ T1998] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  196.610399][ T1998] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  196.612641][ T1998] usb 6-1: Product: syz
[  196.613792][ T1998] usb 6-1: Manufacturer: syz
[  196.615347][ T1998] usb 6-1: SerialNumber: syz
[  196.618308][ T1998] usb 6-1: config 0 descriptor??
[  196.622815][ T1998] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  196.629681][ T1998] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  196.976988][ T7293] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  196.979268][   T56] usb 6-1: USB disconnect, device number 13
[  196.979398][    C3] ldusb 6-1:0.0: usb_submit_urb failed (-19)
[  196.982522][   T56] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  197.315671][ T5344] Bluetooth: hci7: command tx timeout
[  198.032614][ T1110] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.439742][ T7267] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.441743][ T7267] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.443646][ T7267] bridge_slave_0: entered allmulticast mode
[  198.451190][ T7267] bridge_slave_0: entered promiscuous mode
[  198.453914][ T7267] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.456139][ T7267] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.458071][ T7267] bridge_slave_1: entered allmulticast mode
[  198.460160][ T7267] bridge_slave_1: entered promiscuous mode
[  198.476992][ T1110] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.501675][ T7267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.505986][ T7267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.873995][ T7305] netlink: 'syz.1.505': attribute type 5 has an invalid length.
[  198.903456][ T7267] team0: Port device team_slave_0 added
[  198.909331][ T7267] team0: Port device team_slave_1 added
[  199.330977][ T1110] bridge_slave_1: left allmulticast mode
[  199.333092][ T1110] bridge_slave_1: left promiscuous mode
[  199.335405][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.379099][ T1110] bridge_slave_0: left allmulticast mode
[  199.384362][ T1110] bridge_slave_0: left promiscuous mode
[  199.393075][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.395659][ T5344] Bluetooth: hci7: command tx timeout
[  199.691106][ T7312] overlayfs: missing 'workdir'
[  200.646571][ T7317] fuse: Bad value for 'fd'
[  200.819180][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.835820][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.839555][ T1110] bond0 (unregistering): Released all slaves
[  200.855013][ T7267] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.856950][ T7267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.863690][ T7267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.890093][ T7267] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.892805][ T7267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.902217][ T7267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.951841][   T40] audit: type=1400 audit(1729520429.196:315): avc:  denied  { mounton } for  pid=7321 comm="syz.0.511" path="/27/file0/file0" dev="9p" ino=37617751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  200.984244][ T7322] kAFS: unparsable volume name
[  201.008169][ T1110] tipc: Left network mode
[  201.011924][ T7267] hsr_slave_0: entered promiscuous mode
[  201.021710][ T7267] hsr_slave_1: entered promiscuous mode
[  201.036203][ T7267] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  201.038431][ T7267] Cannot create hsr debugfs directory
[  201.044947][ T7338] netlink: 'syz.1.513': attribute type 5 has an invalid length.
[  201.487444][ T5344] Bluetooth: hci7: command tx timeout
[  201.504914][ T1110] hsr_slave_0: left promiscuous mode
[  201.507684][ T1110] hsr_slave_1: left promiscuous mode
[  201.509843][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.511893][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0
[  201.514487][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.516822][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1
[  201.552856][ T1110] veth1_macvtap: left promiscuous mode
[  201.554450][ T1110] veth0_macvtap: left promiscuous mode
[  201.556080][ T1110] veth1_vlan: left promiscuous mode
[  201.557501][ T1110] veth0_vlan: left promiscuous mode
[  201.855076][   T40] audit: type=1400 audit(1729520430.096:316): avc:  denied  { mounton } for  pid=7348 comm="syz.1.514" path="/proc/429/task" dev="proc" ino=22735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  203.362277][ T1110] team0 (unregistering): Port device team_slave_1 removed
[  203.719369][ T1110] team0 (unregistering): Port device team_slave_0 removed
[  204.598904][ T5350] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  204.601701][ T5350] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  204.604175][ T5350] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  204.607594][ T5350] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  204.609689][ T5350] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  204.611671][ T5350] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  204.781750][ T7349] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  204.874597][ T7352] chnl_net:caif_netlink_parms(): no params data found
[  205.119813][ T7352] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.121721][ T7352] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.123663][ T7352] bridge_slave_0: entered allmulticast mode
[  205.126756][ T7352] bridge_slave_0: entered promiscuous mode
[  205.133049][ T7352] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.134950][ T7352] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.145648][ T7352] bridge_slave_1: entered allmulticast mode
[  205.147868][ T7352] bridge_slave_1: entered promiscuous mode
[  205.211843][ T7352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.218247][ T7352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.234037][ T7375] ubi0: attaching mtd0
[  205.239904][ T7375] ubi0: scanning is finished
[  205.241109][ T7375] ubi0: empty MTD device detected
[  205.285721][ T5344] Bluetooth: hci6: unexpected event for opcode 0x3126
[  205.296248][   T40] audit: type=1400 audit(1729520433.546:317): avc:  denied  { listen } for  pid=7373 comm="syz.1.518" laddr=::ffff:127.0.0.1 lport=55491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  205.380592][ T7352] team0: Port device team_slave_0 added
[  205.385997][ T7352] team0: Port device team_slave_1 added
[  205.417174][   T40] audit: type=1400 audit(1729520433.666:318): avc:  denied  { accept } for  pid=7373 comm="syz.1.518" laddr=::ffff:127.0.0.1 lport=55491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  205.549992][ T7352] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.559031][ T7352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.570214][ T7352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.598459][ T7352] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.604388][ T7352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.614258][ T7352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.989860][ T7352] hsr_slave_0: entered promiscuous mode
[  206.022798][ T7352] hsr_slave_1: entered promiscuous mode
[  206.124234][ T7352] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  206.126688][ T7352] Cannot create hsr debugfs directory
[  206.128563][ T7267] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  206.435966][ T7267] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  206.605149][ T7267] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  206.675868][ T5340] Bluetooth: hci3: command tx timeout
[  206.682283][ T7267] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  206.714754][ T1110] bridge_slave_1: left allmulticast mode
[  206.716403][ T1110] bridge_slave_1: left promiscuous mode
[  206.717936][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.738685][ T1110] bridge_slave_0: left allmulticast mode
[  206.740639][ T1110] bridge_slave_0: left promiscuous mode
[  206.742177][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.790885][ T7375] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  206.792875][ T7375] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  206.794745][ T7375] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  206.799655][ T7375] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  206.801600][ T7375] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  206.803354][ T7375] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  206.805438][ T7375] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1999544365
[  206.810037][ T7375] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  206.813157][ T7407] ubi0: background thread "ubi_bgt0d" started, PID 7407
[  206.931676][ T7410] fuse: Bad value for 'fd'
[  206.963767][   T40] audit: type=1400 audit(1729520435.206:319): avc:  denied  { read } for  pid=7412 comm="syz.0.520" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  206.974798][   T40] audit: type=1400 audit(1729520435.206:320): avc:  denied  { open } for  pid=7412 comm="syz.0.520" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  207.017985][ T7417] xt_bpf: check failed: parse error
[  207.231527][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  207.240590][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  207.244534][ T1110] bond0 (unregistering): Released all slaves
[  207.339446][ T7419] netlink: 'syz.1.521': attribute type 5 has an invalid length.
[  207.470609][ T7413] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  207.472982][ T7413] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  207.527054][ T7413] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  207.528934][ T7413] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  207.559090][ T7413] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  207.560981][ T7413] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  207.570310][ T7413] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  207.579423][ T7413] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  207.603837][ T7413] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  207.608532][ T7413] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  207.652098][ T7413] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  207.669961][ T7413] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  207.673054][ T7413] Bluetooth: hci8: Opcode 0x0406 failed: -4
[  207.696315][ T7413] Bluetooth: hci8: Opcode 0x0406 failed: -4
[  207.712181][ T7413] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  207.713795][ T7413] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  207.726066][ T7413] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  207.738731][ T7352] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.742922][ T7413] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  207.745172][ T7413] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  207.761368][ T7413] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  207.782626][ T7267] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.817093][ T7267] 8021q: adding VLAN 0 to HW filter on device team0
[  207.822434][ T1110] hsr_slave_0: left promiscuous mode
[  207.824919][ T1110] hsr_slave_1: left promiscuous mode
[  207.827679][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.830509][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.856209][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.858839][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.905099][ T1110] veth1_macvtap: left promiscuous mode
[  207.906687][ T1110] veth0_macvtap: left promiscuous mode
[  207.908237][ T1110] veth1_vlan: left promiscuous mode
[  207.909620][ T1110] veth0_vlan: left promiscuous mode
[  209.282101][ T1110] team0 (unregistering): Port device team_slave_1 removed
[  209.462702][ T1110] team0 (unregistering): Port device team_slave_0 removed
[  209.477679][ T5350] Bluetooth: hci0: command 0x0406 tx timeout
[  209.555560][ T5350] Bluetooth: hci1: command 0x0406 tx timeout
[  209.635637][ T5350] Bluetooth: hci4: command 0x0c1a tx timeout
[  209.635659][ T5344] Bluetooth: hci6: command 0x0406 tx timeout
[  209.635699][ T5346] Bluetooth: hci2: command 0x0406 tx timeout
[  209.715619][ T5350] Bluetooth: hci7: command 0x0c1a tx timeout
[  209.715724][ T5340] Bluetooth: hci8: Opcode 0x2046 failed: -110
[  209.717314][ T5350] Bluetooth: hci8: command 0x0c1a tx timeout
[  209.795809][ T5340] Bluetooth: hci3: command 0x040f tx timeout
[  210.422035][ T7352] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.456209][ T7267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  210.459596][ T7267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  210.464711][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.466574][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.475382][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.477252][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.537612][   T40] audit: type=1400 audit(1729520438.766:321): avc:  denied  { read } for  pid=7438 comm="syz.0.525" name="usbmon7" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  210.548081][   T40] audit: type=1400 audit(1729520438.766:322): avc:  denied  { open } for  pid=7438 comm="syz.0.525" path="/dev/usbmon7" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  210.554025][   T40] audit: type=1400 audit(1729520438.796:323): avc:  denied  { ioctl } for  pid=7438 comm="syz.0.525" path="/dev/usbmon7" dev="devtmpfs" ino=743 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  210.577544][ T7352] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.628828][ T7267] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.673153][ T7352] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.694607][ T7446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.695772][ T7267] veth0_vlan: entered promiscuous mode
[  210.703448][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.526'.
[  210.704844][ T7267] veth1_vlan: entered promiscuous mode
[  210.719738][ T7267] veth0_macvtap: entered promiscuous mode
[  210.722983][ T7267] veth1_macvtap: entered promiscuous mode
[  210.730771][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.734085][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.736752][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.739505][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.742077][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.744882][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.747604][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.751018][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.754215][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.758269][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.760947][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.763655][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.768186][ T7267] batman_adv: batadv0: Interface activated: batadv_slave_0
[  210.776016][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.781003][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.783566][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.787627][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.791414][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.795172][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.799126][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.802074][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.804743][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.808070][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.810702][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.813591][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.816997][ T7267] batman_adv: batadv0: Interface activated: batadv_slave_1
[  210.822210][ T7267] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.825000][ T7267] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.827713][ T7267] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.830529][ T7267] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  210.875651][ T7352] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  210.886078][ T6169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.888654][ T6169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.896621][ T7352] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  210.919594][ T7352] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  211.239954][   T40] audit: type=1400 audit(1729520439.486:324): avc:  denied  { create } for  pid=7448 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  211.352329][   T40] audit: type=1400 audit(1729520439.596:325): avc:  denied  { connect } for  pid=7448 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  211.359697][   T40] audit: type=1400 audit(1729520439.596:326): avc:  denied  { setopt } for  pid=7448 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  211.364838][   T40] audit: type=1400 audit(1729520439.596:327): avc:  denied  { ioctl } for  pid=7448 comm="syz.0.527" path="socket:[23307]" dev="sockfs" ino=23307 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  211.555720][ T5340] Bluetooth: hci0: command 0x0406 tx timeout
[  211.635946][ T5340] Bluetooth: hci1: command 0x0406 tx timeout
[  211.715701][ T5340] Bluetooth: hci4: command 0x0c1a tx timeout
[  211.715877][ T5346] Bluetooth: hci2: command 0x0406 tx timeout
[  211.720182][ T5350] Bluetooth: hci6: command 0x0406 tx timeout
[  211.795986][ T5350] Bluetooth: hci8: command 0x0c1a tx timeout
[  211.796590][ T5346] Bluetooth: hci7: command 0x0c1a tx timeout
[  211.875686][ T5346] Bluetooth: hci3: command 0x040f tx timeout
[  213.795658][ T5346] Bluetooth: hci4: command 0x0c1a tx timeout
[  213.875764][ T5346] Bluetooth: hci8: command 0x0c1a tx timeout
[  213.885626][ T5346] Bluetooth: hci7: command 0x0c1a tx timeout
[  213.955733][ T5346] Bluetooth: hci3: command 0x040f tx timeout
[  214.934758][ T7352] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  214.988653][   T40] audit: type=1400 audit(1729520443.236:328): avc:  denied  { create } for  pid=7453 comm="syz.0.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  215.022009][  T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.024126][  T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.064833][ T7352] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.082802][ T7352] 8021q: adding VLAN 0 to HW filter on device team0
[  215.088343][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.090205][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[  215.095337][  T106] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.097337][  T106] bridge0: port 2(bridge_slave_1) entered forwarding state
[  215.120639][   T40] audit: type=1400 audit(1729520443.246:329): avc:  denied  { bind } for  pid=7453 comm="syz.0.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  215.165612][   T40] audit: type=1400 audit(1729520443.276:330): avc:  denied  { mounton } for  pid=7267 comm="syz-executor" path="/syzkaller.lxAgN1/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  215.268834][ T7352] 8021q: adding VLAN 0 to HW filter on device batadv0
[  215.304144][ T7352] veth0_vlan: entered promiscuous mode
[  215.314472][ T7352] veth1_vlan: entered promiscuous mode
[  215.344579][ T7352] veth0_macvtap: entered promiscuous mode
[  215.355270][   T40] audit: type=1400 audit(1729520443.596:331): avc:  denied  { wake_alarm } for  pid=7453 comm="syz.0.528" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  215.364019][ T7352] veth1_macvtap: entered promiscuous mode
[  215.393226][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.397840][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.401348][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.405106][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.415175][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.418371][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.420947][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.423578][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.426448][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.429047][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.431647][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.434257][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.437703][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.440399][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.450739][ T7352] batman_adv: batadv0: Interface activated: batadv_slave_0
[  215.459522][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.462185][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.464784][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.471655][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.474155][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.477118][   T58] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  215.479825][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.482254][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.484928][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.492201][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.494758][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.497595][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.500220][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.502701][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.505353][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.512495][ T7352] batman_adv: batadv0: Interface activated: batadv_slave_1
[  215.517792][ T7352] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.520188][ T7352] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.522390][ T7352] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.524521][ T7352] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.635801][   T58] usb 7-1: Using ep0 maxpacket: 8
[  215.638291][   T58] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  215.640294][   T58] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  215.642773][   T58] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  215.646159][   T58] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  215.650944][   T58] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  215.654563][   T58] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  215.657855][   T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.867844][   T58] usb 7-1: GET_CAPABILITIES returned 0
[  215.869259][   T58] usbtmc 7-1:16.0: can't read capabilities
[  215.956115][ T5346] Bluetooth: hci8: command 0x0c1a tx timeout
[  216.045662][ T5346] Bluetooth: hci3: command 0x040f tx timeout
[  216.068584][ T5346] Bluetooth: hci7: SCO packet for unknown connection handle 200
[  216.071987][   T58] usb 7-1: USB disconnect, device number 11
[  218.107099][ T5350] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  218.110620][ T5350] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  218.112908][ T5350] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  218.116283][ T5350] Bluetooth: hci3: command 0x040f tx timeout
[  218.120827][ T5340] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  218.122849][ T5340] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  218.124759][ T5340] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  219.843632][   T40] audit: type=1400 audit(1729520448.086:332): avc:  denied  { read write } for  pid=7453 comm="syz.0.528" name="uhid" dev="devtmpfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  219.851914][   T40] audit: type=1400 audit(1729520448.086:333): avc:  denied  { open } for  pid=7453 comm="syz.0.528" path="/dev/uhid" dev="devtmpfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  219.903082][   T40] audit: type=1400 audit(1729520448.146:334): avc:  denied  { mounton } for  pid=7471 comm="syz.2.530" path="/1/file0" dev="tmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  219.909057][ T7472] fuse: Bad value for 'group_id'
[  219.910350][ T7472] fuse: Bad value for 'group_id'
[  220.075174][ T6169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.078875][ T6169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.087208][ T7469] chnl_net:caif_netlink_parms(): no params data found
[  220.095824][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.097887][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.190158][ T7469] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.192071][ T7469] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.193923][ T7469] bridge_slave_0: entered allmulticast mode
[  220.195725][ T5346] Bluetooth: hci5: command tx timeout
[  220.207767][ T7469] bridge_slave_0: entered promiscuous mode
[  220.213115][ T7469] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.216756][ T7469] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.218767][ T7469] bridge_slave_1: entered allmulticast mode
[  220.222257][ T7469] bridge_slave_1: entered promiscuous mode
[  220.357590][ T7469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  220.373628][ T7469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  220.525285][ T7487] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode
[  220.541717][ T7469] team0: Port device team_slave_0 added
[  220.555349][ T7469] team0: Port device team_slave_1 added
[  220.645595][ T7469] batman_adv: batadv0: Adding interface: batadv_slave_0
[  220.649007][ T7469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.695658][ T7469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  220.700731][ T1110] bridge_slave_1: left allmulticast mode
[  220.703079][ T1110] bridge_slave_1: left promiscuous mode
[  220.704727][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.710199][   T40] audit: type=1400 audit(1729520448.956:335): avc:  denied  { create } for  pid=7488 comm="syz.2.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  220.726386][ T1110] bridge_slave_0: left allmulticast mode
[  220.729623][ T1110] bridge_slave_0: left promiscuous mode
[  220.735063][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.790682][ T7489] kAFS: unparsable volume name
[  220.918779][   T40] audit: type=1400 audit(1729520449.166:336): avc:  denied  { ioctl } for  pid=7488 comm="syz.2.533" path="socket:[23694]" dev="sockfs" ino=23694 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  221.497770][   T40] audit: type=1400 audit(1729520449.746:337): avc:  denied  { read } for  pid=7494 comm="syz.3.534" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  221.506007][   T40] audit: type=1400 audit(1729520449.746:338): avc:  denied  { open } for  pid=7494 comm="syz.3.534" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  221.512319][   T40] audit: type=1400 audit(1729520449.756:339): avc:  denied  { listen } for  pid=7494 comm="syz.3.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  222.275654][ T5346] Bluetooth: hci5: command tx timeout
[  224.365999][ T5346] Bluetooth: hci5: command tx timeout
[  225.159634][ T5340] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  225.163749][ T5340] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  225.166253][ T5340] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  225.168679][ T5340] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  225.173630][ T5340] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  225.176027][ T5340] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  226.445703][ T5340] Bluetooth: hci5: command tx timeout
[  227.236100][ T5340] Bluetooth: hci2: command tx timeout
[  229.315724][ T5340] Bluetooth: hci2: command tx timeout
[  231.395779][ T5340] Bluetooth: hci2: command tx timeout
[  231.648715][ T5346] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  231.652782][ T5346] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  231.655897][ T5346] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  231.658738][ T5346] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  231.669048][ T5346] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  231.671945][ T5346] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  231.692122][ T5346] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  231.697081][ T5346] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  231.700121][ T5346] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  231.703217][ T5346] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  231.709513][ T5346] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  231.711772][ T5346] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  232.795411][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  232.801058][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  232.805332][ T1110] bond0 (unregistering): Released all slaves
[  232.810014][ T7469] batman_adv: batadv0: Adding interface: batadv_slave_1
[  232.811719][ T7469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.823016][ T7469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  233.407993][ T1110] tipc: Left network mode
[  233.475689][ T5340] Bluetooth: hci2: command tx timeout
[  233.715832][ T5346] Bluetooth: hci8: command tx timeout
[  233.715845][ T5340] Bluetooth: hci9: command tx timeout
[  234.085169][ T7469] hsr_slave_0: entered promiscuous mode
[  234.156373][ T7469] hsr_slave_1: entered promiscuous mode
[  234.181717][ T7469] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  234.184486][ T7469] Cannot create hsr debugfs directory
[  234.843049][ T7469] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.802674][ T5346] Bluetooth: hci8: command tx timeout
[  235.804718][ T5346] Bluetooth: hci9: command tx timeout
[  237.875618][ T5346] Bluetooth: hci8: command tx timeout
[  237.877645][ T5340] Bluetooth: hci9: command tx timeout
[  239.896913][ T7507] chnl_net:caif_netlink_parms(): no params data found
[  239.957104][ T5346] Bluetooth: hci8: command tx timeout
[  239.958689][ T5340] Bluetooth: hci9: command tx timeout
[  239.978316][ T7469] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.987985][ T7498] chnl_net:caif_netlink_parms(): no params data found
[  240.014172][ T1110] hsr_slave_0: left promiscuous mode
[  240.016436][ T1110] hsr_slave_1: left promiscuous mode
[  240.018617][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  240.020577][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0
[  240.023540][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  240.025571][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1
[  240.049681][ T1110] veth1_macvtap: left promiscuous mode
[  240.051173][ T1110] veth0_macvtap: left promiscuous mode
[  240.052659][ T1110] veth1_vlan: left promiscuous mode
[  240.054037][ T1110] veth0_vlan: left promiscuous mode
[  240.708993][ T1110] team0 (unregistering): Port device team_slave_1 removed
[  240.772473][ T1110] team0 (unregistering): Port device team_slave_0 removed
[  241.240775][ T7507] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.242601][ T7507] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.244336][ T7507] bridge_slave_0: entered allmulticast mode
[  241.246407][ T7507] bridge_slave_0: entered promiscuous mode
[  241.259927][ T7469] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.303677][ T7507] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.306815][ T7507] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.309513][ T7507] bridge_slave_1: entered allmulticast mode
[  241.312449][ T7507] bridge_slave_1: entered promiscuous mode
[  241.340300][ T7504] chnl_net:caif_netlink_parms(): no params data found
[  241.373877][ T7507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  241.384373][ T7469] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.408164][ T7507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  241.428073][ T7498] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.429791][ T7498] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.431559][ T7498] bridge_slave_0: entered allmulticast mode
[  241.434089][ T7498] bridge_slave_0: entered promiscuous mode
[  241.464008][ T7507] team0: Port device team_slave_0 added
[  241.470036][ T7498] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.471934][ T7498] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.473804][ T7498] bridge_slave_1: entered allmulticast mode
[  241.476323][ T7498] bridge_slave_1: entered promiscuous mode
[  241.480286][ T7507] team0: Port device team_slave_1 added
[  241.548170][ T7504] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.550797][ T7504] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.553449][ T7504] bridge_slave_0: entered allmulticast mode
[  241.556835][ T7504] bridge_slave_0: entered promiscuous mode
[  241.564518][ T7498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  241.569073][ T7498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  241.572456][ T7507] batman_adv: batadv0: Adding interface: batadv_slave_0
[  241.574755][ T7507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.582941][ T7507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  241.588400][ T7507] batman_adv: batadv0: Adding interface: batadv_slave_1
[  241.590367][ T7507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.598045][ T7507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  241.601822][ T7504] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.603699][ T7504] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.606274][ T7504] bridge_slave_1: entered allmulticast mode
[  241.608425][ T7504] bridge_slave_1: entered promiscuous mode
[  241.635399][ T7498] team0: Port device team_slave_0 added
[  241.655885][ T7504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  241.660424][ T7504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  241.664662][ T7498] team0: Port device team_slave_1 added
[  241.724338][ T7507] hsr_slave_0: entered promiscuous mode
[  241.726446][ T7507] hsr_slave_1: entered promiscuous mode
[  241.728276][ T7507] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  241.730208][ T7507] Cannot create hsr debugfs directory
[  241.739658][ T7498] batman_adv: batadv0: Adding interface: batadv_slave_0
[  241.742015][ T7498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.751200][ T7498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  241.761395][ T7504] team0: Port device team_slave_0 added
[  241.763190][ T7498] batman_adv: batadv0: Adding interface: batadv_slave_1
[  241.764754][ T7498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.772021][ T7498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  241.781871][ T7504] team0: Port device team_slave_1 added
[  241.801648][ T7469] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  241.829899][ T7469] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  241.833067][ T7469] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  241.836552][ T7504] batman_adv: batadv0: Adding interface: batadv_slave_0
[  241.838495][ T7504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.845046][ T7504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  241.850401][ T7504] batman_adv: batadv0: Adding interface: batadv_slave_1
[  241.852321][ T7504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.859730][ T7504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  241.872551][ T7498] hsr_slave_0: entered promiscuous mode
[  241.874382][ T7498] hsr_slave_1: entered promiscuous mode
[  241.877053][ T7498] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  241.878825][ T7498] Cannot create hsr debugfs directory
[  241.880174][ T7469] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  241.910125][ T7504] hsr_slave_0: entered promiscuous mode
[  241.912146][ T7504] hsr_slave_1: entered promiscuous mode
[  241.914001][ T7504] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  241.916708][ T7504] Cannot create hsr debugfs directory
[  242.004861][ T7507] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.077358][ T7507] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.095218][ T7469] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.136106][ T7469] 8021q: adding VLAN 0 to HW filter on device team0
[  242.150281][ T7507] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.156563][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.158454][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state
[  242.162999][  T106] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.164932][  T106] bridge0: port 2(bridge_slave_1) entered forwarding state
[  242.211328][ T7507] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.246348][ T7469] 8021q: adding VLAN 0 to HW filter on device batadv0
[  242.270881][ T7469] veth0_vlan: entered promiscuous mode
[  242.278801][ T7469] veth1_vlan: entered promiscuous mode
[  242.311230][ T1110] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.341202][ T7507] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  242.345320][ T7507] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  242.365284][ T7498] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.371098][ T7507] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  242.374632][ T7469] veth0_macvtap: entered promiscuous mode
[  242.383924][ T1110] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.390316][ T7507] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  242.395468][ T7469] veth1_macvtap: entered promiscuous mode
[  242.410608][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.413379][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.416171][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.419063][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.421675][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.424724][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.427583][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.430396][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.433107][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.436035][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.438720][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.441499][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.444218][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.447339][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.450808][ T7469] batman_adv: batadv0: Interface activated: batadv_slave_0
[  242.467903][ T7498] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.474572][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.477730][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.480328][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.483154][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.485984][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.488774][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.491415][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.494271][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.497331][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.500811][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.503645][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.506463][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.509027][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.511870][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.517281][ T7469] batman_adv: batadv0: Interface activated: batadv_slave_1
[  242.534072][ T1110] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.542172][ T7469] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.545299][ T7469] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.548718][ T7469] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.551907][ T7469] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.564492][ T7498] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.596903][ T1110] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.634110][ T7498] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.648744][ T1201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.650799][ T1201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.656351][ T7507] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.665287][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.667503][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.672189][ T7507] 8021q: adding VLAN 0 to HW filter on device team0
[  242.676601][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.678578][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state
[  242.689041][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.690979][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state
[  242.760823][ T1110] bridge_slave_1: left allmulticast mode
[  242.762355][ T1110] bridge_slave_1: left promiscuous mode
[  242.764435][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.767835][ T1110] bridge_slave_0: left allmulticast mode
[  242.769812][ T1110] bridge_slave_0: left promiscuous mode
[  242.771884][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.776491][ T1110] bridge_slave_1: left allmulticast mode
[  242.778004][ T1110] bridge_slave_1: left promiscuous mode
[  242.779564][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.782499][ T1110] bridge_slave_0: left allmulticast mode
[  242.784158][ T1110] bridge_slave_0: left promiscuous mode
[  242.786832][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.790851][ T1110] bridge_slave_1: left allmulticast mode
[  242.792557][ T1110] bridge_slave_1: left promiscuous mode
[  242.794300][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.802122][ T1110] bridge_slave_0: left allmulticast mode
[  242.803824][ T1110] bridge_slave_0: left promiscuous mode
[  242.805394][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.814754][ T1110] bridge_slave_1: left allmulticast mode
[  242.816536][ T1110] bridge_slave_1: left promiscuous mode
[  242.818037][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.820745][ T1110] bridge_slave_0: left allmulticast mode
[  242.822282][ T1110] bridge_slave_0: left promiscuous mode
[  242.823806][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.827867][ T1110] bridge_slave_1: left allmulticast mode
[  242.829514][ T1110] bridge_slave_1: left promiscuous mode
[  242.831024][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.834164][ T1110] bridge_slave_0: left allmulticast mode
[  242.837982][ T1110] bridge_slave_0: left promiscuous mode
[  242.839531][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.842912][ T1110] bridge_slave_1: left allmulticast mode
[  242.844403][ T1110] bridge_slave_1: left promiscuous mode
[  242.846556][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.849325][ T1110] bridge_slave_0: left allmulticast mode
[  242.850776][ T1110] bridge_slave_0: left promiscuous mode
[  242.852274][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.855317][ T1110] bridge_slave_1: left allmulticast mode
[  242.857133][ T1110] bridge_slave_1: left promiscuous mode
[  242.858655][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.861433][ T1110] bridge_slave_0: left allmulticast mode
[  242.862947][ T1110] bridge_slave_0: left promiscuous mode
[  242.864460][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.025602][ T5960] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  243.175612][ T5960] usb 6-1: Using ep0 maxpacket: 32
[  243.179610][ T5960] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  243.181748][ T5960] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  243.184600][ T5960] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  243.187584][ T5960] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  243.190982][ T5960] usb 6-1: config 0 interface 0 has no altsetting 0
[  243.194460][ T5960] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  243.196976][ T5960] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  243.199098][ T5960] usb 6-1: Product: syz
[  243.200181][ T5960] usb 6-1: Manufacturer: syz
[  243.201250][ T5960] usb 6-1: SerialNumber: syz
[  243.203327][ T5960] usb 6-1: config 0 descriptor??
[  243.207664][ T5960] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  243.210521][ T5960] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  243.418648][ T7409] usb 6-1: USB disconnect, device number 14
[  243.421019][ T7409] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  243.865579][ T7409] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[  244.028031][ T7409] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  244.030758][ T7409] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  244.034406][ T7409] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  244.039002][ T7409] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  244.043501][ T7409] usb 6-1: config 0 interface 0 has no altsetting 0
[  244.047559][ T7409] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  244.050217][ T7409] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  244.052381][ T7409] usb 6-1: Product: syz
[  244.053475][ T7409] usb 6-1: Manufacturer: syz
[  244.054722][ T7409] usb 6-1: SerialNumber: syz
[  244.058982][ T7409] usb 6-1: config 0 descriptor??
[  244.061442][ T7409] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  244.067755][ T7409] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  244.107992][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  244.111557][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  244.115435][ T1110] bond0 (unregistering): Released all slaves
[  244.178746][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  244.182429][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  244.185840][ T1110] bond0 (unregistering): Released all slaves
[  244.244811][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  244.248485][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  244.251790][ T1110] bond0 (unregistering): Released all slaves
[  244.317371][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  244.321819][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  244.325541][ T1110] bond0 (unregistering): Released all slaves
[  244.391500][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  244.395657][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  244.399412][ T1110] bond0 (unregistering): Released all slaves
[  244.418728][ T7533] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  244.418912][   T25] usb 6-1: USB disconnect, device number 15
[  244.420719][    C0] ldusb 6-1:0.0: usb_submit_urb failed (-19)
[  244.427524][   T25] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  244.473657][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  244.478148][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  244.482221][ T1110] bond0 (unregistering): Released all slaves
[  244.556634][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  244.561470][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  244.565560][ T1110] bond0 (unregistering): Released all slaves
[  244.617114][ T7498] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  244.620402][ T7498] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  244.627830][ T7507] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.630527][ T7498] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  244.639830][ T7498] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  244.701376][ T1110] tipc: Left network mode
[  244.715141][ T7507] veth0_vlan: entered promiscuous mode
[  244.728459][ T7507] veth1_vlan: entered promiscuous mode
[  244.760482][ T1110] tipc: Left network mode
[  244.799520][ T7498] 8021q: adding VLAN 0 to HW filter on device bond0
[  244.802704][ T1110] tipc: Left network mode
[  244.841861][ T1110] tipc: Left network mode
[  244.851032][ T7498] 8021q: adding VLAN 0 to HW filter on device team0
[  244.856035][ T7507] veth0_macvtap: entered promiscuous mode
[  244.860138][ T7507] veth1_macvtap: entered promiscuous mode
[  244.865023][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.867007][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state
[  244.886161][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.888089][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state
[  244.901528][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.905057][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.908550][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.911968][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.915225][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.919940][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.923168][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.926809][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.930042][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.933662][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.937163][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.940580][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.944024][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.947735][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.950996][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.954497][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.958732][ T7507] batman_adv: batadv0: Interface activated: batadv_slave_0
[  244.967231][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.970852][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.974129][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.977861][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.981104][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.984700][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.988117][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.990995][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.993417][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.996265][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.998812][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.001497][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.004001][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.006804][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.009323][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.012000][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.015298][ T7507] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.020443][ T7507] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.022745][ T7507] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.025006][ T7507] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.027260][ T7507] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.132365][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.137091][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.183432][ T1201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.185301][ T7498] 8021q: adding VLAN 0 to HW filter on device batadv0
[  245.189598][ T1201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.189690][ T7504] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  245.194965][ T7504] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  245.203184][ T7504] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  245.212499][ T7504] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  245.265137][   T40] audit: type=1400 audit(1729520473.506:340): avc:  denied  { write } for  pid=7572 comm="syz.1.543" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  245.288941][ T7498] veth0_vlan: entered promiscuous mode
[  245.296684][ T7498] veth1_vlan: entered promiscuous mode
[  245.322070][ T7498] veth0_macvtap: entered promiscuous mode
[  245.349385][ T7498] veth1_macvtap: entered promiscuous mode
[  245.363803][ T7504] 8021q: adding VLAN 0 to HW filter on device bond0
[  245.399014][   T40] audit: type=1400 audit(1729520473.646:341): avc:  denied  { read append } for  pid=7570 comm="syz.2.536" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  245.405233][   T40] audit: type=1400 audit(1729520473.646:342): avc:  denied  { ioctl open } for  pid=7570 comm="syz.2.536" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  245.420887][ T7498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.423774][ T7498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.426856][ T7498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.429698][ T7498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.432330][ T7498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.435093][ T7498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.437819][ T7498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.440622][ T7498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.443263][ T7498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.446330][ T7498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.449353][ T7498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.452306][ T7498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.455161][ T7498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.458327][ T7498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.461144][ T7498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.464365][ T7498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.467823][ T7498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.470838][ T7498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.474633][ T7498] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.479817][ T7504] 8021q: adding VLAN 0 to HW filter on device team0
[  245.490558][ T1201] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.493008][ T1201] bridge0: port 1(bridge_slave_0) entered forwarding state
[  245.503251][ T7498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.506493][ T7498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.509350][ T7498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.512176][ T7498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.515056][ T7498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.518616][ T7498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.521482][ T7498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.524533][ T7498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.527476][ T7498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.530623][ T7498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.533651][ T7498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.536926][ T7498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.539663][ T7498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.542632][ T7498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.546695][ T7498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.549928][ T7498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.552949][ T7498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.555935][ T7498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.559290][ T7498] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.591248][ T7498] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.594164][ T7498] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.596872][ T7498] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.599318][ T7498] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.605937][  T106] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.607906][  T106] bridge0: port 2(bridge_slave_1) entered forwarding state
[  245.662355][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.664631][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.694622][  T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.704050][  T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.737345][ T7504] 8021q: adding VLAN 0 to HW filter on device batadv0
[  245.752029][ T7591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  245.802235][ T7504] veth0_vlan: entered promiscuous mode
[  245.809686][ T7504] veth1_vlan: entered promiscuous mode
[  245.823176][ T7504] veth0_macvtap: entered promiscuous mode
[  245.829195][ T7504] veth1_macvtap: entered promiscuous mode
[  245.854470][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.857908][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.860532][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.863231][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.865837][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.868564][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.871123][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.873990][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.877914][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.880693][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.883300][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.886190][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.888874][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.891802][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.894447][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.897534][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.900282][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.903207][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.906139][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.909008][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.912503][ T7504] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.919233][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.922059][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.924822][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.928762][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.931412][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.934271][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.937335][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.940197][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.942863][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.945709][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.948390][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.951201][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.954405][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.957888][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.960908][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.963913][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.966703][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.969697][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.972220][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.975076][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.978657][ T7504] batman_adv: batadv0: Interface activated: batadv_slave_1
[  246.014024][ T7504] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.017925][ T7504] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.021165][ T7504] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.023572][ T7504] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.063818][  T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.067832][  T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.079934][  T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.092290][  T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.335049][   T40] audit: type=1400 audit(1729520474.576:343): avc:  denied  { mount } for  pid=7604 comm="syz.0.542" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  246.349277][   T40] audit: type=1400 audit(1729520474.576:344): avc:  denied  { mounton } for  pid=7604 comm="syz.0.542" path="/2/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  246.363823][ T7605] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  246.392327][   T40] audit: type=1400 audit(1729520474.636:345): avc:  denied  { unmount } for  pid=7498 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  246.426144][ T1110] hsr_slave_0: left promiscuous mode
[  246.428177][ T1110] hsr_slave_1: left promiscuous mode
[  246.430082][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.432095][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.434344][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.438550][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.442501][ T1110] hsr_slave_0: left promiscuous mode
[  246.444330][ T1110] hsr_slave_1: left promiscuous mode
[  246.453026][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.455046][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.474173][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.476654][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.483939][ T1110] hsr_slave_0: left promiscuous mode
[  246.487783][ T1110] hsr_slave_1: left promiscuous mode
[  246.490876][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.493242][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.496133][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.498113][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.502486][ T1110] hsr_slave_0: left promiscuous mode
[  246.504491][ T1110] hsr_slave_1: left promiscuous mode
[  246.506757][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.508718][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.511108][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.513316][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.534370][ T1110] hsr_slave_0: left promiscuous mode
[  246.536627][ T1110] hsr_slave_1: left promiscuous mode
[  246.538562][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.540804][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.543175][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.545692][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.550249][ T1110] hsr_slave_0: left promiscuous mode
[  246.552124][ T1110] hsr_slave_1: left promiscuous mode
[  246.553992][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.555688][  T829] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  246.556147][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.561471][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.564046][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.568881][ T1110] hsr_slave_0: left promiscuous mode
[  246.571170][ T1110] hsr_slave_1: left promiscuous mode
[  246.573759][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.576449][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.579295][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.581838][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.645807][ T5561] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  246.725530][  T829] usb 6-1: Using ep0 maxpacket: 8
[  246.729479][  T829] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  246.731727][  T829] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  246.734261][  T829] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  246.737095][  T829] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  246.739839][  T829] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  246.743289][  T829] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  246.746491][  T829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.757618][ T1110] veth1_macvtap: left promiscuous mode
[  246.759103][ T1110] veth0_macvtap: left promiscuous mode
[  246.760572][ T1110] veth1_vlan: left promiscuous mode
[  246.761956][ T1110] veth0_vlan: left promiscuous mode
[  246.765934][ T1110] veth1_macvtap: left promiscuous mode
[  246.767425][ T1110] veth0_macvtap: left promiscuous mode
[  246.768886][ T1110] veth1_vlan: left promiscuous mode
[  246.771186][ T1110] veth0_vlan: left promiscuous mode
[  246.774335][ T1110] veth1_macvtap: left promiscuous mode
[  246.776106][ T1110] veth0_macvtap: left promiscuous mode
[  246.777777][ T1110] veth1_vlan: left promiscuous mode
[  246.779733][ T1110] veth0_vlan: left promiscuous mode
[  246.784545][ T1110] veth1_macvtap: left promiscuous mode
[  246.786248][ T1110] veth0_macvtap: left promiscuous mode
[  246.787841][ T1110] veth1_vlan: left promiscuous mode
[  246.789228][ T1110] veth0_vlan: left promiscuous mode
[  246.792758][ T1110] veth1_macvtap: left promiscuous mode
[  246.794377][ T1110] veth0_macvtap: left promiscuous mode
[  246.796359][ T1110] veth1_vlan: left promiscuous mode
[  246.797941][ T1110] veth0_vlan: left promiscuous mode
[  246.801193][ T1110] veth1_macvtap: left promiscuous mode
[  246.802702][ T1110] veth0_macvtap: left promiscuous mode
[  246.804230][ T1110] veth1_vlan: left promiscuous mode
[  246.805727][ T1110] veth0_vlan: left promiscuous mode
[  246.808035][ T5561] usb 5-1: config 0 has an invalid interface number: 18 but max is 0
[  246.810303][ T5561] usb 5-1: config 0 has no interface number 0
[  246.811992][ T5561] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.815105][ T5561] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.815813][ T1110] veth1_macvtap: left promiscuous mode
[  246.818745][ T5561] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[  246.819054][ T1110] veth0_macvtap: left promiscuous mode
[  246.821410][ T5561] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  246.822967][ T1110] veth1_vlan: left promiscuous mode
[  246.824835][ T5561] usb 5-1: Manufacturer: syz
[  246.826550][ T5561] usb 5-1: config 0 descriptor??
[  246.827922][ T1110] veth0_vlan: left promiscuous mode
[  246.910494][ T1110] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000012: 0000 [#1] PREEMPT SMP KASAN NOPTI
[  246.913788][ T1110] KASAN: null-ptr-deref in range [0x0000000000000090-0x0000000000000097]
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  246.916266][ T1110] CPU: 2 UID: 0 PID: 1110 Comm: kworker/u32:9 Not tainted 6.12.0-rc3-syzkaller-00319-gb04ae0f45168 #0
[  246.920415][ T1110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  246.923193][ T1110] Workqueue: netns cleanup_net
[  246.924534][ T1110] RIP: 0010:__fib6_drop_pcpu_from.part.0+0x199/0x510
[  246.926253][ T1110] Code: 48 c1 ea 03 42 80 3c 32 00 0f 85 5e 03 00 00 4c 8b 28 4d 85 ed 74 2e e8 d5 99 c0 f7 49 8d bd 90 00 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 24 03 00 00 49 8b 85 90 00 00 00 4c 39 e0 0f
[  246.931413][ T1110] RSP: 0018:ffffc90005cef000 EFLAGS: 00010206
[  246.933039][ T1110] RAX: 0000000000000012 RBX: 0000000000000001 RCX: 1ffffffff1b4c571
[  246.935074][ T1110] RDX: ffff888026dbc880 RSI: ffffffff89cce98b RDI: 0000000000000091
[  246.937138][ T1110] RBP: ffff88804a08b8b8 R08: 0000000000000005 R09: 0000000000000007
[  246.939596][ T1110] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88804a08b800
[  246.941645][ T1110] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffed1009411722
[  246.943693][ T1110] FS:  0000000000000000(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000
[  246.945981][ T1110] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  246.947710][ T1110] CR2: 00007fabb7bbdd58 CR3: 000000002fd14000 CR4: 0000000000352ef0
[  246.949759][ T1110] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  246.951816][ T1110] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  246.953845][ T1110] Call Trace:
[  246.954713][ T1110]  <TASK>
[  246.955704][ T1110]  ? die_addr+0x3b/0xa0
[  246.956806][ T1110]  ? exc_general_protection+0x155/0x230
[  246.958245][ T1110]  ? asm_exc_general_protection+0x26/0x30
[  246.959757][ T1110]  ? __fib6_drop_pcpu_from.part.0+0x18b/0x510
[  246.961308][ T1110]  ? __fib6_drop_pcpu_from.part.0+0x199/0x510
[  246.962903][ T1110]  ? rt6_flush_exceptions+0x6a/0x80
[  246.964272][ T1110]  fib6_purge_rt+0x80c/0x9e0
[  246.965486][ T1110]  ? __pfx_lock_release+0x10/0x10
[  246.966791][ T1110]  ? __pfx_fib6_purge_rt+0x10/0x10
[  246.968149][ T1110]  ? lock_acquire+0x2f/0xb0
[  246.969348][ T1110]  fib6_del+0xa70/0x1790
[  246.970420][ T1110]  ? __pfx_fib6_del+0x10/0x10
[  246.971546][ T1110]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  246.973002][ T1110]  ? fib6_ifdown+0xcd/0x8f0
[  246.974163][ T1110]  fib6_clean_node+0x426/0x5b0
[  246.975508][ T1110]  ? __pfx_fib6_clean_node+0x10/0x10
[  246.976894][ T1110]  ? fib6_walk+0x17a/0x370
[  246.978068][ T1110]  ? __pfx_lock_release+0x10/0x10
[  246.979294][ T1110]  fib6_walk_continue+0x44f/0x8d0
[  246.980594][ T1110]  fib6_walk+0x182/0x370
[  246.981655][ T1110]  ? __pfx_fib6_ifdown+0x10/0x10
[  246.982939][ T1110]  fib6_clean_tree+0xd7/0x120
[  246.984183][ T1110]  ? __pfx_fib6_clean_tree+0x10/0x10
[  246.985550][ T1110]  ? __pfx_fib6_clean_node+0x10/0x10
[  246.986909][ T1110]  ? __pfx_fib6_ifdown+0x10/0x10
[  246.988218][ T1110]  ? lock_acquire+0x2f/0xb0
[  246.989397][ T1110]  ? __fib6_clean_all+0xe5/0x2d0
[  246.990681][ T1110]  ? __pfx_fib6_ifdown+0x10/0x10
[  246.992437][ T1110]  __fib6_clean_all+0x100/0x2d0
[  246.993725][ T1110]  rt6_disable_ip+0x2ef/0x940
[  246.994960][ T1110]  ? find_held_lock+0x2d/0x110
[  246.996245][ T1110]  ? __pfx_rt6_disable_ip+0x10/0x10
[  246.997479][ T1110]  ? __pfx_lock_release+0x10/0x10
[  246.998801][ T1110]  addrconf_ifdown.isra.0+0x126/0x1af0
[  247.000245][ T1110]  ? __mutex_unlock_slowpath+0x164/0x650
[  247.001720][ T1110]  ? __pfx_addrconf_ifdown.isra.0+0x10/0x10
[  247.003260][ T1110]  ? trace_lock_acquire+0x14a/0x1d0
[  247.004629][ T1110]  addrconf_notify+0x220/0x19c0
[  247.005905][ T1110]  ? ip6mr_device_event+0x1bc/0x230
[  247.007282][ T1110]  notifier_call_chain+0xb9/0x410
[  247.008887][ T1110]  ? __pfx_addrconf_notify+0x10/0x10
[  247.010275][ T1110]  call_netdevice_notifiers_info+0xbe/0x140
[  247.011842][ T1110]  dev_close_many+0x333/0x6a0
[  247.013083][ T1110]  ? find_held_lock+0x2d/0x110
[  247.014340][ T1110]  ? __pfx_dev_close_many+0x10/0x10
[  247.015789][ T1110]  ? batadv_tt_local_event+0x647/0x7f0
[  247.017210][ T1110]  unregister_netdevice_many_notify+0x489/0x1e50
[  247.018840][ T1110]  ? lockdep_hardirqs_on+0x7c/0x110
[  247.020222][ T1110]  ? batadv_tt_local_event+0x647/0x7f0
[  247.021632][ T1110]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  247.023387][ T1110]  ? mutex_is_locked+0x12/0x50
[  247.024635][ T1110]  ? unregister_netdevice_queue+0x22f/0x3f0
[  247.026166][ T1110]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  247.027882][ T1110]  ? batadv_softif_destroy_vlan+0xdf/0x160
[  247.029410][ T1110]  default_device_exit_batch+0x861/0xae0
[  247.030880][ T1110]  ? __pfx_default_device_exit_batch+0x10/0x10
[  247.032510][ T1110]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  247.033957][ T1110]  ? __pfx___might_resched+0x10/0x10
[  247.035353][ T1110]  ? __pfx_cfg802154_pernet_exit+0x10/0x10
[  247.036878][ T1110]  ? __pfx_default_device_exit_batch+0x10/0x10
[  247.038481][ T1110]  ops_exit_list+0x128/0x180
[  247.039785][ T1110]  cleanup_net+0x5b7/0xb40
[  247.040959][ T1110]  ? __pfx_cleanup_net+0x10/0x10
[  247.042252][ T1110]  ? trace_lock_acquire+0x14a/0x1d0
[  247.043710][ T1110]  ? process_one_work+0x921/0x1ba0
[  247.045044][ T1110]  ? lock_acquire+0x2f/0xb0
[  247.046240][ T1110]  ? process_one_work+0x921/0x1ba0
[  247.047599][ T1110]  process_one_work+0x9c5/0x1ba0
[  247.048902][ T1110]  ? __pfx_netdevice_event_work_handler+0x10/0x10
[  247.050572][ T1110]  ? __pfx_process_one_work+0x10/0x10
[  247.052000][ T1110]  ? assign_work+0x1a0/0x250
[  247.053220][ T1110]  worker_thread+0x6c8/0xf00
[  247.054433][ T1110]  ? __pfx_worker_thread+0x10/0x10
[  247.055780][ T1110]  kthread+0x2c1/0x3a0
[  247.056851][ T1110]  ? _raw_spin_unlock_irq+0x23/0x50
[  247.058215][ T1110]  ? __pfx_kthread+0x10/0x10
[  247.059533][ T1110]  ret_from_fork+0x45/0x80
[  247.060721][ T1110]  ? __pfx_kthread+0x10/0x10
[  247.061953][ T1110]  ret_from_fork_asm+0x1a/0x30
[  247.063311][ T1110]  </TASK>
[  247.064156][ T1110] Modules linked in:
[  247.065286][ T1110] ---[ end trace 0000000000000000 ]---
[  247.066747][ T1110] RIP: 0010:__fib6_drop_pcpu_from.part.0+0x199/0x510
[  247.068515][ T1110] Code: 48 c1 ea 03 42 80 3c 32 00 0f 85 5e 03 00 00 4c 8b 28 4d 85 ed 74 2e e8 d5 99 c0 f7 49 8d bd 90 00 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 24 03 00 00 49 8b 85 90 00 00 00 4c 39 e0 0f
[  247.073506][ T1110] RSP: 0018:ffffc90005cef000 EFLAGS: 00010206
[  247.075093][ T1110] RAX: 0000000000000012 RBX: 0000000000000001 RCX: 1ffffffff1b4c571
[  247.077194][ T1110] RDX: ffff888026dbc880 RSI: ffffffff89cce98b RDI: 0000000000000091
[  247.079234][ T1110] RBP: ffff88804a08b8b8 R08: 0000000000000005 R09: 0000000000000007
[  247.081281][ T1110] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88804a08b800
[  247.083333][ T1110] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffed1009411722
[  247.085403][ T1110] FS:  0000000000000000(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000
[  247.087743][ T1110] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  247.089449][ T1110] CR2: 00007fabb7bbdd58 CR3: 000000002fd14000 CR4: 0000000000352ef0
[  247.091507][ T1110] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  247.093553][ T1110] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  247.095590][ T1110] Kernel panic - not syncing: Fatal exception in interrupt
[  247.097958][ T1110] Kernel Offset: disabled
[  247.099080][ T1110] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:33:00  Registers:
info registers vcpu 0

CPU#0
RAX=00000002000008fd RBX=ffff88802e6ba440 RCX=0000000000000830 RDX=0000000000000002
RSI=00000000000000fd RDI=0000000000000002 RBP=0000000000000001 RSP=ffffc90000007d80
R8 =0000000000000000 R9 =fffffbfff20be951 R10=ffffffff905f4a8f R11=ffffc90000007ff8
R12=1ffff92000000fb1 R13=ffffc90000007da8 R14=ffffffff8da529f0 R15=ffffffff905f7d98
RIP=ffffffff813c0088 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555562a19500 ffffffff 00c00000
GS =0000 ffff88806a600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3d5b9d2000 CR3=000000002fd14000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8132bf8b
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabb81f1133
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabb81f1140
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabb81f113a
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabb81f114e
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabb81f11d4
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabb81f12b2
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabb830b488 00007fabb830b480 00007fabb830b478 00007fabb830b450
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabb8e6d100 00007fabb830b440 00007fabb830b458 00007fabb830b4a0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabb830b498 00007fabb830b490 00007fabb830b488 00007fabb830b480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 0000000000000000 0000000000000000 0000000000000688
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc900065e0000 RBX=ffff888027390000 RCX=ffffffff816edde1 RDX=1ffff11004e72231
RSI=ffffffff864b0fdf RDI=0000000000000016 RBP=0000000000000003 RSP=ffffc900008b0eb8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=ffffc900008b0ff8
R12=0000000000000000 R13=dffffc0000000000 R14=ffff888027391188 R15=0000000000000000
RIP=ffffffff864b1007 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f728bcfbd00 ffffffff 00c00000
GS =0000 ffff88806a700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007ffc1d145ff8 CR3=000000002d290000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=595ea767595ea767 595ea767595ea767 595ea767595ea767 595ea767595ea767 595ea767595ea767 595ea767595ea767 595ea767595ea767 595ea767595ea767
ZMM22=b2c9659eb2c9659e b2c9659eb2c9659e b2c9659eb2c9659e b2c9659eb2c9659e b2c9659eb2c9659e b2c9659eb2c9659e b2c9659eb2c9659e b2c9659eb2c9659e
ZMM23=f38a0984f38a0984 f38a0984f38a0984 f38a0984f38a0984 f38a0984f38a0984 f38a0984f38a0984 f38a0984f38a0984 f38a0984f38a0984 f38a0984f38a0984
ZMM24=5887327658873276 5887327658873276 5887327658873276 5887327658873276 5887327658873276 5887327658873276 5887327658873276 5887327658873276
ZMM25=72cd7dbd72cd7dbd 72cd7dbd72cd7dbd 72cd7dbd72cd7dbd 72cd7dbd72cd7dbd 72cd7dbd72cd7dbd 72cd7dbd72cd7dbd 72cd7dbd72cd7dbd 72cd7dbd72cd7dbd
ZMM26=00ac8c2600ac8c26 00ac8c2600ac8c26 00ac8c2600ac8c26 00ac8c2600ac8c26 00ac8c2600ac8c26 00ac8c2600ac8c26 00ac8c2600ac8c26 00ac8c2600ac8c26
ZMM27=b76c476eb76c476e b76c476eb76c476e b76c476eb76c476e b76c476eb76c476e b76c476eb76c476e b76c476eb76c476e b76c476eb76c476e b76c476eb76c476e
ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=f2050000f2050000 f2050000f2050000 f2050000f2050000 f2050000f2050000 f2050000f2050000 f2050000f2050000 f2050000f2050000 f2050000f2050000
info registers vcpu 2

CPU#2
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff850af3f5 RDI=ffffffff9aae6b80 RBP=ffffffff9aae6b40 RSP=ffffc90005cee960
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6b726f776b205043
R12=0000000000000000 R13=0000000000000020 R14=ffffffff850af390 R15=0000000000000000
RIP=ffffffff850af41f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a800000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fabb7bbdd58 CR3=000000002fd14000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8132bf8b
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabb81f1133
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabb81f1140
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabb81f113a
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabb81f114e
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabb81f11d4
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabb81f12b2
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabb830b488 00007fabb830b480 00007fabb830b478 00007fabb830b450
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabb8e6d100 00007fabb830b440 00007fabb830b458 00007fabb830b4a0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabb830b498 00007fabb830b490 00007fabb830b488 00007fabb830b480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 0000000000000000 0000000000000000 0000000000000688
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000672114 RBX=0000000000000003 RCX=ffffffff8b226309 RDX=ffffed100d527026
RSI=ffffffff8bd1a900 RDI=ffffffff81647ecc RBP=ffffed1003b56488 RSP=ffffc900001a7e08
R8 =0000000000000000 R9 =ffffed100d527025 R10=ffff88806a93812b R11=0000000000000001
R12=0000000000000003 R13=ffff88801dab2440 R14=ffffffff905f4a88 R15=0000000000000000
RIP=ffffffff8b2276ef RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a900000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000002001e000 CR3=0000000063970000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=000000007ffbffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd453e0540 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabb81f1133
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabb81f1140
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabb81f113a
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabb81f114e
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabb81f11d4
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabb81f12b2
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000688
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 0000000000000000 0000000000000000 0000000000000688
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000