last executing test programs:

5.412546143s ago: executing program 1 (id=114):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x70bd2c, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'wg2\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r5, 0x84, 0x9, &(0x7f0000000380), 0x98)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'dummy0\x00', @multicast})
syz_io_uring_setup(0x6b5f, &(0x7f0000000080)={0x0, 0x20, 0x13100, 0x0, 0xfffffffc}, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x4048000)
socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = syz_io_uring_setup(0x117, 0x0, &(0x7f0000000280)=<r8=>0x0, &(0x7f0000000200)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc})
io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='hfs\x00', 0x8200, 0x0)
socket(0x10, 0x2, 0x0)

4.514048697s ago: executing program 1 (id=109):
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x231, 0x0, 0x0, &(0x7f00000001c0))
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r4, @ANYBLOB="08001b"], 0x34}}, 0x4004010)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$can_raw(0x1d, 0x3, 0x1)
r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='fdinfo\x00')
fchdir(r5)
r6 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e", 0x11}], 0x1}, 0x0)
r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$packet(0x11, 0x2, 0x300)
socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c00)={0x1e8, 0x0, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @broadcast, @initial, {0x0, 0x4}, @value=@ver_80211n={0x0, 0x6, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x0, @default, 0x1007, @void, @void, @val={0x3, 0x1, 0xb5}, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xab, 0x4b}}, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0xfd, 0x1, 0x0, 0x80, 0x8}}, @void}}, @NL80211_ATTR_IE_PROBE_RESP={0x178, 0x7f, [@ssid={0x0, 0x6, @default_ap_ssid}, @random_vendor={0xdd, 0xc5, "9eac8ade81fd41b18982fa396b192c99053c7397a214c53d5e6c9f555a0e1e4961bf7d2102623fe8989c57bdf934037d3eb7cca2ef1a31dd119950e805057e8cb0f5f2a3c3fac7b32a17e7ad1d6b1fb2484fec1df790f597b82a32787b4e8475b266a7dad1688d3359cc7c11973a5e7a0b7db992f139aa5086b15d2744f4d3e2547a10e64bb1ba69df0a9f71f476efa55a7c401d3cf80c90ae76326c5f89f95802fab6c8700935da3807fc01e63dcb70d8defad699e8d8ee7883adfdb47ff9e0616dd15005"}, @tim={0x5, 0xa3, {0x5, 0x5b, 0x2, "db4f0b3c06d442f81ff91ffdf73b810697deea308f391263cb68bb1f347a8a86464589d4ecc69c67d6fd41a31da82d3dbb779e6263cb4d007bf93cee197b7e289519a8cbdb487f7458a5d2ef54394579bc635a490a686bd2a4d6aff1d7991353250d36481a0802362322913b8128203a8856505e3282a19410f3c850cae5429f8e653af8f7ee992e8e4cf555c1d37d63b3796643111844c080e8842c30059d5d"}}]}, @NL80211_ATTR_IE={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x100}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8000000}]}, 0x1e8}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414"], 0x528}}, 0xc000)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3570], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r9}, 0x10)
socket$inet6(0xa, 0x80002, 0x0)

4.181435315s ago: executing program 1 (id=111):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000005580)={0x23, 0x7, 0x6, 0x79}, 0x10)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
sendmsg$FOU_CMD_ADD(r1, 0x0, 0x40080)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$hidraw(0x0, 0x0, 0x4a141)
r2 = syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0)
ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000000680))
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x16)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x3e, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}}, 0x90)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote}, 0x1c)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x8854)
r9 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r9, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000001140)}}, 0x10)

3.576688589s ago: executing program 0 (id=115):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xda9}]}}]}, 0x40}}, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10)
r4 = io_uring_setup(0x1cbd, &(0x7f0000000ac0)={0x0, 0x38f2, 0x2, 0x2, 0x4000020})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = dup3(r6, r5, 0x0)
r8 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000200)={0x2})
ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000240)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200b67015bf39d503e24352b24c2d4a2fb952174ff781fc95121b6f17e7e6c9c2009ff5fdcf3001c0cb083d525cf40f550cef1ebc6ae715bb706493ad80feb09eeec68cc6ef782801c6c90d68039f1e", 0x66)
r10 = accept4(r9, 0x0, 0x0, 0x80000)
sendmsg$alg(r10, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0xfffffffc, 0x1, 0x0, 0x0, 0x0, "cf0da7087b9539556f7ab2a8bf68b63bfcbea9"})
r11 = fanotify_init(0x0, 0x0)
writev(r11, &(0x7f0000000500)=[{&(0x7f0000000080)="88", 0x8}, {0x0}], 0x2)

3.22301831s ago: executing program 1 (id=117):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2}})
io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0)

3.093994744s ago: executing program 0 (id=119):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xdb, 0x1f7, 0x8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x882, 0x0)
readv(r7, &(0x7f0000001e40)=[{&(0x7f0000001a00)=""/108, 0x6c}, {&(0x7f0000001a80)=""/202, 0xca}], 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r9 = dup(r8)
write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c)
r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0xfe, @empty}, 0x10)
syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000140))
ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r10, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf30, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r10, 0x7b1, &(0x7f0000000080)={&(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa99f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x1, 0x400})
close_range(r0, 0xffffffffffffffff, 0x0)

2.690923372s ago: executing program 0 (id=120):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r2 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r1, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r6, 0x1, 0x0, @void}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a0600000000140004800800024032658aeb08000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fbff", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0)
pause()
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000cc0)={'ip6gre0\x00', &(0x7f0000000c40)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x4d, 0x8, 0x60, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x700, 0x4, 0x102}})
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
preadv(r9, &(0x7f0000002100)=[{&(0x7f00000007c0)=""/80, 0x50}], 0x1, 0x1fffff, 0xa3ab)
syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd65d15cdc00442ffffc020000000000000000000000000001fe8000000000000000000000000000aa"], 0x0)
pipe2$9p(&(0x7f00000000c0), 0x84000)
r10 = syz_open_dev$vivid(&(0x7f0000000100), 0x3, 0x2)
ioctl$VIDIOC_SUBDEV_S_FMT(r10, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0x4f6, 0x7ff, 0x3003, 0x0, 0x1, 0x1, 0x0, 0x5}})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)

1.850787796s ago: executing program 1 (id=122):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x1d7efbbd, 0x0, 0x200003}, 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)
r3 = dup(r1)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x5c4, &(0x7f00000003c0)={0x0, 0xf093, 0x1000, 0x8040, 0xb7}, &(0x7f0000000240)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', <r8=>0x0})
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r9, 0x40000000af01, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x8c031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9)
ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000000300))
ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/84, 0x0, 0xdddd0000})
r10 = dup(r7)
ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000000000)={0x0, r10})
sendto$packet(r7, &(0x7f0000000040)="363c8f3fca5d66571e583e7c88a8", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
r12 = syz_open_procfs(0x0, &(0x7f00000002c0)='numa_maps\x00')
read$FUSE(r12, &(0x7f0000003480)={0x2020}, 0x2020)
syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f0000000140), 0x0, 0x3004, 0x1, {0x0, r11}})

1.849422675s ago: executing program 3 (id=124):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000001280), 0x8)
r2 = dup(r0)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x7)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000424000/0x2000)=nil, 0x2000}})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x4b68, &(0x7f00000001c0)={0x0, 0x2426, 0x0, 0xfffffffd, 0x1, 0x0, r2}, &(0x7f0000000180), 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x2, 0x0)
unshare(0x2e080200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00'}, 0x18)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0)
setresgid(0xee00, 0xee01, 0x0)
setgroups(0x0, 0x0)
setuid(0xee00)
shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000240), 0x301001, 0x0)

1.784928072s ago: executing program 3 (id=125):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10)
syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x3c, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], "e4073d2d9d9074f6738f6fe9"}}}}}}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
bpf$BPF_TASK_FD_QUERY(0x24, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
syz_emit_ethernet(0x5eb, &(0x7f0000000180)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x5b5, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xc}, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, [{0x3, 0x16, "004af660fdcd2a9d3fea8639c367475824e5ff1fec61d05cd2481e5f16a2e0c0c7a77da8e54574913307583a126de92dd2f27575716d36ceade2ad37f45e18289a13311b1525e24fd1078f16a632b7d9e170e1e59580de090000000000000026862b4351000964ab32e55e4339bb2937602534c310d016fa7537403ddcdd12341a16f2bdef862e5ba4d76e965de44b86e123844d8361242c7809117c5eacdc237022f54dc68760d4711978c0575160dd2dfe2e"}, {0x0, 0x6, "3abc2ac2bfb0f9366574005770a981d0425b685b7f39f2bf671c534e4af4347759f70e051bc102a9d7655956b8bc8486cde8bc388d"}, {0x0, 0x97, "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"}]}}}}}}, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0)
r5 = dup3(0xffffffffffffffff, r4, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000040)=0x3, 0x4)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000780)={0x73622a85, 0x880, 0x1})
dup3(r5, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7be17000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1.784671258s ago: executing program 0 (id=130):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000006, 0x2)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0x4002, &(0x7f0000000000)=0xa636, 0x5, 0x0)
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x100, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000007c0)=""/168, 0x13b, 0xa8, 0x1, 0x747, 0x0, @void, @value}, 0x28)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x8, r0}, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x10, &(0x7f0000000540)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0xff, 0xa3, &(0x7f00000005c0)=""/163, 0x40f00, 0x2d, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x5, 0x7, 0x9a20, 0x200000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000900)=[r7], &(0x7f0000000940)=[{0x4, 0x4, 0x7, 0x4}, {0x3, 0x2, 0x7, 0x7}], 0x10, 0x4, @void, @value}, 0x94)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x44, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x700}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}]}, 0x44}}, 0x0)
r9 = accept4(r0, 0x0, 0x0, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r11, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r13, 0x1, 0x0, 0xfffffffc, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}]}, 0x30}}, 0x80)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x200080d0)
r14 = accept4(r9, 0x0, 0x0, 0x0)
recvfrom$ax25(r14, 0x0, 0x0, 0x1, 0x0, 0x0)

1.452875428s ago: executing program 1 (id=129):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xad, &(0x7f00000002c0)=""/173, 0x41000, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x35, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_CAPBSET_DROP(0x18, 0x6)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00')
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000000)={0x0, 'veth0_to_batadv\x00', {0x2}, 0x8001})
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
r6 = fcntl$dupfd(r4, 0x0, r4)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000001c0))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0xffffffee, {}, 0x5, 0x107ffffffe}}}, 0x90)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)

1.338264394s ago: executing program 3 (id=132):
r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffe000/0x2000)=nil)
r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff)
keyctl$chown(0x4, r1, 0xee01, 0xee00)
keyctl$chown(0x4, r1, 0x0, 0x0)
r2 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/slabinfo\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0x5, 0x8)
writev(r4, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
close_range(r7, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000380)="a9ccc5ce5cc60fda31270beff2910944960b6b7aa3a6466bbc44f46fc966dfd18f66794392ad36b4ed4f7004f3d9bc3999f5ab4313929847e82d8abbaaebac853af7ee5cac9217e93dda15c795f30bd7d4b17c564304", 0x56)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x111aeb0946faa8f0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r8}, 0x10)
rt_sigaction(0x2, 0x0, 0x0, 0x8, &(0x7f0000000340))
shmctl$SHM_UNLOCK(r0, 0xc)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r10 = dup(r9)
ioctl$PTP_EXTTS_REQUEST2(r10, 0x40103d0b, &(0x7f0000000080)={0x400, 0xe})
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r12=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r11, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r12, 0x0, 0x0, 0x0, <r13=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r11, 0x3b89, &(0x7f00000001c0)={0x28, 0x1, r13, r12, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r11, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r12, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r12})
openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
map_shadow_stack(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1)

1.208174982s ago: executing program 3 (id=133):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000001280), 0x8)
r2 = dup(r0)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x7)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000424000/0x2000)=nil, 0x2000}})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x4b68, &(0x7f00000001c0)={0x0, 0x2426, 0x0, 0xfffffffd, 0x1, 0x0, r2}, &(0x7f0000000180), 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x2, 0x0)
unshare(0x2e080200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00'}, 0x18)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0)
setresgid(0xee00, 0xee01, 0x0)
setgroups(0x0, 0x0)
setuid(0xee00)
shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000240), 0x301001, 0x0)

1.207762587s ago: executing program 2 (id=134):
r0 = socket(0x10, 0x3, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r3, @ANYBLOB="0400080105003400c7000000080026f36c090000"], 0x30}}, 0x0) (async)
r5 = dup(r1) (async)
r6 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, 0x0, 0x0) (async)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x1510, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000180), &(0x7f00000001c0))
ptrace$setregs(0xf, 0x0, 0x7ff, 0x0)
io_uring_enter(r5, 0x2def, 0x804ffe, 0x2, 0x0, 0x62) (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r7 = socket$inet(0x2, 0x3, 0xc)
setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) (async)
shutdown(r7, 0x0)
recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) (async)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r9, 0x0, 0x0) (async)
timerfd_create(0x1, 0x0) (async)
timerfd_settime(r5, 0x3, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', <r10=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xc}]}}, @TCA_RATE={0x6}]}, 0x40}}, 0x4000)

1.207443887s ago: executing program 0 (id=135):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x9d52, 0x10100, 0x0, 0xe7}, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0})
io_uring_enter(r2, 0x2def, 0x9c75, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000300)=@gcm_256={{0x303}, "97e46e2921705cb9", "7eb560b5f7b2d2ab1b423d28b6417d7decab8a498df2072dce8cadadf5008f08", "270d3203", "035f8b690ff31ffd"}, 0x38)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
readv(r5, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_int(r6, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

911.650871ms ago: executing program 3 (id=136):
r0 = openat$nmem0(0xffffff9c, 0x0, 0x101000, 0x0)
fremovexattr(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="747275737465642e0090b8273c22898f05316251b047a5d1a03319fdaf9882b67304b737b5d3d0305106a625c1c98f7c1faec8c5329bf4bd6b7c414566b4a05b4c55ac0c522a49cf8d7faa9956e73d699567e2273a02b43657afaf5da712f6018b751eab6e434c0b8e637784b3c2a7001ae94b612bd50532813a1c52d35b4781099cb61ede466da8d5e9ab92e38048ec46bcac00f055"])
socket$inet6_udp(0xa, 0x2, 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
r1 = getuid()
quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@nullb, r1, 0x0)
unshare(0x62040200)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
socket$kcm(0x11, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
prlimit64(0x0, 0x5, &(0x7f0000000080)={0x80002, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a)
r5 = accept4(r4, 0x0, 0x0, 0x0)
write(r5, &(0x7f0000000040)="cb", 0xfffffdef)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0x40585414, &(0x7f0000000280)={0x1, 0x0, 0x2, 0xb7d375beb1f4ba0d, 0x7d})
syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

811.372896ms ago: executing program 2 (id=137):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
connect$caif(0xffffffffffffffff, &(0x7f00000003c0)=@rfm={0x25, 0xfffffffd, "606c43f7bcb3930aef0751e5da32af8b"}, 0x18)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x29d5, &(0x7f0000000580)={0x0, 0x9257, 0x100, 0x0, 0x2a})
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_emit_ethernet(0x86, &(0x7f0000000780)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fe8000000000000000000000000800bbfe80000000"], 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10)
shutdown(0xffffffffffffffff, 0x1)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x0, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9e0d]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast1, 0x329}, 0x0, {[0x5a]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x4]}}, 0x5c)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, 0x0, 0x0)
write$nci(0xffffffffffffffff, 0x0, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffdf})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300)}}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000007c008500000022000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x5f, &(0x7f0000000000)="e7279aca14a250af02bf6e7e7a4160f5951d36d70eda8dda0e8212ba516ba4417b4901523200000000000080b2af1fcfbe039e0dabba669ca0ede0386357affc3c04dc8b45deaecb0e17c3287a72323659dd75650adfaa4887cc5a59ade3e3", 0x8, 0x1, 0x15c2, 0x8, 0x400, 0x2, 0x80000000, 'syz0\x00'})

811.001878ms ago: executing program 2 (id=138):
syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = syz_io_uring_setup(0x250, &(0x7f0000000380)={0x0, 0x0, 0x40, 0x0, 0x35}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x118)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000000340)={0x9, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/217, 0xd9}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/4096, 0x1000}], &(0x7f00000001c0)=[0x8000, 0x5], 0x3}, 0x20)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

731.099944ms ago: executing program 2 (id=139):
r0 = socket$kcm(0x2, 0x5, 0x84)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
futex(0x0, 0x5, 0x100000, 0x0, 0x0, 0x0)
link(0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r4}, @call={0x85, 0x0, 0x0, 0x86}]}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0xd0, &(0x7f00000003c0)=""/208, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

531.696249ms ago: executing program 2 (id=140):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x524, 0xffffffff, 0x280, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x45c, 0x45c, 0x45c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x224, 0x280, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'bridge0\x00', {0x0, 0x6, 0x0, 0x0, 0x0, 0x40, 0x10000}, {0x81}}}, @common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa, 0xf7, 0x2}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x3d}, [0xffffff00, 0xffffff00, 0xff, 0xa76985a6c987ee4d], 0x4e23, 0x4e22, 0x4e20, 0x4e24, 0xffffff62, 0x40, 0x2, 0xd29}}}, {{@ipv6={@mcast1, @loopback, [0xff000000, 0x7f0000ff, 0xff000101, 0xffffff], [0xff000000, 0xffffff00, 0x0, 0xff000000], 'bond_slave_0\x00', 'netpci0\x00', {}, {}, 0x29, 0x4, 0x3}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@eui64={{0x24}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, [], [], 'team_slave_1\x00', 'syzkaller1\x00'}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@eui64={{0x24}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x1, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x580)

525.006599ms ago: executing program 2 (id=141):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x642582, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @echo_request}}}}}, 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @echo_request}}}}}, 0x0)
r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0)

318.845855ms ago: executing program 0 (id=142):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x78)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0x2c, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x176)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100))
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0xffffffffffffffff)
connect$llc(r6, 0x0, 0x0)
sendmmsg(r6, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xb, 0x3})

0s ago: executing program 3 (id=143):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r2 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0)
ftruncate(r2, 0xfff)
ioctl$TCSBRKP(r2, 0x5425, 0x6)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0xc2)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f0000000480)=""/202, &(0x7f0000000280)=0xca)
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0x900000d2)
read(r4, 0x0, 0x10)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, 0x0, 0x0)
write$char_usb(r2, &(0x7f0000000240)="8c80", 0x2)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYRES64=r2], &(0x7f0000000440)='GPL\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r6}, 0x18)
ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f00000000c0))
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000900)=0x15)
writev(r8, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2)
sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r9, 0x0, 0x2, 0x0, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$inet6(r5, &(0x7f0000003a00)=[{{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @mcast2, 0x5b26}, 0x1c, &(0x7f0000001600)=[{&(0x7f00000003c0)="af260906c62de1956c305529d1f73f4f580dc81e8e05fdf1ce6463e7640048", 0x1f}], 0x1}}], 0x1, 0xc0c0)
close_range(r3, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:43060' (ED25519) to the list of known hosts.
[   31.652930][ T5857] cgroup: Unknown subsys name 'net'
[   31.797798][ T5857] cgroup: Unknown subsys name 'cpuset'
[   31.800638][ T5857] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   32.352812][ T5857] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   33.993647][ T5927] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   33.993691][ T5928] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   33.993702][ T5926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   33.993790][ T5926] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   33.993923][ T5926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   33.994001][ T5926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   33.994216][ T5926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   33.994360][ T5926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   33.994428][ T5926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   33.996992][ T5926] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   33.998025][ T5927] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   33.998163][ T5927] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   33.998515][ T5927] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   33.999109][ T5928] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   33.999188][ T5928] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   33.999534][ T5928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   33.999667][ T5928] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   33.999736][ T5928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   34.002031][ T5926] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   34.004078][ T5927] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   34.006385][ T5926] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   34.008943][ T5927] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   34.011048][ T5930] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   34.047312][ T5930] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   34.098634][ T5916] chnl_net:caif_netlink_parms(): no params data found
[   34.104414][ T5914] chnl_net:caif_netlink_parms(): no params data found
[   34.197417][ T5916] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.200458][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.203427][ T5916] bridge_slave_0: entered allmulticast mode
[   34.206753][ T5916] bridge_slave_0: entered promiscuous mode
[   34.224296][ T5916] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.228713][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.231745][ T5916] bridge_slave_1: entered allmulticast mode
[   34.234781][ T5916] bridge_slave_1: entered promiscuous mode
[   34.286068][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.289146][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.292126][ T5914] bridge_slave_0: entered allmulticast mode
[   34.295071][ T5914] bridge_slave_0: entered promiscuous mode
[   34.299661][ T5916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   34.304504][ T5916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   34.313128][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.315926][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.318820][ T5914] bridge_slave_1: entered allmulticast mode
[   34.321635][ T5914] bridge_slave_1: entered promiscuous mode
[   34.358382][ T5915] chnl_net:caif_netlink_parms(): no params data found
[   34.370964][ T5914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   34.374567][ T5916] team0: Port device team_slave_0 added
[   34.378248][ T5916] team0: Port device team_slave_1 added
[   34.380923][ T5924] chnl_net:caif_netlink_parms(): no params data found
[   34.386142][ T5914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   34.443336][ T5916] batman_adv: batadv0: Adding interface: batadv_slave_0
[   34.445388][ T5916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.453100][ T5916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   34.457284][ T5914] team0: Port device team_slave_0 added
[   34.481356][ T5916] batman_adv: batadv0: Adding interface: batadv_slave_1
[   34.484078][ T5916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.492733][ T5916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   34.496505][ T5914] team0: Port device team_slave_1 added
[   34.498934][ T5915] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.501754][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.504361][ T5915] bridge_slave_0: entered allmulticast mode
[   34.506554][ T5915] bridge_slave_0: entered promiscuous mode
[   34.528351][ T5915] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.530833][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.532960][ T5915] bridge_slave_1: entered allmulticast mode
[   34.535004][ T5915] bridge_slave_1: entered promiscuous mode
[   34.549815][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_0
[   34.551933][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.559873][ T5914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   34.570946][ T5915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   34.573741][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.575899][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.578196][ T5924] bridge_slave_0: entered allmulticast mode
[   34.580595][ T5924] bridge_slave_0: entered promiscuous mode
[   34.582932][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_1
[   34.585039][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.592459][ T5914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   34.609326][ T5915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   34.612187][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.614386][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.616793][ T5924] bridge_slave_1: entered allmulticast mode
[   34.619014][ T5924] bridge_slave_1: entered promiscuous mode
[   34.628549][ T5916] hsr_slave_0: entered promiscuous mode
[   34.630642][ T5916] hsr_slave_1: entered promiscuous mode
[   34.650379][ T5915] team0: Port device team_slave_0 added
[   34.659366][ T5924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   34.662808][ T5924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   34.666050][ T5915] team0: Port device team_slave_1 added
[   34.702499][ T5914] hsr_slave_0: entered promiscuous mode
[   34.704462][ T5914] hsr_slave_1: entered promiscuous mode
[   34.706360][ T5914] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   34.708739][ T5914] Cannot create hsr debugfs directory
[   34.715834][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_0
[   34.718709][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.727000][ T5915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   34.731676][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_1
[   34.733788][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.741876][ T5915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   34.745823][ T5924] team0: Port device team_slave_0 added
[   34.749457][ T5924] team0: Port device team_slave_1 added
[   34.769184][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_0
[   34.771298][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.778969][ T5924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   34.783387][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_1
[   34.785499][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.793345][ T5924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   34.833799][ T5915] hsr_slave_0: entered promiscuous mode
[   34.835912][ T5915] hsr_slave_1: entered promiscuous mode
[   34.837891][ T5915] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   34.840214][ T5915] Cannot create hsr debugfs directory
[   34.853657][ T5924] hsr_slave_0: entered promiscuous mode
[   34.855598][ T5924] hsr_slave_1: entered promiscuous mode
[   34.858182][ T5924] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   34.860572][ T5924] Cannot create hsr debugfs directory
[   34.922100][ T5916] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   34.925156][ T5916] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   34.928692][ T5916] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   34.932601][ T5916] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   34.960427][ T5914] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   34.963894][ T5914] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   34.968468][ T5914] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   34.972685][ T5914] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   34.983984][ T5916] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.986540][ T5916] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.988627][ T5916] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.990501][ T5916] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.997238][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.999956][ T5914] bridge0: port 2(bridge_slave_1) entered forwarding state
[   35.002875][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.005669][ T5914] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.014557][ T5915] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   35.018485][ T5915] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   35.026351][ T5915] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   35.030804][ T5915] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   35.047982][ T5924] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   35.051193][ T5924] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   35.054295][ T5924] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   35.058766][ T5924] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   35.068198][ T5915] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.070154][ T5915] bridge0: port 2(bridge_slave_1) entered forwarding state
[   35.072109][ T5915] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.073992][ T5915] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.086923][ T5916] 8021q: adding VLAN 0 to HW filter on device bond0
[   35.090246][ T5914] 8021q: adding VLAN 0 to HW filter on device bond0
[   35.095107][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.097323][ T5924] bridge0: port 2(bridge_slave_1) entered forwarding state
[   35.099616][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.101724][ T5924] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.108710][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.111346][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.113873][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.116887][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.122341][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.125434][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.129496][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.132841][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.139716][ T5916] 8021q: adding VLAN 0 to HW filter on device team0
[   35.157463][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.159441][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.162711][ T5914] 8021q: adding VLAN 0 to HW filter on device team0
[   35.175182][ T5924] 8021q: adding VLAN 0 to HW filter on device bond0
[   35.178525][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.180721][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   35.187230][ T5916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   35.192105][ T5915] 8021q: adding VLAN 0 to HW filter on device bond0
[   35.198461][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.200359][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.202816][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.204706][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   35.212558][ T5924] 8021q: adding VLAN 0 to HW filter on device team0
[   35.216970][ T5915] 8021q: adding VLAN 0 to HW filter on device team0
[   35.225980][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.227949][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.230712][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.232867][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   35.242964][ T5915] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   35.247320][ T5915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   35.254176][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.256374][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.262667][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.265097][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state
[   35.279101][ T5916] 8021q: adding VLAN 0 to HW filter on device batadv0
[   35.295553][ T5916] veth0_vlan: entered promiscuous mode
[   35.299240][ T5916] veth1_vlan: entered promiscuous mode
[   35.305932][ T5916] veth0_macvtap: entered promiscuous mode
[   35.311533][ T5916] veth1_macvtap: entered promiscuous mode
[   35.320566][ T5916] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.329172][ T5916] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.334690][ T5916] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.338383][ T5916] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.341029][ T5916] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.343626][ T5916] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.348361][ T5914] 8021q: adding VLAN 0 to HW filter on device batadv0
[   35.352965][ T5915] 8021q: adding VLAN 0 to HW filter on device batadv0
[   35.385976][ T5914] veth0_vlan: entered promiscuous mode
[   35.392791][ T5924] 8021q: adding VLAN 0 to HW filter on device batadv0
[   35.397146][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.397244][ T5914] veth1_vlan: entered promiscuous mode
[   35.400342][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.416939][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.419337][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.422391][ T5915] veth0_vlan: entered promiscuous mode
[   35.430923][ T5914] veth0_macvtap: entered promiscuous mode
[   35.433998][ T5915] veth1_vlan: entered promiscuous mode
[   35.437118][ T5916] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   35.438650][ T5914] veth1_macvtap: entered promiscuous mode
[   35.453012][ T5914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   35.457203][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.463243][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.468271][ T5924] veth0_vlan: entered promiscuous mode
[   35.472603][ T5915] veth0_macvtap: entered promiscuous mode
[   35.475277][ T5924] veth1_vlan: entered promiscuous mode
[   35.478993][ T5914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.482089][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.485353][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.488402][ T5914] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.490994][ T5914] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.493537][ T5914] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.496125][ T5914] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.500029][ T5915] veth1_macvtap: entered promiscuous mode
[   35.515062][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   35.518799][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.521741][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   35.524917][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.528524][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.532804][ T5924] veth0_macvtap: entered promiscuous mode
[   35.538043][ T5924] veth1_macvtap: entered promiscuous mode
[   35.542327][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.546251][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.550295][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.554370][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.558898][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.567493][ T5915] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.570999][ T5915] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.574594][ T5915] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.577520][ T5915] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.582902][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.585333][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.601015][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   35.604386][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.607900][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   35.611013][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.613903][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   35.617799][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.621421][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.623978][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.627460][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.630826][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.634951][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.639184][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.643238][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.647298][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.651441][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.656302][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.661471][ T5924] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.664156][ T5924] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.668171][ T5924] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.670945][ T5924] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.697274][ T1219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.700912][ T1219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.713190][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.716444][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.735308][ T1219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.740599][ T1219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.743468][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.745800][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.816876][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   35.836687][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   35.996645][ T5923] Bluetooth: hci0: command tx timeout
[   36.036736][ T6016] binder: 6011:6016 ioctl c0306201 20000280 returned -14
[   36.086994][ T5923] Bluetooth: hci2: command tx timeout
[   36.088758][ T5923] Bluetooth: hci1: command tx timeout
[   36.090431][ T5923] Bluetooth: hci3: command tx timeout
[   36.517977][ T6024] netlink: 'syz.0.6': attribute type 2 has an invalid length.
[   36.654474][ T6034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9'.
[   36.721793][ T6035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   36.746572][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   36.859565][ T6039] input: syz0 as /devices/virtual/input/input5
[   36.866927][ T6039] input: failed to attach handler leds to device input5, error: -6
[   37.180689][ T6050] netlink: 'syz.1.13': attribute type 10 has an invalid length.
[   37.185973][ T6050] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   37.385137][ T6054] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[   37.387600][ T6054] UDF-fs: Scanning with blocksize 2048 failed
[   37.390248][ T6054] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[   37.392552][ T6054] UDF-fs: Scanning with blocksize 4096 failed
[   37.700851][ T6061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15'.
[   37.766019][ T6059] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   38.076895][ T5930] Bluetooth: hci0: command tx timeout
[   38.156676][ T5930] Bluetooth: hci3: command tx timeout
[   38.156704][ T5923] Bluetooth: hci1: command tx timeout
[   38.156726][ T5927] Bluetooth: hci2: command tx timeout
[   38.353531][    T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   38.500880][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   38.504195][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   38.513532][    T8] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   38.517423][    T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   38.520448][    T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[   38.523365][    T8] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   38.531684][    T8] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   38.536656][    T8] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   38.539052][    T8] usb 5-1: Product: syz
[   38.540707][    T8] usb 5-1: Manufacturer: syz
[   38.556862][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[   38.580085][    T8] cdc_wdm 5-1:1.0: skipping garbage
[   38.581657][    T8] cdc_wdm 5-1:1.0: skipping garbage
[   38.583208][    T8] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[   38.587603][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   38.635806][ T6078] capability: warning: `syz.3.19' uses deprecated v2 capabilities in a way that may be insecure
[   38.776083][ T6084] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[   38.842927][ T5976] usb 5-1: USB disconnect, device number 2
[   38.987211][ T6084] netlink: 'syz.3.21': attribute type 10 has an invalid length.
[   38.989782][ T6084] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.992049][ T6084] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.995438][ T6084] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.997633][ T6084] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.999893][ T6084] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.001983][ T6084] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.005028][ T6084] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   39.037266][   T12] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex
[   39.493547][ T6093] syzkaller1: entered promiscuous mode
[   39.495553][ T6093] syzkaller1: entered allmulticast mode
[   39.553297][ T6097] 9pnet_virtio: no channels available for device syz
[   40.126546][   T70] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   40.156718][ T5923] Bluetooth: hci0: command tx timeout
[   40.225579][ T6110] fuse: Bad value for 'group_id'
[   40.227274][ T6110] fuse: Bad value for 'group_id'
[   40.236548][ T5923] Bluetooth: hci1: command tx timeout
[   40.236782][ T5930] Bluetooth: hci3: command tx timeout
[   40.246618][ T5930] Bluetooth: hci2: command tx timeout
[   40.286542][   T70] usb 5-1: Using ep0 maxpacket: 32
[   40.289665][   T70] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[   40.292154][   T70] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   40.295381][   T70] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[   40.298755][   T70] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   40.302708][   T70] usb 5-1: config 0 interface 0 has no altsetting 0
[   40.306397][   T70] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   40.309326][   T70] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   40.311782][   T70] usb 5-1: Product: syz
[   40.313084][   T70] usb 5-1: Manufacturer: syz
[   40.314454][   T70] usb 5-1: SerialNumber: syz
[   40.317878][   T70] usb 5-1: config 0 descriptor??
[   40.320149][   T70] ldusb 5-1:0.0: Interrupt in endpoint not found
[   40.376810][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   40.556605][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   40.646874][ T6126] =======================================================
[   40.646874][ T6126] WARNING: The mand mount option has been deprecated and
[   40.646874][ T6126]          and is ignored by this kernel. Remove the mand
[   40.646874][ T6126]          option from the mount to silence this warning.
[   40.646874][ T6126] =======================================================
[   40.886870][    T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!!
[   41.895283][    T9] IPVS: starting estimator thread 0...
[   41.996592][ T6145] IPVS: using max 34 ests per chain, 81600 per kthread
[   42.246526][ T5930] Bluetooth: hci0: command tx timeout
[   42.260049][ T6151] syz.1.36 uses obsolete (PF_INET,SOCK_PACKET)
[   42.320175][ T5923] Bluetooth: hci2: command tx timeout
[   42.320189][ T5927] Bluetooth: hci3: command tx timeout
[   42.324682][ T5930] Bluetooth: hci1: command tx timeout
[   42.900643][ T5920] usb 5-1: USB disconnect, device number 3
[   43.198742][ T6164] netlink: 'syz.0.38': attribute type 10 has an invalid length.
[   43.224918][ T6164] team0: Port device netdevsim0 added
[   43.255676][ T6164] netlink: 'syz.0.38': attribute type 10 has an invalid length.
[   43.279164][ T6164] team0: Port device netdevsim0 removed
[   43.510148][ T6123] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[   44.438046][ T6187] netlink: 'syz.3.44': attribute type 10 has an invalid length.
[   44.451906][ T6187] team0: Port device netdevsim0 added
[   44.467258][ T6187] netlink: 'syz.3.44': attribute type 10 has an invalid length.
[   44.479465][ T6187] team0: Port device netdevsim0 removed
[   44.482598][ T6187] bond0: (slave netdevsim0): no link monitoring support
[   44.488620][ T6187] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details
[   44.502136][ T6187] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   44.546671][ T1138] bond0: (slave netdevsim0): link status definitely up, 0 Mbps full duplex
[   44.940037][ T6199] syz.1.46: attempt to access beyond end of device
[   44.940037][ T6199] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0
[   44.941558][ T6195] nbd1: detected capacity change from 0 to 67108884
[   44.947380][ T6199] block nbd1: Send control failed (result -89)
[   44.949405][ T6199] block nbd1: Request send failed, requeueing
[   44.951969][ T5923] block nbd1: Receive control failed (result -32)
[   45.156991][ T5860] block nbd1: Dead connection, failed to find a fallback
[   45.162209][ T1194] block nbd1: Dead connection, failed to find a fallback
[   45.166633][ T1194] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   45.166688][ T5860] block nbd1: shutting down sockets
[   45.171650][ T5860] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   45.174549][ T5860] Buffer I/O error on dev nbd1, logical block 0, async page read
[   45.177075][ T5860] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   45.180973][ T5860] Buffer I/O error on dev nbd1, logical block 1, async page read
[   45.184370][ T5860] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   45.187259][ T5860] Buffer I/O error on dev nbd1, logical block 2, async page read
[   45.191007][ T5860] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   45.194268][ T5860] Buffer I/O error on dev nbd1, logical block 3, async page read
[   45.197989][ T5860] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   45.201967][ T5860] Buffer I/O error on dev nbd1, logical block 0, async page read
[   45.205293][ T5860] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   45.208098][ T5860] Buffer I/O error on dev nbd1, logical block 1, async page read
[   45.211834][ T5860] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   45.215741][ T5860] Buffer I/O error on dev nbd1, logical block 2, async page read
[   45.218604][ T5860] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   45.221475][ T5860] Buffer I/O error on dev nbd1, logical block 3, async page read
[   45.223892][ T5860] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   45.226709][ T5860] Buffer I/O error on dev nbd1, logical block 0, async page read
[   45.229092][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[   45.229286][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554441, location=33554441
[   45.232009][ T5860] Buffer I/O error on dev nbd1, logical block 1, async page read
[   45.236647][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554185, location=33554185
[   45.237983][ T5860] ldm_validate_partition_table(): Disk read failed.
[   45.244345][ T5860] Dev nbd1: unable to read RDB block 0
[   45.246500][ T5860]  nbd1: unable to read partition table
[   45.246569][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554440, location=33554440
[   45.251479][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554184, location=33554184
[   45.252411][ T5860] ldm_validate_partition_table(): Disk read failed.
[   45.254599][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554439, location=33554439
[   45.256997][ T5860] Dev nbd1: unable to read RDB block 0
[   45.261608][ T5860]  nbd1: unable to read partition table
[   45.266587][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554183, location=33554183
[   45.276659][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554291, location=33554291
[   45.279827][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554035, location=33554035
[   45.282907][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554289, location=33554289
[   45.286002][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554033, location=33554033
[   45.296380][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[   45.299853][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[   45.303732][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777220, location=16777220
[   45.307275][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776964, location=16776964
[   45.311110][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777219, location=16777219
[   45.315084][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776963, location=16776963
[   45.318365][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777218, location=16777218
[   45.321501][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776962, location=16776962
[   45.324662][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777070, location=16777070
[   45.327971][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776814, location=16776814
[   45.331118][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777068, location=16777068
[   45.334246][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776812, location=16776812
[   45.337769][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[   45.341093][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[   45.344009][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388609, location=8388609
[   45.347562][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388353, location=8388353
[   45.350743][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388608, location=8388608
[   45.354333][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388352, location=8388352
[   45.357802][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388607, location=8388607
[   45.361450][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388351, location=8388351
[   45.364619][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388459, location=8388459
[   45.367902][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388203, location=8388203
[   45.371966][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388457, location=8388457
[   45.375227][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388201, location=8388201
[   45.378603][ T6199] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[   45.381552][ T6199] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1)
[   45.621521][ T6226] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0
[   45.626163][ T6225] loop9: detected capacity change from 0 to 7
[   45.626334][ T6224] hugetlbfs: syz.1.52 (6224): Using mlock ulimits for SHM_HUGETLB is obsolete
[   45.629160][ T6225] Dev loop9: unable to read RDB block 7
[   45.632770][ T6225]  loop9: unable to read partition table
[   45.634830][ T6225] loop9: partition table beyond EOD, truncated
[   45.636856][ T6225] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dƤ����ݡ�����
[   45.636856][ T6225] 
) failed (rc=-5)
[   45.656514][   T35] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   45.827751][   T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   45.832290][   T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   45.836207][   T35] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   45.843329][   T35] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   45.846082][   T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.849120][   T35] usb 7-1: config 0 descriptor??
[   46.530246][   T35] usbhid 7-1:0.0: can't add hid device: -71
[   46.533638][   T35] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[   46.541105][   T35] usb 7-1: USB disconnect, device number 2
[   47.844575][ T6266] netlink: 'syz.3.62': attribute type 10 has an invalid length.
[   47.849067][ T6266] bond0: (slave netdevsim0): Releasing backup interface
[   47.851967][ T6266] team0: Port device netdevsim0 added
[   47.859501][ T6266] netlink: 'syz.3.62': attribute type 10 has an invalid length.
[   47.863073][ T6266] team0: Port device netdevsim0 removed
[   47.865206][ T6266] bond0: (slave netdevsim0): no link monitoring support
[   47.867699][ T6266] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details
[   47.874279][ T6266] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   47.896656][   T79] bond0: (slave netdevsim0): link status definitely up, 0 Mbps full duplex
[   50.209845][ T6283] syz.3.67 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   50.223326][ T6283] CPU: 1 UID: 0 PID: 6283 Comm: syz.3.67 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0
[   50.226723][ T6283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   50.230161][ T6283] Call Trace:
[   50.231188][ T6283]  <TASK>
[   50.232045][ T6283]  dump_stack_lvl+0x16c/0x1f0
[   50.233392][ T6283]  dump_header+0x101/0x900
[   50.234745][ T6283]  oom_kill_process+0x270/0xa60
[   50.236362][ T6283]  ? mem_cgroup_out_of_memory+0x8d/0x270
[   50.238088][ T6283]  out_of_memory+0x351/0x1700
[   50.239476][ T6283]  ? __pfx_out_of_memory+0x10/0x10
[   50.242801][ T6283]  ? rcu_read_unlock+0x17/0x60
[   50.244231][ T6283]  ? __pfx_lock_release+0x10/0x10
[   50.245782][ T6283]  mem_cgroup_out_of_memory+0x207/0x270
[   50.247366][ T6283]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   50.249102][ T6283]  ? do_raw_spin_unlock+0x172/0x230
[   50.250609][ T6283]  try_charge_memcg+0x54c/0xaf0
[   50.252070][ T6283]  ? __pfx_try_charge_memcg+0x10/0x10
[   50.253618][ T6283]  ? __pfx_lock_release+0x10/0x10
[   50.255137][ T6283]  ? trace_lock_acquire+0x14e/0x1f0
[   50.256629][ T6283]  ? rcu_lock_acquire.constprop.0+0x7/0x30
[   50.258370][ T6283]  ? lock_acquire+0x2f/0xb0
[   50.259710][ T6283]  ? rcu_lock_acquire.constprop.0+0x7/0x30
[   50.261388][ T6283]  mem_cgroup_swapin_charge_folio+0x12f/0x380
[   50.263141][ T6283]  __read_swap_cache_async+0x436/0x660
[   50.264696][ T6283]  ? __pfx___read_swap_cache_async+0x10/0x10
[   50.267371][ T6283]  ? swp_swap_info+0xcf/0x130
[   50.269325][ T6283]  ? __pfx_swp_swap_info+0x10/0x10
[   50.271472][ T6283]  swap_cluster_readahead+0x3ec/0x740
[   50.273662][ T6283]  ? __pfx_swap_cluster_readahead+0x10/0x10
[   50.275449][ T6283]  ? rcu_is_watching+0x12/0xc0
[   50.276838][ T6283]  ? lock_release+0x4e2/0x6f0
[   50.278202][ T6283]  ? filemap_get_entry+0x1a8/0x3c0
[   50.279693][ T6283]  ? trace_lock_acquire+0x14e/0x1f0
[   50.281199][ T6283]  ? get_vma_policy+0x248/0x3c0
[   50.282608][ T6283]  swapin_readahead+0x12c/0xd60
[   50.284043][ T6283]  ? get_swap_device+0x1de/0x5e0
[   50.285801][ T6283]  ? __pfx_swapin_readahead+0x10/0x10
[   50.287936][ T6283]  ? __filemap_get_folio+0x2a5/0xaf0
[   50.290093][ T6283]  ? swap_cache_get_folio+0x1e0/0x460
[   50.292319][ T6283]  ? get_swap_device+0x245/0x5e0
[   50.293786][ T6283]  ? __pfx_swap_cache_get_folio+0x10/0x10
[   50.295500][ T6283]  ? percpu_ref_put_many.constprop.0+0x2e/0x2a0
[   50.297299][ T6283]  do_swap_page+0x688/0x6420
[   50.298684][ T6283]  ? __pfx_do_swap_page+0x10/0x10
[   50.300174][ T6283]  ? rcu_is_watching+0x12/0xc0
[   50.301540][ T6283]  ? trace_lock_acquire+0x14e/0x1f0
[   50.303035][ T6283]  ? __pfx_default_wake_function+0x10/0x10
[   50.304755][ T6283]  ? lock_acquire+0x2f/0xb0
[   50.306081][ T6283]  ? ___pte_offset_map+0x42/0x540
[   50.307559][ T6283]  ? ___pte_offset_map+0x58/0x540
[   50.309006][ T6283]  ? ___pte_offset_map+0x1b9/0x540
[   50.310463][ T6283]  __handle_mm_fault+0x1055/0x2a40
[   50.311965][ T6283]  ? lock_vma_under_rcu+0x6b9/0x980
[   50.313464][ T6283]  ? __pfx___handle_mm_fault+0x10/0x10
[   50.315079][ T6283]  ? __pfx_down_read_trylock+0x10/0x10
[   50.316651][ T6283]  ? lock_release+0x4e2/0x6f0
[   50.318002][ T6283]  handle_mm_fault+0x3fa/0xaa0
[   50.319398][ T6283]  do_user_addr_fault+0x60d/0x13f0
[   50.320869][ T6283]  exc_page_fault+0x5c/0xc0
[   50.322178][ T6283]  asm_exc_page_fault+0x26/0x30
[   50.323662][ T6283] RIP: 0023:0xf716b1d2
[   50.324970][ T6283] Code: 89 44 24 20 0f b6 44 24 54 c7 44 24 24 00 00 00 00 c6 44 24 2e 01 c7 44 24 08 00 00 00 00 c7 44 24 0c 00 00 00 00 89 44 24 28 <8b> 7c 24 58 8b 54 24 04 8b 44 24 08 8b 4f 1c 8b 7c 24 1c 89 cb c1
[   50.332410][ T6283] RSP: 002b:00000000ffafa880 EFLAGS: 00010293
[   50.334109][ T6283] RAX: 0000000000000248 RBX: 0000000082050ab7 RCX: 00000000005efde0
[   50.336829][ T6283] RDX: 000000002d20fff8 RSI: 00000000f7494fe8 RDI: 00000000f6929008
[   50.339090][ T6283] RBP: 00000000f7fc5610 R08: 0000000000000000 R09: 0000000000000000
[   50.341614][ T6283] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   50.343891][ T6283] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   50.346194][ T6283]  </TASK>
[   50.389754][ T6283] memory: usage 297320kB, limit 307200kB, failcnt 319
[   50.392002][ T6283] memory+swap: usage 297504kB, limit 9007199254740988kB, failcnt 0
[   50.394312][ T6283] kmem: usage 297136kB, limit 9007199254740988kB, failcnt 0
[   50.396399][ T6283] Memory cgroup stats for /syz3:
[   50.406562][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   50.406613][ T6283] cache 0
[   50.406871][ T6293] syz.0.70 (6293) used greatest stack depth: 21400 bytes left
[   50.413662][ T6283] rss 0
[   50.414504][ T6283] rss_huge 0
[   50.415468][ T6283] shmem 0
[   50.416379][ T6283] mapped_file 0
[   50.427756][ T6283] dirty 0
[   50.428751][ T6283] writeback 0
[   50.429721][ T6283] workingset_refault_anon 21
[   50.431059][ T6283] workingset_refault_file 5
[   50.432363][ T6283] swap 200704
[   50.433342][ T6283] swapcached 0
[   50.434373][ T6283] pgpgin 32595
[   50.435365][ T6283] pgpgout 32595
[   50.436383][ T6283] pgfault 60788
[   50.437862][ T6283] pgmajfault 30
[   50.438952][ T6283] inactive_anon 0
[   50.440029][ T6283] active_anon 0
[   50.441052][ T6283] inactive_file 0
[   50.442104][ T6283] active_file 0
[   50.443127][ T6283] unevictable 0
[   50.444152][ T6283] hierarchical_memory_limit 314572800
[   50.445690][ T6283] hierarchical_memsw_limit 9223372036854771712
[   50.447553][ T6283] total_cache 0
[   50.448699][ T6283] total_rss 0
[   50.449695][ T6283] total_rss_huge 0
[   50.450782][ T6283] total_shmem 0
[   50.451811][ T6283] total_mapped_file 0
[   50.452954][ T6283] total_dirty 0
[   50.453968][ T6283] total_writeback 0
[   50.455137][ T6283] total_workingset_refault_anon 21
[   50.456931][ T6283] total_workingset_refault_file 5
[   50.458463][ T6283] total_swap 200704
[   50.459590][ T6283] total_swapcached 0
[   50.460706][ T6283] total_pgpgin 32595
[   50.461841][ T6283] total_pgpgout 32595
[   50.463013][ T6283] total_pgfault 60788
[   50.464186][ T6283] total_pgmajfault 30
[   50.465329][ T6283] total_inactive_anon 0
[   50.466561][ T6283] total_active_anon 0
[   50.467787][ T6283] total_inactive_file 0
[   50.469081][ T6283] total_active_file 0
[   50.470233][ T6283] total_unevictable 0
[   50.471403][ T6283] anon_cost 0
[   50.472382][ T6283] file_cost 0
[   50.473366][ T6283] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.67,pid=6283,uid=0
[   50.479341][ T6283] Memory cgroup out of memory: Killed process 6283 (syz.3.67) total-vm:103604kB, anon-rss:824kB, file-rss:23068kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000
[   50.608605][    T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   50.611817][    T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   50.614564][    T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   50.626573][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.639222][ T6302] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   50.642394][    T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[   50.879570][ T6302] IPv6: syztnl0: Disabled Multicast RS
[   50.910693][ T6302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.913313][ T6302] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.038198][  T831] usb 6-1: USB disconnect, device number 2
[   52.231633][ T6332] netlink: 'syz.3.78': attribute type 10 has an invalid length.
[   52.248200][ T6332] bond0: (slave netdevsim0): Releasing backup interface
[   52.265473][ T6332] team0: Port device netdevsim0 added
[   52.333939][ T6331] netlink: 'syz.3.78': attribute type 10 has an invalid length.
[   52.338680][ T6331] team0: Port device netdevsim0 removed
[   52.340587][ T6331] bond0: (slave netdevsim0): no link monitoring support
[   52.342905][ T6331] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details
[   52.349970][ T6331] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   52.377240][ T1138] bond0: (slave netdevsim0): link status definitely up, 0 Mbps full duplex
[   52.381977][ T6336] x_tables: duplicate underflow at hook 3
[   53.125073][ T6351] bridge0: port 3(syz_tun) entered blocking state
[   53.128936][ T6351] bridge0: port 3(syz_tun) entered disabled state
[   53.130915][ T6351] syz_tun: entered allmulticast mode
[   53.132878][ T6351] syz_tun: entered promiscuous mode
[   53.134867][ T6351] bridge0: port 3(syz_tun) entered blocking state
[   53.136867][ T6351] bridge0: port 3(syz_tun) entered forwarding state
[   53.415177][   T40] audit: type=1326 audit(1735812190.461:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.3.84" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x0
[   53.592667][   T25] hid-generic 0000:0000:0000.0002: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[   53.713461][ T6364] dlm: no local IP address has been set
[   53.715198][ T6364] dlm: cannot start dlm midcomms -107
[   53.791920][ T6367] netlink: 'syz.0.86': attribute type 10 has an invalid length.
[   53.796846][ T6367] team0: Port device netdevsim0 added
[   53.811652][ T6367] netlink: 'syz.0.86': attribute type 10 has an invalid length.
[   53.814750][ T6346] syz.1.82 (6346) used greatest stack depth: 21384 bytes left
[   53.820964][ T6367] team0: Port device netdevsim0 removed
[   53.826610][ T6367] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   53.875332][ T6370] bridge_slave_0: left allmulticast mode
[   53.880630][ T6370] bridge_slave_0: left promiscuous mode
[   53.882360][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.885831][ T6370] bridge_slave_1: left allmulticast mode
[   53.890715][ T6370] bridge_slave_1: left promiscuous mode
[   53.892489][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.918498][ T6370] bond0: (slave bond_slave_0): Releasing backup interface
[   53.928062][ T6370] bond0: (slave bond_slave_1): Releasing backup interface
[   53.940874][ T6370] team0: Port device team_slave_0 removed
[   53.948015][ T6370] team0: Port device team_slave_1 removed
[   53.950720][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.953130][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.956721][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.959222][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_1
[   55.133710][ T6400] netlink: 'syz.2.95': attribute type 10 has an invalid length.
[   55.166109][ T6400] team0: Port device netdevsim0 added
[   55.194281][ T6400] netlink: 'syz.2.95': attribute type 10 has an invalid length.
[   55.222757][ T6400] team0: Port device netdevsim0 removed
[   55.233293][ T6400] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   56.087782][ T6416] process 'syz.2.99' launched '/dev/fd/10' with NULL argv: empty string added
[   56.096304][ T6416] netlink: 40 bytes leftover after parsing attributes in process `syz.2.99'.
[   56.187546][ T6413] netlink: 'syz.1.97': attribute type 10 has an invalid length.
[   56.191688][ T6413] bond0: (slave netdevsim0): Releasing backup interface
[   56.194597][ T6413] team0: Port device netdevsim0 added
[   56.202553][ T6413] netlink: 'syz.1.97': attribute type 10 has an invalid length.
[   56.208754][ T6413] team0: Port device netdevsim0 removed
[   56.212469][ T6413] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   56.807715][ T6435] 9pnet_fd: p9_fd_create_tcp (6435): problem connecting socket to 127.0.0.1
[   58.084726][ T6456] dummy0: entered promiscuous mode
[   58.087058][ T6456] dummy0: entered allmulticast mode
[   58.167670][ T5930] Bluetooth: hci3: command 0x0405 tx timeout
[   58.413055][ T6461] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   58.792902][ T6467] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   58.926876][ T6467] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.943001][ T6467] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.525195][ T6485] fuse: Unknown parameter ' '
[   59.987990][ T6498] netlink: 'syz.2.116': attribute type 10 has an invalid length.
[   60.003854][ T6498] bond0: (slave netdevsim0): Releasing backup interface
[   60.010353][ T6498] team0: Port device netdevsim0 added
[   60.020471][ T6498] netlink: 'syz.2.116': attribute type 10 has an invalid length.
[   60.063292][ T6498] team0: Port device netdevsim0 removed
[   60.066145][ T6498] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   61.461510][ T6534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.719737][ T6542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.127'.
[   61.869610][ T6529] syz.3.125 (6529) used greatest stack depth: 20648 bytes left
[   61.932148][   T40] audit: type=1326 audit(1735812198.981:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.2.131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000
[   61.940974][   T40] audit: type=1326 audit(1735812198.981:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.2.131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000
[   61.951066][   T40] audit: type=1326 audit(1735812198.991:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.2.131" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f21579 code=0x7ffc0000
[   61.957398][   T40] audit: type=1326 audit(1735812198.991:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.2.131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000
[   61.971304][   T40] audit: type=1326 audit(1735812198.991:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.2.131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000
[   61.986319][   T40] audit: type=1326 audit(1735812199.011:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.2.131" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f21579 code=0x7ffc0000
[   61.993029][   T40] audit: type=1326 audit(1735812199.011:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.2.131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000
[   62.001172][   T40] audit: type=1326 audit(1735812199.011:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.2.131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000
[   62.026737][   T40] audit: type=1326 audit(1735812199.011:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.2.131" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f21579 code=0x7ffc0000
[   62.041602][   T40] audit: type=1326 audit(1735812199.011:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.2.131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000
[   62.056518][ T6563] Bluetooth: hci4: Frame reassembly failed (-84)
[   62.059329][   T79] Bluetooth: hci4: Frame reassembly failed (-84)
[   62.083529][ T6565] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0
[   62.521088][ T6577] netlink: 'syz.2.139': attribute type 10 has an invalid length.
[   62.543138][ T6577] veth0_vlan: left promiscuous mode
[   62.545753][ T6577] veth0_vlan: entered promiscuous mode
[   62.549900][ T6577] team0: Device veth0_vlan failed to register rx_handler
[   63.273301][ T6595] [U] 
[   63.274185][ T6595] [U] 
[   63.275016][ T6595] [U] 
[   63.275809][ T6595] [U] 
[   63.277018][ T6595] [U] 
[   63.277876][ T6595] [U] 
[   63.278705][ T6595] [U] 
[   63.279558][ T6595] [U] 
[   63.280397][ T6595] [U] 
[   63.281226][ T6595] [U] 
[   63.282063][ T6595] [U] 
[   63.282881][ T6595] [U] 
[   63.284017][ T6595] [U] 
[   63.284858][ T6595] [U] 
[   63.285688][ T6595] [U] 
[   63.286521][ T6595] [U] 
[   63.287864][ T6595] [U] 
[   63.288711][ T6595] [U] 
[   63.289550][ T6595] [U] 
[   63.290360][ T6595] [U] 
[   63.291187][ T6595] [U] 
[   63.292010][ T6595] [U] 
[   63.292835][ T6595] [U] 
[   63.293656][ T6595] [U] 
[   63.294479][ T6595] [U] 
[   63.295318][ T6595] [U] 
[   63.296136][ T6595] [U] 
[   63.296967][ T6595] [U] 
[   63.298078][ T6595] [U] 
[   63.298915][ T6595] [U] 
[   63.299745][ T6595] [U] 
[   63.300553][ T6595] [U] 
[   63.301379][ T6595] [U] 
[   63.302196][ T6595] [U] 
[   63.303007][ T6595] [U] 
[   63.303828][ T6595] [U] 
[   63.304643][ T6595] [U] 
[   63.305439][ T6595] [U] 
[   63.306271][ T6595] [U] 
[   63.307114][ T6595] [U] 
[   63.308180][ T6595] [U] 
[   63.309014][ T6595] [U] 
[   63.309828][ T6595] [U] 
[   63.310682][ T6595] [U] 
[   63.311532][ T6595] [U] 
[   63.312366][ T6595] [U] 
[   63.313193][ T6595] [U] 
[   63.313990][ T6595] [U] 
[   63.314816][ T6595] [U] 
[   63.315659][ T6595] [U] 
[   63.316523][ T6595] [U] 
[   63.317363][ T6595] [U] 
[   63.318249][ T6595] [U] 
[   63.319114][ T6595] [U] 
[   63.319948][ T6595] [U] 
[   63.320763][ T6595] [U] 
[   63.321615][ T6595] [U] 
[   63.322448][ T6595] [U] 
[   63.323275][ T6595] [U] 
[   63.324108][ T6595] [U] 
[   63.324231][ T6596] netlink: 'syz.3.143': attribute type 27 has an invalid length.
[   63.324944][ T6595] [U] 
[   63.324962][ T6595] [U] 
[   63.324978][ T6595] [U] 
[   63.324994][ T6595] [U] 
[   63.325017][ T6595] [U] 
[   63.325031][ T6595] [U] 
[   63.325044][ T6595] [U] 
[   63.325058][ T6595] [U] 
[   63.325073][ T6595] [U] 
[   63.325086][ T6595] [U] 
[   63.325100][ T6595] [U] 
[   63.325116][ T6595] [U] 
[   63.325136][ T6595] [U] 
[   63.325153][ T6595] [U] 
[   63.325169][ T6595] [U] 
[   63.325185][ T6595] [U] 
[   63.325199][ T6595] [U] 
[   63.325213][ T6595] [U] 
[   63.325227][ T6595] [U] 
[   63.325240][ T6595] [U] 
[   63.325259][ T6595] [U] 
[   63.325273][ T6595] [U] 
[   63.325287][ T6595] [U] 
[   63.325300][ T6595] [U] 
[   63.325315][ T6595] [U] 
[   63.325329][ T6595] [U] 
[   63.325342][ T6595] [U] 
[   63.350189][ T6595] [U] 
[   63.351268][ T6595] [U] 
[   63.352123][ T6595] [U] 
[   63.352953][ T6595] [U] 
[   63.353771][ T6595] [U] 
[   63.354634][ T6595] [U] 
[   63.355500][ T6595] [U] 
[   63.356330][ T6595] [U] 
[   63.357209][ T6595] [U] 
[   63.358182][ T6595] [U] 
[   63.359051][ T6595] [U] 
[   63.359873][ T6595] [U] 
[   63.360687][ T6595] [U] 
[   63.361530][ T6595] [U] 
[   63.362302][ T6595] [U] 
[   63.363111][ T6595] [U] 
[   63.363918][ T6595] [U] 
[   63.364817][ T6595] [U] 
[   63.365679][ T6595] [U] 
[   63.366531][ T6595] [U] 
[   63.367376][ T6595] [U] 
[   63.368568][ T6595] [U] 
[   63.369421][ T6595] [U] 
[   63.370253][ T6595] [U] 
[   63.371094][ T6595] [U] 
[   63.371970][ T6595] [U] 
[   63.372805][ T6595] [U] 
[   63.373647][ T6595] [U] 
[   63.374479][ T6595] [U] 
[   63.375370][ T6595] [U] 
[   63.376212][ T6595] [U] 
[   63.377063][ T6595] [U] 
[   63.377905][ T6595] [U] 
[   63.379206][ T6595] [U] 
[   63.380053][ T6595] [U] 
[   63.380886][ T6595] [U] 
[   63.381726][ T6595] [U] 
[   63.382594][ T6595] [U] 
[   63.383448][ T6595] [U] 
[   63.384289][ T6595] [U] 
[   63.386098][ T6596] bridge0: port 3(syz_tun) entered disabled state
[   63.393491][ T6596] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.397096][ T6596] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.428526][ T6596] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.433244][ T6596] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.436100][ T6595] [U] 
[   63.456075][ T6596] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.459673][ T6596] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.462719][ T6596] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.465943][ T6596] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.483560][ T6597] bridge0: port 3(syz_tun) entered blocking state
[   63.485564][ T6597] bridge0: port 3(syz_tun) entered forwarding state
[   63.488581][   T12] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523
[   63.489671][ T6597] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.491383][   T12] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 12, name: kworker/u32:1
[   63.491394][   T12] preempt_count: 0, expected: 0
[   63.491399][   T12] RCU nest depth: 1, expected: 0
[   63.491403][   T12] INFO: lockdep is turned off.
[   63.491408][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u32:1 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0
[   63.491419][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   63.495070][ T6597] 8021q: adding VLAN 0 to HW filter on device team0
[   63.497562][   T12] Workqueue: bond0 bond_mii_monitor
[   63.497601][   T12] Call Trace:
[   63.497621][   T12]  <TASK>
[   63.497625][   T12]  dump_stack_lvl+0x16c/0x1f0
[   63.497646][   T12]  __might_resched+0x3c0/0x5e0
[   63.497657][   T12]  ? __pfx___might_resched+0x10/0x10
[   63.497667][   T12]  ? rcu_is_watching+0x12/0xc0
[   63.497683][   T12]  ? lock_release+0x4e2/0x6f0
[   63.500618][   T12]  down_read+0x73/0x330
[   63.500634][   T12]  ? __pfx_down_read+0x10/0x10
[   63.505112][   T12]  ? dev_map_notification+0x6a/0xaf0
[   63.505125][   T12]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   63.505138][   T12]  wireless_nlevent_flush+0x1b/0x100
[   63.505154][   T12]  wext_netdev_notifier_call+0xe/0x20
[   63.530183][   T12]  notifier_call_chain+0xb7/0x410
[   63.531680][   T12]  ? __pfx_wext_netdev_notifier_call+0x10/0x10
[   63.533469][   T12]  call_netdevice_notifiers_info+0xbe/0x140
[   63.535199][   T12]  netdev_state_change+0x115/0x150
[   63.536780][   T12]  ? __pfx_netdev_state_change+0x10/0x10
[   63.538556][   T12]  linkwatch_do_dev+0x12b/0x160
[   63.540005][   T12]  linkwatch_sync_dev+0x181/0x210
[   63.541478][   T12]  ? __pfx_ethtool_op_get_link+0x10/0x10
[   63.543104][   T12]  ethtool_op_get_link+0x1d/0x70
[   63.544571][   T12]  bond_check_dev_link+0x197/0x430
[   63.546068][   T12]  ? __pfx_bond_check_dev_link+0x10/0x10
[   63.547812][   T12]  ? debug_object_deactivate+0x1ef/0x370
[   63.549431][   T12]  ? bond_mii_monitor+0x140/0x2d90
[   63.550938][   T12]  ? lock_acquire+0x2f/0xb0
[   63.552269][   T12]  ? bond_mii_monitor+0x140/0x2d90
[   63.553746][   T12]  bond_mii_monitor+0x3c1/0x2d90
[   63.555230][   T12]  ? lock_release+0x4e2/0x6f0
[   63.556614][   T12]  ? __pfx_bond_mii_monitor+0x10/0x10
[   63.558295][   T12]  ? rcu_is_watching+0x12/0xc0
[   63.559743][   T12]  ? __schedule+0xe60/0x5ad0
[   63.561104][   T12]  ? lock_acquire+0x2f/0xb0
[   63.562440][   T12]  ? process_one_work+0x8bb/0x1b30
[   63.563942][   T12]  process_one_work+0x958/0x1b30
[   63.565387][   T12]  ? __pfx_process_one_work+0x10/0x10
[   63.566979][   T12]  ? rcu_is_watching+0x12/0xc0
[   63.568484][   T12]  ? assign_work+0x1a0/0x250
[   63.569822][   T12]  worker_thread+0x6c8/0xf00
[   63.571142][   T12]  ? __pfx_worker_thread+0x10/0x10
[   63.572612][   T12]  kthread+0x2c1/0x3a0
[   63.573812][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[   63.575364][   T12]  ? __pfx_kthread+0x10/0x10
[   63.576712][   T12]  ret_from_fork+0x45/0x80
[   63.578138][   T12]  ? __pfx_kthread+0x10/0x10
[   63.579533][   T12]  ret_from_fork_asm+0x1a/0x30
[   63.580932][   T12]  </TASK>
[   63.582589][ T6597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.596704][   T79] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[   63.599388][   T79] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[   63.602221][   T79] bond0: (slave netdevsim0): link status definitely down, disabling slave
[   64.076624][ T5930] Bluetooth: hci4: command 0x1003 tx timeout
[   64.077032][ T5923] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   70.797550][ T1411] ieee802154 phy0 wpan0: encryption failed: -22

VM DIAGNOSIS:
10:03:20  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85143475 RDI=ffffffff9a667200 RBP=ffffffff9a6671c0 RSP=ffffc900075e69b8
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=61203a7131323038
R12=0000000000000000 R13=0000000000000066 R14=ffffffff85143410 R15=0000000000000000
RIP=ffffffff8514349f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000000c376a99 CR3=0000000022366000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000b800000000 0000000300000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000062 RCX=ffffffff81794611 RDX=ffff88801ca9c880
RSI=ffffffff817945fd RDI=0000000000000001 RBP=1ffff9200003ceb7 RSP=ffffc900001e75a8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=656c73203a475542
R12=0000000000000001 R13=0000000000000000 R14=ffff888024ee4880 R15=0000000000000001
RIP=ffffffff817945ff RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b500000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000000c38e69d CR3=0000000022366000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000080000020 Opmask01=0000000000000040 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd660470e0 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 36202c3020202064 6963666e6f202c30 3d6a623670202039 20000a30203d2061
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff849f0d13 RDX=0000000000000010
RSI=0000000000000020 RDI=0000000000000001 RBP=ffffffff8bb21680 RSP=ffffc90003867290
R8 =0000000000000001 R9 =0000000000000010 R10=0000000000000010 R11=00000000000a2012
R12=0000000000000010 R13=0000000000000001 R14=0000000000000003 R15=0000000000000010
RIP=ffffffff81995040 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb2b0accd00 ffffffff 00c00000
GS =0000 ffff88802b600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00005568dae01000 CR3=00000000497c8000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=62c794ca62c794ca 62c794ca62c794ca 62c794ca62c794ca 62c794ca62c794ca 62c794ca62c794ca 62c794ca62c794ca 62c794ca62c794ca 62c794ca62c794ca
ZMM22=cdf124f8cdf124f8 cdf124f8cdf124f8 cdf124f8cdf124f8 cdf124f8cdf124f8 cdf124f8cdf124f8 cdf124f8cdf124f8 cdf124f8cdf124f8 cdf124f8cdf124f8
ZMM23=96ed9a7196ed9a71 96ed9a7196ed9a71 96ed9a7196ed9a71 96ed9a7196ed9a71 96ed9a7196ed9a71 96ed9a7196ed9a71 96ed9a7196ed9a71 96ed9a7196ed9a71
ZMM24=0e4ba8f40e4ba8f4 0e4ba8f40e4ba8f4 0e4ba8f40e4ba8f4 0e4ba8f40e4ba8f4 0e4ba8f40e4ba8f4 0e4ba8f40e4ba8f4 0e4ba8f40e4ba8f4 0e4ba8f40e4ba8f4
ZMM25=9fc163629fc16362 9fc163629fc16362 9fc163629fc16362 9fc163629fc16362 9fc163629fc16362 9fc163629fc16362 9fc163629fc16362 9fc163629fc16362
ZMM26=8b55b61b8b55b61b 8b55b61b8b55b61b 8b55b61b8b55b61b 8b55b61b8b55b61b 8b55b61b8b55b61b 8b55b61b8b55b61b 8b55b61b8b55b61b 8b55b61b8b55b61b
ZMM27=e4026073e4026073 e4026073e4026073 e4026073e4026073 e4026073e4026073 e4026073e4026073 e4026073e4026073 e4026073e4026073 e4026073e4026073
ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=4503000045030000 4503000045030000 4503000045030000 4503000045030000 4503000045030000 4503000045030000 4503000045030000 4503000045030000
info registers vcpu 3

CPU#3
RAX=00000000000978ac RBX=0000000000000003 RCX=ffffffff8b1a4819 RDX=ffffed10056e6fee
RSI=ffffffff8bb17080 RDI=ffffffff81702ed9 RBP=ffffed1003a51488 RSP=ffffc9000049fe08
R8 =0000000000000000 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000000
R12=0000000000000003 R13=ffff88801d28a440 R14=ffffffff901ce550 R15=0000000000000000
RIP=ffffffff8b1a5bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000022366000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000025800000000 0000000a00000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000