last executing test programs:

12.138282422s ago: executing program 2 (id=466):
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64)
socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64)
ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) (async)
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000140), 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) (async)
syz_emit_ethernet(0x94, &(0x7f0000000340)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x87, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}}}}}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
syz_open_dev$tty20(0xc, 0x4, 0x1) (async)
r1 = socket$inet6(0xa, 0x802, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
sendmmsg(r1, &(0x7f0000002cc0), 0x1a3, 0xf97) (async, rerun: 64)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff) (async, rerun: 64)
r4 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={<r5=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000100)={'wg2\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x20, r3, 0x1, 0x0, 0x0, {0xd}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
listen(r7, 0x3) (async)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0x16)
r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000090505020000"], 0x0)
syz_usb_control_io(r8, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

12.137693915s ago: executing program 2 (id=468):
r0 = syz_io_uring_setup(0x237, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0})
io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x6}}}, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x4000)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004600)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}]}}}]}, 0x48}}, 0x20004010)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlinkprop={0xa4, 0x6c, 0x300, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x34000, 0x2106}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xdff4}, @IFLA_VFINFO_LIST={0x4}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xd}, @IFLA_WEIGHT={0x8, 0xf, 0x7095}, @IFLA_IFNAME={0x14, 0x3, 'syzkaller1\x00'}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x80000000}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'tunl0\x00'}, {0x14, 0x35, 'xfrm0\x00'}]}, @IFLA_PHYS_PORT_ID={0xe, 0x22, "7a34a99c93fcda33f785"}, @IFLA_WEIGHT={0x8, 0xf, 0x9}]}, 0xa4}}, 0x20000000)

12.136197719s ago: executing program 2 (id=470):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = syz_open_dev$hidraw(0x0, 0x0, 0x0)
write$hidraw(0xffffffffffffffff, &(0x7f0000000bc0), 0x73336958c4e6a83a)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x19, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xffffffee, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xfffffffb, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x1000003, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x5, 0xa, 0x0, 0x71, 0x200007, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x2, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf8, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xcbc1, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x4, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x20000b, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x81, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x6, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x149, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x3, 0x9, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x0, 0x9, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r4, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000000), 0xe)
listen(r6, 0x0) (async)
listen(r6, 0x0)
accept4$bt_l2cap(r6, 0x0, 0x0, 0x0) (async)
accept4$bt_l2cap(r6, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$HIDIOCGRDESC(r0, 0x401c5820, 0x0) (async)
ioctl$HIDIOCGRDESC(r0, 0x401c5820, 0x0)

12.125701968s ago: executing program 2 (id=471):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000, @void, @value}, 0x10)
syz_emit_ethernet(0x40, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@x25={0x805, {0x0, 0x1c, 0x23, "783d915b3b46f0b344c75907e3a3b9d54241a177d7ff86795de2ae799a9b1074519a2f60df296eb0f7856c11ee592b"}}}}, &(0x7f0000000140)={0x1, 0x1, [0xb0a, 0x909, 0xd06, 0x4ac]})
socket$inet_mptcp(0x2, 0x1, 0x106)

12.125489407s ago: executing program 2 (id=472):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
connect(r0, 0x0, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper}, @host, 0x0, 0x7ff})
socket$nl_netfilter(0x10, 0x3, 0xc)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
syz_clone(0x20804000, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000080)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@generic={0x6004, "c9e9182fc22ea7ebdf1fc344bf37999659028585b27d98fb20e9658d7ad3b5fb1a7381c4b30f8672c7765ca2f9eb092b93fe34d4944ae71cca19e5e17f88040d49c013f603e0e9cfcc28657ced9d0807aac173371b01b9477fca26fc1155b0a2d45c9fb74b1047e1ed7a0e290c8eb7735fed1baa25cb782f"}}}, &(0x7f0000000000)={0x0, 0x3, [0xc00, 0xee7, 0x204, 0x43a]})

7.124111964s ago: executing program 2 (id=476):
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0xfffffd96, &(0x7f0000000080)=[{&(0x7f0000000380)="4d876e7a861ebfaee83feac43a40215dedc32d6dbc5e7f3a805635e046d7126306514f76be4635e409c3897e15eda00e6faafcfb14149a61539ba7827ef85e54d0351838679eeecb83b56597343a76405308d76d00b08fcd1a02d640f8d5a82a52f7e0b82b682c9d3ba0b3425c27f55fdbe2262a5c0eebc80536d1b9d41f7afd8b2ff4d910d38e369bc2c0626825dbc6dc01187af5f4d0e505e652204dabd8638cc449e5d388042422d6f2fbf4ca23ffd04b84b050f55594bb42210b3a869457dbe25a40c70d2a60e8727fbad98277c321a1e698", 0xd4}, {&(0x7f0000000480)="aa7425b80b3a59119ae94f29a612fd0c04a40bad30150329b99fdd3691daf2dc37913dd70e90026edb7ae07f0beaee45cecee1cd4e0b0d9ab00d7d906166f683a839ef5f3db10abf29e6fe4e9bda17cfe5748bcd512b56a7388b3306e60f13e7371672a2d1ceb7826bfaa7b5f999c97b9b051fae027370e0a766e1e3a465376b10b33f50a38dec27780e1edaf7dc93b8854ea8530fe3d92b829b19c4d95a4724ec479d0c1d53bc5d8b28e0b2c766b726594c4d660d87fe9540a6fa70361844b25b01f488373d5b2bc94b099e8466f599ecc7613ec791a4f091cfccc551340bf154181d987bd15e4e5f4ead097c83ee11505d01bc23", 0xf5}, {&(0x7f00000000c0)="acb42207b1d632f1f7afaa0a04d53eb4e9457c00b30b869eaf85e82e19716ea34e1c79", 0x23}, {&(0x7f00000002c0)="8c050000007fd223779e35f5c2b3ef9ea2379c3acf4388af85f0ba61a92cf5cb60f4a2c6be2a4275d7658b6fb616862eba90436bf6aedba9fb178465688db96f0c722522e98c4dd1404998df0fa3d3a8be20156538c64dedc438263eaa85f92fdeb9b78ec17d"}], 0x3}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_buf(r2, 0x0, 0x2f, &(0x7f00000005c0)="c2ae4f5a864898b432cb52401ac4686854ea29d9b63d2d84fdfaf467b91cb496aef452a9fb2b989fecc1828b7d27775b87bdd385ea6ec59c32182703f246ec08bef2525fb5fa6f3dc446f7ea524c618659a6d264442d2ed45c69c224e5544f9e048ae4af49153c3b8b96555bcd38dc", 0x6f)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000140)={0x0, &(0x7f0000000380)})
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x10001, 0x0, 0xfffffffffffffffe, 0x0, 0x7, 0x2004ca, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000]})
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000003e00070100000000000000000300040001"], 0x1c}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000003c0)='usr\xd0;\xcd\t\x00\xf6s\x8e\xe38\xbe\v\xe4\x17L\xb3\xc3E\xc0\x86cx\x12\xbfG\xe4`}\'\x1f\xd4?\xffz\xb6h\x83\xa5\xa1\xd3E\x8c\xf4\xf9Y*\xf2\xefr=\xb2\xb2\x1d\xae}s\x99\xa2\xdcD\xd6\"4N~\xeb\xe3\xfe\xea\xd3\xfd\xcc6>[\xaf\xce\xaf:\x1f\xf0\xbaH\xeb8A3^,\xbdC\xe9V\a\xe4\x81\xb2\xcd\xc7#\x9a49\x87\x92U\x96\xf2q\xa6\tF\xc1\xf6\xc0}\xe3c\xdf\x80\'?\xec\x95\xa4\x94\xacs(\x8c\x98u\"\x1f\xa2X\xed\xc0\xbe\x1a\xf00\x8fp\x91\xb2#\xbdQB\xbe\xdeE\xb4')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000040)='./bus\x00', 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000000000))
ioctl$TIOCL_UNBLANKSCREEN(r7, 0x541c, &(0x7f00000000c0))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)

3.394876343s ago: executing program 0 (id=521):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000100)=0x2, 0x4)
bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

2.850040979s ago: executing program 1 (id=523):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
pipe(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r0, @ANYBLOB="00cf0000ecff0000b702000014000000b70300000000000085000000830000ffbf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b55385000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102382, 0x18fee)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
r3 = userfaultfd(0x801)
socket(0xa, 0x6, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
pipe2$9p(&(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
splice(r4, 0x0, r5, 0x0, 0x10000000000016, 0x0)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000000)={&(0x7f0000000bc0)={{@any, 0x3}, {@any, 0x2}, 0x400, "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"}, 0x418, 0x5})
userfaultfd(0x800)
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000076e000/0x4000)=nil, 0x400000, 0x0, 0x2})
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r6)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, 0x0, 0x20000000)

2.486958155s ago: executing program 0 (id=524):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x36c9, 0x4)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x890}, 0x0) (async)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x890}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="01"]) (async)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="01"])
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r2, 0xfff) (async)
listen(r2, 0xfff)
r3 = socket$inet6(0xa, 0x80803, 0x83)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xae}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast1, 0x4000, 0x0, 0x0, 0x0, 0x9}}, 0xe8) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xae}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast1, 0x4000, 0x0, 0x0, 0x0, 0x9}}, 0xe8)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab\x16\x9c{\x8c\x97\xcc\xe7\xa5\xf5\xeb2\x9a\xed%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\xd0\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u', 0xfeffffff00000000) (async)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab\x16\x9c{\x8c\x97\xcc\xe7\xa5\xf5\xeb2\x9a\xed%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\xd0\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u', 0xfeffffff00000000)
r5 = socket(0x2b, 0x80801, 0x1)
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async)
r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
r8 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000180)={'wg2\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000180)={'wg2\x00', <r9=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x3003, '\x00', r9, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x3003, '\x00', r9, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r7}) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r7})
gettid()
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000677400"/36], 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES32], 0xb8}}, 0x0)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)

2.486587348s ago: executing program 3 (id=525):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0xcc3f, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xf, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000005f40)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000500)="7fabec1567918e509d195070eb5c49b996b3c3bcb87029e87e4a2c1818aaf17e84671410111b7e14a7351db218497b0e35d8fb8b816d3087d650cd09f803b0a2d4f9ec82cf2ce822288a9d0c617445cbcebf68a8c068463cd41501b59146bd9a2d6688d98b26b2deb38e488fd90803597f4eade93012a84849e0aeef4301517e55198a14", 0x84}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="edf5b021ab04bc289ba9c2042992f6bdf8621d259044e486a1ab9d7ce16a67acd365120713ef35c977efc6fcdcc35c666c4643ce25423830fa2f982387c017483d72c0acd253cb5fe4d6c252cd8bdc21df60db91504f4ab579d6100839e06b692726c2a6a2f993fdaec9dff8959c55a1081eb72ded8a005acf6727dca2344ff1cba30fba34c06b66531d81f7220e9463", 0x90}, {&(0x7f0000001740)="2218617adefac80b35e7d13ccfe0e02c685e6aedd7d0245ce8fdf9fd3b1c68bee1043a4155e91bbeeedd0b2ed65f36626ddbf8cb883c927d1f752c10dfd4a39050f402ab1d643737d4647c22afadc184072e8386fff660676cb0b04b73f413cf798cea6b704279f2103290148f2298d28a40a96c18f0fbf373497ad5631d32293b2b8baf34a892b30006e7b15b3ecf4f65a8cc0676ad7943c4cb6dad0e21d16bf1c163a8cea98078bf140869b596d0b5460e16ff39c167b5d2c9f0cf4af93fda1e900e90aa35a82d4aa628db2afaf2ebe2f1826471789def00cf3935e9156666e910707f30d8f02f89a62110aa62", 0xee}, {&(0x7f00000005c0)="dfd069d7bc8bdf5b866a57fcac0950f7815a0f6f8cce19a810513fbf5dcee8ff195df786b20b3ae5d2639448e72d2b43ec4411da6a245ed2b209d89fcd39210cd5474654ea32ac1798eb6e1aa9985033e5b7862a", 0x54}, {&(0x7f0000000080)}, {&(0x7f0000001840)="c57e64897c25f800d375e521bd5840181c3e718757c6e85317f39dbe675f9759c75d1778337aedaef3977ff250d057627f41dcc428edd6ad0f5ab25ed639a14a575efae195d84ef7c72c2b68554c403e8f640311f1068dd8cb0d72d6bfe794ec27d5823ffb2e3b800a1db3d5a50c8326d5532aaa590430ce02a624f0c492b7e280bd40aa6086224d372c53f7ad57dd9ce5d48d17177b26d50906", 0x9a}], 0x7, &(0x7f0000000380)=[@rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r6, r0]}}], 0x1c, 0xc000}}, {{&(0x7f0000001900)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000001980)="cd3d7f42c0a4491cf46f07abe0bd85670e97d6a115bc110e4e4be8dd39beb85385f3501eda47916be992b0fd2a3153ab958772dfce3ef156a5297de8fc1e9defb531d52ae718f9a765599594e3c6d55a38b52f03dcb33de12edc8538df783e3103e5a2364ced307d4b66b22a2c028a3189daf9142c64633dbac963ee3c2587191f8913d8c26dda436f98df5f1ce951b98819a6f04d97a5e6d79c97b5f7ecfc359aae9de6f3a217640d0c8d459eef69e68c11d281dfbe07f8b43f8ef824a4dc7cc0482d4cb68061dbe53e184608d9ba1830dc81", 0xd3}], 0x1, &(0x7f0000001d40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0xffffffffffffffff, r9, r9]}}, @cred={{0x18, 0x1, 0x2, {r7}}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r7}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r8, 0xffffffffffffffff, r2, r2]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r2]}}, @cred={{0x18, 0x1, 0x2, {r7}}}], 0xd4, 0x4}}, {{&(0x7f0000001e40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002180)=[{&(0x7f0000001ec0)="14b03f93c137783defb5d133682905a9c689fcf20ff6e9ce0778591b19fadc2614622452843364461135b1236559ebf2a4e2d61916e0128a6bfe9ddc5dd56fe8ac9efeec90310f0764fe1789", 0x4c}, {&(0x7f0000001f40)="36f391ab8d032ee2e2e1944cad3e07e010be68fc19ffc9f647996c63b75eb9bb8b94c45222217e84363b8cc90a92a4655922968431866f5ea01939d307b77ba55b852da78a3422532b0649bbf3004e5ab73348b8b0bfa03501f1afdf6b7b032dedf5e1b56f10adcb6cf55563ecab44231b680729ee2cbe37a78c18620b431a421c41a30498b71013c8ec45", 0x8b}, {&(0x7f0000002000)="8be58d38e65a8542cf051be3668a7fc2fa93c48a5723f310af447f68c9200c9319409c54839d", 0x26}, {&(0x7f0000002080)="b85e5aeeb5362c51035e12919692e800903aad4d6584a2b32f91ed277dd53630e16ed5bd0d39ff0ce34d0b753e59c00e73cc0d11dc30f88497f553354f2ee7107102a33b552b715058d2447cbc925f3318dc2551be2a2c58c05029da2101ccca34b4cd660fa49228f52ec69f4bc550a80b71410db777716a2739f0658513d58a96a07f7239359067006192b26ffefa60ae8df5789371c5c5538ede70a77e65ac86835c3438bc5f2e03dc5f6c7f2feca812dd28b224ca690a87888ed54225ff6c2b095cb4e8c1a2f163d3322ecd3356147e959e02af69b14e05b18bea67015942626abde37eb79e6a252b9e077cec1af0", 0xf0}], 0x4, &(0x7f0000004300)=[@rights={{0x10, 0x1, 0x1, [r2]}}, @cred={{0x18, 0x1, 0x2, {r7}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r6, r9, r0, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r6, 0xffffffffffffffff, r8, r1, r0, r0, 0xffffffffffffffff]}}], 0x70, 0x20000000}}, {{&(0x7f0000004380)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000004500)=[{&(0x7f0000004400)="828425961b4ce1f764a383a2669526be7a66084b8669b75f54a3b4b597cf710967e457a98adf32749c24ac6d69b378d77f06f822587356b73b8d4ff1ce091f2c99bc01f0f35679a13df459fad0832c40fdbf069b55d5270a255b4e93290f18fb7e34bff6b60e207e6a", 0x69}, {&(0x7f0000004480)="6b8660d30a64a56d60515d54e7172719f39ab053fb94bb2c98533874ff548be5f6720abc63b1574439590f660a4f7423392140abbac6b268affe1816f87e5b111e54f77b27da83c4eeae57fb0361d9246df83a61823582bc597ecf44b2dd6c81fb2e832229a16852b0026af566ac65eab83df348c0e763d29429bc", 0x7b}], 0x2, &(0x7f0000001a80)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [r0, r8, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r7}}}, @rights={{0x20, 0x1, 0x1, [r0, r8, 0xffffffffffffffff, r1, r0]}}], 0x80, 0x1000c000}}, {{&(0x7f00000047c0)=@file={0x0, './file2\x00'}, 0x6e, &(0x7f0000004940)=[{&(0x7f0000004840)="c2897ae0512628f086866a6cbe725b88003dda8bc145a67ef4fa6a5f7908cb89157af125da8ee78bf22ca6131c020a256823592c4334e074613f241139b6441a64a7fb942d694317dbd2094e6cca17fd6388766761cc9115c098d380c319264ec4b9b5d9852faa3432cf6e2e31b949e8c2a46e00114b0e24f8c8d246f1d45ea67b1663e4d3846f9e4841cf35053d860c11507e4712c03c8bfa7ae543661b4f9ebc79b588e84cc922c73d2793d50a2c49aacb18ef401b48c250a1479fc4a8401e34e070c0f104b1e5f2", 0xc9}], 0x1, &(0x7f0000004a80)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r8]}}], 0x48, 0x4000010}}, {{&(0x7f0000004b00)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000005b80), 0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="49ee634e8716e1d64cb3e24ec9fe054075501a2d27ca32391a54e13fa4681ae3f9aa3ebae5710fb3", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="180000000100000002000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0c0000000100000001000000"], 0x40, 0x4000000}}, {{&(0x7f0000005d80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000005e00)}}, {{&(0x7f0000005e40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005f00)=[{&(0x7f0000005ec0)="e218e11c", 0x4}], 0x1, 0x0, 0x0, 0x4a81428f53dd36c2}}], 0x8, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r10, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)

2.299467217s ago: executing program 0 (id=526):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020961b0a0000000000000109022d"], 0x0) (async, rerun: 32)
r1 = socket$inet(0x2, 0x2, 0x0) (rerun: 32)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) (async, rerun: 64)
r2 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') (rerun: 64)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x12})
fcntl$setstatus(r3, 0x4, 0x2000) (async)
r4 = openat$random(0xffffffffffffff9c, &(0x7f0000001a00), 0x0, 0x0)
ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000040)=ANY=[]) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r5) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8, 0x1}, 0x0, 0x0) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'team_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
preadv(r2, &(0x7f0000000740)=[{&(0x7f0000000300)=""/49, 0x31}], 0x1, 0x2f, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e23, 0x8, @empty, 0xffffffff}}, 0x0, 0x0, 0xe, 0x0, "279fc22c7837f3bed785c03e1bbe6f57b1880ca1baba38d6bcfabcf8d944ffa62c795ec539f5c1c6d04c8200ed850f90a8b3bcc4cd2a91eeea1bd6febb9465869b394a208b875508b4e73cb7e700b05d"}, 0xd8) (async)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x132}) (async)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0xf5, @rand_addr, 0x1}, 0x1c)

2.14997874s ago: executing program 0 (id=527):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xb5}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xb5}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid() (async)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r2 = gettid()
capset(0x0, &(0x7f0000002140))
r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, 0x0) (async)
ioctl$TIOCSETD(r3, 0x5423, 0x0)
r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000100)={0x0, 0xffffffff, 0x4ea, 0x0, 0x15, "64f30ea8000000000000000099862d4e0100"})
r5 = syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x1) (async)
r6 = syz_open_dev$ptys(0xc, 0x3, 0x1)
readv(r5, &(0x7f0000000180)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1)
ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000000c0)=0x8000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
ioctl$TIOCSTI(r6, 0x5412, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x2}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r7=>0x0, <r8=>0x0})
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000000c0)={r7, r8/1000+60000}, 0x8)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sendmsg$sock(r1, &(0x7f00000034c0)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$sock(r1, &(0x7f00000034c0)={0x0, 0x0, 0x0}, 0x0)

1.959195034s ago: executing program 1 (id=528):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000100)=0x2, 0x4)
bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

1.430005187s ago: executing program 3 (id=529):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x104) (async)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a) (async)
r1 = socket$kcm(0x10, 0x2, 0x0) (async)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io(r2, &(0x7f0000000100)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0x17, {0x17, 0x23, "29330dc778c7a4cae9a4c9e0bb43bbd22455bab204"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x0) (async)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x8000)

1.429049288s ago: executing program 0 (id=530):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x29, 0x81, &(0x7f00000000c0)=""/129}, &(0x7f00000025c0)="8536b60bfad6", 0x0, 0x8, 0x10000, 0x1, 0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r2 = dup(0xffffffffffffffff)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfff}, 0x0, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_io_uring_setup(0xcd4, &(0x7f0000000440)={0x0, 0x2f1d, 0x10, 0xfffffffd}, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
preadv(r7, &(0x7f0000000200)=[{&(0x7f0000000080)=""/55, 0x37}], 0x1, 0x0, 0x0)
ioctl$VIDIOC_STREAMOFF(r7, 0x40045613, &(0x7f00000001c0))
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040))
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
r8 = socket$rxrpc(0x21, 0x2, 0x2)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount(&(0x7f0000000080)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0x0, 0x0)
r9 = socket(0x15, 0x5, 0x0)
getsockopt(r9, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
sendto$rxrpc(r8, &(0x7f0000000340)="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", 0xfa, 0x0, &(0x7f0000000080)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfd}}, 0x24)

1.079519237s ago: executing program 1 (id=531):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000080)=@usbdevfs_connect={0xffffffff})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x400, 0x4)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000140)=0x300, 0x4)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x1, 0x7fff, 0xd1e, 0x100}})

1.010165425s ago: executing program 1 (id=532):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x371581, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000001980)=ANY=[@ANYBLOB="1c008863000004"], 0xfce)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x10000)
read$dsp(r2, &(0x7f00000000c0)=""/108, 0x6c)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0)
write$dsp(r3, &(0x7f00000001c0)="d3", 0xffffffc6)

910.002998ms ago: executing program 1 (id=533):
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000cd2000/0x1000)=nil, 0x1000, 0x0)
sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r1}, 0x10)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000000)={[{@dyn}]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384-generic\x00'}, 0x58)
recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
madvise(&(0x7f0000aa7000/0x2000)=nil, 0x2000, 0xe)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
r5 = io_uring_setup(0x5506, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffc, 0x118})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB="8a05723dd68a0eb91db6d07cb39276a5a13e4779d7573873d0afa9c08884f9faf3178e4343886e1081ea715c4aac9c8fa4c0cffff302f95a8f6cd6db20bab1e0d13a6b29fac6e477e05c0ff1415eabd5159137b5f654d12a2d6cb93f89e64071575622468c173554fd2bd8efd8d9437f244dbc495d0f8d8e780615bf401f3046a00600bc86e8bf63f5467093e082d1b57751155c7ee29d9b6b1caf3a4ac238b5"])
read$FUSE(r6, &(0x7f00000103c0)={0x2020}, 0x2020)

719.756103ms ago: executing program 3 (id=534):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="d5f854499623b1da30bf110006e64a65ed374de28540e6a8717aa2c3c3487786cb1ff37d83e42fa6eba7b09f407535ac4e106b1bf7955a40d20ec6e4d46dabb5cfe2f8fd41be996be9b9bb28bf275e23297a917af897aef62144a66e0d47ef5449b921a4bd7926e52574d8f979be07dc05bb22c154a5fc79955d75580367914a0a353f4907b48f514287d69f36b4e0fa6bfbb43830fa756d85da92d92a3517470f074490ad991eb176d458b439f1414313f20717172ffe80ff51e7f11a99b4c68068a0e6270e60b2"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0xfffc, 0x1}, 0xe)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0xc9e}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1120000004000056252128d9e8190022000100", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000fcffffff00"/28], 0x50)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe2181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x1, 0x0, 'queue1\x00', 0x2})
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x9]}}], 0x1c)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f00000002c0)={0x80, 0x6, 0xfffffffe, 0x0, 0x0, 0x1})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x200c864, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r4 = openat$dir(0xffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x20)
symlinkat(&(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000380)='./file1\x00')
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2)
socket$packet(0x11, 0x3, 0x300)
syz_open_dev$vim2m(&(0x7f0000000280), 0x800, 0x2)

410.23723ms ago: executing program 0 (id=535):
syz_open_dev$vim2m(0x0, 0x7fff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000376, &(0x7f00000000c0)=ANY=[@ANYRESHEX], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x34, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x800005d, 0x4810)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000400)={0x2, 0x0, @pic={0xc0, 0x7, 0x8, 0x40, 0xc0, 0x5, 0x81, 0x7, 0xa, 0x3, 0x7, 0x6, 0x2, 0x8, 0x26, 0x4}})
r4 = socket$alg(0x26, 0x5, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'wg2\x00'})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast})
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$OSF_MSG_REMOVE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002240)={0xbb8, 0x1, 0x5, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [{{0x254, 0x1, {{0x2}, 0x81, 0xa4, 0x3ff, 0x8f1f, 0x18, 'syz1\x00', "f422a3b0da004cfbc2a6027a5488c8af3e0774b9fa5a3c0eeb67cf04b50af806", "928b1552a4c10798b06757e9bcb55c1b44002cfd5e23858c82c7223ecd813760", [{0x8, 0xd9, {0x2, 0x4}}, {0x8, 0x2, {0x0, 0x6}}, {0xc, 0x2, {0x1, 0x6000}}, {0x9, 0xf, {0x0, 0x4}}, {0xbf, 0xa, {0x3, 0x8}}, {0x2, 0x7fff, {0x2, 0x5}}, {0x3, 0x0, {0x2, 0x5}}, {0xc38, 0x8, {0x0, 0x8001}}, {0x6, 0x0, {0x3, 0x3}}, {0x7, 0x913, {0x2, 0xfff}}, {0x7, 0x9, {0x0, 0x3}}, {0xa957, 0x0, {0x0, 0x5}}, {0xff, 0x9, {0x1, 0x5}}, {0x5, 0x9, {0x0, 0xf}}, {0xb2, 0xef52, {0x3, 0x7}}, {0x7f, 0x40, {0x3, 0x7}}, {0xe, 0x8}, {0x4, 0x0, {0x2, 0x4}}, {0x3, 0x7f, {0x3, 0x3}}, {0x8, 0x2, {0x2, 0x6}}, {0x6, 0x1, {0x3, 0x1}}, {0x9, 0x7fff, {0x2, 0x7fff}}, {0x400, 0x6, {0x3}}, {0x7, 0x200, {0x3, 0x8}}, {0x1, 0x8, {0x3, 0x7}}, {0xdc1, 0xf1, {0x1, 0xf}}, {0x0, 0x467f, {0x3, 0x3}}, {0x81, 0x5, {0x0, 0x1}}, {0x7, 0x4, {0x0, 0xffff}}, {0x1, 0x1000, {0x2, 0xffff}}, {0x8001, 0x3, {0x2, 0x8000}}, {0x2, 0x4, {0x0, 0x4}}, {0x8001, 0x0, {0x1, 0xc}}, {0x3, 0x5, {0x3, 0xc5}}, {0x9, 0xfd3, {0x0, 0x4a0}}, {0x5, 0x5, {0x2, 0xfff}}, {0x9, 0x9, {0x1, 0xb93}}, {0x6, 0x0, {0x3, 0xfff}}, {0xfffd, 0x6, {0x3, 0x5}}, {0x8, 0x5, {0x1, 0x4}}]}}}, {{0x254, 0x1, {{0x2, 0xfffffe00}, 0xa, 0x3, 0x7, 0x6, 0x19, 'syz1\x00', "6e756d7c7c0f99d923da42f45369106e2ea1566a0af95b39fa5633b4567ddaf5", "5e37b5e052599529d09736032b2cf3be148726deaca1e755189d801d0f03816f", [{0x8, 0x7, {0x0, 0x4}}, {0xf5a, 0xb4, {0x1, 0xffff}}, {0x3, 0xae, {0x0, 0x3}}, {0x5, 0x5, {0x2, 0x3}}, {0x3, 0x6b3, {0x3, 0x3}}, {0x1, 0xb, {0x2}}, {0x1000, 0xfffc, {0x2, 0x9}}, {0x9, 0x3ff, {0x1}}, {0xa, 0xfffa, {0x3, 0x32a7}}, {0x3, 0x6, {0x1, 0x1}}, {0x7, 0x2, {0x0, 0x1}}, {0x6e45, 0x2, {0x1, 0x60}}, {0x1000, 0x1, {0x1, 0x101}}, {0xfff4, 0x5, {0x0, 0x5}}, {0x6, 0x80, {0x2, 0x33b}}, {0x8, 0xf, {0x1, 0xffff}}, {0x1, 0x1782, {0x1, 0x7f}}, {0x5, 0xfff9, {0x3, 0xfffffff4}}, {0x8, 0x80, {0x3, 0x2}}, {0x0, 0x7, {0x0, 0x1}}, {0x9, 0x2, {0x1, 0xfffffffe}}, {0x401, 0x32, {0x2, 0xfffffffd}}, {0x94f9, 0x6, {0x3, 0x5}}, {0x10, 0x40, {0x2, 0x8}}, {0x10, 0x200, {0x3, 0x9}}, {0x4, 0x0, {0x2, 0x8}}, {0x6, 0x4, {0x1, 0x5}}, {0x5, 0x6dbc, {0x2, 0x9}}, {0x3, 0x200, {0x3, 0x1}}, {0x9, 0x6, {0x3, 0x2}}, {0x63f1, 0x800, {0x1, 0x1}}, {0x1a42, 0x9, {0x0, 0x9147}}, {0x8, 0xb4fe, {0x1, 0xa}}, {0x9, 0x7, {0x0, 0x9}}, {0x4404, 0x200, {0x1, 0xed1}}, {0x5, 0x6, {0x0, 0x3ff}}, {0x4, 0x2, {0x0, 0xf0c8}}, {0x5, 0x8, {0x1}}, {0x2, 0xc, {0x0, 0x4}}, {0x8, 0x414, {0x1}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x9c, 0x3, 0x5, 0x9, 0x15, 'syz1\x00', "bc12a5be240ac8686721c7a5c4b109ef8476a8987772ad9d4761748e00bf707b", "e49eeb287c788230faa1167dd6c42181590a18bfc093c72084547b4e6dcc2934", [{0x1, 0xa, {0x1, 0x5}}, {0x0, 0x7ff, {0x0, 0x7}}, {0x1, 0x8, {0x0, 0x2}}, {0x9, 0x32b7, {0x0, 0x5}}, {0x9, 0x4, {0x1, 0x5}}, {0x126, 0x18ae, {0x3}}, {0x233, 0x3, {0x2, 0x9}}, {0x7f, 0xfffb, {0x1, 0xf79e}}, {0xce0, 0x7, {0x1, 0xffff0001}}, {0x8, 0xac00, {0x0, 0x6}}, {0x9007, 0x401, {0x1, 0x7}}, {0x9, 0x9, {0x3, 0x6812}}, {0x7, 0x7ff, {0x1, 0x8}}, {0x9, 0x7, {0x2, 0x401}}, {0x2428, 0x2, {0x0, 0x4}}, {0x1, 0x81, {0x3, 0x6}}, {0x1, 0x54, {0x0, 0x4}}, {0x40, 0x8, {0x1, 0x2}}, {0x7, 0xffff, {0x1, 0x5}}, {0x2, 0x6, {0x2, 0x5}}, {0x4, 0xfffd, {0x1, 0x2dd3}}, {0xcf47, 0x6, {0x1, 0x1}}, {0x2, 0x6, {0x1, 0x8}}, {0x8000, 0x1, {0x0, 0x3ff}}, {0x9, 0x6c16, {0x2, 0x8}}, {0xfffd, 0x6, {0x3, 0x8}}, {0x1, 0x7, {0x1, 0x8000}}, {0x71, 0x0, {0x3, 0xfffffff7}}, {0x1, 0x1, {0x1, 0xffffffff}}, {0x1, 0x80, {0x0, 0xa}}, {0x9, 0xfff, {0x1, 0x7}}, {0x2, 0x8ff, {0x3, 0x7f}}, {0x0, 0x0, {0x0, 0x200}}, {0x3, 0x0, {0x0, 0x480}}, {0x5, 0x0, {0x3, 0xfff}}, {0x5, 0x3a, {0x3, 0xfffffffa}}, {0x0, 0x2, {0x3, 0xd8}}, {0x0, 0xd41, {0x1, 0x1}}, {0x0, 0x6, {0x3, 0xbb04}}, {0x3, 0x3, {0x0, 0x6ca82357}}]}}}, {{0x254, 0x1, {{0x3, 0x3ff}, 0x4, 0x1, 0x7, 0x1, 0xb, 'syz1\x00', "127459ce1d922d78621ee947a3e40dd5712efd65ae82e2d488b29feaf272b27c", "0c0bc7992adf31548a082e55c899855114335e68e6305ea75ead1049b50576cf", [{0x44e4, 0x9, {0x0, 0x9}}, {0x5, 0xc, {0x2}}, {0x1, 0x2, {0x2, 0x7f}}, {0x9, 0x3, {0x0, 0x1}}, {0x5, 0x8, {0x2}}, {0x6, 0xd, {0x0, 0x2}}, {0x4, 0x7, {0x3, 0x1}}, {0x400, 0x5, {0x3, 0x3}}, {0x9, 0x4, {0x3, 0x1}}, {0x401, 0x2, {0x2, 0x1}}, {0xfff7, 0x2, {0x2, 0x70}}, {0x101, 0x8000, {0x1, 0x5}}, {0x1, 0x1c00, {0x1, 0x2}}, {0x4, 0x7, {0x3, 0x8}}, {0x8, 0x1390, {0x2, 0x8}}, {0x6, 0x7, {0x3, 0x8000}}, {0x8, 0x8001, {0x2, 0x9}}, {0x4, 0xd32e, {0x1, 0x7}}, {0xe199, 0x3ff, {0x2, 0x6}}, {0x193b, 0x7, {0x1, 0x2}}, {0x0, 0xb, {0x2, 0x6}}, {0x17, 0x6, {0x3, 0xab49}}, {0x0, 0x9, {0x1, 0x3}}, {0x4, 0x1745, {0x3, 0x2}}, {0x7fff, 0x0, {0x1, 0x100}}, {0x6, 0x7f, {0x3, 0xe}}, {0xff, 0x1, {0x0, 0xa60c}}, {0x800, 0x9, {0x3, 0x4}}, {0xb100, 0x4, {0x1, 0x4}}, {0x0, 0x37d, {0x2, 0x7}}, {0x9, 0xffff, {0x2, 0x7}}, {0xc, 0x7, {0x2, 0x81}}, {0x80, 0xa, {0x3, 0x101}}, {0x8, 0xf18c, {0x3, 0x10001}}, {0x9, 0x9, {0x0, 0x80}}, {0x0, 0xd, {0x1, 0xfffffffc}}, {0x7, 0x6, {0x3, 0xc113}}, {0x0, 0x8, {0x0, 0x5}}, {0x7f, 0x5, {0x2, 0x1000}}, {0xff81, 0x400, {0x1}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x5d, 0x2, 0xfe, 0x4, 0x18, 'syz0\x00', "0154eb4fb141f2ba24b5ee116a81462aaba20a49f7730ec8125bdaded91efd1d", "97e17c19bd5b85e2537fc754b0666424bf85a02011b23dd4ddcef7f04b5e2510", [{0x9, 0x5, {0x1, 0x10000}}, {0x101, 0x3, {0x3, 0x10001}}, {0x1, 0xd90a, {0x3, 0x3ff}}, {0xb, 0x3, {0x2, 0x5}}, {0x2, 0x8, {0x0, 0x9}}, {0x2, 0xff, {0x0, 0x3}}, {0x5, 0x9, {0x3, 0x4}}, {0xff, 0x8, {0x1, 0x5}}, {0x1, 0xb7, {0x3, 0x10001}}, {0x5, 0xff9f, {0x3, 0x6}}, {0x7, 0x4}, {0x0, 0xead9, {0x2, 0x8}}, {0x996, 0x400, {0x1, 0x7ff}}, {0x7, 0x263, {0x1, 0xffffa486}}, {0x200, 0x4, {0x0, 0xf}}, {0x9, 0x0, {0x1, 0xfffffffc}}, {0x4, 0x4f, {0x2, 0x3}}, {0x8, 0xcaf, {0x3, 0x1}}, {0x8, 0x2, {0x3, 0x7}}, {0x8001, 0xd, {0x3, 0x8bd3}}, {0x9, 0x4, {0x3, 0x9}}, {0x9c6d, 0x3, {0x0, 0x6}}, {0xfffe, 0xf000, {0x2, 0xfffffffe}}, {0x2, 0x6, {0x0, 0x9}}, {0x7, 0x9, {0x2, 0x4}}, {0x7, 0x8, {0x1, 0x2}}, {0x4, 0xa, {0x0, 0x1}}, {0x80, 0x5, {0x3, 0xb2}}, {0xcd52, 0x4, {0x3, 0xd}}, {0x0, 0x1}, {0x836, 0x7, {0x2, 0x2}}, {0x4c27, 0x100, {0x0, 0x959}}, {0x4, 0xfff, {0x3, 0x4}}, {0xc68, 0x3, {0x1, 0x3}}, {0x101, 0xc264, {0x2, 0x10000}}, {0x7, 0x7f, {0x0, 0xe}}, {0x1, 0x1, {0x2}}, {0x9, 0x3ff, {0x0, 0x8}}, {0x3, 0x7ff, {0x3, 0x3}}, {0x0, 0x4, {0x3, 0x8001}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4}, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

76.245267ms ago: executing program 3 (id=536):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x3)
ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f00000000c0)={[{0x5, 0x6359, 0x80, 0xbb, 0x2, 0xc, 0x10, 0x6, 0x7, 0x8, 0x80, 0x2, 0x7}, {0x8, 0x40, 0x4, 0x5, 0x40, 0xff, 0x4, 0x3, 0xc0, 0x9, 0xff, 0x1, 0x15d1}, {0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa, 0x2, 0x3b, 0x83, 0x34, 0xfb, 0xfffffffffffffff2}]})
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x274, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x1fc, 0x8, 0x0, 0x1, [{0x1c8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x17c, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001300010000000000fbdbdf2507eb0000", @ANYRES32=r2, @ANYBLOB="00000000000000000c001a800800058004000280"], 0x2c}}, 0x0)

75.901771ms ago: executing program 1 (id=537):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000cd2000/0x1000)=nil, 0x1000, 0x0)
sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r0}, 0x10)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000000)={[{@dyn}]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384-generic\x00'}, 0x58) (async)
bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384-generic\x00'}, 0x58)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x0) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d33b16266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
madvise(&(0x7f0000aa7000/0x2000)=nil, 0x2000, 0xe)
userfaultfd(0x1) (async)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
io_uring_setup(0x1208, &(0x7f0000000100)) (async)
r5 = io_uring_setup(0x1208, &(0x7f0000000100))
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0)
recvmsg$can_j1939(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/203, 0xcb}, {&(0x7f0000000340)=""/102, 0x66}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000000480)=""/180, 0xb4}], 0x4, &(0x7f00000005c0)=""/171, 0xab}, 0x2142)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)

74.018458ms ago: executing program 3 (id=538):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x980902})
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = memfd_create(&(0x7f0000000940)='\xff\x1cl\x1e\xa0</\x00\x8eO\xd4\x89\xc9\x8d\xd6\xbdG\xc8\xdbu\xe0\xff\xf1\xb2\xfd\xf6nz\x05-]\xc2Vk\xaeky\xd3\x83\xe2\xc7\xd3\xe6M^\x98ox\x14\tD(\xd2\xdd\xa0\xff\x0f\x00\x00\x00\x00\x00\x00v\n\xd8\x15\v \x00\x00\x00\x00\x00j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02XYx\xf2\xb7Jb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd\x84\xeepQ\x93nn\x0f\xc6\xa9?\xad\x8b~\x96@i=G\x9ft\x1d\xcc\xc6Ys7\x7f\x8ehv\xd3$\x13s\xa0\xbfi\x03\x00\x00\x00=Xe\xf8tI\x15\x882\x8b\x8e-X\xb5\xf2\x9du\x15S^\xec\xce\xfaf$S\x9f\xe7\xcc\xcf\xe3\xdf\xd2\xb4:\xc9\x16\xc1\xa5\xa0\xaa\xe8.i\xc8\x0e\vt\xe2\xf1l\xdd\xce\x8f$\x06v\xbe\xe7\x95nN\xc5\xaa\x1ev\xc6\x06\x00\x00\x00\x00\x00\x00\x00A\xc3}\xd9\x86[\xb2\xf3\x0f\x90%\xcb\x81\xe8\xea\xbcs\x95\xceM\xed\x00\x9a\xf7\x146\xce\x17_\xe9\x8eXH\x19m\xdfOY\xf1E9-\xc8\xe7\x13^+(b2\x99\xdf\x9f\xa9y\xf2\xe1\xce\xa4<\x9bO\xd0%\xb1\xf39\x9e\xe9\xc3\xba\x93\xfd2v9\xbb\b\xe0\x149\xc4\xdd\xf0s\xe3\xb5\xe0\x8a\x94\xffC\x9b\r))P\x9a\xde\xfb,\xeb\xb6\xa1f}\xa6\xd9!\xcb\xfb\xef\xb3\x8d(\x9d\xfd}\xd5Tf\xd6a\xb0\xdf\n\xf1*\x7f\xbf\xb4\x9f\xe2\x91%\xf6b\xcb6K\xc8\xec\x9b\xc0|\xb3\xb8v{Ogc\\\xa8BnE\x17\x05\x18\xb9\xb5\x19\xda\xef\x91\xdeI\xa0=\x86\xe9J\xd1\x00\x00\x00\x00\x00\x00\x00\x00\xee\xdb\xd3[\r\xf2f!\xf7\x93\xf9S\x14\x81\xb2\xf0\xf0OoY\x94)\xee\x97Kw\xaf\xa3\x94\x83\xae\xa4t\xd0\xbc\x1b\x8d\xf8\xb0\xdc\f;\xc8\xe5%\x17\xc4>C\x83\x83\xa65u\xf9\xa3\x02\x05\xf7{\xcc\\=\x17\xb5\b\xfc\xf8Y\xf8\xa9\xb6\xa4\xaf \xff#\x98;\aRE\n\xb2u\xb5\xafZ&o\xfd\x8f\x1c\x8c\aan\x11Y\xc7]j\x11%I@\xbb?e\x94\x96\xd6K\x05\x06q\xd8\x1a\x87#\x19\xba\x1a\r\xc0I\xd2\x01\xc5N\xf7\xe4\x1e\x15LB\xc0L\xd4\x98\xdd/\xb1\x10\xb8\xb1\x14\xdb\v\x97\xfcI\xcf\xb67\x0eE\x12\x13K\x01\xdc~)\x92G\xf9\xaf\xba\x1f\xe2X\xc0\x7f\xe5l>\xa1\xe0\x1fmE/\xc7!\xe9\x80L\xa3\x0f\xdddd!\xe3=\x95lP\x8a\x11\xb9K;N\xebqK\x029\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x5) (async)
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) (async)
timer_create(0x3, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r3=>0x0) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async)
r4 = syz_open_dev$dri(&(0x7f0000000a40), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000001ac0)={0x0, 0x0, 0x0})
timer_gettime(r3, &(0x7f0000000080)) (async)
fcntl$addseals(r2, 0x409, 0xf) (async)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000eb0001"], 0x30}}, 0x0)

0s ago: executing program 3 (id=539):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000100)=0x2, 0x4)
bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:40198' (ED25519) to the list of known hosts.
[   34.653327][ T5920] cgroup: Unknown subsys name 'net'
[   34.774625][ T5920] cgroup: Unknown subsys name 'cpuset'
[   34.777558][ T5920] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   35.560529][ T5920] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   37.435586][ T5967] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   37.436403][ T5966] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   37.438279][ T5967] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   37.440557][ T5966] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   37.441732][ T5967] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   37.443756][ T5966] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   37.444649][ T5968] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   37.445857][ T5968] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   37.445958][ T5967] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   37.446141][ T5967] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   37.446492][ T5967] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   37.446687][ T5967] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   37.446828][ T5967] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   37.447436][ T5966] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   37.447669][ T5966] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   37.447770][ T5966] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   37.449426][ T5968] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   37.455602][ T5970] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   37.462600][ T5968] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   37.463467][ T5970] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   37.464867][ T5968] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   37.466998][ T5970] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   37.475487][ T5970] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   37.477352][ T5970] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   37.606574][ T5955] chnl_net:caif_netlink_parms(): no params data found
[   37.647526][ T5954] chnl_net:caif_netlink_parms(): no params data found
[   37.664461][ T5956] chnl_net:caif_netlink_parms(): no params data found
[   37.684547][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.686371][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.688268][ T5955] bridge_slave_0: entered allmulticast mode
[   37.690666][ T5955] bridge_slave_0: entered promiscuous mode
[   37.695631][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.697505][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.699364][ T5955] bridge_slave_1: entered allmulticast mode
[   37.701497][ T5955] bridge_slave_1: entered promiscuous mode
[   37.778744][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.812264][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.829402][ T5963] chnl_net:caif_netlink_parms(): no params data found
[   37.844993][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.847026][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.849459][ T5954] bridge_slave_0: entered allmulticast mode
[   37.851852][ T5954] bridge_slave_0: entered promiscuous mode
[   37.873896][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.875769][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.877615][ T5954] bridge_slave_1: entered allmulticast mode
[   37.879571][ T5954] bridge_slave_1: entered promiscuous mode
[   37.881964][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.884231][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.886662][ T5956] bridge_slave_0: entered allmulticast mode
[   37.889576][ T5956] bridge_slave_0: entered promiscuous mode
[   37.893121][ T5955] team0: Port device team_slave_0 added
[   37.895814][ T5955] team0: Port device team_slave_1 added
[   37.915790][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.917657][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.919542][ T5956] bridge_slave_1: entered allmulticast mode
[   37.921551][ T5956] bridge_slave_1: entered promiscuous mode
[   37.957706][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.960175][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.966875][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.987704][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.998373][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.001464][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.003313][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.009591][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.014499][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.016278][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.018071][ T5963] bridge_slave_0: entered allmulticast mode
[   38.019955][ T5963] bridge_slave_0: entered promiscuous mode
[   38.022711][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.032869][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.043408][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.045255][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.047075][ T5963] bridge_slave_1: entered allmulticast mode
[   38.049017][ T5963] bridge_slave_1: entered promiscuous mode
[   38.059581][ T5954] team0: Port device team_slave_0 added
[   38.084546][ T5956] team0: Port device team_slave_0 added
[   38.103149][ T5954] team0: Port device team_slave_1 added
[   38.106380][ T5955] hsr_slave_0: entered promiscuous mode
[   38.108292][ T5955] hsr_slave_1: entered promiscuous mode
[   38.111610][ T5956] team0: Port device team_slave_1 added
[   38.114554][ T5963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.139311][ T5963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.149801][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.151550][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.157993][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.185954][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.187712][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.194128][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.197236][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.199018][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.206350][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.210445][ T5963] team0: Port device team_slave_0 added
[   38.222210][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.224172][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.230938][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.234921][ T5963] team0: Port device team_slave_1 added
[   38.256324][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.258121][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.264771][ T5963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.287327][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.289083][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.296105][ T5963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.300526][ T5954] hsr_slave_0: entered promiscuous mode
[   38.302321][ T5954] hsr_slave_1: entered promiscuous mode
[   38.304126][ T5954] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   38.306125][ T5954] Cannot create hsr debugfs directory
[   38.370766][ T5963] hsr_slave_0: entered promiscuous mode
[   38.372705][ T5963] hsr_slave_1: entered promiscuous mode
[   38.374375][ T5963] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   38.376316][ T5963] Cannot create hsr debugfs directory
[   38.379223][ T5956] hsr_slave_0: entered promiscuous mode
[   38.381187][ T5956] hsr_slave_1: entered promiscuous mode
[   38.383880][ T5956] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   38.385845][ T5956] Cannot create hsr debugfs directory
[   38.467554][ T5955] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   38.481992][ T5955] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   38.486916][ T5955] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   38.506652][ T5955] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   38.534464][ T5956] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   38.538691][ T5956] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   38.541767][ T5956] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   38.546273][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.548384][ T5955] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.550456][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.552261][ T5955] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.555856][ T5956] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   38.572072][ T5954] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   38.575280][ T5954] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   38.578225][ T5954] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   38.583073][ T5954] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   38.587897][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.589723][ T5956] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.591585][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.593421][ T5956] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.613444][ T5963] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   38.616476][ T5963] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   38.620420][ T5963] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   38.624359][ T5963] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   38.631148][   T64] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.634137][   T64] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.638053][   T64] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.641278][   T64] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.670993][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.689992][ T5955] 8021q: adding VLAN 0 to HW filter on device team0
[   38.697667][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.699524][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.708523][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.710356][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.721755][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.729940][ T5963] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.733956][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.741645][ T5956] 8021q: adding VLAN 0 to HW filter on device team0
[   38.748901][ T5954] 8021q: adding VLAN 0 to HW filter on device team0
[   38.756212][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.758045][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.760741][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.762633][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.766265][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.768059][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.772305][ T5963] 8021q: adding VLAN 0 to HW filter on device team0
[   38.778794][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.780654][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.783221][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.785021][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.795338][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.797161][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.836294][ T5963] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   38.877399][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.883538][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.902457][ T5955] veth0_vlan: entered promiscuous mode
[   38.910863][ T5963] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.917235][ T5954] veth0_vlan: entered promiscuous mode
[   38.920378][ T5955] veth1_vlan: entered promiscuous mode
[   38.926084][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.930196][ T5954] veth1_vlan: entered promiscuous mode
[   38.945244][ T5955] veth0_macvtap: entered promiscuous mode
[   38.949633][ T5955] veth1_macvtap: entered promiscuous mode
[   38.956708][ T5963] veth0_vlan: entered promiscuous mode
[   38.963447][ T5954] veth0_macvtap: entered promiscuous mode
[   38.966705][ T5963] veth1_vlan: entered promiscuous mode
[   38.969990][ T5954] veth1_macvtap: entered promiscuous mode
[   38.976051][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.983046][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.991609][ T5955] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.994362][ T5955] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.996592][ T5955] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.998779][ T5955] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.005006][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.007685][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.010616][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.013020][ T5956] veth0_vlan: entered promiscuous mode
[   39.020102][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.023068][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.025932][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.027966][ T5963] veth0_macvtap: entered promiscuous mode
[   39.032176][ T5956] veth1_vlan: entered promiscuous mode
[   39.036080][ T5954] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.038601][ T5954] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.040918][ T5954] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.043333][ T5954] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.046243][ T5963] veth1_macvtap: entered promiscuous mode
[   39.057869][ T5963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.060595][ T5963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.063223][ T5963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.065927][ T5963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.068946][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.077244][ T5956] veth0_macvtap: entered promiscuous mode
[   39.081501][ T5963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.084604][ T5963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.087052][ T5963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.089653][ T5963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.093110][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.101454][ T5956] veth1_macvtap: entered promiscuous mode
[   39.107494][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.109563][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.112881][ T5963] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.115113][ T5963] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.117308][ T5963] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.119484][ T5963] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.132858][   T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.134824][   T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.139414][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.140253][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.141376][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.144753][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.148523][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.151127][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.153643][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.156270][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.159714][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.169625][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.172454][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.174900][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.177484][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.179902][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.182176][ T5955] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   39.182826][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.189488][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.197381][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.199662][ T5956] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.200866][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.201942][ T5956] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.206299][ T5956] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.208478][ T5956] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.230810][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.235829][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.260941][   T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.267586][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.269619][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.270473][   T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.282359][   T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.284952][   T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.325783][ T6026] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'.
[   39.489479][ T6039] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   39.503470][ T5957] Bluetooth: hci1: command tx timeout
[   39.516169][ T5968] Bluetooth: hci3: command tx timeout
[   39.516590][ T5970] Bluetooth: hci0: command tx timeout
[   39.518143][ T5313] Bluetooth: hci2: command tx timeout
[   39.712733][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   39.739122][ T6037] =======================================================
[   39.739122][ T6037] WARNING: The mand mount option has been deprecated and
[   39.739122][ T6037]          and is ignored by this kernel. Remove the mand
[   39.739122][ T6037]          option from the mount to silence this warning.
[   39.739122][ T6037] =======================================================
[   39.805647][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   39.807919][ T6046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2'.
[   39.822650][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   40.184543][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   40.186797][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   40.189077][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   40.191426][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   40.572768][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   40.649260][ T6062] netlink: 'syz.1.8': attribute type 10 has an invalid length.
[   40.680301][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   40.821256][ T6052] fuse: Unknown parameter '�d�'
[   40.890346][ T6065] fuse: Unknown parameter '�d�'
[   40.950280][ T6062] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.952728][ T6062] team0: Port device batadv0 added
[   41.269443][ T6049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   41.307353][ T6047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   41.389930][   T39] audit: type=1326 audit(1732496792.248:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6069 comm="syz.3.10" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x0
[   41.417453][ T6071] Cannot find add_set index 0 as target
[   41.582527][ T5970] Bluetooth: hci3: command tx timeout
[   41.584388][ T5968] Bluetooth: hci2: command tx timeout
[   41.592830][ T5968] Bluetooth: hci0: command tx timeout
[   41.816333][ T6075] e1000e 0000:00:02.0 eth1: NIC Link is Down
[   42.024648][    T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!!
[   42.032538][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   42.154253][ T6100] xt_CT: No such helper "snmp"
[   42.180485][   T39] audit: type=1326 audit(1732496793.038:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.0.15" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf744e579 code=0x0
[   42.185897][   T39] audit: type=1326 audit(1732496793.038:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.0.15" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf744e579 code=0x0
[   42.225185][ T6073] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   42.231717][ T6073] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   42.237352][ T6073] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   42.240250][ T6073] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   42.241882][ T6073] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   42.245693][ T6073] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   42.248321][ T6073] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   42.250404][ T6073] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   42.254346][ T6073] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   42.257344][ T6073] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   42.258978][ T6073] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   42.275379][ T6073] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   42.446072][ T6136] netlink: 'syz.2.19': attribute type 10 has an invalid length.
[   42.470035][ T6136] batman_adv: batadv0: Adding interface: team0
[   42.471863][ T6136] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.479025][ T6136] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   43.071722][ T6166] netlink: 'syz.1.25': attribute type 4 has an invalid length.
[   43.077918][ T6166] netlink: 'syz.1.25': attribute type 4 has an invalid length.
[   43.225281][ T6177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   43.273040][  T831] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   43.422724][  T831] usb 5-1: Using ep0 maxpacket: 16
[   43.426608][  T831] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[   43.429374][  T831] usb 5-1: config 0 has no interface number 0
[   43.431437][  T831] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   43.439747][  T831] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   43.444381][  T831] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[   43.446722][  T831] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   43.448820][  T831] usb 5-1: Product: syz
[   43.450056][  T831] usb 5-1: SerialNumber: syz
[   43.455124][  T831] usb 5-1: config 0 descriptor??
[   43.459816][  T831] cm109 5-1:0.8: invalid payload size 0, expected 4
[   43.464753][  T831] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input5
[   43.582538][ T5313] Bluetooth: hci1: command 0x040f tx timeout
[   43.599558][ T6205] xt_SECMARK: invalid mode: 0
[   43.667982][    C2] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[   43.768437][ T1325] usb 5-1: USB disconnect, device number 2
[   43.773654][ T1325] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[   43.867650][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'.
[   43.869922][ T6223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.35'.
[   43.872238][ T6223] netlink: 'syz.0.35': attribute type 20 has an invalid length.
[   43.877830][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'.
[   43.880238][ T6228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.35'.
[   43.882744][ T6228] netlink: 'syz.0.35': attribute type 20 has an invalid length.
[   43.914322][ T6226] kvm: pic: single mode not supported
[   43.921924][ T6226] kvm: pic: single mode not supported
[   43.924506][ T6226] kvm: pic: level sensitive irq not supported
[   43.927340][ T6226] kvm: pic: non byte write
[   43.932063][ T6226] kvm: pic: single mode not supported
[   43.932584][ T6226] kvm: pic: single mode not supported
[   44.126229][ T6246] capability: warning: `syz.0.39' uses deprecated v2 capabilities in a way that may be insecure
[   44.274569][ T6252] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232
[   44.277132][   T11] Bluetooth: hci4: Frame reassembly failed (-84)
[   44.279255][ T6252] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[   44.303228][ T5968] Bluetooth: hci3: command 0x040f tx timeout
[   44.313641][ T5968] Bluetooth: hci2: command 0x0419 tx timeout
[   44.313694][ T5970] Bluetooth: hci0: command 0x0419 tx timeout
[   44.385906][   T39] audit: type=1804 audit(1732496795.248:5): pid=6255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.44" name="/newroot/8/file0/bus" dev="9p" ino=36049861 res=1 errno=0
[   44.416985][ T6260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.45'.
[   44.559993][ T6272] input: syz0 as /devices/virtual/input/input6
[   45.449454][   T39] audit: type=1804 audit(1732496796.308:6): pid=6288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.51" name="/newroot/17/bus/file0" dev="overlay" ino=123 res=1 errno=0
[   45.672529][ T5970] Bluetooth: hci1: command 0x040f tx timeout
[   45.978974][ T6290] warning: `syz.2.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   45.996417][ T6290] syzkaller0: entered promiscuous mode
[   45.997943][ T6290] syzkaller0: entered allmulticast mode
[   46.302640][ T5970] Bluetooth: hci4: command 0x1003 tx timeout
[   46.302776][ T5313] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   46.354366][ T6307] vivid-003: =================  START STATUS  =================
[   46.356592][ T6307] vivid-003: Radio HW Seek Mode: Bounded
[   46.358333][ T6307] vivid-003: Radio Programmable HW Seek: false
[   46.360011][ T6307] vivid-003: RDS Rx I/O Mode: Block I/O
[   46.361483][ T6307] vivid-003: Generate RBDS Instead of RDS: false
[   46.364413][ T6307] vivid-003: RDS Reception: true
[   46.365764][ T6307] vivid-003: RDS Program Type: 0 inactive
[   46.367278][ T6307] vivid-003: RDS PS Name:  inactive
[   46.368665][ T6307] vivid-003: RDS Radio Text:  inactive
[   46.370106][ T6307] vivid-003: RDS Traffic Announcement: false inactive
[   46.371869][ T6307] vivid-003: RDS Traffic Program: false inactive
[   46.375206][ T6307] vivid-003: RDS Music: false inactive
[   46.376711][ T6307] vivid-003: ==================  END STATUS  ==================
[   46.382653][ T5313] Bluetooth: hci0: command 0x0419 tx timeout
[   46.382864][ T5970] Bluetooth: hci2: command 0x0419 tx timeout
[   46.383092][ T5968] Bluetooth: hci3: command 0x040f tx timeout
[   46.450266][ T6324] fuse: Bad value for 'fd'
[   47.723625][ T6339] syz.0.64 (6339) used obsolete PPPIOCDETACH ioctl
[   47.742546][ T5970] Bluetooth: hci1: command 0x040f tx timeout
[   47.768433][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'.
[   47.933543][   T39] audit: type=1800 audit(1732496798.798:7): pid=6344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.66" name="/" dev="fuse" ino=1 res=0 errno=0
[   48.104203][ T6355] netlink: 'syz.0.68': attribute type 10 has an invalid length.
[   48.173095][ T6355] batman_adv: batadv0: Adding interface: team0
[   48.174966][ T6355] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.181646][ T6355] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   48.286274][ T6359] netlink: 'syz.2.69': attribute type 10 has an invalid length.
[   48.463420][ T5970] Bluetooth: hci3: command 0x040f tx timeout
[   48.463499][ T5313] Bluetooth: hci0: command 0x0419 tx timeout
[   48.463571][ T5968] Bluetooth: hci2: command 0x0419 tx timeout
[   48.782890][ T6014] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   48.952524][ T6014] usb 6-1: Using ep0 maxpacket: 32
[   48.956461][ T6014] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   48.959367][ T6014] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   48.961948][ T6014] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   48.966042][ T6014] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   48.968485][ T6014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.977512][ T6014] usb 6-1: config 0 descriptor??
[   49.403824][ T5996] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   49.508135][ T6014] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5011.0002/input/input7
[   49.656468][ T6014] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5011.0002/input/input8
[   49.684028][ T5996] usb 7-1: Using ep0 maxpacket: 8
[   49.824506][ T5313] Bluetooth: hci1: command 0x040f tx timeout
[   49.835645][ T6014] kye 0003:0458:5011.0002: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0
[   49.903808][ T6014] usb 6-1: USB disconnect, device number 2
[   49.928214][ T5996] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[   49.930452][ T5996] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   49.933316][ T5996] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   49.935814][ T5996] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   49.938385][ T5996] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   49.941688][ T5996] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   49.947301][ T5996] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.159137][ T5996] usb 7-1: usb_control_msg returned -32
[   50.160770][ T5996] usbtmc 7-1:16.0: can't read capabilities
[   50.180897][ T6390] tmpfs: Bad value for 'mpol'
[   50.428171][ T6402] netlink: 'syz.3.81': attribute type 10 has an invalid length.
[   50.432983][ T6402] batman_adv: batadv0: Adding interface: team0
[   50.434744][ T6402] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.441126][ T6402] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   50.463757][ T6397] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.523728][ T6405] usbtmc 7-1:16.0: control status returned 0
[   50.542560][ T5313] Bluetooth: hci3: command 0x040f tx timeout
[   50.552594][ T5968] Bluetooth: hci2: command 0x0419 tx timeout
[   50.554242][ T5313] Bluetooth: hci0: command 0x0419 tx timeout
[   50.566188][ T6407] Zero length message leads to an empty skb
[   50.720342][ T6409] block device autoloading is deprecated and will be removed.
[   50.726066][ T5996] usb 7-1: USB disconnect, device number 2
[   50.726120][ T6409] syz.0.84: attempt to access beyond end of device
[   50.726120][ T6409] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[   51.250150][   T39] audit: type=1326 audit(1732496802.108:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.3.90" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   51.264266][   T39] audit: type=1326 audit(1732496802.108:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.3.90" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   51.269932][   T39] audit: type=1326 audit(1732496802.108:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.3.90" exe="/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   51.275816][   T39] audit: type=1326 audit(1732496802.108:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.3.90" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   51.281457][   T39] audit: type=1326 audit(1732496802.108:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.3.90" exe="/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   51.288901][   T39] audit: type=1326 audit(1732496802.108:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.3.90" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   51.294765][   T39] audit: type=1326 audit(1732496802.108:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.1.91" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x0
[   51.301811][   T39] audit: type=1326 audit(1732496802.108:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.3.90" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   51.308044][   T39] audit: type=1326 audit(1732496802.108:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.3.90" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   51.347214][ T6437] netlink: 'syz.1.91': attribute type 10 has an invalid length.
[   51.347238][ T6441] netlink: 'syz.1.91': attribute type 10 has an invalid length.
[   51.349251][ T6437] netlink: 55 bytes leftover after parsing attributes in process `syz.1.91'.
[   51.354789][ T6430] xt_CT: You must specify a L4 protocol and not use inversions on it
[   51.357550][ T6441] netlink: 55 bytes leftover after parsing attributes in process `syz.1.91'.
[   51.842818][ T6428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   51.902540][ T5313] Bluetooth: hci1: command 0x040f tx timeout
[   52.218189][ T6461] overlay: ./file0 is not a directory
[   52.270130][ T6463] netlink: 'syz.0.98': attribute type 10 has an invalid length.
[   52.291247][ T6456] syz.1.95: attempt to access beyond end of device
[   52.291247][ T6456] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0
[   52.294789][ T6456] efs: cannot read volume header
[   52.382212][ T6462] wg2: entered promiscuous mode
[   52.392496][ T6462] wg2: entered allmulticast mode
[   52.632557][ T5313] Bluetooth: hci3: command 0x040f tx timeout
[   52.943602][ T6452] Invalid source name
[   52.944729][ T6452] UBIFS error (pid: 6452): cannot open "./file0", error -22
[   53.111764][ T6473] netlink: 'syz.1.100': attribute type 10 has an invalid length.
[   53.127774][ T6475] syzkaller0: entered promiscuous mode
[   53.129289][ T6475] syzkaller0: entered allmulticast mode
[   53.744809][ T6494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.106'.
[   54.053711][ T6503] netlink: 9 bytes leftover after parsing attributes in process `syz.1.109'.
[   54.057962][ T6503] 0�X: renamed from hsr0 (while UP)
[   54.060654][ T6503] 0�X: entered allmulticast mode
[   54.062113][ T6503] hsr_slave_0: entered allmulticast mode
[   54.065095][ T6503] hsr_slave_1: entered allmulticast mode
[   54.066962][ T6503] A link change request failed with some changes committed already. Interface 
c0�X may have been left with an inconsistent configuration, please check.
[   54.072232][ T6503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.109'.
[   54.156617][ T6511] process 'syz.1.111' launched '/dev/fd/3' with NULL argv: empty string added
[   54.270682][ T6518] netlink: 'syz.1.113': attribute type 10 has an invalid length.
[   54.388323][ T6519] evm: overlay not supported
[   54.689302][ T6526] program syz.0.116 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   54.937884][ T6532] overlayfs: failed to resolve './file0': -2
[   55.211827][ T6551] sctp: [Deprecated]: syz.0.121 (pid 6551) Use of struct sctp_assoc_value in delayed_ack socket option.
[   55.211827][ T6551] Use struct sctp_sack_info instead
[   55.467656][ T6558] batadv0: entered promiscuous mode
[   55.621824][ T6560] input: syz0 as /devices/virtual/input/input10
[   56.001014][ T6568] netlink: 'syz.1.125': attribute type 10 has an invalid length.
[   56.082995][ T6570] mmap: syz.0.126 (6570) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   56.344112][ T6585] netlink: 16 bytes leftover after parsing attributes in process `syz.0.130'.
[   56.413906][   T39] kauditd_printk_skb: 13 callbacks suppressed
[   56.413965][   T39] audit: type=1326 audit(1732496807.278:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.3.128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   56.420977][   T39] audit: type=1326 audit(1732496807.278:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.3.128" exe="/syz-executor" sig=0 arch=40000003 syscall=230 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   56.428393][   T39] audit: type=1326 audit(1732496807.278:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.3.128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   56.437830][   T39] audit: type=1326 audit(1732496807.278:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.3.128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   56.445405][ T6593] tty tty1: ldisc open failed (-12), clearing slot 0
[   56.468828][   T39] audit: type=1326 audit(1732496807.278:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.3.128" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   56.482528][   T39] audit: type=1326 audit(1732496807.278:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.3.128" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   56.490233][   T39] audit: type=1326 audit(1732496807.278:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.3.128" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   56.497272][   T39] audit: type=1326 audit(1732496807.278:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.3.128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   56.503404][   T39] audit: type=1326 audit(1732496807.278:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.3.128" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   56.563570][   T39] audit: type=1326 audit(1732496807.418:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.3.128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   56.678160][ T6608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   57.002517][   T35] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   57.070649][ T6619] Cannot find set identified by id 0 to match
[   57.078548][ T6610] wg2: left promiscuous mode
[   57.079889][ T6610] wg2: left allmulticast mode
[   57.083775][ T6610] wg2: entered promiscuous mode
[   57.085868][ T6610] wg2: entered allmulticast mode
[   57.104696][ T6624] team0: entered promiscuous mode
[   57.106062][ T6624] team_slave_0: entered promiscuous mode
[   57.107670][ T6624] team_slave_1: entered promiscuous mode
[   57.109173][ T6624] batadv0: entered promiscuous mode
[   57.110827][ T6624] team0: left promiscuous mode
[   57.112093][ T6624] team_slave_0: left promiscuous mode
[   57.114405][ T6624] team_slave_1: left promiscuous mode
[   57.116016][ T6624] batadv0: left promiscuous mode
[   57.154050][   T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   57.156911][   T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   57.159433][   T35] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   57.161748][   T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.165311][   T35] usb 8-1: config 0 descriptor??
[   57.412533][   T30] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[   57.578668][   T35] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0
[   57.580534][   T35] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0
[   57.586673][   T35] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0D8C:0022.0003/input/input12
[   57.594256][   T30] usb 6-1: unable to get BOS descriptor or descriptor too short
[   57.595047][   T35] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0
[   57.596589][   T30] usb 6-1: not running at top speed; connect to a high speed hub
[   57.602272][   T30] usb 6-1: config 9 has an invalid interface number: 227 but max is 0
[   57.604787][   T30] usb 6-1: config 9 has no interface number 0
[   57.607461][   T30] usb 6-1: config 9 interface 227 altsetting 58 has an invalid endpoint descriptor of length 5, skipping
[   57.611063][   T30] usb 6-1: config 9 interface 227 altsetting 58 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   57.615285][   T30] usb 6-1: config 9 interface 227 has no altsetting 0
[   57.618616][   T30] usb 6-1: New USB device found, idVendor=5050, idProduct=0100, bcdDevice=f1.de
[   57.620935][   T30] usb 6-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3
[   57.623350][   T30] usb 6-1: Product: syz
[   57.624596][   T30] usb 6-1: Manufacturer: syz
[   57.625803][   T30] usb 6-1: SerialNumber: syz
[   57.628470][ T6629] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   57.774141][ T6614] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[   57.815328][ T6014] usb 8-1: USB disconnect, device number 2
[   57.834186][   T30] ftdi_sio 6-1:9.227: FTDI USB Serial Device converter detected
[   57.837174][   T30] ftdi_sio ttyUSB0: unknown device type: 0xf1de
[   57.839629][   T30] usb 6-1: USB disconnect, device number 3
[   57.845127][   T30] ftdi_sio 6-1:9.227: device disconnected
[   58.248213][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'.
[   58.250529][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.146'.
[   58.254880][ T6646] ipvlan2: entered promiscuous mode
[   58.448836][ T6653] netlink: 'syz.1.148': attribute type 10 has an invalid length.
[   59.561249][ T6680] netlink: 16 bytes leftover after parsing attributes in process `syz.3.154'.
[   59.832512][ T5996] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   60.036571][ T6699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.159'.
[   60.365528][ T6713] netlink: 'syz.3.161': attribute type 10 has an invalid length.
[   60.621994][ T6719] wg2: entered promiscuous mode
[   60.623972][ T6719] wg2: entered allmulticast mode
[   61.319201][ T6733] syz.1.169 uses obsolete (PF_INET,SOCK_PACKET)
[   61.344366][ T6739] netlink: 'syz.3.170': attribute type 21 has an invalid length.
[   61.346889][ T6739] netlink: 128 bytes leftover after parsing attributes in process `syz.3.170'.
[   61.346977][ T6739] netlink: 'syz.3.170': attribute type 5 has an invalid length.
[   61.346990][ T6739] netlink: 'syz.3.170': attribute type 6 has an invalid length.
[   61.346999][ T6739] netlink: 3 bytes leftover after parsing attributes in process `syz.3.170'.
[   61.544607][ T6755] netlink: 184 bytes leftover after parsing attributes in process `syz.2.174'.
[   61.802487][ T5997] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   61.842631][ T5996] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   61.952514][ T5997] usb 7-1: Using ep0 maxpacket: 16
[   61.956485][ T5997] usb 7-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35
[   61.958853][ T5997] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.960919][ T5997] usb 7-1: Product: syz
[   61.962011][ T5997] usb 7-1: Manufacturer: syz
[   61.963382][ T5997] usb 7-1: SerialNumber: syz
[   61.965587][ T5997] usb 7-1: config 0 descriptor??
[   61.969984][ T5997] as10x_usb: device has been detected
[   61.971658][ T5997] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led))
[   61.980477][ T5997] usb 7-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))...
[   61.991438][ T5997] as10x_usb: error during firmware upload part1
[   61.993361][ T5997] Registered device Sky IT Digital Key (green led)
[   62.003208][ T5996] usb 6-1: Using ep0 maxpacket: 16
[   62.008515][ T5996] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   62.012194][ T5996] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[   62.015667][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11
[   62.018524][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024
[   62.021311][ T5996] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   62.026374][ T5996] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[   62.028745][ T5996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.030793][ T5996] usb 6-1: Product: syz
[   62.031902][ T5996] usb 6-1: Manufacturer: syz
[   62.033295][ T5996] usb 6-1: SerialNumber: syz
[   62.035933][ T5996] usb 6-1: config 0 descriptor??
[   62.172953][ T6755] random: crng reseeded on system resumption
[   62.297335][ T5996] appledisplay 6-1:0.0: Error while getting initial brightness: -110
[   62.301259][ T5996] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -110
[   62.301645][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'.
[   62.312782][   T35] usb 6-1: USB disconnect, device number 4
[   62.436569][ T6765] wg2: entered promiscuous mode
[   62.437946][ T6765] wg2: entered allmulticast mode
[   63.105074][ T6014] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   63.284473][ T6014] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   63.287214][ T6014] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   63.289869][ T6014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.293999][ T6014] usb 6-1: config 0 descriptor??
[   63.297145][ T6014] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[   63.475926][ T6787] netlink: 32 bytes leftover after parsing attributes in process `syz.0.185'.
[   63.572653][ T6793] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   63.581054][ T6793] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   63.601724][ T6014] usb 6-1: USB disconnect, device number 5
[   63.815151][ T6804] nfs: Unknown parameter 'ntext'
[   64.266729][ T6812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.191'.
[   64.576402][  T831] usb 7-1: USB disconnect, device number 3
[   64.601248][  T831] Unregistered device Sky IT Digital Key (green led)
[   64.611641][  T831] as10x_usb: device has been disconnected
[   65.282533][  T831] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   65.444497][  T831] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   65.452753][  T831] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   65.455241][  T831] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   65.457560][  T831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.473262][ T6833] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   65.476869][  T831] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[   65.649327][ T6848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.201'.
[   65.788043][ T6859] tipc: Started in network mode
[   65.789457][ T6859] tipc: Node identity ffffffff, cluster identity 4711
[   65.791312][ T6859] tipc: Node number set to 4294967295
[   65.796536][ T6859] netlink: 40 bytes leftover after parsing attributes in process `syz.3.202'.
[   66.091519][   T30] usb 6-1: USB disconnect, device number 6
[   67.271724][ T6878] syzkaller1: entered promiscuous mode
[   67.273359][ T6878] syzkaller1: entered allmulticast mode
[   67.582737][ T5996] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   67.732548][ T5996] usb 5-1: Using ep0 maxpacket: 16
[   67.737432][ T5996] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   67.739774][ T5996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.742038][ T5996] usb 5-1: Product: syz
[   67.743212][ T5996] usb 5-1: Manufacturer: syz
[   67.744444][ T5996] usb 5-1: SerialNumber: syz
[   67.747392][ T5996] r8152-cfgselector 5-1: Unknown version 0x0000
[   67.749039][ T5996] r8152-cfgselector 5-1: config 0 descriptor??
[   67.954295][ T5996] r8152-cfgselector 5-1: Unknown version 0x0000
[   67.956446][ T5996] r8152-cfgselector 5-1: bad CDC descriptors
[   67.959586][ T5996] r8152-cfgselector 5-1: USB disconnect, device number 3
[   68.302715][ T5313] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   68.304304][ T5968] Bluetooth: hci4: command 0x1003 tx timeout
[   68.505125][ T6904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.214'.
[   68.706671][ T6909] wg2: entered promiscuous mode
[   68.708069][ T6909] wg2: entered allmulticast mode
[   69.224117][ T6901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.512474][ T6927] netlink: 40 bytes leftover after parsing attributes in process `syz.3.219'.
[   69.763183][ T6945] kernel read not supported for file /eth0 (pid: 6945 comm: syz.1.226)
[   69.766983][   T39] kauditd_printk_skb: 44 callbacks suppressed
[   69.766992][   T39] audit: type=1800 audit(1732496820.628:84): pid=6945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.226" name="eth0" dev="mqueue" ino=14609 res=0 errno=0
[   70.012822][ T6969] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   70.706798][ T1409] ieee802154 phy0 wpan0: encryption failed: -22
[   70.708704][ T1409] ieee802154 phy1 wpan1: encryption failed: -22
[   70.773235][ T6965] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   70.775542][ T6965] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   70.777208][ T6965] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   70.778980][ T6965] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   71.652698][ T6981] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   71.655592][ T6981] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   71.657850][ T6981] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   71.660223][ T6981] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   71.726291][ T6997] Driver unsupported XDP return value 0 on prog  (id 44) dev N/A, expect packet loss!
[   71.764349][ T6997] netlink: 32 bytes leftover after parsing attributes in process `syz.3.238'.
[   71.939316][ T6997] hpfs: Unknown parameter ''
[   72.085140][   T63] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   72.234115][   T63] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   72.238164][   T63] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   72.241175][   T63] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   72.244084][   T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.251750][ T6995] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   72.256070][   T63] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[   72.481416][ T7010] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   72.913950][ T7031] netlink: 'syz.1.245': attribute type 10 has an invalid length.
[   72.942553][ T5313] Bluetooth: hci1: command 0x040f tx timeout
[   72.948812][ T7032] veth1_macvtap: left promiscuous mode
[   72.950335][ T7032] macsec0: entered promiscuous mode
[   72.951752][ T7032] macsec0: entered allmulticast mode
[   73.662666][ T5313] Bluetooth: hci3: command 0x040f tx timeout
[   73.662681][ T5970] Bluetooth: hci2: command 0x0419 tx timeout
[   73.708013][ T7039] wg2: left promiscuous mode
[   73.709302][ T7039] wg2: left allmulticast mode
[   73.715201][ T7039] wg2: entered promiscuous mode
[   73.716629][ T7039] wg2: entered allmulticast mode
[   73.890810][ T7044] sg_write: data in/out 1614671466/3 bytes for SCSI command 0xc7-- guessing data in;
[   73.890810][ T7044]    program syz.3.249 not setting count and/or reply_len properly
[   74.740896][ T5997] usb 5-1: USB disconnect, device number 4
[   74.882911][   T39] audit: type=1804 audit(1732496825.738:85): pid=7055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.252" name="/newroot/85/file0/file0" dev="9p" ino=36049882 res=1 errno=0
[   74.898215][ T7059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.254'.
[   74.900740][ T7059] netlink: 'syz.1.254': attribute type 7 has an invalid length.
[   74.903327][ T7059] netlink: 'syz.1.254': attribute type 8 has an invalid length.
[   74.905354][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.254'.
[   75.008086][ T7065] @: renamed from vlan0 (while UP)
[   75.109856][ T7069] netlink: 20 bytes leftover after parsing attributes in process `syz.2.256'.
[   75.250720][ T7085] netlink: 'syz.2.258': attribute type 1 has an invalid length.
[   75.258824][ T7085] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.350457][ T7095] overlay: Unknown parameter 'uid<00000000000000000000'
[   75.366145][ T7095] [U] 
[   75.367359][ T7095] [U] 
[   75.368371][ T7095] [U] 
[   75.369169][ T7095] [U] 
[   75.370303][ T7095] [U] 
[   75.371297][ T7095] [U] 
[   75.372293][ T7095] [U] 
[   75.373383][ T7095] [U] 
[   75.374642][ T7095] [U] 
[   75.375661][ T7095] [U] 
[   75.376651][ T7095] [U] 
[   75.377627][ T7095] [U] 
[   75.379742][ T7095] [U] 
[   75.380517][ T7095] [U] 
[   75.381259][ T7095] [U] 
[   75.381996][ T7095] [U] 
[   75.383327][ T7095] [U] 
[   75.384090][ T7095] [U] 
[   75.384833][ T7095] [U] 
[   75.385633][ T7095] [U] 
[   75.386535][ T7095] [U] 
[   75.387275][ T7095] [U] 
[   75.388024][ T7095] [U] 
[   75.388753][ T7095] [U] 
[   75.389641][ T7095] [U] 
[   75.390379][ T7095] [U] 
[   75.391118][ T7095] [U] 
[   75.391861][ T7095] [U] 
[   75.392868][ T7095] [U] 
[   75.393613][ T7095] [U] 
[   75.394360][ T7095] [U] 
[   75.395168][ T7095] [U] 
[   75.396143][ T7095] [U] 
[   75.396890][ T7095] [U] 
[   75.397625][ T7095] [U] 
[   75.398349][ T7095] [U] 
[   75.399196][ T7095] [U] 
[   75.399948][ T7095] [U] 
[   75.400692][ T7095] [U] 
[   75.401422][ T7095] [U] 
[   75.402256][ T7095] [U] 
[   75.403007][ T7095] [U] 
[   75.403751][ T7095] [U] 
[   75.404505][ T7095] [U] 
[   75.405584][ T7095] [U] 
[   75.406309][ T7095] [U] 
[   75.407041][ T7095] [U] 
[   75.407786][ T7095] [U] 
[   75.408637][ T7095] [U] 
[   75.409393][ T7095] [U] 
[   75.410131][ T7095] [U] 
[   75.411010][ T7095] [U] 
[   75.412050][ T7095] [U] 
[   75.412805][ T7095] [U] 
[   75.413549][ T7095] [U] 
[   75.414293][ T7095] [U] 
[   75.415263][ T7095] [U] 
[   75.415965][ T7095] [U] 
[   75.416671][ T7095] [U] 
[   75.417514][ T7095] [U] 
[   75.418753][ T7095] [U] 
[   75.419755][ T7095] [U] 
[   75.420745][ T7095] [U] 
[   75.421707][ T7095] [U] 
[   75.423016][ T7095] [U] 
[   75.423868][ T7095] [U] 
[   75.424670][ T7095] [U] 
[   75.425360][ T7095] [U] 
[   75.426151][ T7095] [U] 
[   75.426858][ T7095] [U] 
[   75.427579][ T7095] [U] 
[   75.428325][ T7095] [U] 
[   75.429127][ T7095] [U] 
[   75.429857][ T7095] [U] 
[   75.430585][ T7095] [U] 
[   75.431418][ T7095] [U] 
[   75.432247][ T7095] [U] 
[   75.433024][ T7095] [U] 
[   75.433804][ T7095] [U] 
[   75.434577][ T7095] [U] 
[   75.435387][ T7095] [U] 
[   75.436100][ T7095] [U] 
[   75.436802][ T7095] [U] 
[   75.437527][ T7095] [U] 
[   75.439529][ T7095] [U] 
[   75.440282][ T7095] [U] 
[   75.441055][ T7095] [U] 
[   75.441776][ T7095] [U] 
[   75.442681][ T7095] [U] 
[   75.443536][ T7095] [U] 
[   75.444313][ T7095] [U] 
[   75.445037][ T7095] [U] 
[   75.445835][ T7095] [U] 
[   75.446591][ T7095] [U] 
[   75.447320][ T7095] [U] 
[   75.448103][ T7095] [U] 
[   75.448915][ T7095] [U] 
[   75.449647][ T7095] [U] 
[   75.450402][ T7095] [U] 
[   75.451155][ T7095] [U] 
[   75.452015][ T7095] [U] 
[   75.452766][ T7095] [U] 
[   75.453523][ T7095] [U] 
[   75.454297][ T7095] [U] 
[   75.455137][ T7095] [U] 
[   75.455917][ T7095] [U] 
[   75.456676][ T7095] [U] 
[   75.457407][ T7095] [U] 
[   75.458220][ T7095] [U] 
[   75.458952][ T7095] [U] 
[   75.459667][ T7095] [U] 
[   75.460740][ T7095] [U] 
[   75.461763][ T7095] [U] 
[   75.462703][ T7095] [U] 
[   75.463639][ T7095] [U] 
[   75.464577][ T7095] [U] 
[   75.465651][ T7095] [U] 
[   75.466533][ T7095] [U] 
[   75.467471][ T7095] [U] 
[   75.468422][ T7095] [U] 
[   75.469433][ T7095] [U] 
[   75.470348][ T7095] [U] 
[   75.471294][ T7095] [U] 
[   75.472202][ T7095] [U] 
[   75.473754][ T7095] [U] 
[   75.474681][ T7095] [U] 
[   75.475640][ T7095] [U] 
[   75.752507][ T5968] Bluetooth: hci3: command 0x040f tx timeout
[   75.767514][   T39] audit: type=1326 audit(1732496826.628:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.0.260" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf744e579 code=0x0
[   75.822393][ T7099] bridge1: entered promiscuous mode
[   75.823888][ T7099] bridge1: entered allmulticast mode
[   75.824290][    T9] cfg80211: failed to load regulatory.db
[   75.828139][ T7099] team0: Device bridge1 is up. Set it down before adding it as a team port
[   76.069020][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'.
[   76.130964][ T7093] [U] 
[   76.171270][ T7124] binder: 7123:7124 ioctl c00c620f 20000340 returned -22
[   76.205244][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'.
[   76.357601][ T7134] fuse: Bad value for 'fd'
[   76.359751][ T7134] 9pnet_fd: Insufficient options for proto=fd
[   76.394346][ T7129] syz.2.269 (7129) used greatest stack depth: 20960 bytes left
[   76.418775][ T7143] tipc: Started in network mode
[   76.420147][ T7143] tipc: Node identity ac14140f, cluster identity 4711
[   76.422212][ T7143] tipc: New replicast peer: 255.255.255.255
[   76.425083][ T7143] tipc: Enabled bearer <udp:syz2>, priority 10
[   76.460379][ T7145] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   77.525734][   T63] tipc: Node number set to 2886997007
[   77.756976][   T39] audit: type=1326 audit(1732496828.618:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.281" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000
[   77.762350][   T39] audit: type=1326 audit(1732496828.618:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.281" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000
[   77.768409][   T39] audit: type=1326 audit(1732496828.618:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.281" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb1579 code=0x7ffc0000
[   77.774117][   T39] audit: type=1326 audit(1732496828.618:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.281" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000
[   77.779508][   T39] audit: type=1326 audit(1732496828.618:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.281" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf7fb1579 code=0x7ffc0000
[   77.811197][   T39] audit: type=1326 audit(1732496828.668:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.281" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000
[   77.818178][   T39] audit: type=1326 audit(1732496828.668:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.281" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000
[   77.825996][   T39] audit: type=1326 audit(1732496828.668:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.281" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fb1579 code=0x7ffc0000
[   77.949406][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   77.951969][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   77.954019][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   77.955939][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   77.957827][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   77.959860][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   77.961884][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   77.963877][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   77.965769][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   77.967691][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   77.969626][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   77.971536][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   77.974401][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   77.976339][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   77.978249][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   77.980147][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   77.982067][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   77.986061][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   77.987931][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   77.989796][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   77.991658][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   77.995642][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   77.997594][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   77.999456][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.001419][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.003824][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.005682][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.007705][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.009627][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.011543][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.015293][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.017262][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.019242][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.021139][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.022968][ T7188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.284'.
[   78.023095][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.027297][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.029244][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.041804][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.043879][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.045784][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.047698][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.049601][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.051535][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.055675][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.057594][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.059493][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.061394][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.063364][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.065311][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.067244][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.069178][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.071087][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.073115][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.075243][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.077145][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.079074][ T6015] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0
[   78.084331][ T6015] hid-generic 0001:0000:0000.0004: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   78.188275][ T7195] netlink: 'syz.2.285': attribute type 10 has an invalid length.
[   78.190199][ T7194] block nbd0: not configured, cannot reconfigure
[   78.269598][ T7201] can0: slcan on ttyS3.
[   78.271067][ T7202] delete_channel: no stack
[   78.364795][ T7201] can0 (unregistered): slcan off ttyS3.
[   78.424934][ T7203] wg2: left promiscuous mode
[   78.428443][ T7203] wg2: left allmulticast mode
[   78.445523][ T7203] wg2: entered promiscuous mode
[   78.450326][ T7203] wg2: entered allmulticast mode
[   79.319379][ T7221] capability: warning: `syz.0.291' uses 32-bit capabilities (legacy support in use)
[   79.329545][ T7221] veth0_virt_wifi: entered allmulticast mode
[   79.675216][ T7237] ata1.00: non-matching transfer count (1530558389/0)
[   79.972513][ T6014] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   80.133211][ T6014] usb 8-1: Using ep0 maxpacket: 32
[   80.135974][ T6014] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[   80.138102][ T6014] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   80.152842][ T6014] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[   80.155399][ T6014] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   80.157812][ T6014] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   80.160211][ T6014] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   80.172509][ T6014] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   80.175097][ T6014] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.180295][ T6014] usb 8-1: config 0 descriptor??
[   80.382843][ T7259] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[   80.384640][ T7259] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   80.388568][ T7259] vhci_hcd vhci_hcd.0: Device attached
[   80.392970][ T6014] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   80.454363][ T7257] can0: slcan on ttyS3.
[   80.504862][ T7259] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   80.616165][ T5997] vhci_hcd: vhci_device speed not set
[   80.674768][ T7256] can0 (unregistered): slcan off ttyS3.
[   80.686331][ T5997] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[   80.717344][ T7268] vivid-006: disconnect
[   81.152543][ T6015] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   81.306289][ T7260] vhci_hcd: connection reset by peer
[   81.321364][ T1240] vhci_hcd: stop threads
[   81.323902][ T1240] vhci_hcd: release socket
[   81.326490][ T1240] vhci_hcd: disconnect device
[   81.330121][ T6015] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[   81.332540][ T6015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.334514][ T6015] usb 5-1: Product: syz
[   81.335554][ T6015] usb 5-1: Manufacturer: syz
[   81.336720][ T6015] usb 5-1: SerialNumber: syz
[   81.339111][ T6015] usb 5-1: config 0 descriptor??
[   81.364707][ T7278] 9pnet_fd: Insufficient options for proto=fd
[   81.369913][ T7279] 9pnet_fd: Insufficient options for proto=fd
[   81.543542][ T6015] usb 5-1: USB disconnect, device number 5
[   82.122160][ T7288] wg2: left promiscuous mode
[   82.125710][ T7288] wg2: left allmulticast mode
[   82.134747][ T7288] wg2: entered promiscuous mode
[   82.139360][ T7288] wg2: entered allmulticast mode
[   82.729096][ T7268] vivid-006: reconnect
[   82.743454][ T6015] usb 8-1: USB disconnect, device number 4
[   82.746197][ T6015] usblp0: removed
[   82.817538][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'.
[   82.880692][ T7322] netlink: 44 bytes leftover after parsing attributes in process `syz.2.317'.
[   82.899187][ T7322] overlayfs: cannot append lower layer
[   83.512514][ T2289] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   83.726208][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.325'.
[   83.757165][ T2289] usb 6-1: Using ep0 maxpacket: 8
[   83.759851][ T2289] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   83.762225][ T2289] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   83.766117][ T2289] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   83.775136][ T2289] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   83.818611][ T2289] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   84.358423][ T2289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.566221][ T2289] usb 6-1: GET_CAPABILITIES returned 0
[   84.567696][ T2289] usbtmc 6-1:16.0: can't read capabilities
[   84.588060][ T7354] hub 5-0:1.0: USB hub found
[   84.589439][ T7354] hub 5-0:1.0: 1 port detected
[   84.780397][ T5996] usb 6-1: USB disconnect, device number 7
[   84.791305][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.328'.
[   84.862568][ T5968] Bluetooth: hci2: command 0x0419 tx timeout
[   85.117941][   T39] kauditd_printk_skb: 4 callbacks suppressed
[   85.117976][   T39] audit: type=1326 audit(1732496835.978:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7387 comm="syz.3.333" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   85.145194][   T39] audit: type=1326 audit(1732496835.978:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7387 comm="syz.3.333" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   85.150965][   T39] audit: type=1326 audit(1732496835.978:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7387 comm="syz.3.333" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   85.156826][   T39] audit: type=1326 audit(1732496835.978:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7387 comm="syz.3.333" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   85.162549][   T39] audit: type=1326 audit(1732496835.978:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7387 comm="syz.3.333" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   85.168102][   T39] audit: type=1326 audit(1732496835.978:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7387 comm="syz.3.333" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   85.173534][   T39] audit: type=1326 audit(1732496835.978:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7387 comm="syz.3.333" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   85.179270][   T39] audit: type=1326 audit(1732496835.978:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7387 comm="syz.3.333" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   85.187955][   T39] audit: type=1326 audit(1732496835.978:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7387 comm="syz.3.333" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   85.193726][   T39] audit: type=1326 audit(1732496835.978:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7387 comm="syz.3.333" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000
[   85.822930][ T5997] vhci_hcd: vhci_device speed not set
[   85.882100][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'.
[   86.417836][ T7435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.345'.
[   86.544727][ T7439] netlink: 'syz.3.342': attribute type 12 has an invalid length.
[   86.546867][ T7439] netlink: 244 bytes leftover after parsing attributes in process `syz.3.342'.
[   87.184014][ T7456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.427215][ T7462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.348'.
[   87.913658][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.353'.
[   88.144105][ T7478] netlink: 20 bytes leftover after parsing attributes in process `syz.2.357'.
[   88.147301][ T7478] netlink: 20 bytes leftover after parsing attributes in process `syz.2.357'.
[   88.518752][ T7241] libceph: connect (1)[c::]:6789 error -101
[   88.521007][ T7241] libceph: mon0 (1)[c::]:6789 connect error
[   88.525476][ T7241] libceph: connect (1)[c::]:6789 error -101
[   88.527253][ T7241] libceph: mon0 (1)[c::]:6789 connect error
[   88.546187][ T7488] ceph: No mds server is up or the cluster is laggy
[   90.437454][ T7503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.362'.
[   90.563765][ T7507] netlink: 'syz.3.363': attribute type 10 has an invalid length.
[   90.734500][ T7511] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   90.952495][ T2289] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[   91.123085][ T2289] usb 6-1: device descriptor read/64, error -71
[   91.414094][ T2289] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[   91.563043][ T2289] usb 6-1: device descriptor read/64, error -71
[   91.672634][ T2289] usb usb6-port1: attempt power cycle
[   91.852780][ T7539] netlink: 16 bytes leftover after parsing attributes in process `syz.0.372'.
[   91.906036][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.371'.
[   92.062541][ T2289] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[   92.091445][ T2289] usb 6-1: device descriptor read/8, error -71
[   92.119082][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.374'.
[   92.121748][ T7547] netlink: 'syz.3.374': attribute type 15 has an invalid length.
[   92.124664][ T7547] netlink: 'syz.3.374': attribute type 18 has an invalid length.
[   92.136891][ T7547] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 3072 - 0
[   92.139547][ T7547] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 3072 - 0
[   92.141844][ T7547] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 3072 - 0
[   92.144527][ T7547] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 3072 - 0
[   92.148691][ T7547] vxlan0: entered promiscuous mode
[   92.332580][ T2289] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[   92.352952][ T2289] usb 6-1: device descriptor read/8, error -71
[   92.462701][ T2289] usb usb6-port1: unable to enumerate USB device
[   92.978138][ T7562] netlink: 'syz.3.378': attribute type 10 has an invalid length.
[   93.068041][ T7564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.379'.
[   93.255233][ T7570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.381'.
[   93.272087][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.381'.
[   93.305467][ T7570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.381'.
[   93.726126][ T7590] input: syz0 as /devices/virtual/input/input15
[   93.728358][  T103] Bluetooth: hci4: Frame reassembly failed (-84)
[   93.739749][ T5313] Bluetooth: hci2: Unable to find connection for big 0x00
[   93.755040][ T7601] netlink: 28 bytes leftover after parsing attributes in process `syz.3.388'.
[   93.762175][ T5970] Bluetooth: hci2: Unable to find connection for big 0x00
[   93.777693][ T7590] syzkaller0: entered promiscuous mode
[   93.779114][ T7590] syzkaller0: entered allmulticast mode
[   93.998744][ T7621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.390'.
[   94.097838][ T7624] random: crng reseeded on system resumption
[   94.114524][ T7624] Restarting kernel threads ... done.
[   94.612471][ T5313] Bluetooth: hci3: unexpected event for opcode 0x2005
[   94.620730][ T5313] Bluetooth: hci3: ACL packet for unknown connection handle 200
[   94.849705][ T7651] futex_wake_op: syz.2.396 tries to shift op by 36; fix this program
[   94.971100][ T7620] overlayfs: missing 'lowerdir'
[   95.005275][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.397'.
[   95.037810][   T39] kauditd_printk_skb: 51 callbacks suppressed
[   95.037820][   T39] audit: type=1800 audit(1732496845.898:160): pid=7661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.398" name="bus" dev="9p" ino=36049861 res=0 errno=0
[   95.171227][   T39] audit: type=1800 audit(1732496846.028:161): pid=7665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.399" name="[kvm-gmem]" dev="anon_inodefs" ino=17811 res=0 errno=0
[   95.742592][ T5970] Bluetooth: hci4: command 0x1003 tx timeout
[   95.743131][ T5968] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   96.023332][ T7687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.404'.
[   96.523488][ T7693] uprobe: syz.0.406:7693 failed to unregister, leaking uprobe
[   96.716274][ T7713] loop8: detected capacity change from 0 to 7
[   96.720470][ T7713] Dev loop8: unable to read RDB block 7
[   96.722525][ T7713]  loop8: unable to read partition table
[   96.724121][ T7713] loop8: partition table beyond EOD, truncated
[   96.725844][ T7713] loop_reread_partitions: partition scan of loop8 (�被x������ڬ��dƤ����ݡ�����
[   96.725844][ T7713] 
) failed (rc=-5)
[   96.921116][ T7721] tmpfs: Bad value for 'mpol'
[   96.945687][ T7734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.955879][ T7733] Cannot find set identified by id 0 to match
[   97.006616][ T7730] block device autoloading is deprecated and will be removed.
[   97.342611][ T5968] Bluetooth: hci3: command 0x040f tx timeout
[   98.026345][ T7768] netlink: 'syz.0.425': attribute type 10 has an invalid length.
[   98.889321][ T7745] syz.3.419 (7745) used greatest stack depth: 20944 bytes left
[   99.004359][ T7785] sp0: Synchronizing with TNC
[   99.148702][ T7787] syz.2.431: attempt to access beyond end of device
[   99.148702][ T7787] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128
[   99.152170][ T7787] gfs2: error -5 reading superblock
[   99.273390][ T7799] netlink: 'syz.3.435': attribute type 10 has an invalid length.
[   99.373679][ T7805] binder: 7800:7805 ioctl 5424 200002c0 returned -22
[   99.638581][ T7815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.440'.
[  100.193850][ T7827] (syz.2.443,7827,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "��~g��<+��(��.�1 1'�Ɖ�" or missing value
[  100.200495][ T7827] (syz.2.443,7827,1):ocfs2_fill_super:1178 ERROR: status = -22
[  100.547208][ T7816] block nbd0: shutting down sockets
[  100.671080][ T7850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.449'.
[  101.170995][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.457'.
[  101.177631][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'.
[  101.179834][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.457'.
[  101.183915][ T7877] ipvlan2: entered promiscuous mode
[  101.185702][ T7877] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  101.191679][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.457'.
[  101.208143][ T7877] netlink: 200 bytes leftover after parsing attributes in process `syz.1.457'.
[  101.235630][   T39] audit: type=1326 audit(1732496852.098:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.1.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[  101.241246][   T39] audit: type=1326 audit(1732496852.098:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.1.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[  101.247455][   T39] audit: type=1326 audit(1732496852.098:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.1.458" exe="/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf743e579 code=0x7ffc0000
[  101.249921][ T7880] syz.1.458 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  101.253226][   T39] audit: type=1326 audit(1732496852.098:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.1.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[  101.261318][   T39] audit: type=1326 audit(1732496852.098:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.1.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[  101.267994][   T39] audit: type=1326 audit(1732496852.098:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.1.458" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf743e579 code=0x7ffc0000
[  101.274194][   T39] audit: type=1326 audit(1732496852.098:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.1.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[  101.280214][   T39] audit: type=1326 audit(1732496852.098:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.1.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[  101.285973][   T39] audit: type=1326 audit(1732496852.098:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.1.458" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf743e579 code=0x7ffc0000
[  101.291549][   T39] audit: type=1326 audit(1732496852.098:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.1.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000
[  101.979329][  T831] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  102.495858][ T7963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.473'.
[  102.690320][   T98] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.777226][   T98] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.827023][   T98] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.911673][   T98] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.024764][   T98] bridge_slave_1: left allmulticast mode
[  103.026397][   T98] bridge_slave_1: left promiscuous mode
[  103.028672][   T98] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.034975][   T98] bridge_slave_0: left allmulticast mode
[  103.036551][   T98] bridge_slave_0: left promiscuous mode
[  103.038122][   T98] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.285597][   T98] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  103.289516][   T98] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.293593][   T98] bond0 (unregistering): Released all slaves
[  103.360515][   T98] bond1 (unregistering): Released all slaves
[  103.436582][   T98] tipc: Disabling bearer <udp:syz2>
[  103.447266][   T98] tipc: Left network mode
[  103.637654][   T98] hsr_slave_0: left promiscuous mode
[  103.639600][   T98] hsr_slave_1: left promiscuous mode
[  103.641390][   T98] batman_adv: batadv0: Removing interface: team0
[  103.644541][   T98] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.646493][   T98] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.648805][   T98] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.650720][   T98] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.665460][   T98] veth1_vlan: left promiscuous mode
[  103.667111][   T98] veth0_vlan: left promiscuous mode
[  104.140197][   T98] team0 (unregistering): Port device team_slave_1 removed
[  104.204192][   T98] team0 (unregistering): Port device team_slave_0 removed
[  112.390735][ T5968] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.394994][ T5968] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.397847][ T5968] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.400635][ T5968] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.404686][ T5968] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  112.406846][ T8070] macvlan2: entered promiscuous mode
[  112.408274][ T8070] macvlan2: entered allmulticast mode
[  112.409702][ T5968] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  112.538709][ T8076] fuse: Unknown parameter '0x0000000000000003'
[  112.799612][ T8069] chnl_net:caif_netlink_parms(): no params data found
[  112.897100][ T8069] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.899088][ T8069] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.901183][ T8069] bridge_slave_0: entered allmulticast mode
[  112.907169][ T8069] bridge_slave_0: entered promiscuous mode
[  112.910288][ T8069] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.912301][ T8069] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.914860][ T8069] bridge_slave_1: entered allmulticast mode
[  112.917274][ T8069] bridge_slave_1: entered promiscuous mode
[  112.950471][ T8069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.955463][ T8069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.989280][ T8069] team0: Port device team_slave_0 added
[  112.993652][ T8069] team0: Port device team_slave_1 added
[  113.021638][ T8069] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.023542][ T8069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.029892][ T8069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.034447][ T8069] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.036791][ T8069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.043165][ T8069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.067955][ T8069] hsr_slave_0: entered promiscuous mode
[  113.070040][ T8069] hsr_slave_1: entered promiscuous mode
[  113.359662][ T8116] bridge0: port 3(syz_tun) entered blocking state
[  113.368291][ T8116] bridge0: port 3(syz_tun) entered disabled state
[  113.370420][ T8116] syz_tun: entered allmulticast mode
[  113.374488][ T8116] syz_tun: entered promiscuous mode
[  113.376702][ T8116] bridge0: port 3(syz_tun) entered blocking state
[  113.378927][ T8116] bridge0: port 3(syz_tun) entered forwarding state
[  113.608945][ T8069] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  113.612052][ T8069] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  113.618993][ T8069] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  113.624091][ T8069] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  113.685920][ T8069] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.692404][ T8069] 8021q: adding VLAN 0 to HW filter on device team0
[  113.710412][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.713001][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.733624][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.735533][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.964520][ T8069] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.054645][ T8069] veth0_vlan: entered promiscuous mode
[  114.068032][ T8069] veth1_vlan: entered promiscuous mode
[  114.093017][ T8069] veth0_macvtap: entered promiscuous mode
[  114.097099][ T8069] veth1_macvtap: entered promiscuous mode
[  114.133414][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.144721][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.147952][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.150545][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.153138][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.160924][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.164467][ T8069] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.173980][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.176703][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.179315][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.181934][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.192121][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.198025][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.202567][ T8069] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.211335][ T8069] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.215340][ T8069] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.217737][ T8069] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.219994][ T8069] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.342231][  T103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.344339][  T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.356429][  T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.363209][  T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.700629][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.492'.
[  114.703776][ T8202] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.705753][ T8202] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.710353][ T8202] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.712244][ T8202] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.779772][ T8202] team0: Port device batadv0 removed
[  115.514722][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.499'.
[  115.761652][ T8254] netlink: 332 bytes leftover after parsing attributes in process `syz.0.500'.
[  115.787715][ T8254] qnx4: no qnx4 filesystem (no root dir).
[  115.907716][   T39] kauditd_printk_skb: 17 callbacks suppressed
[  115.907731][   T39] audit: type=1326 audit(1732496866.768:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.0.501" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x0
[  116.282527][ T5313] Bluetooth: hci0: SCO packet for unknown connection handle 200
[  116.742569][ T5996] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  116.893879][ T5996] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  116.896824][ T5996] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  116.901165][ T5996] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  116.904515][ T5996] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  116.906828][ T5996] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.909709][ T5996] usb 8-1: config 0 descriptor??
[  116.911491][ T8273] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  116.917789][ T8275] netlink: 696 bytes leftover after parsing attributes in process `syz.1.505'.
[  117.032062][ T8283] input: syz0 as /devices/virtual/input/input17
[  117.034549][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'.
[  117.049343][ T8283] 9pnet: Could not find request transport: fЪeg��ֆ��0-衢��0x0000000000000004
[  117.261741][   T45] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.320413][ T8292] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  117.323016][ T8292] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  117.388189][ T5968] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  117.391695][ T5968] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  117.398314][ T5968] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  117.401896][ T5968] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  117.404917][ T5968] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  117.407179][ T5968] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  117.472007][ T8294] chnl_net:caif_netlink_parms(): no params data found
[  117.514110][ T8294] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.516013][ T8294] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.517857][ T8294] bridge_slave_0: entered allmulticast mode
[  117.519760][ T8294] bridge_slave_0: entered promiscuous mode
[  117.523844][ T8294] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.526189][ T8294] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.528706][ T8294] bridge_slave_1: entered allmulticast mode
[  117.531500][ T8294] bridge_slave_1: entered promiscuous mode
[  117.553773][ T8294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  117.557304][ T8294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  117.587405][ T8294] team0: Port device team_slave_0 added
[  117.589889][ T8294] team0: Port device team_slave_1 added
[  117.608443][ T8294] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.610323][ T8294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.618978][ T8294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.623309][ T8294] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.625073][ T8294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.631456][ T8294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.664282][ T8294] hsr_slave_0: entered promiscuous mode
[  117.667035][ T8294] hsr_slave_1: entered promiscuous mode
[  117.669488][ T8294] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  117.672249][ T8294] Cannot create hsr debugfs directory
[  118.200400][ T8303] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20001
[  118.274150][ T8308] netlink: 80 bytes leftover after parsing attributes in process `syz.1.510'.
[  118.718798][   T45] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.813529][   T45] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.922986][   T45] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.007415][   T45] bridge_slave_1: left allmulticast mode
[  119.008897][   T45] bridge_slave_1: left promiscuous mode
[  119.010359][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.018758][   T45] bridge_slave_0: left allmulticast mode
[  119.020322][   T45] bridge_slave_0: left promiscuous mode
[  119.021959][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.397389][   T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  119.403025][   T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  119.406864][   T45] bond0 (unregistering): Released all slaves
[  119.423254][ T5313] Bluetooth: hci1: command tx timeout
[  119.434825][ T8324] netlink: 68 bytes leftover after parsing attributes in process `syz.1.514'.
[  119.438789][ T8325] netlink: 68 bytes leftover after parsing attributes in process `syz.1.514'.
[  119.546180][ T5996] usbhid 8-1:0.0: can't add hid device: -71
[  119.547854][ T5996] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  119.557211][ T5996] usb 8-1: USB disconnect, device number 5
[  119.687369][   T45] hsr_slave_0: left promiscuous mode
[  119.689228][   T45] hsr_slave_1: left promiscuous mode
[  119.691071][   T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.695947][   T45] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.699715][   T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.701642][   T45] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.721055][   T45] veth1_macvtap: left promiscuous mode
[  119.722770][   T45] veth0_macvtap: left promiscuous mode
[  119.724263][   T45] veth1_vlan: left promiscuous mode
[  119.725651][   T45] veth0_vlan: left promiscuous mode
[  120.329890][   T45] team0 (unregistering): Port device team_slave_1 removed
[  120.397230][   T45] team0 (unregistering): Port device team_slave_0 removed
[  121.106912][ T8294] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  121.128516][ T8294] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  121.182980][ T8294] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  121.296590][ T8294] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  121.400998][ T8294] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.429337][ T8294] 8021q: adding VLAN 0 to HW filter on device team0
[  121.446350][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.448238][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.453102][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.455058][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.466494][ T8294] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  121.469187][ T8294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  121.512514][ T5313] Bluetooth: hci1: command tx timeout
[  121.532090][ T8294] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.571028][ T8294] veth0_vlan: entered promiscuous mode
[  121.591407][ T8294] veth1_vlan: entered promiscuous mode
[  121.607339][ T8294] veth0_macvtap: entered promiscuous mode
[  121.610162][ T8294] veth1_macvtap: entered promiscuous mode
[  121.615650][ T8294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.618388][ T8294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.620929][ T8294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.623868][ T8294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.626863][ T8294] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.633102][ T8294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.635855][ T8294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.638382][ T8294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.641110][ T8294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.644453][ T8294] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.648195][ T8294] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.650599][ T8294] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.653638][ T8294] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.656818][ T8294] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.681176][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.684175][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.694643][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.696729][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.855450][ T8392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.524'.
[  123.054127][ T8414] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem
[  123.182722][ T2289] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  123.260342][ T8423] usb 1-1: USB disconnect, device number 2
[  123.352560][ T2289] usb 8-1: Using ep0 maxpacket: 16
[  123.356480][ T2289] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.361960][ T2289] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.367143][ T2289] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  123.370391][ T2289] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  123.373322][ T2289] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.376180][ T2289] usb 8-1: config 0 descriptor??
[  123.578717][ T8418] random: crng reseeded on system resumption
[  123.584404][ T2289] input: HID 0955:7214 Haptics as /devices/virtual/input/input19
[  123.597466][ T2289] shield 0003:0955:7214.0005: Registered Thunderstrike controller
[  123.599598][ T2289] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0
[  123.668247][ T2289] usb 8-1: USB disconnect, device number 6
[  123.718629][ T8435] netlink: 'syz.3.534': attribute type 10 has an invalid length.
[  123.728989][ T8429] fuse: Unknown parameter '0000000000000000000000300000000000000000000726'
[  123.745396][    T8] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  123.760672][    T8] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  123.766465][    T8] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  123.786149][    T8] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  124.177076][ T8441] wg2: left promiscuous mode
[  124.178349][ T8441] wg2: left allmulticast mode
[  124.182029][ T8441] wg2: entered promiscuous mode
[  124.183417][ T8441] wg2: entered allmulticast mode
[  124.423769][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.537'.
[  124.426221][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.537'.
[  124.431088][ T8446] ------------[ cut here ]------------
[  124.432781][ T8446] WARNING: CPU: 2 PID: 8446 at net/ipv4/route.c:1254 ip_rt_bug+0x2b/0x120
[  124.434976][ T8446] Modules linked in:
[  124.436211][ T8446] CPU: 2 UID: 0 PID: 8446 Comm: syz.1.537 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
[  124.440124][ T8446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  124.442951][ T8446] RIP: 0010:ip_rt_bug+0x2b/0x120
[  124.444244][ T8446] Code: 0f 1e fa 41 54 55 53 48 89 d3 48 83 ec 08 e8 5c 5a 19 f8 66 90 e8 55 5a 19 f8 ba 02 00 00 00 48 89 de 31 ff e8 16 0e 75 ff 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c c3 cc cc cc cc e8 2e 5a 19
[  124.449100][ T8446] RSP: 0018:ffffc90002b3f2f8 EFLAGS: 00010293
[  124.450673][ T8446] RAX: 0000000000000000 RBX: ffff8880256dbe00 RCX: 1ffffffff2d3ec00
[  124.453095][ T8446] RDX: ffff88801f390000 RSI: ffffffff8974948a RDI: ffffffff8bb06b60
[  124.455141][ T8446] RBP: ffff8880256dbe00 R08: 0000000000000001 R09: fffffbfff2d35fae
[  124.457181][ T8446] R10: ffffffff969afd77 R11: 0000000000000004 R12: ffff888067538000
[  124.459226][ T8446] R13: ffff888043e70000 R14: ffff88806a64b000 R15: ffff8880256dbe58
[  124.461267][ T8446] FS:  0000000000000000(0000) GS:ffff88802b600000(0063) knlGS:00000000f5126b40
[  124.463658][ T8446] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  124.465353][ T8446] CR2: 000055fdd1b2da00 CR3: 0000000070eca000 CR4: 0000000000352ef0
[  124.467359][ T8446] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  124.469374][ T8446] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  124.471448][ T8446] Call Trace:
[  124.472327][ T8446]  <TASK>
[  124.473161][ T8446]  ? __warn+0xea/0x3c0
[  124.474244][ T8446]  ? ip_rt_bug+0x2b/0x120
[  124.475368][ T8446]  ? report_bug+0x3c0/0x580
[  124.476541][ T8446]  ? handle_bug+0x54/0xa0
[  124.477638][ T8446]  ? exc_invalid_op+0x17/0x50
[  124.478859][ T8446]  ? asm_exc_invalid_op+0x1a/0x20
[  124.480159][ T8446]  ? ip_rt_bug+0x2a/0x120
[  124.481358][ T8446]  ? ip_rt_bug+0x2b/0x120
[  124.482572][ T8446]  ? ip_rt_bug+0x2a/0x120
[  124.483698][ T8446]  ? __pfx_ip_rt_bug+0x10/0x10
[  124.484946][ T8446]  ip_push_pending_frames+0x3ad/0x5b0
[  124.486309][ T8446]  icmp_push_reply+0x310/0x450
[  124.487562][ T8446]  __icmp_send+0xac1/0x1750
[  124.488753][ T8446]  ? __pfx___icmp_send+0x10/0x10
[  124.490138][ T8446]  ? do_csum+0x26f/0x2d0
[  124.491381][ T8446]  ? csum_partial+0x46/0x60
[  124.492665][ T8446]  ? __pfx_csum_partial_ext+0x10/0x10
[  124.494104][ T8446]  ? __pfx_csum_partial_ext+0x10/0x10
[  124.495564][ T8446]  ? __pfx_csum_block_add_ext+0x10/0x10
[  124.497082][ T8446]  __udp4_lib_rcv+0x1726/0x34e0
[  124.498402][ T8446]  ? __pfx___udp4_lib_rcv+0x10/0x10
[  124.499810][ T8446]  ? rcu_is_watching+0x12/0xc0
[  124.501157][ T8446]  ? __pfx_udp_rcv+0x10/0x10
[  124.502399][ T8446]  ip_protocol_deliver_rcu+0x2ff/0x4c0
[  124.503932][ T8446]  ip_local_deliver_finish+0x316/0x570
[  124.505385][ T8446]  ip_local_deliver+0x18e/0x1f0
[  124.506698][ T8446]  ? __pfx_ip_local_deliver+0x10/0x10
[  124.508134][ T8446]  ip_rcv+0x2c3/0x5d0
[  124.509219][ T8446]  ? __pfx_ip_rcv+0x10/0x10
[  124.510470][ T8446]  __netif_receive_skb_one_core+0x199/0x1e0
[  124.512110][ T8446]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[  124.513823][ T8446]  ? rcu_is_watching+0x12/0xc0
[  124.515086][ T8446]  ? ktime_get_with_offset+0x273/0x3a0
[  124.516505][ T8446]  ? lockdep_hardirqs_on+0x7c/0x110
[  124.517909][ T8446]  ? netif_receive_skb+0x109/0x7b0
[  124.519284][ T8446]  __netif_receive_skb+0x1d/0x160
[  124.520678][ T8446]  netif_receive_skb+0x13f/0x7b0
[  124.522004][ T8446]  ? __pfx_netif_receive_skb+0x10/0x10
[  124.523596][ T8446]  ? __pfx___lock_acquire+0x10/0x10
[  124.525029][ T8446]  ? __pfx_tun_build_skb.constprop.0+0x10/0x10
[  124.527299][ T8446]  tun_rx_batched.isra.0+0x3eb/0x730
[  124.529099][ T8446]  ? __pfx_tun_rx_batched.isra.0+0x10/0x10
[  124.531063][ T8446]  ? tun_get_user+0x13c9/0x3e30
[  124.532609][ T8446]  ? lock_acquire+0x2f/0xb0
[  124.533970][ T8446]  ? tun_get_user+0x13c9/0x3e30
[  124.535413][ T8446]  tun_get_user+0x2a01/0x3e30
[  124.536859][ T8446]  ? __pfx___futex_wait+0x10/0x10
[  124.538232][ T8446]  ? __pfx_tun_get_user+0x10/0x10
[  124.539634][ T8446]  ? find_held_lock+0x2d/0x110
[  124.541140][ T8446]  ? __pfx_lock_release+0x10/0x10
[  124.542561][ T8446]  tun_chr_write_iter+0xdc/0x210
[  124.543895][ T8446]  vfs_write+0x5ae/0x1150
[  124.545061][ T8446]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  124.546636][ T8446]  ? __pfx_vfs_write+0x10/0x10
[  124.547933][ T8446]  ? do_futex+0x123/0x350
[  124.549181][ T8446]  ? __fget_files+0x40/0x3a0
[  124.550508][ T8446]  ksys_write+0x12b/0x250
[  124.551680][ T8446]  ? __pfx_ksys_write+0x10/0x10
[  124.553214][ T8446]  __do_fast_syscall_32+0x73/0x120
[  124.554898][ T8446]  do_fast_syscall_32+0x32/0x80
[  124.556255][ T8446]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  124.558183][ T8446] RIP: 0023:0xf743e579
[  124.559353][ T8446] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  124.565026][ T8446] RSP: 002b:00000000f5126520 EFLAGS: 00000293 ORIG_RAX: 0000000000000004
[  124.567375][ T8446] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000020000100
[  124.569436][ T8446] RDX: 00000000000000be RSI: 00000000f742dff4 RDI: 0000000000000000
[  124.571848][ T8446] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  124.574128][ T8446] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  124.576204][ T8446] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  124.578277][ T8446]  </TASK>
[  124.579109][ T8446] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  124.580909][ T8446] CPU: 2 UID: 0 PID: 8446 Comm: syz.1.537 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
[  124.583420][ T8446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  124.586150][ T8446] Call Trace:
[  124.587003][ T8446]  <TASK>
[  124.587787][ T8446]  dump_stack_lvl+0x3d/0x1f0
[  124.589004][ T8446]  panic+0x71d/0x800
[  124.589988][ T8446]  ? __pfx_panic+0x10/0x10
[  124.591094][ T8446]  ? show_trace_log_lvl+0x29d/0x3d0
[  124.592441][ T8446]  ? check_panic_on_warn+0x1f/0xb0
[  124.593711][ T8446]  ? ip_rt_bug+0x2b/0x120
[  124.594835][ T8446]  check_panic_on_warn+0xab/0xb0
[  124.596165][ T8446]  __warn+0xf6/0x3c0
[  124.597167][ T8446]  ? ip_rt_bug+0x2b/0x120
[  124.598282][ T8446]  report_bug+0x3c0/0x580
[  124.599405][ T8446]  handle_bug+0x54/0xa0
[  124.600487][ T8446]  exc_invalid_op+0x17/0x50
[  124.601670][ T8446]  asm_exc_invalid_op+0x1a/0x20
[  124.602937][ T8446] RIP: 0010:ip_rt_bug+0x2b/0x120
[  124.604240][ T8446] Code: 0f 1e fa 41 54 55 53 48 89 d3 48 83 ec 08 e8 5c 5a 19 f8 66 90 e8 55 5a 19 f8 ba 02 00 00 00 48 89 de 31 ff e8 16 0e 75 ff 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c c3 cc cc cc cc e8 2e 5a 19
[  124.609187][ T8446] RSP: 0018:ffffc90002b3f2f8 EFLAGS: 00010293
[  124.610738][ T8446] RAX: 0000000000000000 RBX: ffff8880256dbe00 RCX: 1ffffffff2d3ec00
[  124.612767][ T8446] RDX: ffff88801f390000 RSI: ffffffff8974948a RDI: ffffffff8bb06b60
[  124.614797][ T8446] RBP: ffff8880256dbe00 R08: 0000000000000001 R09: fffffbfff2d35fae
[  124.616814][ T8446] R10: ffffffff969afd77 R11: 0000000000000004 R12: ffff888067538000
[  124.618824][ T8446] R13: ffff888043e70000 R14: ffff88806a64b000 R15: ffff8880256dbe58
[  124.620906][ T8446]  ? ip_rt_bug+0x2a/0x120
[  124.622027][ T8446]  ? ip_rt_bug+0x2a/0x120
[  124.623140][ T8446]  ? __pfx_ip_rt_bug+0x10/0x10
[  124.624416][ T8446]  ip_push_pending_frames+0x3ad/0x5b0
[  124.625797][ T8446]  icmp_push_reply+0x310/0x450
[  124.627041][ T8446]  __icmp_send+0xac1/0x1750
[  124.628226][ T8446]  ? __pfx___icmp_send+0x10/0x10
[  124.629499][ T8446]  ? do_csum+0x26f/0x2d0
[  124.630607][ T8446]  ? csum_partial+0x46/0x60
[  124.631844][ T8446]  ? __pfx_csum_partial_ext+0x10/0x10
[  124.633334][ T8446]  ? __pfx_csum_partial_ext+0x10/0x10
[  124.634727][ T8446]  ? __pfx_csum_block_add_ext+0x10/0x10
[  124.636167][ T8446]  __udp4_lib_rcv+0x1726/0x34e0
[  124.637427][ T8446]  ? __pfx___udp4_lib_rcv+0x10/0x10
[  124.638763][ T8446]  ? rcu_is_watching+0x12/0xc0
[  124.640049][ T8446]  ? __pfx_udp_rcv+0x10/0x10
[  124.641252][ T8446]  ip_protocol_deliver_rcu+0x2ff/0x4c0
[  124.642650][ T8446]  ip_local_deliver_finish+0x316/0x570
[  124.644054][ T8446]  ip_local_deliver+0x18e/0x1f0
[  124.645308][ T8446]  ? __pfx_ip_local_deliver+0x10/0x10
[  124.646686][ T8446]  ip_rcv+0x2c3/0x5d0
[  124.647726][ T8446]  ? __pfx_ip_rcv+0x10/0x10
[  124.648894][ T8446]  __netif_receive_skb_one_core+0x199/0x1e0
[  124.650424][ T8446]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[  124.652075][ T8446]  ? rcu_is_watching+0x12/0xc0
[  124.653304][ T8446]  ? ktime_get_with_offset+0x273/0x3a0
[  124.654721][ T8446]  ? lockdep_hardirqs_on+0x7c/0x110
[  124.656068][ T8446]  ? netif_receive_skb+0x109/0x7b0
[  124.657386][ T8446]  __netif_receive_skb+0x1d/0x160
[  124.658686][ T8446]  netif_receive_skb+0x13f/0x7b0
[  124.659981][ T8446]  ? __pfx_netif_receive_skb+0x10/0x10
[  124.661386][ T8446]  ? __pfx___lock_acquire+0x10/0x10
[  124.662725][ T8446]  ? __pfx_tun_build_skb.constprop.0+0x10/0x10
[  124.664310][ T8446]  tun_rx_batched.isra.0+0x3eb/0x730
[  124.665689][ T8446]  ? __pfx_tun_rx_batched.isra.0+0x10/0x10
[  124.667204][ T8446]  ? tun_get_user+0x13c9/0x3e30
[  124.668472][ T8446]  ? lock_acquire+0x2f/0xb0
[  124.669649][ T8446]  ? tun_get_user+0x13c9/0x3e30
[  124.670918][ T8446]  tun_get_user+0x2a01/0x3e30
[  124.672158][ T8446]  ? __pfx___futex_wait+0x10/0x10
[  124.673405][ T8446]  ? __pfx_tun_get_user+0x10/0x10
[  124.674718][ T8446]  ? find_held_lock+0x2d/0x110
[  124.675980][ T8446]  ? __pfx_lock_release+0x10/0x10
[  124.677261][ T8446]  tun_chr_write_iter+0xdc/0x210
[  124.678544][ T8446]  vfs_write+0x5ae/0x1150
[  124.679673][ T8446]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  124.681080][ T8446]  ? __pfx_vfs_write+0x10/0x10
[  124.682318][ T8446]  ? do_futex+0x123/0x350
[  124.683442][ T8446]  ? __fget_files+0x40/0x3a0
[  124.684639][ T8446]  ksys_write+0x12b/0x250
[  124.685756][ T8446]  ? __pfx_ksys_write+0x10/0x10
[  124.687021][ T8446]  __do_fast_syscall_32+0x73/0x120
[  124.688349][ T8446]  do_fast_syscall_32+0x32/0x80
[  124.689599][ T8446]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  124.691216][ T8446] RIP: 0023:0xf743e579
[  124.692267][ T8446] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  124.697186][ T8446] RSP: 002b:00000000f5126520 EFLAGS: 00000293 ORIG_RAX: 0000000000000004
[  124.699312][ T8446] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000020000100
[  124.701468][ T8446] RDX: 00000000000000be RSI: 00000000f742dff4 RDI: 0000000000000000
[  124.703486][ T8446] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  124.705502][ T8446] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  124.707527][ T8446] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  124.709550][ T8446]  </TASK>
[  124.710783][ T8446] Kernel Offset: disabled
[  124.712001][ T8446] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:07:55  Registers:
info registers vcpu 0

CPU#0
RAX=000000000051dbbf RBX=0000000000000000 RCX=ffffffff8b161fb9 RDX=0000000000000000
RSI=ffffffff8b4cd780 RDI=ffffffff8bb06b60 RBP=fffffbfff1b52f00 RSP=ffffffff8da07e20
R8 =0000000000000001 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000000
R12=0000000000000000 R13=ffffffff8da97800 R14=ffffffff901cf850 R15=0000000000000000
RIP=ffffffff8b16339f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b400000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f50c5da4 CR3=000000006b344000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000005b6a81 RBX=0000000000000001 RCX=ffffffff8b161fb9 RDX=0000000000000000
RSI=ffffffff8b4cd780 RDI=ffffffff8bb06b60 RBP=ffffed1003a50910 RSP=ffffc9000047fe08
R8 =0000000000000001 R9 =ffffed10056a6fed R10=ffff88802b537f6b R11=0000000000000001
R12=0000000000000001 R13=ffff88801d284880 R14=ffffffff901cf850 R15=0000000000000000
RIP=ffffffff8b16339f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b500000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000000c2cf624 CR3=0000000070eca000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff84ff5c65 RDI=ffffffff9a65e2a0 RBP=ffffffff9a65e260 RSP=ffffc90002b3ec58
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000008
R12=0000000000000000 R13=0000000000000033 R14=ffffffff84ff5c00 R15=0000000000000000
RIP=ffffffff84ff5c8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000055fdd1b2da00 CR3=0000000070eca000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000207a3d RBX=0000000000000003 RCX=ffffffff8b161fb9 RDX=0000000000000000
RSI=ffffffff8b4cd780 RDI=ffffffff8bb06b60 RBP=ffffed1003a53488 RSP=ffffc9000049fe08
R8 =0000000000000001 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000000
R12=0000000000000003 R13=ffff88801d29a440 R14=ffffffff901cf850 R15=0000000000000000
RIP=ffffffff8b16339f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000056c244c0 CR3=0000000044a54000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000