last executing test programs:

9.439179065s ago: executing program 1 (id=82):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="50010000000103000000000000000000020000010c000d8008000200e000000134001880080003400001300008000340000000070800034000000006080002400000000508000240000000000800014000000fff08001a4000000005980002802c0001801400030000000000000000000000ffffac1414aa14000c00fc0100000000000000000000000000001400018008000100ac14142708000200ac1e2a01060003"], 0x150}}, 0x0)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x9e, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0100001200f3"], 0x14c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{}, {}, @broadcast, @device_b}, 0x0, 0x45, @default, @val, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000080), 0x4)
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000040), 0x4)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
r8 = msgget$private(0x0, 0x0)
msgsnd(r8, &(0x7f0000000000)=ANY=[@ANYRES32], 0xb, 0x0)
msgrcv(r8, 0x0, 0x0, 0x3, 0x4800)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x140030, 0x0, 0x0, 0x0, [0x0, 0x9]})
listen(r5, 0x0)

9.137558997s ago: executing program 1 (id=85):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
timer_create(0x3, &(0x7f0000000040)={0x0, 0x2e, 0x6, @thr={&(0x7f0000000300)="c6f670f200c25293c9f397627a68f362e6e00ef17e2b2628627c463f14bd0a0c064e8e649ea7947216642fe4bad5048da6e05baf814c462095a3ebed081f72c906479b399f3b49e45eaa05bbfc07dba4916d1897733dd35dc254a37b3d1146d5fd7eb8b019e9676979", &(0x7f0000000400)="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"}}, &(0x7f0000000100))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102376, 0x18fe8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xb1}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000200)="bdcf5722ba942a31e139d8f8d79984f586440ad354177c8882da6be77b8278", 0x1f}], 0x1, &(0x7f0000000680)=[@rthdr_2292={{0x64, 0x29, 0x39, {0xff, 0xa, 0x0, 0x9, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @remote, @mcast2, @local]}}}, @dontfrag={{0x10, 0x29, 0x3e, 0x2}}, @rthdrdstopts={{0x8c, 0x29, 0x37, {0x4, 0xe, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @pad1, @generic={0x18, 0x54, "71ea28af473f2d9b1e52e6fb16d7cd2d17a321b6b8b2a7018959dd5a11580da2c963ce2e0adfa391910eced718f8b3a220834028b88a8f5293b9bfbd137c6fe803bcce07416117150d84bf14d30917fc37ed858a"}, @pad1, @calipso={0x7, 0x10, {0x3, 0x2, 0xf7, 0xbac, [0x9]}}]}}}, @rthdr={{0x94, 0x29, 0x39, {0x87, 0x10, 0x0, 0xf2, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @mcast1, @remote, @mcast2, @empty, @mcast1, @mcast1]}}}, @tclass={{0x10}}, @tclass={{0x10, 0x29, 0x43, 0x1}}, @hopopts={{0x24, 0x29, 0x36, {0x3c, 0x1, '\x00', [@ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0xff}, @ra={0x5, 0x2, 0xd}]}}}, @dstopts={{0x14}}], 0x1ec}, 0x4000)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30)
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)
write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000400)={0x36, 0x6, 0x0, {0x0, 0x0, 0xd, 0x0, 'dont_appraise'}}, 0x36)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4}, 0x50)

6.564480678s ago: executing program 1 (id=95):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x264e33, 0x0)
setsockopt$sock_int(r0, 0x1, 0x44, &(0x7f0000000080), 0x4)
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mem_connect\x00', r2}, 0x10)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="f1", 0x1, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r4)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = dup3(r5, 0xffffffffffffffff, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6)
sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000006700000008000100020000000800ab36", @ANYRES32=0x0, @ANYBLOB="0c0099000100000040"], 0x30}}, 0x0)
recvmsg$unix(r7, &(0x7f00000006c0)={&(0x7f0000000100), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000180)=""/249, 0xf9}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000380)=""/55, 0x37}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000480)=""/151, 0x97}, {&(0x7f0000000540)=""/246, 0xf6}], 0x6, &(0x7f0000000680)}, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

6.27413355s ago: executing program 1 (id=97):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
shmget$private(0x0, 0x2000, 0x78000840, &(0x7f0000ffb000/0x2000)=nil)
io_setup(0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000640)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0x6, 0x0, &(0x7f00000000c0)="61df712bc884", 0x0, 0x8000}, 0x4c)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280), 0x208e24b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x7, 0x4, 0x18, 0xae5, 0x0, 0xffffffffffffffff, 0x420, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000200)={{0x81}})
sendmmsg$inet6(r0, &(0x7f0000005e40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000640)="9559bb0498f3", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000900)='|d!8', 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0)

5.423414941s ago: executing program 0 (id=99):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sched_setaffinity(0x0, 0xfffffffffffffe58, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x34, r3, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x40030000000000}, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x208)
bind$inet6(r1, &(0x7f0000000000), 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00'})
ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000200))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000000000060400000000005306b3f43452759aa63d60bcb9068d3173d1f56cff1980c1689bd32b9e3174477d6d296739e56e06f9d5a0df09cba371d127cb166b056bac79c0a98648b49dc73f6327"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x204}})
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}})

5.31747709s ago: executing program 1 (id=100):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480))
socket$nl_route(0x10, 0x3, 0x0)
socket(0x200000000000011, 0x2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_setup(0x24f7, &(0x7f0000000140), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x25, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

5.301314916s ago: executing program 2 (id=101):
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4b47, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0)
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000600)={0x8, 0x9, 0x90, 0x101, 0x5a4})
sendto$inet6(r1, &(0x7f0000000440)="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", 0xfff4, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x9}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000040)="270502005902a8000600002fb96dbcf706e10500000088641100114408000300b8bf4a31accb", 0x26}, {&(0x7f0000000180)="4fc9316bdf97a94aa4c01a71f2b55527cb347f01679ab78bec91455755985051", 0x20}, {&(0x7f00000001c0)="b6986e54ee7137807146de0ab782b34caded5e870ee7caf6296abeb8a420c3316d8feddfc875d2cb880b7880d6ce92860ccd4f7d6a5f4ae59c2ef4178d2a6e151b9177cfe4a70abc1e1267d0993ebb2a6d21ee884efb8ffba185c10803067b80f3428de425c426dd3cc9eddeab744f710419fde96d", 0x75}, {&(0x7f0000000240)="11b252367e48683813784895bd82eaff9d7b562ec0b21b423bbcef1578e573bf0bc0ea8e45d3738500d183b6495636baa5cb837a3d5ad6af41045fec0dc056db82ad3342f6b20b008157daa88f153fb3c51fc4ff55b965c58a11bb75ca63536f2816327da7d51f66b76ed7a55565570334842f0b54562faa5335cc88b6fddfe5d3bd04807632a2138de7747d38517f335f7ce89fbff32e93542e47ce2aae8c3dd6edcffb1aa5025bef34023a14f3a4b0c3afc99ddd808aa782908257c4f35f918f88b18e1499903654b7ef8cb5c571668c1999c160e70f65dd0907e4020b915297e3b06e9c7ddebde4a751c0ceb6cdd152e4c47a60189add8c422187f6d62c4c66a70c3468324f20e5097197e6b09a907baaf918e47a6733280685bdbb61f89f01832937e4491c97d0de075412e080688c82d77cee618d0aabb72ebdb8b52f9f4642236bf1eeec21388303e0fde1d82054f37d465f0635bc3addaf0ca3f3167fd005e2f21447942ad8a887d261bf6a6b866e9399d3c9c2636eaccba5fcf6a129e4b3ba7d4ba90554b8ae562c1dc941bff6a7e1fa46783f7cfce9133f7f5e5e8d16f56eba77df89a210f53a0bdb8d4f222289335a11934a1ea5983a9d7c5fa87d9c8b12eaeda6b1f6861a3acdfb840dd08444ded8594919929def6f7b78470bc8bc256aebe1da5dc6fd4c5df556398b029976ed67f14fca8baa432f5fa799adf63c119d689b2449076d7a22eafdc9a2b558df28e302fab95ced3587dcf7309536be6fc28742529083c59fd56965c51d17b26954c276a0738ab8be665650a1db21ee4e8ada836ae1804d389c5482df926b693321cfdf405ff03b356d71556229e9d2a729fb8fc73e483582726c8e8df2b3fa2634a2a52f8acfe6c8be00b8d57f762b70fcd86c", 0x285}], 0x4}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401)
ioctl$USBDEVFS_BULK(r4, 0x5523, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))

5.247876426s ago: executing program 1 (id=102):
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x20082, 0x0)
write$sequencer(r0, &(0x7f00000003c0)=ANY=[], 0x8)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r2, 0x84, 0x7f, 0x0, &(0x7f0000001180))
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20009015)
recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002600)=""/4102, 0x1006}], 0x1}}], 0x1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

4.859650529s ago: executing program 2 (id=103):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0xa, 0x0, 0xffffffffffffffff, 0xffffffee, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20)
fsopen(&(0x7f0000000280)='pipefs\x00', 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
tgkill(r2, r2, 0x12)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a0000000000000000000000080010000000000008000300", @ANYRES32], 0x2c}}, 0x0)

3.961732766s ago: executing program 2 (id=105):
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x3, 0x0, 0x0, 0x2, 0xc0}, {0x200000000}, {0x0, 0x0, 0x6, 0xf}, 0x0, 0x0, 0x2}, {{@in6=@loopback, 0x4d5, 0x33}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd)
keyctl$setperm(0x5, r1, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2, 0x103)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000004200)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
acct(&(0x7f00000001c0)='./file0\x00')
acct(0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
acct(0x0)

3.883358876s ago: executing program 0 (id=106):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
sched_rr_get_interval(r0, &(0x7f0000000200))
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x9, 0x0)
syz_open_dev$vim2m(&(0x7f0000000300), 0x5, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000500)={0x1, @vbi={0x10b0, 0x6, 0x8, 0x41416770, [0x3], [0x7, 0x80004], 0x13a}})
socket(0x26, 0x0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0])
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountinfo\x00')
write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000040)={0xa, {0x3, 0x6, 0x1}}, 0xa)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x2804}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x2}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x7399}]}, 0x34}, 0x1, 0x0, 0x0, 0xc080}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd28, 0x25dfdbfd, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x38}}, 0x0)

3.585137664s ago: executing program 3 (id=107):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0)
recvmmsg(r2, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c0000", @ANYRES32=0x0, @ANYBLOB="7f0080007f0000c10000000800000000005000"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wg1\x00', <r5=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001100)=ANY=[@ANYBLOB="d8000000", @ANYRES16, @ANYBLOB=')\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB], 0xd8}}, 0x20008004)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800), 0x0, 0xac, 0x0, 0x0, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xe7, 0x8, 0x0, 0x0}}, 0x10)
getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000cc0)={@multicast1, @multicast2, <r7=>0x0}, &(0x7f0000000d00)=0xc)
sendmmsg$inet6(r3, &(0x7f0000003f80)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x6, @private1, 0x5}, 0x1c, &(0x7f0000000080)}}, {{&(0x7f00000003c0)={0xa, 0x0, 0x7, @remote, 0x9}, 0x1c, &(0x7f00000004c0), 0x0, &(0x7f0000000d80)=[@pktinfo={{0x20, 0x29, 0x32, {@remote, r6}}}, @hopopts={{0x24, 0x29, 0x36, {0x2f, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x2a}, @ra={0x5, 0x2, 0x9}]}}}, @hopopts_2292={{0x14, 0x29, 0x36, {0x1}}}, @dstopts_2292={{0x1c, 0x29, 0x4, {0x3c, 0x1, '\x00', [@ra={0x5, 0x2, 0xd}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@local, r7}}}, @dstopts_2292={{0x4c, 0x29, 0x4, {0x1, 0x6, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x3}, @generic={0x80, 0x23, "caa4cd2296079dad6c5e9ae5c6297e521da2c41f3f3ffb770d5385466eda428e32f26b"}]}}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000002080)}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)="e87edac439198cffaa241991b55da62102ecbb700b2e44e52397085eb486b9c0313e08f4942fe726f857e93a3879f7da0d4a97f770ef", 0x36}, {&(0x7f0000002300)}], 0x2, &(0x7f0000002480)=[@dstopts_2292={{0x14}}, @pktinfo={{0x20, 0x29, 0x32, {@loopback}}}, @rthdr={{0x24, 0x29, 0x39, {0x6c, 0x2, 0x1, 0xfb, 0x0, [@local]}}}, @hopopts_2292={{0x14, 0x29, 0x36, {0x2b}}}], 0x6c}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000003a40)={0xa, 0x4e20, 0x59, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000003e40)=[@hopopts={{0x14}}], 0x14}}, {{&(0x7f0000003f00)={0xa, 0x4e23, 0x1, @mcast2, 0x6}, 0x1c, 0x0}}], 0x7, 0x4800)

3.580414879s ago: executing program 0 (id=108):
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
syz_emit_vhci(0x0, 0x22)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xb)
close(r2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x68)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$TUNSETCARRIER(r3, 0x400454e2, 0x0)
socket(0x0, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030021000b63d25a80648c2594f90124fc60350c030b022e0009083582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3000}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='mm_khugepaged_scan_pmd\x00', r1}, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r4)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r5, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0)

2.622758597s ago: executing program 3 (id=109):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0xfff, 0xda, 0x9})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x20044c61)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002040)=ANY=[@ANYBLOB='t\x00\x00', @ANYRES32], 0x74}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000140)=@device_b, &(0x7f0000000280)=ANY=[@ANYBLOB="a82ffe000802110000010802110000000802110000009100ffffffffffff6095080211000000080211000001b70038201f26814b64e11e9d6bac348ea78d186b8b429841f709ff84a05c4bf88ad8554cc541d6c57f3a78"], 0xe8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x2})
ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r6 = socket(0x27, 0x5, 0x6)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, 0x0)
r7 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600))
ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0)

2.60392558s ago: executing program 0 (id=110):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x800)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x730, 0xbdff, 0x2, "fdffffffffffffff"})
write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x16, 0x200, &(0x7f0000000880)="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"})
mount$bind(0x0, 0x0, 0x0, 0x1333404, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)

2.014643925s ago: executing program 3 (id=111):
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)=0x100)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000400))
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000002}]})
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r7, 0x4068aea3, &(0x7f0000000200))
write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc)
splice(r1, 0x0, r4, 0x0, 0x4ffe2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0)
socket$inet_dccp(0x2, 0x6, 0x0)
sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYRES64=r9], 0x54}}, 0x0)

1.59100234s ago: executing program 2 (id=112):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}, {0x0, 0x18}], 0x2)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}, {0x0}], 0x2, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private}, {@multicast1}, {@remote}, {@empty}, {@private, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@local}, {@remote}, {@multicast2}, {@private}, {}, {@broadcast}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}})
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20002)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
unshare(0x2a020400)
getpid()
unshare(0x44020400)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})

1.063619854s ago: executing program 3 (id=113):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
r1 = syz_init_net_socket$x25(0x3, 0x2, 0x3)
ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
pselect6(0x40, &(0x7f0000000000)={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc)
r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$read(0xb, r2, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fef00102e80e423c7", @ANYBLOB="01"], 0x3c}}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000040)={'wlan0\x00'})
fcntl$setpipe(r0, 0x407, 0xb)
r4 = io_uring_setup(0x2358, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x2, &(0x7f0000000040), 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x6, &(0x7f00000013c0)=[{0x0}], 0x1)
r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, &(0x7f0000000400)={0x0, [0x1, 0x22c7, 0x409], [], 0x9})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x14}}, &(0x7f0000000480)='syzkaller\x00', 0x18, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

941.242292ms ago: executing program 3 (id=114):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x44814}, 0x4040000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x20000000)
r1 = dup(0xffffffffffffffff)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='syscall\x00')
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = userfaultfd(0x801)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r5 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, 0x0)
setsockopt$rose(0xffffffffffffffff, 0x104, 0x6, 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000002240)={0x14, 0x0, {0x0, @usage=0xfffffffffffffffa, r8, 0x1, 0x40, 0x6191, 0x7fffffffffffffff, 0x66921f61, 0x88, @struct={0x6eb02da2, 0x5}, 0xffffffff, 0x3, [0x8, 0x100000001, 0xfffffffffffffffe, 0xc, 0x2, 0x4]}, {0x2, @struct={0x6, 0x18d}, 0x0, 0x9, 0x8001, 0x1942ecee, 0xb, 0xe6, 0x68, @struct={0x5, 0x3}, 0x8, 0x608c, [0x100000000, 0xf, 0x2, 0x0, 0x6e75]}, {0xffff, @struct={0xfc, 0x1400000}, 0x0, 0xcd0, 0x8001, 0x9, 0x2, 0xffffffffffffffff, 0x414, @struct={0x30, 0xffffffff}, 0x81, 0x8, [0xff, 0xfff, 0xfff, 0x13d, 0x5, 0xad]}, {0x6, 0x2}})
syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0})
io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, &(0x7f0000000140), 0x0, 0x4)

780.218507ms ago: executing program 0 (id=115):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
tkill(0x0, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x406, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10)
r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
msgctl$IPC_STAT(r3, 0x2, &(0x7f00000015c0)=""/60)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)
setuid(0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020)
fchown(r5, 0xffffffffffffffff, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0))
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x810)
getsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000080), &(0x7f0000000180)=0x4)

453.219996ms ago: executing program 0 (id=116):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1b, 0x13, &(0x7f0000000340)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x104)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019480)={0x8, 0x1c29, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x47}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
close(r1)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), 0x10)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, 0x0)
ioctl$TCFLSH(r3, 0x8924, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000280), 0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
rt_sigqueueinfo(0x0, 0x0, 0x0)

448.592236ms ago: executing program 2 (id=117):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000020000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2)
syz_open_dev$MSR(0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open_tree(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00')
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00')
connect$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
socket$packet(0x11, 0x3, 0x300)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000080)=0x10001, 0xa, 0x2)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="83efffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xe250}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004054}, 0x10)

196.93169ms ago: executing program 2 (id=118):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000786c6c0a00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10)
connect$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000002380)=""/102389, 0x18ff5}], 0x1, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0), 0x10)
r6 = openat$cdrom(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$DVD_AUTH(r6, 0x5390, &(0x7f00000000c0)=@lsk={0x0, 0x0, "dd86b2d709"})
keyctl$link(0x8, r4, 0x0)
r7 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
fchdir(r5)
r8 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r7)
keyctl$restrict_keyring(0x1d, r8, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, r4, r4, r8, 0x0)
r9 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
ioctl$BLKTRACESETUP(r9, 0xc0401273, &(0x7f0000000000)={'\x00', 0x0, 0x2, 0x4, 0xfffffffffffffffd, 0x8000000000000004})
ioctl$BLKTRACESTART(r9, 0x1274, 0x0)

0s ago: executing program 3 (id=119):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
pipe(&(0x7f0000000040))
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10)
r5 = dup3(r1, r0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x71, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x17)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc)
socket$inet(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
io_getevents(0x0, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:36268' (ED25519) to the list of known hosts.
[   33.110124][ T5260] cgroup: Unknown subsys name 'net'
[   33.298928][ T5260] cgroup: Unknown subsys name 'cpuset'
[   33.301807][ T5260] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   34.167102][ T5260] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   36.461163][ T5342] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   36.472579][ T5349] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   36.480429][ T5345] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   36.482743][ T5345] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   36.484806][ T5345] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   36.487926][ T5345] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   36.489948][ T5352] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   36.492253][ T5345] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   36.494232][ T5347] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   36.494457][ T5345] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   36.496982][ T5347] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   36.499533][ T5345] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   36.501303][ T5347] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   36.503056][ T5345] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   36.504683][ T5347] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   36.507370][ T5345] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   36.509395][ T5353] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   36.510326][ T5345] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   36.515000][ T5345] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   36.515123][ T5353] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   36.518750][ T5345] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   36.528893][ T5345] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   36.531106][ T5345] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   36.533264][ T5345] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   36.734738][ T5339] chnl_net:caif_netlink_parms(): no params data found
[   36.742152][ T5350] chnl_net:caif_netlink_parms(): no params data found
[   36.791424][ T5346] chnl_net:caif_netlink_parms(): no params data found
[   36.820820][ T5343] chnl_net:caif_netlink_parms(): no params data found
[   36.982033][ T5339] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.984639][ T5339] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.988625][ T5339] bridge_slave_0: entered allmulticast mode
[   36.990806][ T5339] bridge_slave_0: entered promiscuous mode
[   37.065633][ T5339] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.071114][ T5339] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.073730][ T5339] bridge_slave_1: entered allmulticast mode
[   37.076980][ T5339] bridge_slave_1: entered promiscuous mode
[   37.095343][ T5350] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.101264][ T5350] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.103928][ T5350] bridge_slave_0: entered allmulticast mode
[   37.107038][ T5350] bridge_slave_0: entered promiscuous mode
[   37.110645][ T5350] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.113271][ T5350] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.115888][ T5350] bridge_slave_1: entered allmulticast mode
[   37.119169][ T5350] bridge_slave_1: entered promiscuous mode
[   37.153109][ T5346] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.155662][ T5346] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.159099][ T5346] bridge_slave_0: entered allmulticast mode
[   37.161683][ T5346] bridge_slave_0: entered promiscuous mode
[   37.174277][ T5343] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.179849][ T5343] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.181910][ T5343] bridge_slave_0: entered allmulticast mode
[   37.183898][ T5343] bridge_slave_0: entered promiscuous mode
[   37.209191][ T5346] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.211095][ T5346] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.212979][ T5346] bridge_slave_1: entered allmulticast mode
[   37.214944][ T5346] bridge_slave_1: entered promiscuous mode
[   37.228542][ T5343] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.230403][ T5343] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.232436][ T5343] bridge_slave_1: entered allmulticast mode
[   37.234400][ T5343] bridge_slave_1: entered promiscuous mode
[   37.249788][ T5339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.265848][ T5350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.298885][ T5343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.302509][ T5339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.306071][ T5350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.309614][ T5346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.313003][ T5343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.348617][ T5346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.371855][ T5350] team0: Port device team_slave_0 added
[   37.396935][ T5339] team0: Port device team_slave_0 added
[   37.399259][ T5350] team0: Port device team_slave_1 added
[   37.429294][ T5346] team0: Port device team_slave_0 added
[   37.433494][ T5343] team0: Port device team_slave_0 added
[   37.437227][ T5339] team0: Port device team_slave_1 added
[   37.448487][ T5350] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.450346][ T5350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.457066][ T5350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.461296][ T5346] team0: Port device team_slave_1 added
[   37.473578][ T5343] team0: Port device team_slave_1 added
[   37.484767][ T5350] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.488327][ T5350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.495515][ T5350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.533806][ T5339] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.535782][ T5339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.542552][ T5339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.546450][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.548316][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.554916][ T5346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.569966][ T5343] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.571821][ T5343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.578864][ T5343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.582514][ T5343] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.584339][ T5343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.591090][ T5343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.594646][ T5339] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.597328][ T5339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.606416][ T5339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.610566][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.612395][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.619035][ T5346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.697761][ T5343] hsr_slave_0: entered promiscuous mode
[   37.699743][ T5343] hsr_slave_1: entered promiscuous mode
[   37.703823][ T5350] hsr_slave_0: entered promiscuous mode
[   37.705955][ T5350] hsr_slave_1: entered promiscuous mode
[   37.708518][ T5350] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   37.710599][ T5350] Cannot create hsr debugfs directory
[   37.713669][ T5339] hsr_slave_0: entered promiscuous mode
[   37.715736][ T5339] hsr_slave_1: entered promiscuous mode
[   37.717851][ T5339] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   37.720099][ T5339] Cannot create hsr debugfs directory
[   37.760206][ T5346] hsr_slave_0: entered promiscuous mode
[   37.762703][ T5346] hsr_slave_1: entered promiscuous mode
[   37.764902][ T5346] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   37.767057][ T5346] Cannot create hsr debugfs directory
[   38.010272][ T5343] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   38.015970][ T5343] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   38.019629][ T5343] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   38.023633][ T5343] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   38.041361][ T5339] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   38.046047][ T5339] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   38.051468][ T5339] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   38.054898][ T5339] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   38.084634][ T5346] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   38.088023][ T5346] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   38.091265][ T5346] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   38.094563][ T5346] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   38.118725][ T5350] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   38.122042][ T5350] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   38.128830][ T5350] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   38.131930][ T5350] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   38.172081][ T5343] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.198579][ T5343] 8021q: adding VLAN 0 to HW filter on device team0
[   38.213108][ T5339] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.238823][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.240810][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.247148][ T5339] 8021q: adding VLAN 0 to HW filter on device team0
[   38.255599][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.258193][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.266228][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.268594][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.282486][ T5350] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.288530][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.290815][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.313862][ T5346] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.345473][ T5346] 8021q: adding VLAN 0 to HW filter on device team0
[   38.353684][ T5350] 8021q: adding VLAN 0 to HW filter on device team0
[   38.361632][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.363410][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.368321][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.370245][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.372722][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.374520][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.387486][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.389351][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.433082][ T5346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   38.450556][ T5339] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.471168][ T5339] veth0_vlan: entered promiscuous mode
[   38.477591][ T5339] veth1_vlan: entered promiscuous mode
[   38.498684][ T5339] veth0_macvtap: entered promiscuous mode
[   38.501864][ T5339] veth1_macvtap: entered promiscuous mode
[   38.505565][ T5343] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.514867][ T5339] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.523672][ T5339] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.532511][ T5339] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.535742][ T5339] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.539200][ T5339] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.542122][ T5339] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.550175][ T5350] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.558467][ T5349] Bluetooth: hci1: command tx timeout
[   38.558471][ T5352] Bluetooth: hci0: command tx timeout
[   38.558747][ T5345] Bluetooth: hci3: command tx timeout
[   38.566990][ T5345] Bluetooth: hci2: command tx timeout
[   38.570086][ T5343] veth0_vlan: entered promiscuous mode
[   38.575199][ T5346] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.589654][ T5343] veth1_vlan: entered promiscuous mode
[   38.622563][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.625350][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.625837][ T5350] veth0_vlan: entered promiscuous mode
[   38.652211][ T5343] veth0_macvtap: entered promiscuous mode
[   38.652275][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.656045][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.657655][ T5350] veth1_vlan: entered promiscuous mode
[   38.664681][ T5343] veth1_macvtap: entered promiscuous mode
[   38.678211][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.680981][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.684282][ T5343] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.694443][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.700187][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.703455][ T5343] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.703960][ T5339] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   38.707361][ T5346] veth0_vlan: entered promiscuous mode
[   38.717576][ T5343] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.719861][ T5343] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.722127][ T5343] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.724401][ T5343] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.731004][ T5346] veth1_vlan: entered promiscuous mode
[   38.759029][ T5350] veth0_macvtap: entered promiscuous mode
[   38.785259][ T5350] veth1_macvtap: entered promiscuous mode
[   38.810892][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.813776][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.816778][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.816795][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.821144][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.824195][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.829839][ T5350] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.857657][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.860364][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.862844][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.865565][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.870592][ T5350] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.888433][ T5346] veth0_macvtap: entered promiscuous mode
[   38.891675][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.894247][ T5346] veth1_macvtap: entered promiscuous mode
[   38.894282][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.897700][ T5350] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.901012][ T5350] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.903297][ T5350] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.905606][ T5350] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.914837][ T5404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   38.919721][ T5404] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   38.922047][ T5404] batman_adv: batadv0: Removing interface: batadv_slave_0
[   38.925337][ T5404] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   38.928643][ T5404] batman_adv: batadv0: Removing interface: batadv_slave_1
[   38.953448][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.957899][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.961190][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.964684][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.970840][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.989303][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.993434][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.998296][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.001424][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.006767][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.019526][ T5346] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.022640][ T5346] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.025537][ T5346] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.043066][ T5346] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.074445][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.076796][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.094026][ T5409] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4'.
[   39.099339][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.102769][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.147056][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.150596][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.169835][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.172077][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.196546][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   39.219415][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   39.221807][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   39.316269][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   39.991013][ T5424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'.
[   40.136372][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   40.242075][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   40.296374][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   40.299624][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   40.306365][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   40.313622][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   40.637108][ T5345] Bluetooth: hci2: command tx timeout
[   40.638844][ T5345] Bluetooth: hci1: command tx timeout
[   40.646271][ T5349] Bluetooth: hci3: command tx timeout
[   40.648182][ T5349] Bluetooth: hci0: command tx timeout
[   40.703813][   T39] audit: type=1326 audit(1728470103.586:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000
[   40.720533][   T39] audit: type=1326 audit(1728470103.586:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000
[   40.738148][   T39] audit: type=1326 audit(1728470103.606:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7fa4579 code=0x7ffc0000
[   40.757056][   T39] audit: type=1326 audit(1728470103.606:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000
[   40.774710][   T39] audit: type=1326 audit(1728470103.606:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000
[   40.781286][   T39] audit: type=1326 audit(1728470103.606:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7fa4579 code=0x7ffc0000
[   40.786729][   T39] audit: type=1326 audit(1728470103.606:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000
[   40.792178][   T39] audit: type=1326 audit(1728470103.606:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7fa4579 code=0x7ffc0000
[   40.798983][   T39] audit: type=1326 audit(1728470103.606:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000
[   40.804413][   T39] audit: type=1326 audit(1728470103.606:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=230 compat=1 ip=0xf7fa4579 code=0x7ffc0000
[   41.517945][ T5451] warning: `syz.1.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   41.534198][ T5345] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[   41.538083][ T5345] CPU: 3 UID: 0 PID: 5345 Comm: kworker/u33:3 Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0
[   41.541768][ T5345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   41.545462][ T5345] Workqueue: hci2 hci_rx_work
[   41.547114][ T5345] Call Trace:
[   41.548339][ T5345]  <TASK>
[   41.549347][ T5345]  dump_stack_lvl+0x16c/0x1f0
[   41.550977][ T5345]  sysfs_warn_dup+0x7f/0xa0
[   41.552569][ T5345]  sysfs_create_dir_ns+0x24d/0x2b0
[   41.554294][ T5345]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[   41.556207][ T5345]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   41.557970][ T5345]  ? kobject_add_internal+0x12d/0x990
[   41.559839][ T5345]  ? do_raw_spin_unlock+0x172/0x230
[   41.561837][ T5345]  kobject_add_internal+0x2c8/0x990
[   41.563646][ T5345]  kobject_add+0x16f/0x240
[   41.565223][ T5345]  ? __pfx_kobject_add+0x10/0x10
[   41.567051][ T5345]  ? class_to_subsys+0x3e/0x160
[   41.568758][ T5345]  ? do_raw_spin_unlock+0x172/0x230
[   41.570697][ T5345]  ? kobject_put+0xab/0x5a0
[   41.572293][ T5345]  device_add+0x289/0x1a70
[   41.573888][ T5345]  ? __pfx_dev_set_name+0x10/0x10
[   41.575687][ T5345]  ? __pfx_device_add+0x10/0x10
[   41.577433][ T5345]  ? mgmt_send_event_skb+0x2f2/0x460
[   41.579301][ T5345]  hci_conn_add_sysfs+0x17e/0x230
[   41.581038][ T5345]  le_conn_complete_evt+0xfc7/0x1cf0
[   41.582840][ T5345]  ? __pfx_le_conn_complete_evt+0x10/0x10
[   41.584863][ T5345]  ? trace_contention_end+0xea/0x140
[   41.586696][ T5345]  ? __mutex_lock+0x1a6/0x9c0
[   41.588411][ T5345]  hci_le_enh_conn_complete_evt+0x23d/0x380
[   41.590509][ T5345]  ? skb_pull_data+0x166/0x210
[   41.592280][ T5345]  hci_le_meta_evt+0x2e2/0x5d0
[   41.593604][ T5345]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[   41.595216][ T5345]  hci_event_packet+0x666/0x1190
[   41.596484][ T5345]  ? __pfx_hci_le_meta_evt+0x10/0x10
[   41.597835][ T5345]  ? __pfx_hci_event_packet+0x10/0x10
[   41.599161][ T5345]  ? mark_held_locks+0x9f/0xe0
[   41.600417][ T5345]  ? kcov_remote_start+0x3cf/0x6e0
[   41.601717][ T5345]  ? lockdep_hardirqs_on+0x7c/0x110
[   41.603119][ T5345]  hci_rx_work+0x2c6/0x16c0
[   41.604303][ T5345]  ? lock_acquire+0x2f/0xb0
[   41.605460][ T5345]  ? process_one_work+0x8bb/0x1b30
[   41.607003][ T5345]  process_one_work+0x958/0x1b30
[   41.608534][ T5345]  ? __pfx_lock_acquire.part.0+0x10/0x10
[   41.609909][ T5345]  ? __pfx_process_one_work+0x10/0x10
[   41.611423][ T5345]  ? assign_work+0x1a0/0x250
[   41.612647][ T5345]  worker_thread+0x6c8/0xf00
[   41.613795][ T5345]  ? __pfx_worker_thread+0x10/0x10
[   41.615105][ T5345]  kthread+0x2c1/0x3a0
[   41.616142][ T5345]  ? _raw_spin_unlock_irq+0x23/0x50
[   41.617526][ T5345]  ? __pfx_kthread+0x10/0x10
[   41.618756][ T5345]  ret_from_fork+0x45/0x80
[   41.619952][ T5345]  ? __pfx_kthread+0x10/0x10
[   41.621269][ T5345]  ret_from_fork_asm+0x1a/0x30
[   41.622532][ T5345]  </TASK>
[   41.623979][ T5345] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   41.627526][ T5345] Bluetooth: hci2: failed to register connection device
[   41.950211][ T5460] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[   41.952803][ T5460] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[   41.960792][ T5460] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[   41.963381][ T5460] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[   42.716487][ T5349] Bluetooth: hci3: command tx timeout
[   42.718200][ T5349] Bluetooth: hci1: command tx timeout
[   42.719882][ T5349] Bluetooth: hci2: command tx timeout
[   43.053333][   T35] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   43.127986][ T5477] netlink: 'syz.0.18': attribute type 2 has an invalid length.
[   43.151248][ T5477] : entered promiscuous mode
[   43.308266][   T35] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   43.310644][   T35] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   43.313406][   T35] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[   43.316280][   T35] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   43.319202][   T35] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   43.342813][   T35] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   43.345206][   T35] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   43.355286][   T35] usb 8-1: Product: syz
[   43.358150][   T35] usb 8-1: Manufacturer: syz
[   43.367363][   T35] cdc_wdm 8-1:1.0: skipping garbage
[   43.370692][   T35] cdc_wdm 8-1:1.0: skipping garbage
[   43.379835][   T35] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[   43.382762][   T35] cdc_wdm 8-1:1.0: Unknown control protocol
[   43.612078][ T5462] Bluetooth: MGMT ver 1.23
[   44.716416][ T5463] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   44.743291][    T9] usb 8-1: USB disconnect, device number 2
[   44.782942][ T5502] atomic_op ffff8880270ef198 conn xmit_atomic 0000000000000000
[   44.796264][ T5345] Bluetooth: hci1: command tx timeout
[   44.797761][ T5349] Bluetooth: hci2: command tx timeout
[   45.682115][ T5518] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[   45.687983][ T5518] smc: net device wg0 applied user defined pnetid SYZ0
[   45.706598][ T5518] Zero length message leads to an empty skb
[   45.780628][ T5522] pim6reg1: entered allmulticast mode
[   46.727686][ T5561] syz.0.35 uses obsolete (PF_INET,SOCK_PACKET)
[   46.888157][ T5349] Bluetooth: hci2: command tx timeout
[   47.071336][   T39] kauditd_printk_skb: 38 callbacks suppressed
[   47.071348][   T39] audit: type=1800 audit(1728470109.956:50): pid=5574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.38" name="bus" dev="9p" ino=36050052 res=0 errno=0
[   47.093186][ T5574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.38'.
[   47.139638][ T5574] netfs: Couldn't get user pages (rc=-14)
[   47.622772][ T5597] netlink: 72 bytes leftover after parsing attributes in process `syz.2.40'.
[   47.636657][ T5597] netlink: 72 bytes leftover after parsing attributes in process `syz.2.40'.
[   47.757699][ T5349] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[   47.760918][ T5349] Bluetooth: hci3: Injecting HCI hardware error event
[   47.764814][ T5349] Bluetooth: hci3: hardware error 0x00
[   49.332332][ T5616] netlink: 56 bytes leftover after parsing attributes in process `syz.1.45'.
[   49.335349][ T5616] netlink: 'syz.1.45': attribute type 5 has an invalid length.
[   49.338225][ T5616] netlink: 44 bytes leftover after parsing attributes in process `syz.1.45'.
[   49.388360][ T5617] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.397660][ T5616] random: crng reseeded on system resumption
[   49.418473][ T1281] IPVS: starting estimator thread 0...
[   49.432813][ T5617] 9pnet_fd: Insufficient options for proto=fd
[   49.506342][ T5618] IPVS: using max 35 ests per chain, 84000 per kthread
[   49.751080][ T5622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.48'.
[   49.856503][ T5349] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[   50.021545][ T5635] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   50.084801][ T5639] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.168388][ T5635] evm: overlay not supported
[   50.219772][ T5635] overlay: ./bus is not a directory
[   50.646270][ T5340] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   50.807127][ T5340] usb 5-1: Using ep0 maxpacket: 16
[   50.812629][ T5340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   50.815462][ T5340] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   50.819794][ T5340] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   50.822253][ T5340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.826799][ T5340] usb 5-1: config 0 descriptor??
[   51.867548][ T5340] usbhid 5-1:0.0: can't add hid device: -71
[   51.871704][ T5340] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   51.880982][ T5340] usb 5-1: USB disconnect, device number 2
[   53.065730][ T5349] Bluetooth: hci2: SCO packet for unknown connection handle 768
[   53.071981][ T5349] Bluetooth: hci2: SCO packet for unknown connection handle 1039
[   53.271819][ T5676] e1000e 0000:00:02.0 eth1: NIC Link is Down
[   53.389720][ T5688] netlink: 'syz.1.63': attribute type 1 has an invalid length.
[   53.391854][ T5688] netlink: 'syz.1.63': attribute type 4 has an invalid length.
[   53.394074][ T5688] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.63'.
[   55.190559][ T5727] input: syz0 as /devices/virtual/input/input5
[   56.008074][ T5740] process 'syz.3.71' launched './file2' with NULL argv: empty string added
[   57.399592][ T5753] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[   57.402113][ T5753] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   57.407319][ T5753] vhci_hcd vhci_hcd.0: Device attached
[   57.586995][   T25] vhci_hcd: vhci_device speed not set
[   57.656206][   T25] usb 13-1: new full-speed USB device number 2 using vhci_hcd
[   57.798071][ T5754] vhci_hcd: connection reset by peer
[   57.825762][ T1100] vhci_hcd: stop threads
[   57.828875][ T1100] vhci_hcd: release socket
[   57.832930][ T1100] vhci_hcd: disconnect device
[   58.040970][ T5764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.76'.
[   58.376670][ T5769] syzkaller0: entered promiscuous mode
[   58.378282][ T5769] syzkaller0: entered allmulticast mode
[   58.543923][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.546015][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.550585][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.556912][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.562662][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.567970][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.573396][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.584217][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.589738][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.591709][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.593670][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.595715][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.604812][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.607305][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.609271][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.614678][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.617098][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.622380][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.624316][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.626861][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.628861][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.634142][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.639276][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.641541][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.643517][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.645445][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.647973][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.649965][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.656957][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.658947][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.664421][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.666436][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.668541][ T1446] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   58.679314][ T1446] hid-generic 0000:0000:0000.0002: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   58.848241][ T5340] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   58.996497][ T5340] usb 8-1: Using ep0 maxpacket: 8
[   58.999002][ T5340] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[   59.002040][ T5340] usb 8-1: config 179 has no interface number 0
[   59.004179][ T5340] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10
[   59.007526][ T5340] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024
[   59.010704][ T5340] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   59.013598][ T5340] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   59.017611][ T5340] usb 8-1: config 179 interface 65 has no altsetting 0
[   59.026176][ T5340] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[   59.028621][ T5340] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.033157][ T5771] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   59.050126][ T5340] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input6
[   59.121889][ T5780] fuse: Bad value for 'group_id'
[   59.123504][ T5780] fuse: Bad value for 'group_id'
[   59.130360][ T4826] input input6: unable to receive magic message: -110
[   59.141654][ T4826] input input6: unable to receive magic message: -32
[   59.157363][ T4826] input input6: unable to receive magic message: -32
[   59.174051][ T4826] input input6: unable to receive magic message: -32
[   59.185782][ T4826] input input6: unable to receive magic message: -32
[   59.189457][ T4826] input input6: unable to receive magic message: -32
[   59.196739][ T5781] netlink: 20 bytes leftover after parsing attributes in process `syz.2.81'.
[   59.291856][ T5771] input input6: unable to receive magic message: -32
[   59.299758][ T5340] usb 8-1: USB disconnect, device number 3
[   59.301983][    C2] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   59.327670][ T5340] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[   59.644619][ T5780] netlink: 'syz.2.81': attribute type 7 has an invalid length.
[   60.047394][ T5805] syzkaller1: entered promiscuous mode
[   60.049791][ T5805] syzkaller1: entered allmulticast mode
[   60.077603][ T5805] bridge: RTM_NEWNEIGH with invalid state 0x0
[   60.447169][ T5813] loop7: detected capacity change from 0 to 16384
[   60.524184][ T5813] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   60.531355][ T5813] Buffer I/O error on dev loop7, logical block 1, async page read
[   60.538843][ T5813] Dev loop7: unable to read RDB block 8
[   60.542816][ T5813] I/O error, dev loop7, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   60.545339][ T5813] Buffer I/O error on dev loop7, logical block 3, async page read
[   60.551076][ T5813]  loop7: unable to read partition table
[   60.557152][ T5813] loop_reread_partitions: partition scan of loop7 (K�>�i)��/480���#�	�$q�Z����I�����[�u�@3b������j!5MM�]
z) failed (rc=-5)
[   62.638198][ T5835] syz.2.96 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   62.806516][   T25] vhci_hcd: vhci_device speed not set
[   63.666981][ T5851] netlink: 44 bytes leftover after parsing attributes in process `syz.1.100'.
[   63.667016][ T5851] netlink: 21 bytes leftover after parsing attributes in process `syz.1.100'.
[   63.667027][ T5851] netlink: 21 bytes leftover after parsing attributes in process `syz.1.100'.
[   66.383070][ T5892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.451877][   T39] audit: type=1326 audit(1728470130.336:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz.2.112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000
[   67.486228][   T39] audit: type=1326 audit(1728470130.336:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz.2.112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000
[   67.546455][   T39] audit: type=1326 audit(1728470130.336:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz.2.112" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f22579 code=0x7ffc0000
[   67.598992][   T39] audit: type=1326 audit(1728470130.336:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz.2.112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000
[   67.606426][   T39] audit: type=1326 audit(1728470130.336:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz.2.112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000
[   67.612164][   T39] audit: type=1326 audit(1728470130.346:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz.2.112" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f22579 code=0x7ffc0000
[   67.619639][   T39] audit: type=1326 audit(1728470130.346:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz.2.112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000
[   67.626936][   T39] audit: type=1326 audit(1728470130.346:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz.2.112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000
[   67.634268][   T39] audit: type=1326 audit(1728470130.346:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz.2.112" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f22579 code=0x7ffc0000
[   67.641773][   T39] audit: type=1326 audit(1728470130.346:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz.2.112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000
[   68.523176][ T5922] wireguard0: entered promiscuous mode
[   68.524710][ T5922] wireguard0: entered allmulticast mode
[   68.589354][ T5927] tipc: Failed to remove unknown binding: 66,1,1/0:773654221/773654223
[   68.592730][ T5927] tipc: Failed to remove unknown binding: 66,1,1/0:773654221/773654223
[   69.016321][    C1] 
[   69.017141][    C1] ============================================
[   69.018935][    C1] WARNING: possible recursive locking detected
[   69.020542][    C1] 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 Not tainted
[   69.023704][    C1] --------------------------------------------
[   69.026101][    C1] swapper/1/0 is trying to acquire lock:
[   69.027597][    C1] ffffc90024f510d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x36e/0x4b0
[   69.030264][    C1] 
[   69.030264][    C1] but task is already holding lock:
[   69.032260][    C1] ffffc90024fd10d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x36e/0x4b0
[   69.034971][    C1] 
[   69.034971][    C1] other info that might help us debug this:
[   69.037147][    C1]  Possible unsafe locking scenario:
[   69.037147][    C1] 
[   69.039082][    C1]        CPU0
[   69.039979][    C1]        ----
[   69.040867][    C1]   lock(&rb->spinlock);
[   69.041978][    C1]   lock(&rb->spinlock);
[   69.043093][    C1] 
[   69.043093][    C1]  *** DEADLOCK ***
[   69.043093][    C1] 
[   69.045195][    C1]  May be due to missing lock nesting notation
[   69.045195][    C1] 
[   69.047379][    C1] 4 locks held by swapper/1/0:
[   69.048674][    C1]  #0: ffffffff8ddb7800 (rcu_read_lock){....}-{1:2}, at: ieee80211_iterate_active_interfaces_atomic+0x3e/0x1b0
[   69.051813][    C1]  #1: ffffffff8ddb7800 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0x1d1/0x5a0
[   69.054236][    C1]  #2: ffffc90024fd10d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x36e/0x4b0
[   69.056938][    C1]  #3: ffffffff8ddb7800 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1c2/0x590
[   69.059683][    C1] 
[   69.059683][    C1] stack backtrace:
[   69.061636][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0
[   69.065112][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   69.068537][    C1] Call Trace:
[   69.069407][    C1]  <IRQ>
[   69.070160][    C1]  dump_stack_lvl+0x116/0x1f0
[   69.071394][    C1]  print_deadlock_bug+0x2e3/0x410
[   69.072724][    C1]  __lock_acquire+0x2185/0x3ce0
[   69.074000][    C1]  ? __pfx___lock_acquire+0x10/0x10
[   69.075360][    C1]  ? hlock_class+0x4e/0x130
[   69.076615][    C1]  ? __lock_acquire+0xbdd/0x3ce0
[   69.078412][    C1]  lock_acquire.part.0+0x11b/0x380
[   69.080125][    C1]  ? __bpf_ringbuf_reserve+0x36e/0x4b0
[   69.081922][    C1]  ? __pfx_lock_acquire.part.0+0x10/0x10
[   69.083728][    C1]  ? rcu_is_watching+0x12/0xc0
[   69.085317][    C1]  ? trace_lock_acquire+0x14a/0x1d0
[   69.087119][    C1]  ? hlock_class+0x4e/0x130
[   69.088703][    C1]  ? __bpf_ringbuf_reserve+0x36e/0x4b0
[   69.090520][    C1]  ? lock_acquire+0x2f/0xb0
[   69.092049][    C1]  ? __bpf_ringbuf_reserve+0x36e/0x4b0
[   69.093831][    C1]  _raw_spin_lock_irqsave+0x3a/0x60
[   69.095198][    C1]  ? __bpf_ringbuf_reserve+0x36e/0x4b0
[   69.096754][    C1]  __bpf_ringbuf_reserve+0x36e/0x4b0
[   69.098556][    C1]  ? trace_lock_acquire+0x14a/0x1d0
[   69.100217][    C1]  ? bpf_trace_run2+0x1c2/0x590
[   69.101775][    C1]  bpf_ringbuf_reserve+0x57/0x90
[   69.103342][    C1]  bpf_prog_0e153dac479590bf+0x35/0x70
[   69.105173][    C1]  bpf_trace_run2+0x231/0x590
[   69.106807][    C1]  ? __pfx_mark_lock+0x10/0x10
[   69.108624][    C1]  ? __pfx_bpf_trace_run2+0x10/0x10
[   69.110437][    C1]  ? hlock_class+0x4e/0x130
[   69.111942][    C1]  trace_contention_begin.constprop.0+0xed/0x170
[   69.113568][    C1]  __pv_queued_spin_lock_slowpath+0x10b/0xc90
[   69.115078][    C1]  ? __pfx___lock_acquire+0x10/0x10
[   69.116402][    C1]  ? __lock_acquire+0xbdd/0x3ce0
[   69.117669][    C1]  ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10
[   69.119425][    C1]  do_raw_spin_lock+0x210/0x2c0
[   69.120676][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   69.122060][    C1]  ? lock_acquire+0x2f/0xb0
[   69.123255][    C1]  ? __bpf_ringbuf_reserve+0x36e/0x4b0
[   69.124666][    C1]  _raw_spin_lock_irqsave+0x42/0x60
[   69.126016][    C1]  ? __bpf_ringbuf_reserve+0x36e/0x4b0
[   69.127434][    C1]  __bpf_ringbuf_reserve+0x36e/0x4b0
[   69.129043][    C1]  bpf_ringbuf_reserve+0x57/0x90
[   69.130327][    C1]  bpf_prog_fe0ed97373b08409+0x2e/0x4b
[   69.131749][    C1]  bpf_trace_run3+0x240/0x5a0
[   69.132955][    C1]  ? __pfx_bpf_trace_run3+0x10/0x10
[   69.134248][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[   69.135543][    C1]  ? kfree_skbmem+0x1a4/0x1f0
[   69.136882][    C1]  ? kmem_cache_free+0x152/0x4b0
[   69.138358][    C1]  ? skb_free_head+0x18a/0x1d0
[   69.139789][    C1]  ? __bpf_trace_kmem_cache_free+0x8e/0xc0
[   69.141338][    C1]  kmem_cache_free+0x200/0x4b0
[   69.142596][    C1]  ? skb_release_data+0x565/0x730
[   69.143923][    C1]  kfree_skbmem+0x1a4/0x1f0
[   69.145123][    C1]  consume_skb+0xcc/0x100
[   69.146214][    C1]  mac80211_hwsim_tx_frame+0x1f3/0x2a0
[   69.147587][    C1]  mac80211_hwsim_beacon_tx+0x592/0xa00
[   69.149011][    C1]  ? rcu_is_watching+0x12/0xc0
[   69.150216][    C1]  ? trace_lock_acquire+0x14a/0x1d0
[   69.151560][    C1]  __iterate_interfaces+0x2d0/0x5d0
[   69.153170][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[   69.154874][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[   69.156366][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   69.157815][    C1]  ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[   69.159552][    C1]  mac80211_hwsim_beacon+0x105/0x200
[   69.161011][    C1]  __hrtimer_run_queues+0x20a/0xae0
[   69.162394][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[   69.163834][    C1]  ? ktime_get_update_offsets_now+0x201/0x310
[   69.165553][    C1]  hrtimer_run_softirq+0x17d/0x350
[   69.167177][    C1]  handle_softirqs+0x213/0x8f0
[   69.168503][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[   69.169815][    C1]  irq_exit_rcu+0xbb/0x120
[   69.171056][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[   69.172984][    C1]  </IRQ>
[   69.173998][    C1]  <TASK>
[   69.175010][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   69.177138][    C1] RIP: 0010:default_idle+0xf/0x20
[   69.178899][    C1] Code: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 68 33 00 fb f4 <fa> c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90
[   69.185383][    C1] RSP: 0018:ffffc90000477e08 EFLAGS: 00000202
[   69.187473][    C1] RAX: 00000000001dece5 RBX: 0000000000000001 RCX: ffffffff8b131a39
[   69.190166][    C1] RDX: 0000000000000000 RSI: ffffffff8b4cc8e0 RDI: ffffffff8bb123e0
[   69.192834][    C1] RBP: ffffed10036e9910 R08: 0000000000000001 R09: ffffed10056a7025
[   69.195494][    C1] R10: ffff88802b53812b R11: 0000000000000000 R12: 0000000000000001
[   69.198164][    C1] R13: ffff88801b74c880 R14: ffffffff901cd248 R15: 0000000000000000
[   69.200836][    C1]  ? ct_kernel_exit+0x139/0x190
[   69.202500][    C1]  default_idle_call+0x6d/0xb0
[   69.204148][    C1]  do_idle+0x32c/0x3f0
[   69.205545][    C1]  ? __pfx_do_idle+0x10/0x10
[   69.207296][    C1]  cpu_startup_entry+0x4f/0x60
[   69.208966][    C1]  start_secondary+0x222/0x2b0
[   69.210607][    C1]  ? __pfx_start_secondary+0x10/0x10
[   69.212422][    C1]  common_startup_64+0x13e/0x148
[   69.214108][    C1]  </TASK>
[   70.717426][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[   75.839335][   T57] cfg80211: failed to load regulatory.db

VM DIAGNOSIS:
10:31:16  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff88802b43f900 RCX=ffffffff8b041ba8 RDX=ffff888024f50000
RSI=ffffffff8b041bb6 RDI=0000000000000006 RBP=ffff88802b43f900 RSP=ffffc900243bf8b8
R8 =0000000000000006 R9 =ffff88802b43f900 R10=ffff88802b43f900 R11=ffffffff8b4f7c60
R12=ffff88802b42c9c0 R13=0000000000000001 R14=0000000000000009 R15=ffff88802b42ca40
RIP=ffffffff818cb926 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000557f7f634000 CR3=000000005fdf6000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000014800000000 0000000600000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff850374c5 RDI=ffffffff9a63a220 RBP=ffffffff9a63a1e0 RSP=ffffc90000597fc0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e32312e36
R12=0000000000000000 R13=0000000000000035 R14=ffffffff85037460 R15=0000000000000000
RIP=ffffffff850374ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b500000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000020009000 CR3=000000005fdf6000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000012000000000 0000000300000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=fffff520046b7ef2 RBX=1ffff920046b7ef2 RCX=ffffffff846109a8 RDX=0000000000000000
RSI=0000000000000e1d RDI=ffffffff8c799940 RBP=0000000000000000 RSP=ffffc900235bf778
R8 =0000000000000000 R9 =fffffbfff2039a49 R10=ffffffff901cd24f R11=0000000000000000
R12=ffffffff8c799940 R13=0000000000000e1d R14=0000000080000000 R15=ffff88802ec9aa00
RIP=ffffffff8b130cd0 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000020c2e018 CR3=0000000043a3e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000012000000000 0000000300000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=00000000000dac34 RBX=0000000000000003 RCX=ffffffff8b131a39 RDX=ffffed10056e7026
RSI=ffffffff8bb12360 RDI=ffffffff816418fc RBP=ffffed10036ec488 RSP=ffffc90000497e08
R8 =0000000000000000 R9 =ffffed10056e7025 R10=ffff88802b73812b R11=0000000000000003
R12=0000000000000003 R13=ffff88801b762440 R14=ffffffff901cd248 R15=0000000000000000
RIP=ffffffff8b132e1f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000020003000 CR3=000000002aee2000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c0364bb099f8e273 b23d87a310e0e135
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 116e3dd37d34b59d 3ba2a38078d187bd
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1b73e91d0bbf9ac6 85b15c274236cdcb
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a7b4d3f5177a0eb 2da732624763cd07
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000007c0
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6df30000ede60000 002ae9a0002aea0a
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b5be0000afc40000 002af1c401000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 69e8000000000307 002ae45700000084
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 002af1c24b520080 9d0e0000002ae445
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 725c80e48ceaf727 e3c2a5c3f803f2df
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 87b4121ada0a587b aec837817e74d61f
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000