last executing test programs:

10.160460151s ago: executing program 2 (id=260):
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x3e9, 0x2, 0x70bd28, 0xb, {0x4, 0x0, 0x1, 0x0, 0x8, 0x4, 0x7, 0x10, 0x0, 0x5, 0x4}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000851}, 0x4000001)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_setup(0x6, &(0x7f0000001380)=<r3=>0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
io_submit(r3, 0x3, &(0x7f0000001140)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r4}])
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0xb)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x14)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0)
pipe(&(0x7f0000000140))

8.760564145s ago: executing program 2 (id=265):
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='yeah\x00', 0x5)
socket$inet6(0xa, 0x2, 0x3a)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c80010000bff"], 0x15)
syz_open_dev$vim2m(0x0, 0xbfb, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8000}, &(0x7f0000000240), 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0xfffffffd)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)

6.829873381s ago: executing program 1 (id=269):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000300)={0x3})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x21, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r7, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f000000ab00)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000007280)=""/22, 0x16}, {0x0}, {&(0x7f00000072c0)=""/80, 0x50}], 0x5}, 0x5}], 0x1, 0x40000000, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x4001)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0109040000000000140012800b0001006c6f7770616e00000000028008000500", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r9 = io_uring_setup(0x17fb, &(0x7f0000000440)={0x0, 0x0, 0x80, 0x8000})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

6.82959593s ago: executing program 2 (id=270):
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x3e9, 0x2, 0x70bd28, 0xb, {0x4, 0x0, 0x1, 0x0, 0x8, 0x4, 0x7, 0x10, 0x0, 0x5, 0x4}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000851}, 0x4000001)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_setup(0x6, &(0x7f0000001380)=<r3=>0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
io_submit(r3, 0x3, &(0x7f0000001140)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r4}])
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0xb)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x14)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0)
pipe(&(0x7f0000000140))

6.39607536s ago: executing program 3 (id=271):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_current(r0, &(0x7f000001aa80)=ANY=[], 0xff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x1, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c010000100000030300000000000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000a033000000", @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000000000000000000000330000007f0000010000000000000000000000000000000000000000010000000000000000000000000000005b40000000000000fcffffffffffffff0000000000000000f30d0000000000000000000000000000000010000000000000000000000000000020005d570400000000000000320000000000fe"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, 0x0, 0x0)
ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f00000000c0)={0x0, 0x80600})
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, 0x0, 0x0)
sendto$inet(r7, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0)
unshare(0x40020000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4004, 0x7, &(0x7f0000006680))
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x42)

5.159091753s ago: executing program 1 (id=273):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_current(r0, &(0x7f000001aa80)=ANY=[], 0xff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x1, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c010000100000030300000000000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000a033000000", @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, 0x0, 0x0)
ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f00000000c0)={0x0, 0x80600})
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, 0x0, 0x0)
sendto$inet(r7, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0)
unshare(0x40020000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4004, 0x7, &(0x7f0000006680))
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x42)

5.158825592s ago: executing program 2 (id=274):
r0 = fsopen(&(0x7f00000000c0)='ceph\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000003000000040122000b00000001000000", @ANYRES32, @ANYRES8, @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0x40045108, &(0x7f0000001b80))
setrlimit(0x1, &(0x7f0000000380)={0x1, 0x713})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x42ab00)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r2 = openat$kvm(0xffffff9c, &(0x7f0000000240), 0x20000, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680))
socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x32315258, 0x0, 0x6, [{0x0, 0x1000000}, {0x12, 0xd5a}, {0x4000000}, {0x100}, {0x0, 0x7}, {0x0, 0x9}, {}, {0x0, 0xc}], 0x20}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$uinput(0xffffff9c, &(0x7f0000000080), 0x802, 0x0)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
dup(0xffffffffffffffff)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

4.725535122s ago: executing program 3 (id=276):
r0 = fsopen(&(0x7f00000000c0)='ceph\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000003000000040122000b00000001000000", @ANYRES32, @ANYRES8, @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0x40045108, &(0x7f0000001b80))
setrlimit(0x1, &(0x7f0000000380)={0x1, 0x713})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x42ab00)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r2 = openat$kvm(0xffffff9c, &(0x7f0000000240), 0x20000, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680))
socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x32315258, 0x0, 0x6, [{0x0, 0x1000000}, {0x12, 0xd5a}, {0x4000000}, {0x100}, {0x0, 0x7}, {0x0, 0x9}, {}, {0x0, 0xc}], 0x20}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$uinput(0xffffff9c, &(0x7f0000000080), 0x802, 0x0)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r3)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

4.22780445s ago: executing program 1 (id=277):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300))
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/75, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10)
kexec_load(0x0, 0x0, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
mincore(&(0x7f0000975000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/69)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet6(r5, 0x0, 0x0, 0x11)

3.789503095s ago: executing program 3 (id=279):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300))
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/75, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xffffffffffffff10}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10)
kexec_load(0x0, 0x0, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
mincore(&(0x7f0000975000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/69)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet6(r5, 0x0, 0x0, 0x11)

3.784908993s ago: executing program 2 (id=280):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000300)={0x3})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x21, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r7, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f000000ab00)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000007280)=""/22, 0x16}, {0x0}, {&(0x7f00000072c0)=""/80, 0x50}], 0x5}, 0x5}], 0x1, 0x40000000, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x4001)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0109040000000000140012800b0001006c6f7770616e00000000028008000500", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r9 = io_uring_setup(0x17fb, &(0x7f0000000440)={0x0, 0x0, 0x80, 0x8000})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

3.520497624s ago: executing program 0 (id=281):
r0 = fsopen(&(0x7f00000000c0)='ceph\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000003000000040122000b00000001000000", @ANYRES32, @ANYRES8, @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0x40045108, &(0x7f0000001b80))
setrlimit(0x1, &(0x7f0000000380)={0x1, 0x713})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x42ab00)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r2 = openat$kvm(0xffffff9c, &(0x7f0000000240), 0x20000, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680))
socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x32315258, 0x0, 0x6, [{0x0, 0x1000000}, {0x12, 0xd5a}, {0x4000000}, {0x100}, {0x0, 0x7}, {0x0, 0x9}, {}, {0x0, 0xc}], 0x20}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$uinput(0xffffff9c, &(0x7f0000000080), 0x802, 0x0)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$tty1(0xc, 0x4, 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

2.709843469s ago: executing program 1 (id=282):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000000000c00bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b70500000100001b6a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3efd9af115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b0600000016cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d394d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d2889ac04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc30000000000000000c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20ba82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818709e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec527c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f128ddfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac45f0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38509582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c6d6e7c9d"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000300)={0x3})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x21, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r7, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f000000ab00)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000007280)=""/22, 0x16}, {0x0}, {&(0x7f00000072c0)=""/80, 0x50}], 0x5}, 0x5}], 0x1, 0x40000000, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x4001)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0109040000000000140012800b0001006c6f7770616e00000000028008000500", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r9 = io_uring_setup(0x17fb, &(0x7f0000000440)={0x0, 0x0, 0x80, 0x8000})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

2.592755049s ago: executing program 0 (id=283):
r0 = socket(0x10, 0x3, 0x0)
close_range(r0, 0xffffffffffffffff, 0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58)
r2 = mq_open(&(0x7f00000005c0)='eth0\x00#\x13\xaeu\xe0\xfb\x050*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\x19\xf1\xcce\xab\x80M\xc9\xcf\xaeR\xb69k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3\xff\a\x00\x00\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\aY\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3Cs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\x96{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\x03\x00\x00\x00y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\x8e\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9\xb3\x83\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|c\xf3\x8b\xc2E\x00\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0)
r3 = syz_io_uring_setup(0xd2, &(0x7f0000000880)={0x0, 0xdff9, 0x800, 0x1000}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4e3b947d338dce40, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x1, r1, 0x0})
io_uring_enter(0xffffffffffffffff, 0x3516, 0xc2de, 0x8, 0x0, 0x0)

2.540567019s ago: executing program 0 (id=284):
r0 = syz_open_dev$video(&(0x7f0000000040), 0x9, 0x440600)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0xa, @sdr={0x56544943}})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1007})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = eventfd2(0x1ae, 0x80001)
r5 = eventfd(0x1)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r4, 0xffff, 0x2, r5})
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0x10}, 0x2)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r7, 0x0)
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000480)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r8, 0x0, 0x0}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac000000907800001d12910000000000006f00"/28], 0x0)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='fdinfo/3\x00')
read$FUSE(r9, &(0x7f00000020c0)={0x2020}, 0x354)
fspick(r9, &(0x7f0000000080)='./file0\x00', 0x1)

2.536354822s ago: executing program 3 (id=285):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000300)={0x3})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x21, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r7, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f000000ab00)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000007280)=""/22, 0x16}, {0x0}, {&(0x7f00000072c0)=""/80, 0x50}], 0x5}, 0x5}], 0x1, 0x40000000, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x4001)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0109040000000000140012800b0001006c6f7770616e00000000028008000500", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r9 = io_uring_setup(0x17fb, &(0x7f0000000440)={0x0, 0x0, 0x80, 0x8000})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

2.260220214s ago: executing program 0 (id=286):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)

2.189402829s ago: executing program 0 (id=287):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60b03, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r3, 0xae9a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000540)={'syztnl0\x00', <r4=>0x0, 0x700, 0x10, 0x8, 0x7, {{0xc, 0x4, 0x1, 0x4, 0x30, 0x66, 0x0, 0x40, 0x4, 0x0, @rand_addr=0x64010102, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0xec, 0x1, 0xe, [{@loopback, 0x9}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x4}, {@multicast1, 0x9}]}]}}}}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
gettid()
timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000200)="9118b6663a604482c9e84c61c862cf2bad9a4f438bea5072a5ef5fae9647c256e4fca6dfaf8de97f3d7174c4ab936174177cb92cccbed03b", &(0x7f00000004c0)="32aade6d3d38da0f4b1a5cc2b44d1028013340a15e00701ef338b4b03c092103bdee4bfcdaf1daaec757fe068fd7b14596d0058e20fd504fe23aae840ae1d9c889a22249f393c994be6a20779f3c41444e2d791b16643c9bc5aa301de247c659f29221c110e9be"}}, &(0x7f00000000c0))
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000240)=@arm64={0x64, 0x28, 0x2, '\x00', 0x87})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x17, 0x1000, &(0x7f0000001680)="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"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.262147387s ago: executing program 3 (id=288):
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x3e9, 0x2, 0x70bd28, 0xb, {0x4, 0x0, 0x1, 0x0, 0x8, 0x4, 0x7, 0x10, 0x0, 0x5, 0x4}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000851}, 0x4000001)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_setup(0x6, &(0x7f0000001380)=<r3=>0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
io_submit(r3, 0x3, &(0x7f0000001140)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r4}])
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0xb)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x14)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
pipe(&(0x7f0000000140))

1.259108443s ago: executing program 2 (id=296):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000300)={0x3})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x21, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r7, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f000000ab00)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000007280)=""/22, 0x16}, {0x0}, {&(0x7f00000072c0)=""/80, 0x50}], 0x5}, 0x5}], 0x1, 0x40000000, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x4001)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0109040000000000140012800b0001006c6f7770616e00000000028008000500", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r9 = io_uring_setup(0x17fb, &(0x7f0000000440)={0x0, 0x0, 0x80, 0x8000})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

792.918177ms ago: executing program 1 (id=289):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
socket$inet6_sctp(0xa, 0x1, 0x84)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, &(0x7f00000000c0)="f216d0", 0x3)

318.65668ms ago: executing program 1 (id=290):
r0 = fsopen(&(0x7f00000000c0)='ceph\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000003000000040122000b00000001000000", @ANYRES32, @ANYRES8, @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0x40045108, &(0x7f0000001b80))
setrlimit(0x1, &(0x7f0000000380)={0x1, 0x713})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x42ab00)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r2 = openat$kvm(0xffffff9c, &(0x7f0000000240), 0x20000, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680))
socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x32315258, 0x0, 0x6, [{0x0, 0x1000000}, {0x12, 0xd5a}, {0x4000000}, {0x100}, {0x0, 0x7}, {0x0, 0x9}, {}, {0x0, 0xc}], 0x20}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$uinput(0xffffff9c, &(0x7f0000000080), 0x802, 0x0)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
dup(0xffffffffffffffff)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

225.228417ms ago: executing program 3 (id=291):
r0 = socket(0x10, 0x3, 0x0)
close_range(r0, 0xffffffffffffffff, 0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58)
r2 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
r5 = syz_io_uring_setup(0xd2, &(0x7f0000000880)={0x0, 0xdff9, 0x800, 0x1000, 0x0, 0x0, r2}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4e3b947d338dce40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x1, r1, 0x0})
io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0)

0s ago: executing program 0 (id=292):
r0 = socket(0x10, 0x3, 0x0)
close_range(r0, 0xffffffffffffffff, 0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58)
r2 = mq_open(&(0x7f00000005c0)='eth0\x00#\x13\xaeu\xe0\xfb\x050*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\x19\xf1\xcce\xab\x80M\xc9\xcf\xaeR\xb69k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3\xff\a\x00\x00\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\aY\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3Cs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\x96{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\x03\x00\x00\x00y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\x8e\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9\xb3\x83\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|c\xf3\x8b\xc2E\x00\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0)
r3 = syz_io_uring_setup(0xd2, &(0x7f0000000880)={0x0, 0xdff9, 0x800, 0x1000}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4e3b947d338dce40, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x1, r1, 0x0})
io_uring_enter(0xffffffffffffffff, 0x3516, 0xc2de, 0x8, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:23256' (ED25519) to the list of known hosts.
[   41.322440][ T5901] cgroup: Unknown subsys name 'net'
[   41.487048][ T5901] cgroup: Unknown subsys name 'cpuset'
[   41.490707][ T5901] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.261926][ T5901] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.528715][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.531394][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   45.534373][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   45.537309][ T5944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   45.540001][ T5949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.540119][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   45.542941][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.545635][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   45.547063][ T5949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.548735][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.550147][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.551200][ T5951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.554110][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.555554][ T5949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.555828][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.561286][ T5951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.562921][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.565154][ T5951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.567313][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.570219][ T5951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.859877][ T5935] chnl_net:caif_netlink_parms(): no params data found
[   45.876623][ T5934] chnl_net:caif_netlink_parms(): no params data found
[   45.901803][ T5946] chnl_net:caif_netlink_parms(): no params data found
[   45.970090][ T5933] chnl_net:caif_netlink_parms(): no params data found
[   46.123204][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.126316][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.128998][ T5935] bridge_slave_0: entered allmulticast mode
[   46.131640][ T5935] bridge_slave_0: entered promiscuous mode
[   46.150769][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.153567][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.156609][ T5946] bridge_slave_0: entered allmulticast mode
[   46.159837][ T5946] bridge_slave_0: entered promiscuous mode
[   46.176668][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.179101][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.181644][ T5934] bridge_slave_0: entered allmulticast mode
[   46.186117][ T5934] bridge_slave_0: entered promiscuous mode
[   46.189244][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.191559][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.194097][ T5935] bridge_slave_1: entered allmulticast mode
[   46.196946][ T5935] bridge_slave_1: entered promiscuous mode
[   46.213280][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.216776][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.219091][ T5946] bridge_slave_1: entered allmulticast mode
[   46.221611][ T5946] bridge_slave_1: entered promiscuous mode
[   46.236922][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.239150][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.241405][ T5934] bridge_slave_1: entered allmulticast mode
[   46.244407][ T5934] bridge_slave_1: entered promiscuous mode
[   46.260279][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.262564][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.265026][ T5933] bridge_slave_0: entered allmulticast mode
[   46.267649][ T5933] bridge_slave_0: entered promiscuous mode
[   46.271384][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.273639][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.276359][ T5933] bridge_slave_1: entered allmulticast mode
[   46.279141][ T5933] bridge_slave_1: entered promiscuous mode
[   46.339312][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.357477][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.378092][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.382220][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.387024][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.390922][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.395036][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.438387][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.475002][ T5946] team0: Port device team_slave_0 added
[   46.513626][ T5933] team0: Port device team_slave_0 added
[   46.516830][ T5946] team0: Port device team_slave_1 added
[   46.533409][ T5935] team0: Port device team_slave_0 added
[   46.537491][ T5933] team0: Port device team_slave_1 added
[   46.554427][ T5934] team0: Port device team_slave_0 added
[   46.558909][ T5935] team0: Port device team_slave_1 added
[   46.594594][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.596755][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.605345][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.611165][ T5934] team0: Port device team_slave_1 added
[   46.640125][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.642307][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.651444][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.682895][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.686202][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.695833][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.702245][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.705412][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.715826][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.745922][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.748269][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.756314][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.787036][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.789255][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.800679][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.806169][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.808281][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.816207][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.833883][ T5946] hsr_slave_0: entered promiscuous mode
[   46.836692][ T5946] hsr_slave_1: entered promiscuous mode
[   46.839290][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.841500][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.851021][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.929713][ T5933] hsr_slave_0: entered promiscuous mode
[   46.932969][ T5933] hsr_slave_1: entered promiscuous mode
[   46.936195][ T5933] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.939461][ T5933] Cannot create hsr debugfs directory
[   47.005726][ T5935] hsr_slave_0: entered promiscuous mode
[   47.007866][ T5935] hsr_slave_1: entered promiscuous mode
[   47.009869][ T5935] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.012081][ T5935] Cannot create hsr debugfs directory
[   47.045264][ T5934] hsr_slave_0: entered promiscuous mode
[   47.047561][ T5934] hsr_slave_1: entered promiscuous mode
[   47.049656][ T5934] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.051944][ T5934] Cannot create hsr debugfs directory
[   47.375919][ T5933] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.383628][ T5933] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.390199][ T5933] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.399803][ T5933] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.429342][ T5934] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.435978][ T5934] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.441858][ T5934] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.449598][ T5934] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.489309][ T5935] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.493569][ T5935] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.499001][ T5935] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.502783][ T5935] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.540941][ T5946] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   47.546654][ T5946] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   47.558361][ T5946] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   47.562243][ T5946] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   47.565090][   T67] Bluetooth: hci1: command tx timeout
[   47.565098][ T5944] Bluetooth: hci3: command tx timeout
[   47.609509][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.644982][   T67] Bluetooth: hci0: command tx timeout
[   47.645029][ T5944] Bluetooth: hci2: command tx timeout
[   47.657308][ T5933] 8021q: adding VLAN 0 to HW filter on device team0
[   47.665063][ T1222] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.667586][ T1222] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.686836][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.689179][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.695726][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.702471][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.717349][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.726115][ T5946] 8021q: adding VLAN 0 to HW filter on device team0
[   47.733805][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.736032][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.741537][ T5934] 8021q: adding VLAN 0 to HW filter on device team0
[   47.749130][ T5935] 8021q: adding VLAN 0 to HW filter on device team0
[   47.757716][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.760208][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.777589][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.779755][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.782847][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.785065][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.789673][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.791873][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.809127][   T99] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.811425][   T99] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.946878][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.967094][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.977081][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.991750][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.003129][ T5933] veth0_vlan: entered promiscuous mode
[   48.025407][ T5933] veth1_vlan: entered promiscuous mode
[   48.043201][ T5935] veth0_vlan: entered promiscuous mode
[   48.048571][ T5934] veth0_vlan: entered promiscuous mode
[   48.056013][ T5934] veth1_vlan: entered promiscuous mode
[   48.060180][ T5935] veth1_vlan: entered promiscuous mode
[   48.067827][ T5946] veth0_vlan: entered promiscuous mode
[   48.075976][ T5946] veth1_vlan: entered promiscuous mode
[   48.083779][ T5933] veth0_macvtap: entered promiscuous mode
[   48.090424][ T5933] veth1_macvtap: entered promiscuous mode
[   48.109381][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.117049][ T5934] veth0_macvtap: entered promiscuous mode
[   48.125933][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.129642][ T5934] veth1_macvtap: entered promiscuous mode
[   48.138744][ T5933] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.141208][ T5933] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.143577][ T5933] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.146406][ T5933] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.156796][ T5946] veth0_macvtap: entered promiscuous mode
[   48.162448][ T5935] veth0_macvtap: entered promiscuous mode
[   48.169665][ T5935] veth1_macvtap: entered promiscuous mode
[   48.173438][ T5946] veth1_macvtap: entered promiscuous mode
[   48.186247][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.190613][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.195670][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.200767][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.205301][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.210514][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.223994][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.228749][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.232485][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.236809][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.240717][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.244026][ T5934] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.248326][ T5934] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.251889][ T5934] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.255601][ T5934] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.274694][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.278630][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.282196][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.286595][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.291663][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.307957][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.308418][ T5935] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.311151][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.314897][ T5935] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.319491][ T5935] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.322217][ T5935] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.331674][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.336179][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.340115][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.343662][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.346907][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.350079][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.354576][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.366158][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.369313][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.372310][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.375734][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.378659][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.382027][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.386114][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.394040][ T5946] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.396801][ T5946] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.399454][ T5946] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.402160][ T5946] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.408785][   T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.411532][   T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.427160][   T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.429617][   T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.448131][   T99] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.450642][   T99] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.462250][ T5933] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.468496][   T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.471039][   T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.491054][   T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.494066][   T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.500297][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.504490][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.532964][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.536123][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.592478][ T6005] =======================================================
[   48.592478][ T6005] WARNING: The mand mount option has been deprecated and
[   48.592478][ T6005]          and is ignored by this kernel. Remove the mand
[   48.592478][ T6005]          option from the mount to silence this warning.
[   48.592478][ T6005] =======================================================
[   48.644777][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[   48.648389][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   48.651434][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   48.814771][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   48.839362][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   48.959651][ T6013] libceph: resolve '0' (ret=-3): failed
[   49.093254][ T6015] syzkaller0: entered promiscuous mode
[   49.096763][ T6015] syzkaller0: entered allmulticast mode
[   49.198594][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5'.
[   49.412284][ T5977] libceph: connect (1)[c::]:6789 error -101
[   49.428709][ T5977] libceph: mon0 (1)[c::]:6789 connect error
[   49.434338][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   49.644843][ T5944] Bluetooth: hci3: command tx timeout
[   49.645083][   T67] Bluetooth: hci1: command tx timeout
[   49.700541][ T5977] libceph: connect (1)[c::]:6789 error -101
[   49.702852][ T5977] libceph: mon0 (1)[c::]:6789 connect error
[   49.724926][   T67] Bluetooth: hci0: command tx timeout
[   49.725545][ T5944] Bluetooth: hci2: command tx timeout
[   49.846672][ T5997] IPVS: starting estimator thread 0...
[   49.889127][ T6010] ceph: No mds server is up or the cluster is laggy
[   49.956596][ T6025] IPVS: using max 48 ests per chain, 115200 per kthread
[   50.678551][ T6023] tipc: Started in network mode
[   50.680144][ T6023] tipc: Node identity ac1414aa, cluster identity 4711
[   50.682688][ T6023] tipc: Enabled bearer <udp:s>, priority 10
[   50.976603][ T6043] syzkaller0: entered promiscuous mode
[   50.978394][ T6043] syzkaller0: entered allmulticast mode
[   51.072954][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'.
[   51.355820][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   51.358936][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   51.361806][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   51.364762][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   51.674710][   T29] tipc: Node number set to 2886997162
[   51.725470][ T5944] Bluetooth: hci1: command tx timeout
[   51.735070][ T5944] Bluetooth: hci3: command tx timeout
[   51.804543][ T5944] Bluetooth: hci0: command tx timeout
[   51.806950][   T67] Bluetooth: hci2: command tx timeout
[   52.171253][ T5944] Bluetooth: Unexpected start frame (len 16)
[   52.173149][ T6080] syz.1.18 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   52.343596][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15'.
[   53.029805][ T6074] syzkaller0: entered promiscuous mode
[   53.032223][ T6074] syzkaller0: entered allmulticast mode
[   53.771991][ T6129] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   53.804595][ T5944] Bluetooth: hci3: command tx timeout
[   53.806643][   T67] Bluetooth: hci1: command tx timeout
[   53.884416][ T5944] Bluetooth: hci0: command tx timeout
[   53.886655][ T5944] Bluetooth: hci2: command tx timeout
[   54.029673][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'.
[   55.011068][ T6140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'.
[   56.128451][ T6161] could not open pipe file descriptor
[   56.324438][   T63] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   56.514271][   T63] usb 5-1: Using ep0 maxpacket: 8
[   56.523134][   T63] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[   56.525628][   T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   56.529187][   T63] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   56.532977][   T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   56.539206][   T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   56.547540][   T63] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[   56.549868][   T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   56.553283][   T63] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   56.564330][   T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   56.568221][   T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   56.574729][   T63] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[   56.577054][   T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   56.584332][   T63] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   56.588050][   T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   56.594303][   T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   56.600930][   T63] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   56.603765][   T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.609130][   T63] usb 5-1: Product: syz
[   56.610473][   T63] usb 5-1: Manufacturer: syz
[   56.611933][   T63] usb 5-1: SerialNumber: syz
[   56.670515][ T6170] syzkaller0: entered promiscuous mode
[   56.672868][ T6170] syzkaller0: entered allmulticast mode
[   56.698354][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'.
[   56.749559][ T6174] warning: `syz.3.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   56.867013][   T63] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[   56.875594][ T6176] could not open pipe file descriptor
[   56.881781][   T63] usb 5-1: USB disconnect, device number 2
[   57.295811][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34'.
[   59.257720][    C1] vcan0: j1939_tp_rxtimer: 0xffff888069c83800: rx timeout, send abort
[   59.264288][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888069c83800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   59.655306][ T5938] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   59.814498][ T5938] usb 5-1: Using ep0 maxpacket: 32
[   59.826944][ T5938] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[   59.830771][ T5938] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   59.844698][ T5938] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   59.861225][ T5938] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   59.868641][ T5938] usb 5-1: config 0 interface 0 has no altsetting 0
[   59.873781][ T5938] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   59.877946][ T5938] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   59.881642][ T5938] usb 5-1: Product: syz
[   59.883345][ T5938] usb 5-1: Manufacturer: syz
[   59.885594][ T5938] usb 5-1: SerialNumber: syz
[   59.894905][ T5938] usb 5-1: config 0 descriptor??
[   59.900086][ T5938] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   59.906649][ T5938] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   60.729890][   T63] usb 5-1: USB disconnect, device number 3
[   60.735965][   T63] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[   62.594244][ T6256] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[   62.766370][ T6262] syzkaller0: entered promiscuous mode
[   62.768185][ T6262] syzkaller0: entered allmulticast mode
[   62.916102][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52'.
[   62.925006][ T6257] qrtr: Invalid version 0
[   63.334312][   T57] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   63.485792][   T57] usb 6-1: Using ep0 maxpacket: 8
[   63.489598][   T57] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   63.493728][   T57] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   63.498163][   T57] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   63.502734][   T57] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   63.508962][   T57] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   63.512751][   T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.725628][   T57] usb 6-1: GET_CAPABILITIES returned 0
[   63.727266][   T57] usbtmc 6-1:16.0: can't read capabilities
[   63.739636][ T6277] could not open pipe file descriptor
[   63.952733][ T5977] usb 6-1: USB disconnect, device number 2
[   64.020053][ T6287] block device autoloading is deprecated and will be removed.
[   64.026910][ T6286] md: md2 stopped.
[   64.324347][ T5976] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   64.496093][ T5976] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   64.500588][ T5976] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   64.505701][ T5976] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   64.509281][ T5976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.515863][ T6290] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   64.523138][ T5976] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[   64.604799][ T5944] Bluetooth: Unexpected start frame (len 16)
[   64.722226][ T6302] netlink: 'syz.1.61': attribute type 4 has an invalid length.
[   64.759631][ T6302] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   64.816960][ T6304] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.852929][ T6305] netlink: 'syz.3.63': attribute type 10 has an invalid length.
[   64.855430][ T6305] netlink: 40 bytes leftover after parsing attributes in process `syz.3.63'.
[   64.864733][ T6305] team0: Failed to send port change of device geneve0 via netlink (err -105)
[   64.867656][ T6305] team0: Failed to send options change via netlink (err -105)
[   64.870020][ T6305] team0: Port device geneve0 added
[   64.966409][ T6304] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.051124][ T6304] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.125782][ T6304] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.205656][ T6304] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.212820][ T6304] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.220204][ T6304] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.226749][ T6304] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.495745][ T6309] syzkaller0: entered promiscuous mode
[   65.497633][ T6309] syzkaller0: entered allmulticast mode
[   65.525502][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'.
[   66.549652][ T5944] Bluetooth: Unexpected start frame (len 16)
[   67.107601][ T5944] Bluetooth: Unexpected start frame (len 16)
[   67.188402][   T57] usb 5-1: USB disconnect, device number 4
[   67.584319][   T57] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   67.735683][   T57] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   67.740066][   T57] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   67.743251][   T57] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   67.746193][   T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.751768][ T6330] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   67.757296][   T57] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[   68.570451][ T5944] Bluetooth: Unexpected start frame (len 16)
[   69.284159][ T5944] Bluetooth: Unexpected start frame (len 16)
[   69.645949][ T6358] sit0: entered promiscuous mode
[   69.650266][ T6358] netlink: 'syz.1.76': attribute type 1 has an invalid length.
[   69.652639][ T6358] netlink: 1 bytes leftover after parsing attributes in process `syz.1.76'.
[   69.666694][ T6358] ubi31: attaching mtd0
[   69.670240][ T6358] ubi31: scanning is finished
[   69.671781][ T6358] ubi31: empty MTD device detected
[   69.990078][ T6358] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[   69.992636][ T6358] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[   69.995892][ T6358] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[   69.998075][ T6358] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[   70.000390][ T6358] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[   70.002553][ T6358] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[   70.005124][ T6358] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1218755596
[   70.008223][ T6358] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[   70.011632][ T6364] ubi31: background thread "ubi_bgt31d" started, PID 6364
[   70.199898][ T6366] could not open pipe file descriptor
[   70.330713][   T57] usb 5-1: USB disconnect, device number 5
[   70.398345][ T5944] Bluetooth: Unexpected start frame (len 16)
[   70.486923][ T6376] syzkaller0: entered promiscuous mode
[   70.488746][ T6376] syzkaller0: entered allmulticast mode
[   70.541059][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'.
[   70.861911][ T1416] ieee802154 phy0 wpan0: encryption failed: -22
[   70.864649][ T1416] ieee802154 phy1 wpan1: encryption failed: -22
[   71.374309][ T5944] Bluetooth: Unexpected start frame (len 16)
[   72.216857][ T6399] sit0: entered promiscuous mode
[   72.220897][ T6399] netlink: 'syz.3.85': attribute type 1 has an invalid length.
[   72.223346][ T6399] netlink: 1 bytes leftover after parsing attributes in process `syz.3.85'.
[   72.243770][ T6399] ubi: mtd0 is already attached to ubi31
[   72.792592][ T5944] Bluetooth: Unexpected start frame (len 16)
[   72.814508][ T6408] could not open pipe file descriptor
[   73.813215][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'.
[   74.767176][   T57] libceph: connect (1)[c::]:6789 error -101
[   74.769113][   T57] libceph: mon0 (1)[c::]:6789 connect error
[   75.024520][   T57] libceph: connect (1)[c::]:6789 error -101
[   75.026597][   T57] libceph: mon0 (1)[c::]:6789 connect error
[   75.103242][  T834] IPVS: starting estimator thread 0...
[   75.189314][ T6437] tipc: Started in network mode
[   75.190971][ T6437] tipc: Node identity ac1414aa, cluster identity 4711
[   75.193847][ T6437] tipc: Enabled bearer <udp:s>, priority 10
[   75.204348][ T6448] IPVS: using max 48 ests per chain, 115200 per kthread
[   75.499537][ T6444] ceph: No mds server is up or the cluster is laggy
[   75.697417][ T5944] Bluetooth: Unexpected start frame (len 16)
[   75.839031][ T6457] syzkaller0: entered promiscuous mode
[   75.840791][ T6457] syzkaller0: entered allmulticast mode
[   76.151067][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'.
[   76.315832][   T63] tipc: Node number set to 2886997162
[   77.221700][ T5944] Bluetooth: Unexpected start frame (len 16)
[   77.429853][ T6487] loop6: detected capacity change from 0 to 524287999
[   77.976601][   T63] libceph: connect (1)[c::]:6789 error -101
[   77.979316][   T63] libceph: mon0 (1)[c::]:6789 connect error
[   78.236211][ T5998] libceph: connect (1)[c::]:6789 error -101
[   78.238896][ T5998] libceph: mon0 (1)[c::]:6789 connect error
[   78.745346][ T5998] libceph: connect (1)[c::]:6789 error -101
[   78.747324][ T5998] libceph: mon0 (1)[c::]:6789 connect error
[   78.883687][ T6491] ceph: No mds server is up or the cluster is laggy
[   80.594335][ T5998] libceph: connect (1)[c::]:6789 error -101
[   80.596338][ T5998] libceph: mon0 (1)[c::]:6789 connect error
[   80.856435][   T63] libceph: connect (1)[c::]:6789 error -101
[   80.858715][   T63] libceph: mon0 (1)[c::]:6789 connect error
[   81.366301][   T63] libceph: connect (1)[c::]:6789 error -101
[   81.368930][   T63] libceph: mon0 (1)[c::]:6789 connect error
[   81.388829][ T6535] ceph: No mds server is up or the cluster is laggy
[   81.411865][ T1330] cfg80211: failed to load regulatory.db
[   81.690205][ T6554] libceph: resolve '0' (ret=-3): failed
[   82.017103][ T6555] syzkaller0: entered promiscuous mode
[   82.019027][ T6555] syzkaller0: entered allmulticast mode
[   82.073349][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'.
[   84.129409][ T5944] Bluetooth: Unexpected start frame (len 16)
[   84.163126][ T5944] Bluetooth: Unexpected start frame (len 16)
[   84.271568][ T6570] syzkaller0: entered promiscuous mode
[   84.273603][ T6570] syzkaller0: entered allmulticast mode
[   84.328587][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.127'.
[   85.246899][ T1330] libceph: connect (1)[c::]:6789 error -101
[   85.248910][ T1330] libceph: mon0 (1)[c::]:6789 connect error
[   85.514507][ T5977] libceph: connect (1)[c::]:6789 error -101
[   85.516711][ T5977] libceph: mon0 (1)[c::]:6789 connect error
[   85.554270][ T1330] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   85.622062][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.131'.
[   85.708655][ T6593] syzkaller0: entered promiscuous mode
[   85.711127][ T6593] syzkaller0: entered allmulticast mode
[   85.718875][ T1330] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   85.725118][ T1330] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   85.729310][ T1330] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   85.733130][ T1330] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.741500][ T6590] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   85.747228][ T1330] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[   86.037728][ T6584] ceph: No mds server is up or the cluster is laggy
[   86.235350][ T1330] libceph: connect (1)[c::]:6789 error -101
[   86.237349][ T1330] libceph: mon0 (1)[c::]:6789 connect error
[   87.406908][ T6624] libceph: resolve '0' (ret=-3): failed
[   89.150289][   T63] usb 8-1: USB disconnect, device number 2
[   89.233352][  T834] libceph: connect (1)[c::]:6789 error -101
[   89.235368][  T834] libceph: mon0 (1)[c::]:6789 connect error
[   89.283625][ T6657] syzkaller0: entered promiscuous mode
[   89.286138][ T6657] syzkaller0: entered allmulticast mode
[   89.310932][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.140'.
[   89.496769][  T834] libceph: connect (1)[c::]:6789 error -101
[   89.534835][  T834] libceph: mon0 (1)[c::]:6789 connect error
[   90.033052][ T6659] ceph: No mds server is up or the cluster is laggy
[   90.188381][  T834] libceph: connect (1)[c::]:6789 error -101
[   90.190464][  T834] libceph: mon0 (1)[c::]:6789 connect error
[   91.404319][  T834] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   91.549728][ T6686] sit0: entered promiscuous mode
[   91.555923][ T6686] netlink: 'syz.2.145': attribute type 1 has an invalid length.
[   91.559139][ T6686] netlink: 1 bytes leftover after parsing attributes in process `syz.2.145'.
[   91.644966][  T834] usb 5-1: Using ep0 maxpacket: 8
[   91.650428][  T834] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[   91.656593][  T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   91.661402][  T834] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   91.673768][  T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   91.678465][  T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   91.685353][  T834] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[   91.689269][  T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   91.694114][  T834] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   91.699811][  T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   91.765242][  T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   91.771601][  T834] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[   91.775313][  T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   91.779891][  T834] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   91.785040][  T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   91.789663][  T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   91.806533][  T834] usb 5-1: string descriptor 0 read error: -22
[   91.809529][  T834] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   91.813339][  T834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.914488][  T834] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[   92.125720][ T6711] libceph: resolve '0' (ret=-3): failed
[   92.252224][   T63] usb 5-1: USB disconnect, device number 6
[   92.274685][ T6705] libceph: resolve '0' (ret=-3): failed
[   92.869920][ T6720] syzkaller0: entered promiscuous mode
[   92.871707][ T6720] syzkaller0: entered allmulticast mode
[   92.919760][ T6720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'.
[   94.281759][ T6726] netlink: 'syz.2.157': attribute type 1 has an invalid length.
[   94.284131][ T6726] netlink: 1 bytes leftover after parsing attributes in process `syz.2.157'.
[   94.483901][ T6733] syzkaller0: entered promiscuous mode
[   94.485870][ T6733] syzkaller0: entered allmulticast mode
[   94.501661][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.158'.
[   96.944748][ T1330] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   97.224488][ T1330] usb 6-1: Using ep0 maxpacket: 8
[   97.235186][ T1330] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[   97.237529][ T1330] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   97.241721][ T1330] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   97.246412][ T1330] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   97.249953][ T1330] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   97.255534][ T1330] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[   97.259075][ T1330] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   97.259097][ T1330] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   97.267935][ T1330] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   97.271351][ T1330] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   97.276481][ T1330] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[   97.278811][ T1330] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   97.283098][ T1330] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   97.290271][ T1330] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   97.293576][ T1330] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   97.299805][ T1330] usb 6-1: string descriptor 0 read error: -22
[   97.301861][ T1330] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   97.304854][ T1330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.320001][ T1330] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[   97.641739][ T6763] libceph: resolve '0' (ret=-3): failed
[   97.733503][ T1330] usb 6-1: USB disconnect, device number 3
[   98.065562][ T6774] sit0: entered promiscuous mode
[   98.069406][ T6774] netlink: 'syz.0.168': attribute type 1 has an invalid length.
[   98.071959][ T6774] netlink: 1 bytes leftover after parsing attributes in process `syz.0.168'.
[   98.077672][ T6774] ubi: mtd0 is already attached to ubi31
[   98.694340][   T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   98.865113][   T24] usb 7-1: Using ep0 maxpacket: 32
[   98.872073][   T24] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[   98.875096][   T24] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   98.882148][   T24] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   98.885864][   T24] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   98.889963][   T24] usb 7-1: config 0 interface 0 has no altsetting 0
[   98.894024][   T24] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   98.897532][   T24] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   98.900134][   T24] usb 7-1: Product: syz
[   98.901447][   T24] usb 7-1: Manufacturer: syz
[   98.904347][   T24] usb 7-1: SerialNumber: syz
[   98.907775][   T24] usb 7-1: config 0 descriptor??
[   98.916023][   T24] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   98.921971][   T24] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   99.026014][ T6796] syzkaller0: entered promiscuous mode
[   99.026339][ T6796] syzkaller0: entered allmulticast mode
[   99.188723][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.174'.
[   99.239504][ T1330] libceph: connect (1)[c::]:6789 error -101
[   99.243380][ T1330] libceph: mon0 (1)[c::]:6789 connect error
[   99.566774][ T5976] libceph: connect (1)[c::]:6789 error -101
[   99.571404][ T5976] libceph: mon0 (1)[c::]:6789 connect error
[   99.585645][   T63] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   99.735848][   T63] usb 5-1: Using ep0 maxpacket: 8
[   99.741567][   T63] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[   99.743902][   T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   99.750333][   T63] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   99.756799][   T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   99.764769][   T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   99.777354][   T63] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[   99.779693][   T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   99.783106][   T63] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   99.787364][   T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   99.790752][   T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   99.795027][   T63] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[   99.797373][   T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   99.797537][ T6797] ceph: No mds server is up or the cluster is laggy
[   99.812030][   T63] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   99.817924][   T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   99.821316][   T63] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   99.828348][   T63] usb 5-1: string descriptor 0 read error: -22
[   99.832768][   T63] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   99.835748][   T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.854744][   T63] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux1
[  100.725144][   T63] usb 5-1: USB disconnect, device number 7
[  101.186015][ T5976] usb 7-1: USB disconnect, device number 2
[  101.186175][    C1] ldusb 7-1:0.0: usb_submit_urb failed (-19)
[  101.228195][ T6816] netlink: 'syz.2.178': attribute type 1 has an invalid length.
[  101.231367][ T6816] netlink: 1 bytes leftover after parsing attributes in process `syz.2.178'.
[  101.236233][ T6816] ubi: mtd0 is already attached to ubi31
[  101.299161][ T6818] could not open pipe file descriptor
[  101.360614][ T6821] could not open pipe file descriptor
[  101.884438][ T6837] libceph: resolve '0' (ret=-3): failed
[  101.984272][ T5977] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  102.134387][ T5977] usb 8-1: Using ep0 maxpacket: 8
[  102.138688][ T5977] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  102.142625][ T5977] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  102.146815][ T5977] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  102.150824][ T5977] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  102.155650][ T5977] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  102.159335][ T5977] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.342989][ T5976] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  102.366978][ T5977] usb 8-1: GET_CAPABILITIES returned 0
[  102.368823][ T5977] usbtmc 8-1:16.0: can't read capabilities
[  102.417952][ T6840] syzkaller0: entered promiscuous mode
[  102.419814][ T6840] syzkaller0: entered allmulticast mode
[  102.436923][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'.
[  102.569863][ T5997] usb 8-1: USB disconnect, device number 3
[  102.634017][ T6846] ubi: mtd0 is already attached to ubi31
[  102.693639][ T6847] libceph: resolve '0' (ret=-3): failed
[  103.246603][ T6845] netlink: 'syz.1.187': attribute type 1 has an invalid length.
[  103.249055][ T6845] netlink: 1 bytes leftover after parsing attributes in process `syz.1.187'.
[  103.351929][ T6851] could not open pipe file descriptor
[  103.415715][ T6857] could not open pipe file descriptor
[  103.594272][   T63] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  103.694288][ T5997] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  103.706992][ T6863] libceph: resolve '0' (ret=-3): failed
[  103.764250][   T63] usb 6-1: Using ep0 maxpacket: 32
[  103.767868][   T63] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  103.770406][   T63] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  103.773708][   T63] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  103.777133][   T63] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  103.781064][   T63] usb 6-1: config 0 interface 0 has no altsetting 0
[  103.792589][   T63] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  103.795390][   T63] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  103.797931][   T63] usb 6-1: Product: syz
[  103.799221][   T63] usb 6-1: Manufacturer: syz
[  103.800670][   T63] usb 6-1: SerialNumber: syz
[  103.803539][   T63] usb 6-1: config 0 descriptor??
[  103.806899][   T63] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  103.811063][   T63] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  103.904302][ T5997] usb 7-1: Using ep0 maxpacket: 32
[  103.919265][ T5997] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  103.922164][ T5997] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  103.925885][ T5997] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  103.929221][ T5997] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  103.933181][ T5997] usb 7-1: config 0 interface 0 has no altsetting 0
[  103.938114][ T5997] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  103.940998][ T5997] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  103.943597][ T5997] usb 7-1: Product: syz
[  103.945028][ T5997] usb 7-1: Manufacturer: syz
[  103.946522][ T5997] usb 7-1: SerialNumber: syz
[  103.950850][ T5997] usb 7-1: config 0 descriptor??
[  103.954025][ T5997] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  103.958370][ T5997] ldusb 7-1:0.0: LD USB Device #1 now attached to major 180 minor 1
[  104.267959][   T34] usb 7-1: USB disconnect, device number 3
[  104.272761][   T34] ldusb 7-1:0.0: LD USB Device #1 now disconnected
[  104.467808][   T63] usb 6-1: USB disconnect, device number 4
[  104.472248][   T63] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  104.859656][ T6878] netlink: 'syz.3.196': attribute type 1 has an invalid length.
[  104.862049][ T6878] netlink: 1 bytes leftover after parsing attributes in process `syz.3.196'.
[  104.866661][ T6878] ubi: mtd0 is already attached to ubi31
[  105.044259][   T63] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  105.126223][ T6885] syzkaller0: entered promiscuous mode
[  105.128025][ T6885] syzkaller0: entered allmulticast mode
[  105.150630][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'.
[  105.234387][   T63] usb 7-1: Using ep0 maxpacket: 8
[  105.237397][   T63] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  105.244424][   T63] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  105.247866][   T63] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  105.251428][   T63] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  105.254929][   T63] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  105.261419][   T63] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  105.264863][   T63] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  105.268461][   T63] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  105.271994][   T63] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  105.275411][   T63] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  105.287079][   T63] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  105.289318][   T63] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  105.292613][   T63] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  105.296262][   T63] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  105.299494][   T63] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  105.305150][   T63] usb 7-1: string descriptor 0 read error: -22
[  105.307056][   T63] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  105.309746][   T63] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.319383][   T63] adutux 7-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  105.714981][   T34] usb 7-1: USB disconnect, device number 4
[  107.885746][ T5938] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  108.064311][ T5938] usb 5-1: Using ep0 maxpacket: 32
[  108.067189][ T5938] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  108.069996][ T5938] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  108.073715][ T5938] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  108.077689][ T5938] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  108.082296][ T5938] usb 5-1: config 0 interface 0 has no altsetting 0
[  108.086409][ T5938] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  108.089347][ T5938] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  108.092209][ T5938] usb 5-1: Product: syz
[  108.093733][ T5938] usb 5-1: Manufacturer: syz
[  108.095324][ T5938] usb 5-1: SerialNumber: syz
[  108.098277][ T5938] usb 5-1: config 0 descriptor??
[  108.101648][ T5938] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  108.106113][ T5938] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  108.458810][ T5977] libceph: connect (1)[c::]:6789 error -101
[  108.463629][ T5977] libceph: mon0 (1)[c::]:6789 connect error
[  109.015894][ T5977] libceph: connect (1)[c::]:6789 error -101
[  109.017819][ T5977] libceph: mon0 (1)[c::]:6789 connect error
[  109.185736][ T6941] ceph: No mds server is up or the cluster is laggy
[  109.226107][ T6946] syzkaller0: entered promiscuous mode
[  109.227918][ T6946] syzkaller0: entered allmulticast mode
[  109.241747][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'.
[  109.482800][ T5938] usb 5-1: USB disconnect, device number 8
[  109.490630][ T5938] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  110.226353][ T5944] Bluetooth: Unexpected start frame (len 16)
[  111.006275][ T6979] libceph: resolve '0' (ret=-3): failed
[  111.555144][ T6998] libceph: resolve '0' (ret=-3): failed
[  111.924266][   T34] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  112.007977][ T5976] libceph: connect (1)[c::]:6789 error -101
[  112.010667][ T5976] libceph: mon0 (1)[c::]:6789 connect error
[  112.074321][   T34] usb 8-1: Using ep0 maxpacket: 8
[  112.080142][   T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  112.083175][   T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  112.086932][   T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  112.090195][   T34] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  112.095271][   T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  112.098151][   T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.276598][ T5976] libceph: connect (1)[c::]:6789 error -101
[  112.300746][ T5976] libceph: mon0 (1)[c::]:6789 connect error
[  112.304629][   T34] usb 8-1: usb_control_msg returned -71
[  112.306437][   T34] usbtmc 8-1:16.0: can't read capabilities
[  112.330546][   T34] usb 8-1: USB disconnect, device number 4
[  112.870827][ T5976] libceph: connect (1)[c::]:6789 error -101
[  112.879079][ T5976] libceph: mon0 (1)[c::]:6789 connect error
[  113.016317][ T7017] ceph: No mds server is up or the cluster is laggy
[  113.204120][ T5944] Bluetooth: Unexpected start frame (len 16)
[  113.474362][   T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  113.624377][   T24] usb 7-1: Using ep0 maxpacket: 8
[  113.628919][   T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  113.632256][   T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  113.635673][   T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  113.638819][   T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  113.642940][   T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  113.647068][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.857122][   T24] usb 7-1: GET_CAPABILITIES returned 0
[  113.859272][ T5976] libceph: connect (1)[c::]:6789 error -101
[  113.859410][   T24] usbtmc 7-1:16.0: can't read capabilities
[  113.861261][ T5976] libceph: mon0 (1)[c::]:6789 connect error
[  114.061510][ T5938] usb 7-1: USB disconnect, device number 5
[  114.124685][ T1330] libceph: connect (1)[c::]:6789 error -101
[  114.127525][ T7048] ceph: No mds server is up or the cluster is laggy
[  114.129838][ T1330] libceph: mon0 (1)[c::]:6789 connect error
[  114.311840][ T7059] libceph: resolve '0' (ret=-3): failed
[  114.393934][ T1330] libceph: connect (1)[c::]:6789 error -101
[  114.402927][ T1330] libceph: mon0 (1)[c::]:6789 connect error
[  114.679576][ T1330] libceph: connect (1)[c::]:6789 error -101
[  114.681190][ T5944] Bluetooth: Unexpected start frame (len 16)
[  114.691087][ T1330] libceph: mon0 (1)[c::]:6789 connect error
[  115.229635][ T1330] libceph: connect (1)[c::]:6789 error -101
[  115.234157][ T1330] libceph: mon0 (1)[c::]:6789 connect error
[  115.346271][ T7060] ceph: No mds server is up or the cluster is laggy
[  115.394339][   T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  115.484416][ T5944] Bluetooth: Unexpected start frame (len 16)
[  115.544746][   T24] usb 5-1: Using ep0 maxpacket: 8
[  115.547596][   T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  115.550543][   T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  115.553464][   T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  115.556529][   T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  115.560331][   T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  115.563067][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.770369][   T24] usb 5-1: usb_control_msg returned -71
[  115.772545][   T24] usbtmc 5-1:16.0: can't read capabilities
[  115.777767][   T24] usb 5-1: USB disconnect, device number 9
[  115.914248][   T63] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  116.065663][   T63] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  116.070031][   T63] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  116.073629][   T63] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  116.076557][   T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.081482][ T7083] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  116.085324][   T63] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  116.460403][ T5944] Bluetooth: Unexpected start frame (len 16)
[  117.421318][ T7100] could not open pipe file descriptor
[  117.935579][   T63] libceph: connect (1)[c::]:6789 error -101
[  117.938346][   T63] libceph: mon0 (1)[c::]:6789 connect error
[  118.195477][   T24] libceph: connect (1)[c::]:6789 error -101
[  118.197516][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  118.394303][   T63] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  118.554353][   T63] usb 5-1: Using ep0 maxpacket: 8
[  118.558225][   T63] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  118.561379][   T63] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  118.565061][   T63] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  118.568094][   T63] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  118.572172][   T63] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  118.575877][   T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.676058][   T34] usb 7-1: USB disconnect, device number 6
[  118.704866][ T5998] libceph: connect (1)[c::]:6789 error -101
[  118.710833][ T5998] libceph: mon0 (1)[c::]:6789 connect error
[  118.784569][   T63] usb 5-1: usb_control_msg returned -71
[  118.786338][   T63] usbtmc 5-1:16.0: can't read capabilities
[  118.792754][   T63] usb 5-1: USB disconnect, device number 10
[  119.256661][ T7111] ceph: No mds server is up or the cluster is laggy
[  119.312543][ T5944] Bluetooth: Unexpected start frame (len 16)
[  120.666651][ T7169] libceph: resolve '0' (ret=-3): failed
[  123.389690][ T5944] Bluetooth: Unexpected start frame (len 16)
[  125.429660][ T7313] syzkaller0: entered promiscuous mode
[  125.431457][ T7313] syzkaller0: entered allmulticast mode
[  125.754640][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.269'.
[  127.135788][   T57] libceph: connect (1)[c::]:6789 error -101
[  127.137777][   T57] libceph: mon0 (1)[c::]:6789 connect error
[  127.405275][   T57] libceph: connect (1)[c::]:6789 error -101
[  127.407638][   T57] libceph: mon0 (1)[c::]:6789 connect error
[  127.646393][   T29] libceph: connect (1)[c::]:6789 error -101
[  127.650234][   T29] libceph: mon0 (1)[c::]:6789 connect error
[  127.914906][   T57] libceph: connect (1)[c::]:6789 error -101
[  127.918401][   T57] libceph: mon0 (1)[c::]:6789 connect error
[  127.964311][   T29] libceph: connect (1)[c::]:6789 error -101
[  127.966584][   T29] libceph: mon0 (1)[c::]:6789 connect error
[  128.226322][ T7360] ceph: No mds server is up or the cluster is laggy
[  128.365915][ T7378] ceph: No mds server is up or the cluster is laggy
[  128.558111][ T7409] syzkaller0: entered promiscuous mode
[  128.560486][ T7409] syzkaller0: entered allmulticast mode
[  128.594443][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'.
[  129.308963][ T5976] libceph: connect (1)[c::]:6789 error -101
[  129.310929][ T5976] libceph: mon0 (1)[c::]:6789 connect error
[  129.547035][ T7415] ceph: No mds server is up or the cluster is laggy
[  129.883357][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'.
[  130.229516][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.285'.
[  131.080770][ T7463] syzkaller0: entered promiscuous mode
[  131.083185][ T7463] syzkaller0: entered allmulticast mode
[  131.105910][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.296'.
[  131.954405][ T1330] libceph: connect (1)[c::]:6789 error -101
[  131.974486][ T1330] libceph: mon0 (1)[c::]:6789 connect error
[  132.301817][ T1416] ieee802154 phy0 wpan0: encryption failed: -22
[  132.304060][ T1416] ieee802154 phy1 wpan1: encryption failed: -22
[  132.310905][ T1416] ==================================================================
[  132.313758][ T1416] BUG: KASAN: slab-use-after-free in tty_write_room+0x7d/0x90
[  132.316319][ T1416] Read of size 8 at addr ffff88806df0b020 by task aoe_tx0/1416
[  132.320214][ T1416] 
[  132.321373][ T1416] CPU: 0 UID: 0 PID: 1416 Comm: aoe_tx0 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) 
[  132.321386][ T1416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  132.321392][ T1416] Call Trace:
[  132.321396][ T1416]  <TASK>
[  132.321400][ T1416]  dump_stack_lvl+0x116/0x1f0
[  132.321416][ T1416]  print_report+0xc3/0x670
[  132.321427][ T1416]  ? __virt_addr_valid+0x5e/0x590
[  132.321440][ T1416]  ? __phys_addr+0xc6/0x150
[  132.321452][ T1416]  ? tty_write_room+0x7d/0x90
[  132.321465][ T1416]  kasan_report+0xe0/0x110
[  132.321475][ T1416]  ? tty_write_room+0x7d/0x90
[  132.321490][ T1416]  tty_write_room+0x7d/0x90
[  132.321503][ T1416]  handle_tx+0x14f/0x630
[  132.321514][ T1416]  dev_hard_start_xmit+0x93/0x740
[  132.321530][ T1416]  __dev_queue_xmit+0x7eb/0x43e0
[  132.321545][ T1416]  ? lockdep_hardirqs_on+0x7c/0x110
[  132.321558][ T1416]  ? __pfx___dev_queue_xmit+0x10/0x10
[  132.321573][ T1416]  ? __lock_acquire+0xaa4/0x1ba0
[  132.321586][ T1416]  ? __lock_acquire+0xaa4/0x1ba0
[  132.321598][ T1416]  ? do_raw_spin_lock+0x12c/0x2b0
[  132.321612][ T1416]  ? find_held_lock+0x2b/0x80
[  132.321620][ T1416]  ? skb_dequeue+0x126/0x180
[  132.321633][ T1416]  ? find_held_lock+0x2b/0x80
[  132.321641][ T1416]  ? rcu_is_watching+0x12/0xc0
[  132.321651][ T1416]  tx+0xcc/0x190
[  132.321661][ T1416]  ? __pfx_tx+0x10/0x10
[  132.321669][ T1416]  kthread+0x1e1/0x3e0
[  132.321684][ T1416]  ? find_held_lock+0x2b/0x80
[  132.321694][ T1416]  ? __pfx_kthread+0x10/0x10
[  132.321708][ T1416]  ? __pfx_default_wake_function+0x10/0x10
[  132.321718][ T1416]  ? lockdep_hardirqs_on+0x7c/0x110
[  132.321730][ T1416]  ? __kthread_parkme+0x19e/0x250
[  132.321741][ T1416]  ? __pfx_kthread+0x10/0x10
[  132.321754][ T1416]  kthread+0x3c2/0x780
[  132.321767][ T1416]  ? __pfx_kthread+0x10/0x10
[  132.321779][ T1416]  ? __pfx_kthread+0x10/0x10
[  132.321791][ T1416]  ? __pfx_kthread+0x10/0x10
[  132.321803][ T1416]  ? __pfx_kthread+0x10/0x10
[  132.321815][ T1416]  ? rcu_is_watching+0x12/0xc0
[  132.321823][ T1416]  ? __pfx_kthread+0x10/0x10
[  132.321835][ T1416]  ret_from_fork+0x45/0x80
[  132.321849][ T1416]  ? __pfx_kthread+0x10/0x10
[  132.321861][ T1416]  ret_from_fork_asm+0x1a/0x30
[  132.321878][ T1416]  </TASK>
[  132.321882][ T1416] 
[  132.396455][ T1416] Allocated by task 7466:
[  132.398168][ T1416]  kasan_save_stack+0x33/0x60
[  132.400048][ T1416]  kasan_save_track+0x14/0x30
[  132.402054][ T1416]  __kasan_kmalloc+0xaa/0xb0
[  132.403912][ T1416]  alloc_tty_struct+0x96/0x8c0
[  132.405807][ T1416]  tty_init_dev.part.0+0x1e/0x500
[  132.407800][ T1416]  tty_init_dev+0x60/0x80
[  132.409510][ T1416]  ptmx_open+0x10d/0x360
[  132.411186][ T1416]  chrdev_open+0x231/0x6a0
[  132.412968][ T1416]  do_dentry_open+0x741/0x1c10
[  132.414876][ T1416]  vfs_open+0x82/0x3f0
[  132.416496][ T1416]  path_openat+0x1e5e/0x2d40
[  132.418321][ T1416]  do_filp_open+0x20b/0x470
[  132.420117][ T1416]  do_sys_openat2+0x11b/0x1d0
[  132.421975][ T1416]  __ia32_compat_sys_openat+0x16d/0x210
[  132.424151][ T1416]  __do_fast_syscall_32+0x73/0x120
[  132.426164][ T1416]  do_fast_syscall_32+0x32/0x80
[  132.428093][ T1416]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  132.430569][ T1416] 
[  132.431531][ T1416] Freed by task 834:
[  132.433093][ T1416]  kasan_save_stack+0x33/0x60
[  132.434945][ T1416]  kasan_save_track+0x14/0x30
[  132.436804][ T1416]  kasan_save_free_info+0x3b/0x60
[  132.438787][ T1416]  __kasan_slab_free+0x51/0x70
[  132.440673][ T1416]  kfree+0x2b6/0x4d0
[  132.442224][ T1416]  process_one_work+0x9cc/0x1b70
[  132.444184][ T1416]  worker_thread+0x6c8/0xf10
[  132.446002][ T1416]  kthread+0x3c2/0x780
[  132.447622][ T1416]  ret_from_fork+0x45/0x80
[  132.449391][ T1416]  ret_from_fork_asm+0x1a/0x30
[  132.451272][ T1416] 
[  132.452235][ T1416] Last potentially related work creation:
[  132.454450][ T1416]  kasan_save_stack+0x33/0x60
[  132.455989][ T1416]  kasan_record_aux_stack+0xb8/0xd0
[  132.457631][ T1416]  insert_work+0x36/0x230
[  132.459000][ T1416]  __queue_work+0x97e/0x10f0
[  132.460474][ T1416]  queue_work_on+0x1a4/0x1f0
[  132.461933][ T1416]  release_tty+0x4de/0x5d0
[  132.463342][ T1416]  tty_release_struct+0xb7/0xe0
[  132.464878][ T1416]  tty_release+0xe2d/0x1430
[  132.466317][ T1416]  __fput+0x3ff/0xb70
[  132.467591][ T1416]  task_work_run+0x14d/0x240
[  132.469065][ T1416]  syscall_exit_to_user_mode+0x27b/0x2a0
[  132.470827][ T1416]  __do_fast_syscall_32+0x80/0x120
[  132.472449][ T1416]  do_fast_syscall_32+0x32/0x80
[  132.473988][ T1416]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  132.475968][ T1416] 
[  132.476763][ T1416] The buggy address belongs to the object at ffff88806df0b000
[  132.476763][ T1416]  which belongs to the cache kmalloc-cg-2k of size 2048
[  132.481065][ T1416] The buggy address is located 32 bytes inside of
[  132.481065][ T1416]  freed 2048-byte region [ffff88806df0b000, ffff88806df0b800)
[  132.485150][ T1416] 
[  132.485892][ T1416] The buggy address belongs to the physical page:
[  132.487890][ T1416] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6df08
[  132.490585][ T1416] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  132.493221][ T1416] memcg:ffff88804e807481
[  132.494561][ T1416] anon flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff)
[  132.497084][ T1416] page_type: f5(slab)
[  132.498344][ T1416] raw: 04fff00000000040 ffff88801b44c140 0000000000000000 dead000000000001
[  132.501000][ T1416] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff88804e807481
[  132.503645][ T1416] head: 04fff00000000040 ffff88801b44c140 0000000000000000 dead000000000001
[  132.506327][ T1416] head: 0000000000000000 0000000000080008 00000000f5000000 ffff88804e807481
[  132.509003][ T1416] head: 04fff00000000003 ffffea0001b7c201 00000000ffffffff 00000000ffffffff
[  132.511702][ T1416] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  132.514354][ T1416] page dumped because: kasan: bad access detected
[  132.516308][ T1416] page_owner tracks the page as allocated
[  132.518052][ T1416] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6150, tgid 6149 (syz.3.26), ts 55622765473, free_ts 55599754052
[  132.524809][ T1416]  post_alloc_hook+0x181/0x1b0
[  132.526327][ T1416]  get_page_from_freelist+0x135c/0x3920
[  132.528064][ T1416]  __alloc_frozen_pages_noprof+0x263/0x23a0
[  132.529939][ T1416]  alloc_pages_mpol+0x1fb/0x550
[  132.531470][ T1416]  new_slab+0x244/0x340
[  132.532793][ T1416]  ___slab_alloc+0xd9c/0x1940
[  132.534272][ T1416]  __slab_alloc.constprop.0+0x56/0xb0
[  132.535954][ T1416]  __kmalloc_cache_noprof+0xfb/0x3e0
[  132.537626][ T1416]  bpf_prog_alloc_no_stats+0x116/0x630
[  132.539329][ T1416]  bpf_prog_alloc+0x3b/0x230
[  132.540815][ T1416]  bpf_prog_load+0x1a04/0x2490
[  132.542317][ T1416]  __sys_bpf+0x433c/0x4d80
[  132.543727][ T1416]  __ia32_sys_bpf+0x76/0xe0
[  132.545144][ T1416]  __do_fast_syscall_32+0x73/0x120
[  132.546762][ T1416]  do_fast_syscall_32+0x32/0x80
[  132.548291][ T1416]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  132.550262][ T1416] page last free pid 5350 tgid 5350 stack trace:
[  132.552219][ T1416]  __free_frozen_pages+0x69d/0xff0
[  132.553756][ T1416]  __put_partials+0x16d/0x1c0
[  132.555194][ T1416]  qlist_free_all+0x4e/0x120
[  132.556667][ T1416]  kasan_quarantine_reduce+0x195/0x1e0
[  132.558357][ T1416]  __kasan_slab_alloc+0x69/0x90
[  132.559887][ T1416]  kmem_cache_alloc_noprof+0x1cb/0x3b0
[  132.561574][ T1416]  getname_flags.part.0+0x4c/0x550
[  132.563175][ T1416]  getname_flags+0x93/0xf0
[  132.564624][ T1416]  do_sys_openat2+0xb8/0x1d0
[  132.566035][ T1416]  __x64_sys_openat+0x174/0x210
[  132.567540][ T1416]  do_syscall_64+0xcd/0x230
[  132.568977][ T1416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.570820][ T1416] 
[  132.571593][ T1416] Memory state around the buggy address:
[  132.573339][ T1416]  ffff88806df0af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  132.575815][ T1416]  ffff88806df0af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  132.578318][ T1416] >ffff88806df0b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  132.580796][ T1416]                                ^
[  132.582390][ T1416]  ffff88806df0b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  132.584873][ T1416]  ffff88806df0b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  132.587360][ T1416] ==================================================================
[  132.589710][ T1416] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  132.591949][ T1416] CPU: 0 UID: 0 PID: 1416 Comm: aoe_tx0 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) 
[  132.595526][ T1416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  132.598816][ T1416] Call Trace:
[  132.599875][ T1416]  <TASK>
[  132.600813][ T1416]  dump_stack_lvl+0x3d/0x1f0
[  132.602316][ T1416]  panic+0x71c/0x800
[  132.603571][ T1416]  ? __pfx_panic+0x10/0x10
[  132.604981][ T1416]  ? mark_held_locks+0x49/0x80
[  132.606499][ T1416]  ? tty_write_room+0x7d/0x90
[  132.607992][ T1416]  ? check_panic_on_warn+0x1f/0xb0
[  132.609610][ T1416]  ? tty_write_room+0x7d/0x90
[  132.611087][ T1416]  check_panic_on_warn+0xab/0xb0
[  132.612652][ T1416]  end_report+0x107/0x170
[  132.614017][ T1416]  kasan_report+0xee/0x110
[  132.615431][ T1416]  ? tty_write_room+0x7d/0x90
[  132.616949][ T1416]  tty_write_room+0x7d/0x90
[  132.618395][ T1416]  handle_tx+0x14f/0x630
[  132.619750][ T1416]  dev_hard_start_xmit+0x93/0x740
[  132.621333][ T1416]  __dev_queue_xmit+0x7eb/0x43e0
[  132.622896][ T1416]  ? lockdep_hardirqs_on+0x7c/0x110
[  132.624538][ T1416]  ? __pfx___dev_queue_xmit+0x10/0x10
[  132.626254][ T1416]  ? __lock_acquire+0xaa4/0x1ba0
[  132.627814][ T1416]  ? __lock_acquire+0xaa4/0x1ba0
[  132.629369][ T1416]  ? do_raw_spin_lock+0x12c/0x2b0
[  132.630945][ T1416]  ? find_held_lock+0x2b/0x80
[  132.632429][ T1416]  ? skb_dequeue+0x126/0x180
[  132.633874][ T1416]  ? find_held_lock+0x2b/0x80
[  132.635337][ T1416]  ? rcu_is_watching+0x12/0xc0
[  132.636840][ T1416]  tx+0xcc/0x190
[  132.637972][ T1416]  ? __pfx_tx+0x10/0x10
[  132.639276][ T1416]  kthread+0x1e1/0x3e0
[  132.640571][ T1416]  ? find_held_lock+0x2b/0x80
[  132.642040][ T1416]  ? __pfx_kthread+0x10/0x10
[  132.643485][ T1416]  ? __pfx_default_wake_function+0x10/0x10
[  132.645300][ T1416]  ? lockdep_hardirqs_on+0x7c/0x110
[  132.646954][ T1416]  ? __kthread_parkme+0x19e/0x250
[  132.648527][ T1416]  ? __pfx_kthread+0x10/0x10
[  132.649993][ T1416]  kthread+0x3c2/0x780
[  132.651276][ T1416]  ? __pfx_kthread+0x10/0x10
[  132.652725][ T1416]  ? __pfx_kthread+0x10/0x10
[  132.654171][ T1416]  ? __pfx_kthread+0x10/0x10
[  132.655619][ T1416]  ? __pfx_kthread+0x10/0x10
[  132.657070][ T1416]  ? rcu_is_watching+0x12/0xc0
[  132.658562][ T1416]  ? __pfx_kthread+0x10/0x10
[  132.660161][ T1416]  ret_from_fork+0x45/0x80
[  132.661573][ T1416]  ? __pfx_kthread+0x10/0x10
[  132.663047][ T1416]  ret_from_fork_asm+0x1a/0x30
[  132.664570][ T1416]  </TASK>
[  132.666141][ T1416] Kernel Offset: disabled
[  132.667525][ T1416] Rebooting in 86400 seconds..

VM DIAGNOSIS:
06:52:16  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff854bf5f5 RDI=ffffffff9addebc0 RBP=ffffffff9addeb80 RSP=ffffc9000772f440
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552
R12=0000000000000000 R13=0000000000000074 R14=ffffffff9addeb80 R15=ffffffff854bf590
RIP=ffffffff854bf61f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880977ed000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000ffb498fc CR3=000000004c5d1000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000005ff583 RBX=0000000000000001 RCX=ffffffff8b6903e9 RDX=0000000000000000
RSI=ffffffff8dbdad3b RDI=ffffffff8bf467e0 RBP=ffffed1003b55488 RSP=ffffc9000046fdf8
R8 =0000000000000001 R9 =ffffed10056665bd R10=ffff88802b332deb R11=0000000000000000
R12=0000000000000001 R13=ffff88801daaa440 R14=ffffffff90851a10 R15=0000000000000000
RIP=ffffffff8b68ec7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880978ed000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000080027000 CR3=000000004c5d1000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000001 RBX=0000000000000002 RCX=0000000000000002 RDX=0000000000000000
RSI=ffff88801f378b18 RDI=ffff88801f378000 RBP=ffffc9000083f950 RSP=ffffc9000083f8b0
R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff90851a17 R11=0000000000002bc0
R12=ffff88801f378b18 R13=0000000000000004 R14=ffff88802b43afa8 R15=ffff88801f378000
RIP=ffffffff81977c6e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880979ed000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000002ee0effc CR3=000000004bd2f000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=a0029980a0029980 a0029980a0029980 a0029980a0029980 a0029980a0029980 a0029980a0029980 a0029980a0029980 a0029980a0029980 a0029980a0029980
ZMM22=15446b8e15446b8e 15446b8e15446b8e 15446b8e15446b8e 15446b8e15446b8e 15446b8e15446b8e 15446b8e15446b8e 15446b8e15446b8e 15446b8e15446b8e
ZMM23=a4e2c1f7a4e2c1f7 a4e2c1f7a4e2c1f7 a4e2c1f7a4e2c1f7 a4e2c1f7a4e2c1f7 a4e2c1f7a4e2c1f7 a4e2c1f7a4e2c1f7 a4e2c1f7a4e2c1f7 a4e2c1f7a4e2c1f7
ZMM24=82422e0d82422e0d 82422e0d82422e0d 82422e0d82422e0d 82422e0d82422e0d 82422e0d82422e0d 82422e0d82422e0d 82422e0d82422e0d 82422e0d82422e0d
ZMM25=9f445e7a9f445e7a 9f445e7a9f445e7a 9f445e7a9f445e7a 9f445e7a9f445e7a 9f445e7a9f445e7a 9f445e7a9f445e7a 9f445e7a9f445e7a 9f445e7a9f445e7a
ZMM26=8dc49ce68dc49ce6 8dc49ce68dc49ce6 8dc49ce68dc49ce6 8dc49ce68dc49ce6 8dc49ce68dc49ce6 8dc49ce68dc49ce6 8dc49ce68dc49ce6 8dc49ce68dc49ce6
ZMM27=1070c6b11070c6b1 1070c6b11070c6b1 1070c6b11070c6b1 1070c6b11070c6b1 1070c6b11070c6b1 1070c6b11070c6b1 1070c6b11070c6b1 1070c6b11070c6b1
ZMM28=000000800000007f 0000007e0000007d 0000007c0000007b 0000007a00000079 0000007800000077 0000007600000075 0000007400000073 0000007200000071
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=6508000065080000 6508000065080000 6508000065080000 6508000065080000 6508000065080000 6508000065080000 6508000065080000 6508000065080000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=ffff88801d6fd3c0 RCX=0000000000000000 RDX=0000000000040000
RSI=ffff88801d6fd398 RDI=ffff88801d6fd3c0 RBP=ffff88801d6fd370 RSP=ffffc900001e7960
R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000000 R11=ffff888066ef0658
R12=0000000000000000 R13=0000000000000000 R14=ffff88801d6fc880 R15=0000000000000000
RIP=ffffffff81978626 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888097aed000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7393230 CR3=000000004a0d2000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000044000001 Opmask01=000000000000001f Opmask02=000000000000ffdf Opmask03=0000000000000000
Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc9988780 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 00ff000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73732566ef643fc3 73732566ef6b2df3
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73730c4015ac6843 73730c4015ac6843
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d25203a7325206b 6e696c6d79732065 7461657263206f74 2064656c69614600
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4800051f5600054e 4b4c49485c560540 5144405746054a51 054140494c444600
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002061 0000000000000000 33706f6f6c2f6b63 6f6c622f6c617574
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 000000330030636d
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69305f474f5b647c 6930382433273f39 7b27697a787c7a30 23333a3a38263342
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a3a263e383a3a26 39383a3a2638383a 3a263b383a3a263a 383a3a26493b3a3a
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000