last executing test programs:

10.640975526s ago: executing program 2 (id=191):
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0)
write$sequencer(r0, &(0x7f00000002c0)=[@s={0x5, @generic}], 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000012c0)={0xa, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000ebfb16cd0000000000970600000000000000369d139b8e7fbb63f9524f2b309671cdce259968c7a93cf26b72f8e430b4b0d89269b93d6d267cc3147e8d61c7eb9804ec15090ea4f4020074aafd2f374dffc4b28fce70051bfc0d500fab15eeee482bf60dfe98663915a480a603a79d3826c2c6c5c1b83f96455090c62f2ae01843b515c8d8b873caf2762fe440b2e804cd931702f4656535a5176455f95c738e90ce091912b4041caab504883fc6829b996c1371efe4d686e922f6a6f48f6304a1fa7fad54033ed52d40e02f137bc56110636fbcfafdb0cb11cb4c1d51612331d6be1bb541ed2b4c803e6c7602"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file1\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@type_tag={0x1, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x51, 0x2e, 0x5f, 0x5f, 0x2e, 0x5f, 0x2e, 0x30, 0x2e]}}, &(0x7f0000000180)=""/5, 0x2f, 0x5, 0x0, 0x4, 0xcc9e353e569a4d45, @void, @value}, 0x28)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000840)='virtio_transport_alloc_pkt\x00', r3}, 0x18)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
chdir(&(0x7f0000000280)='./file0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
flock(r5, 0x5)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
setresuid(0xffffffffffffffff, 0xee01, 0xee00)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
flock(0xffffffffffffffff, 0x5)
r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x21)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
flock(r7, 0x2)
r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r8, 0x2)
close(0x3)
sched_setaffinity(0x0, 0x0, 0x0)

9.71646417s ago: executing program 2 (id=198):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x6)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup3(r0, r1, 0x0)
syz_io_uring_setup(0x4915, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001040000000000000000f0000000", @ANYRES32=0x0, @ANYBLOB="0004000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}, 0x1, 0x0, 0x0, 0x80571010dab27960}, 0x0)

9.439804149s ago: executing program 2 (id=199):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x504, 0x22c, 0x2f4, 0x0, 0x22c, 0x22c, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x11c, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}, @common=@frag={{0x30}, {[0x7], 0x8, 0x4, 0x3}}]}, @inet=@TOS={0x24, 'TOS\x00', 0x0, {0x4, 0x8}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x560)
r4 = dup(r2)
write$6lowpan_enable(r4, &(0x7f0000000000)='1', 0x1)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0xd)
r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="181d000000000000000000000000007e9a7e5343ae5360007112110000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$AUDIT_ADD_RULE(r5, &(0x7f0000000e00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000980)={0x430, 0x3f3, 0x20, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x3b, [0x8, 0x5, 0x6, 0x6, 0x1, 0x2, 0xc, 0x7, 0xf, 0x6, 0x9, 0x5, 0xa44, 0x3, 0x1, 0x7bda, 0x8000, 0x80000000, 0x4, 0x33, 0x4, 0x3, 0xfffffffa, 0x0, 0x11a, 0x0, 0x0, 0x3f8, 0x4, 0x0, 0x4, 0x3636, 0x0, 0x4, 0x1, 0x0, 0xfffffff8, 0x10001, 0x2, 0x40000, 0x9, 0x7, 0x432, 0x1, 0xfffffffd, 0x4, 0x1, 0x4, 0x6, 0x8, 0xffff0001, 0xfffffdd5, 0x8001, 0x5, 0x1, 0x1, 0x80, 0x0, 0x10001, 0x7e8fad5a, 0x7, 0x2, 0x0, 0x1], [0x3, 0x3, 0x7, 0x7, 0x5, 0x7f, 0x80, 0x8, 0x3, 0x1, 0x0, 0x5, 0x5, 0xffffffff, 0x5, 0x8, 0x2e8, 0x8, 0x6, 0x1, 0x1, 0x2, 0xfffffffd, 0x7, 0x5, 0x3, 0x7, 0x0, 0xa, 0x200, 0x401, 0x9080, 0x1, 0xf7, 0x1000, 0x7fffffff, 0x7, 0x2, 0x705, 0x195, 0x1, 0x5, 0x10000, 0x127d57ab, 0x64, 0x1c0, 0x2, 0x3458, 0x5, 0x1, 0x7, 0x8, 0x858, 0xfff, 0x7, 0x9, 0x25, 0xffffff80, 0xffff, 0x615f, 0x789, 0x9, 0x1, 0xf], [0x2, 0x0, 0x9, 0x8, 0x2e3c, 0x8, 0x80, 0xe, 0x1, 0x2, 0xe, 0xa, 0x4, 0x400, 0xc, 0x1, 0x101, 0x9, 0xff, 0xff, 0xd, 0x9, 0x5, 0x5, 0x7, 0x4a, 0x5, 0x5, 0x6, 0x4, 0x1000, 0x100, 0x8, 0x3, 0x5, 0x5, 0x9, 0x6, 0x2, 0x4695, 0x3, 0x6, 0x5, 0x0, 0x6, 0x8, 0x80, 0x6, 0x8, 0x100, 0x12, 0x1, 0x9, 0x3, 0x0, 0x8, 0x8, 0x2, 0x401, 0x1, 0x80000000, 0xfffffffc, 0x6, 0x1], [0x7, 0xffff7fff, 0x9, 0x77a, 0x8, 0x81, 0x5, 0xffffffc0, 0x2, 0x5, 0xfffffffe, 0x0, 0x52eb, 0x9a3, 0x8, 0x8000, 0x1ac7c1ac, 0x3, 0x10000, 0x5b, 0x7, 0x7, 0x4, 0x7, 0x800, 0x3, 0x3, 0x7, 0x80, 0x5, 0xf, 0x4, 0x101, 0x3, 0x2, 0xdd97, 0x3, 0xfffff000, 0x7, 0x10000, 0x8, 0x4, 0xfffffffd, 0x28, 0x4, 0x9, 0x15c6, 0x800, 0x468e, 0x3, 0x9, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x610ff482, 0x1, 0x5, 0x9, 0x7f, 0x9, 0xfffffffe, 0x2, 0x9], 0x10, ['NFQUEUE\x00', 'TOS\x00', 'GPL\x00', '']}, [""]}, 0x430}, 0x1, 0x0, 0x0, 0xc5}, 0x4480)
syz_io_uring_setup(0x7e15, &(0x7f00000008c0)={0x0, 0x8197, 0x4, 0x1, 0x2ac, 0x0, r5}, &(0x7f0000000240), &(0x7f0000000300))
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r6, &(0x7f0000000e40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xffffff63)

4.229053313s ago: executing program 2 (id=217):
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
write$nbd(r1, &(0x7f0000000240)=ANY=[], 0x40)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xb)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x32}, @in6=@loopback, {0x0, 0x4, 0x0, 0x0, 0x0, 0x200}, {}, {0x3}, 0x0, 0x0, 0x2, 0x1, 0x0, 0xa6}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x400)
r3 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r3, 0xab00, r4)
ioctl$NBD_DO_IT(r3, 0xab03)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x2, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
ioperm(0x2, 0x4000007, 0x400)
set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r0, 0xab04)
syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0)

3.830476506s ago: executing program 1 (id=221):
fsopen(&(0x7f0000000040)='cifs\x00', 0x0)
sendto$netrom(0xffffffffffffffff, 0x0, 0x0, 0x4000001, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0x2, 0x4, 0x4f4, 0xffffffff, 0x42c, 0x248, 0x340, 0xfeffffff, 0xffffffff, 0x42c, 0x42c, 0x42c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x224, 0x248, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'bridge0\x00', {0x0, 0x6, 0x0, 0x0, 0x0, 0x40, 0x10000}, {0x81}}}, @common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa, 0xf7, 0x2}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x3}}}, {{@ipv6={@mcast1, @loopback, [0xff000000, 0x7f0000ff, 0xff000101, 0xffffff], [0x0, 0xffffffff, 0x0, 0xff000000], 'macsec0\x00', 'netpci0\x00', {}, {}, 0x29, 0x4, 0x3}, 0x0, 0xd4, 0xf8, 0x0, {}, [@common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast1, [], [], 'team_slave_1\x00', 'syzkaller1\x00'}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@eui64={{0x24}}]}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x550)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000000)=0x80100000, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0)
recvmmsg$unix(r5, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r4)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000f7008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x0, 0x0, 0x8001, 0x0, "61a1ed8439cde8054f2a230f933e8bb0ac60081e33dffa158f35f7519d5f73b4f59dd28e921a728aab9fb96d225d602392f816d09dcc09b5063087117502d8c24f7f61fd27a06d6a38a700"}, 0xd8)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f0000000100)=0x1, 0x4)
sendto$inet6(r7, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c)
ioctl$SIOCSIFHWADDR(r0, 0x8912, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udp(0x2, 0x2, 0x0)

3.774539871s ago: executing program 2 (id=223):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0xfea7)
ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000340)={0x2, "f21aa67584b3a1bb226c8b9b5b06b4b3cd6810f2ae723643a0ed447d0011ff01", 0x200, 0x2, 0x8, 0x2, 0x4})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10012, r0, 0x0)
mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x23010, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000580)={[&(0x7f00000001c0)='\x86=\xa5\xc4/\x89\x06\x9b\x9a_\xfa\x94\xed>x\xbc\x91\"\x9b6\x00']})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$CEC_ADAP_G_LOG_ADDRS(r0, 0x805c6103, &(0x7f0000000280))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fc00000}, {0x2, 0x3, 0x1, 0x8}, {0xff, 0xb0, 0xc8, 0x4}]})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x1, 0x80}, [@IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0x2c}}, 0x80)
mkdir(&(0x7f0000000440)='./file1\x00', 0xc)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000100)='./file1\x00')
r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
quotactl_fd$Q_SETINFO(r3, 0xffffffff80000600, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x2000000, 0x5})
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xf, 0x4000010, 0xffffffffffffffff, 0xa7155000)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x60000, 0x20)
splice(r1, 0x0, r4, 0x0, 0x114, 0x0)
syz_init_net_socket$ax25(0x3, 0x5, 0x8)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x8040, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200), 0x4)

3.688617606s ago: executing program 2 (id=225):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x504, 0x22c, 0x2f4, 0x0, 0x22c, 0x22c, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x11c, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}, @common=@frag={{0x30}, {[0x7], 0x8, 0x4, 0x3}}]}, @inet=@TOS={0x24, 'TOS\x00', 0x0, {0x4, 0x8}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x560)
r4 = dup(r2)
write$6lowpan_enable(r4, &(0x7f0000000000)='1', 0x1)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0xd)
r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="181d000000000000000000000000007e9a7e5343ae5360007112110000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$AUDIT_ADD_RULE(r5, &(0x7f0000000e00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000980)={0x430, 0x3f3, 0x20, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x3b, [0x8, 0x5, 0x6, 0x6, 0x1, 0x2, 0xc, 0x7, 0xf, 0x6, 0x9, 0x5, 0xa44, 0x3, 0x1, 0x7bda, 0x8000, 0x80000000, 0x4, 0x33, 0x4, 0x3, 0xfffffffa, 0x0, 0x11a, 0x0, 0x0, 0x3f8, 0x4, 0x0, 0x4, 0x3636, 0x0, 0x4, 0x1, 0x0, 0xfffffff8, 0x10001, 0x2, 0x40000, 0x9, 0x7, 0x432, 0x1, 0xfffffffd, 0x4, 0x1, 0x4, 0x6, 0x8, 0xffff0001, 0xfffffdd5, 0x8001, 0x5, 0x1, 0x1, 0x80, 0x0, 0x10001, 0x7e8fad5a, 0x7, 0x2, 0x0, 0x1], [0x3, 0x3, 0x7, 0x7, 0x5, 0x7f, 0x80, 0x8, 0x3, 0x1, 0x0, 0x5, 0x5, 0xffffffff, 0x5, 0x8, 0x2e8, 0x8, 0x6, 0x1, 0x1, 0x2, 0xfffffffd, 0x7, 0x5, 0x3, 0x7, 0x0, 0xa, 0x200, 0x401, 0x9080, 0x1, 0xf7, 0x1000, 0x7fffffff, 0x7, 0x2, 0x705, 0x195, 0x1, 0x5, 0x10000, 0x127d57ab, 0x64, 0x1c0, 0x2, 0x3458, 0x5, 0x1, 0x7, 0x8, 0x858, 0xfff, 0x7, 0x9, 0x25, 0xffffff80, 0xffff, 0x615f, 0x789, 0x9, 0x1, 0xf], [0x2, 0x0, 0x9, 0x8, 0x2e3c, 0x8, 0x80, 0xe, 0x1, 0x2, 0xe, 0xa, 0x4, 0x400, 0xc, 0x1, 0x101, 0x9, 0xff, 0xff, 0xd, 0x9, 0x5, 0x5, 0x7, 0x4a, 0x5, 0x5, 0x6, 0x4, 0x1000, 0x100, 0x8, 0x3, 0x5, 0x5, 0x9, 0x6, 0x2, 0x4695, 0x3, 0x6, 0x5, 0x0, 0x6, 0x8, 0x80, 0x6, 0x8, 0x100, 0x12, 0x1, 0x9, 0x3, 0x0, 0x8, 0x8, 0x2, 0x401, 0x1, 0x80000000, 0xfffffffc, 0x6, 0x1], [0x7, 0xffff7fff, 0x9, 0x77a, 0x8, 0x81, 0x5, 0xffffffc0, 0x2, 0x5, 0xfffffffe, 0x0, 0x52eb, 0x9a3, 0x8, 0x8000, 0x1ac7c1ac, 0x3, 0x10000, 0x5b, 0x7, 0x7, 0x4, 0x7, 0x800, 0x3, 0x3, 0x7, 0x80, 0x5, 0xf, 0x4, 0x101, 0x3, 0x2, 0xdd97, 0x3, 0xfffff000, 0x7, 0x10000, 0x8, 0x4, 0xfffffffd, 0x28, 0x4, 0x9, 0x15c6, 0x800, 0x468e, 0x3, 0x9, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x610ff482, 0x1, 0x5, 0x9, 0x7f, 0x9, 0xfffffffe, 0x2, 0x9], 0x10, ['NFQUEUE\x00', 'TOS\x00', 'GPL\x00', '']}, [""]}, 0x430}, 0x1, 0x0, 0x0, 0xc5}, 0x4480)
syz_io_uring_setup(0x7e15, &(0x7f00000008c0)={0x0, 0x8197, 0x4, 0x1, 0x2ac, 0x0, r5}, &(0x7f0000000240), &(0x7f0000000300))
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r6, &(0x7f0000000e40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xffffff63)

3.320688715s ago: executing program 1 (id=226):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e)
r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="35cb", 0x2, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[<r2=>0x0], 0x6, 0x4, 0x4, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000200)={r2})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0xfdffffff, 0x6, 0x0, "a05c7b5d00008023e9c59cf5ff7700"})
r3 = syz_open_pts(r0, 0xc00)
socket(0x23, 0x5, 0x8)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000040)={0x0, 0x58, 0x0, 0x0, 0x0, 0x0})
r5 = dup3(r3, r0, 0x0)
io_setup(0x689, &(0x7f0000000280)=<r6=>0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000000)=0x5402, 0x4)
io_submit(r6, 0x1, &(0x7f0000000b80)=[&(0x7f00000001c0)={0x503, 0x0, 0x0, 0x5, 0x0, r5, 0x0}])

2.961108993s ago: executing program 1 (id=227):
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0)
write$sequencer(r0, &(0x7f00000002c0)=[@s={0x5, @generic}], 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000012c0)={0xa, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000ebfb16cd0000000000970600000000000000369d139b8e7fbb63f9524f2b309671cdce259968c7a93cf26b72f8e430b4b0d89269b93d6d267cc3147e8d61c7eb9804ec15090ea4f4020074aafd2f374dffc4b28fce70051bfc0d500fab15eeee482bf60dfe98663915a480a603a79d3826c2c6c5c1b83f96455090c62f2ae01843b515c8d8b873caf2762fe440b2e804cd931702f4656535a5176455f95c738e90ce091912b4041caab504883fc6829b996c1371efe4d686e922f6a6f48f6304a1fa7fad54033ed52d40e02f137bc56110636fbcfafdb0cb11cb4c1d51612331d6be1bb541ed2b4c803e6c7602"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file1\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@type_tag={0x1, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x51, 0x2e, 0x5f, 0x5f, 0x2e, 0x5f, 0x2e, 0x30, 0x2e]}}, &(0x7f0000000180)=""/5, 0x2f, 0x5, 0x0, 0x4, 0xcc9e353e569a4d45, @void, @value}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000040)=@framed={{}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x80}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
chdir(&(0x7f0000000280)='./file0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
flock(r4, 0x5)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
setresuid(0xffffffffffffffff, 0xee01, 0xee00)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
flock(0xffffffffffffffff, 0x5)
r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x21)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
flock(r6, 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r7, 0x2)
close(0x3)
sched_setaffinity(0x0, 0x0, 0x0)

2.651001238s ago: executing program 0 (id=229):
rseq(&(0x7f0000000680), 0x20, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000001280)={<r1=>0xffffffffffffffff}, 0x0)
vmsplice(r1, &(0x7f0000000080)=[{&(0x7f00000003c0)="d4", 0x1}], 0x1, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10)
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80800)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r4, 0x0, r3, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x10000)
tee(r2, r5, 0x4e, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0xfdda}, 0x1, 0x0, 0x0, 0xc050}, 0x0)

2.370044264s ago: executing program 3 (id=232):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25e0000001000000000000000000000000640101000000000000000000000000004e228001000700000a0080803b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b36b6e00010000009c00110000000000000000000000000000000000e0000001000000000000000000000000fc0000000000000000000000000000002b030000ff34000002000a007f000001000000000000000000000000ac141419000000000000000000000000e0000001000000000000000000000000ac141442000000000000000000000000ff0300000135000005000200466d7e56ee04"], 0xec}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000)

2.31114341s ago: executing program 3 (id=233):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r1 = dup(r0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x13, 0x1, 0x0, 0x0, 0x0})

2.261031908s ago: executing program 3 (id=234):
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r1, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x8010)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f00000002c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'wg1\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r2, 0x4008b100, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x801)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x0, &(0x7f0000000000), 0x0, 0x4)
dup2(r6, r5)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYRESHEX=r3], &(0x7f0000000000)='GPL\x00', 0x8, 0xfe6f, &(0x7f0000000140)=""/186, 0x41000, 0x55, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x7f, 0xc8}}}, 0x6)
syz_emit_vhci(&(0x7f0000000c00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x0, 0x42, 0x7, 0xfffd}}]}}, 0x15)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
socket(0x10, 0x803, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0x10, 0x803, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)

2.132680171s ago: executing program 3 (id=235):
socket$netlink(0x10, 0x3, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x22, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40020)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r5, &(0x7f0000000200)=""/209, 0xd1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)

2.126130907s ago: executing program 1 (id=236):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
r1 = semget(0x1, 0x4, 0x302)
semctl$IPC_RMID(r1, 0x0, 0x0)
semctl$SETVAL(r1, 0x3, 0x10, &(0x7f00000000c0)=0x8000d)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040f040001130446a84068e55b23e2937cfb4147"], 0x7)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="efc8b978c395b661022fe4fb879cd074a891ddaeca05b3e40549fc05ac96c99ffa973db3f1a13f1f8fef8d70bcc611ce020b8a0dcfd8399c8c6c48a37fb0d9f125628ad8919ddfc2b6a3d70e37487d85cb90e1917d54d93763e12cf28f385062eb4fe659df8e757cbb316f3d16"], 0x9)
r2 = msgget$private(0x0, 0x121)
msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88))
msgsnd(r2, &(0x7f0000003740)=ANY=[@ANYBLOB], 0x10, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r5=>0x0})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r4, 0x60b, 0x2, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x34}}, 0x0)
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0)
r8 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000fc0)={0x0, @l2tp={0x2, 0x0, @multicast1}, @sco, @nfc={0x27, 0x0, 0xffffffffffffffff, 0x6}, 0x6, 0x0, 0x0, 0x0, 0x2400, 0x0, 0x3, 0x2, 0x14cd})
msgrcv(r2, &(0x7f00000000c0)={0x0, ""/245}, 0xfd, 0x0, 0x0)
msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff})
msgrcv(r2, &(0x7f0000002280)={0x0, ""/4096}, 0x1004, 0x1, 0x1800)
openat$fuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x5, 0xc8, 0x5}}}, 0x7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

1.760793261s ago: executing program 0 (id=237):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r0, 0x0, r1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4544], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@ifindex, r2, 0x2f, 0x0, 0x0, @void, @value}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

1.654630197s ago: executing program 0 (id=238):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan3\x00', <r7=>0x0})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', <r9=>0x0})
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r11, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r6, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80d0}, 0x10)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000280))
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2})
unlink(&(0x7f00000002c0)='./file0\x00')
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r12=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r12, @ANYBLOB="01020080000000001c0012800b0001006d616373656300000c00028005000f00020004006cfcb086f76ad87775c55d76ced5985be42325b432a03882066e482818e9a1862316569fabdad0ea1bae777c48fb5e80f7484766648bb7a54b18e82090d3243fe404a3da12368887b5b770eeedaed8060045c9b361d035427ee651ef1573b8da4bac70b83a74f5a1c838f49b8a9c6cedb074bc9eb47af7a667a18e4cca2058cf119923a417c7872a4862aa4fdaa7fa1db88ff0c1ddcfc2230ee8637d34522113ac83bd589f2edcf997286750a85052c30e29c9f8c613c2debbae4dba8d"], 0x3c}}, 0x0)

1.250903281s ago: executing program 0 (id=239):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
ioctl$CDROM_DEBUG(r1, 0x5330, 0x1)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
fsopen(&(0x7f0000000080)='ext3\x00', 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x2202, 0x0)
io_setup(0x104, &(0x7f0000000180))
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x1e)
r2 = creat(&(0x7f0000000680)='./bus\x00', 0x50)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180), 0xb)
copy_file_range(r3, &(0x7f0000000080), r2, 0x0, 0xfffffffffffffff8, 0x0) (fail_nth: 12)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), 0xffffffffffffffff)

1.063454656s ago: executing program 3 (id=240):
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r1, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x8010)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f00000002c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'wg1\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @empty, 'bridge_slave_1\x00'}})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, 0x0, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x801)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x0, &(0x7f0000000000), 0x0, 0x4)
dup2(r6, r5)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYRESHEX=r3], &(0x7f0000000000)='GPL\x00', 0x8, 0xfe6f, &(0x7f0000000140)=""/186, 0x41000, 0x55, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x7f, 0xc8}}}, 0x6)
syz_emit_vhci(&(0x7f0000000c00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x0, 0x42, 0x7, 0xfffd}}]}}, 0x15)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
socket(0x10, 0x803, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0x10, 0x803, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)

895.872234ms ago: executing program 1 (id=241):
fsopen(&(0x7f0000000040)='cifs\x00', 0x0)
r0 = socket(0x33, 0x2, 0x4)
sendto$netrom(r0, 0x0, 0x0, 0x4000001, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x2, 0x4, 0x4f4, 0xffffffff, 0x42c, 0x248, 0x340, 0xfeffffff, 0xffffffff, 0x42c, 0x42c, 0x42c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x224, 0x248, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'bridge0\x00', {0x0, 0x6, 0x0, 0x0, 0x0, 0x40, 0x10000}, {0x81}}}, @common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa, 0xf7, 0x2}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x3}}}, {{@ipv6={@mcast1, @loopback, [0xff000000, 0x7f0000ff, 0xff000101, 0xffffff], [0x0, 0xffffffff, 0x0, 0xff000000], 'macsec0\x00', 'netpci0\x00', {}, {}, 0x29, 0x4, 0x3}, 0x0, 0xd4, 0xf8, 0x0, {}, [@common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast1, [], [], 'team_slave_1\x00', 'syzkaller1\x00'}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@eui64={{0x24}}]}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x550)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0)
r5 = fcntl$dupfd(r3, 0x0, r4)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r7 = dup(r6)
write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20)
setsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, &(0x7f0000000000)=0x80100000, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0)
recvmmsg$unix(r9, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000001000f7008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x23}, 0x6}}, 0x0, 0x0, 0x8001, 0x0, "61a1ed8439cde8054f2a230f933e8bb0ac60081e33dffa158f35f7519d5f73b4f59dd28e921a728aab9fb96d225d602392f816d09dcc09b5063087117502d8c24f7f61fd27a06d6a38a700"}, 0xd8)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x7, &(0x7f0000000100)=0x1, 0x4)
sendto$inet6(r11, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c)
ioctl$SIOCSIFHWADDR(r1, 0x8912, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)

895.244131ms ago: executing program 3 (id=242):
r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xfffffffd, 0x0, 0x34324152, 0x7, 0xa, [{0x2}, {0x10}, {}, {0x3}]}})
iopl(0x3)
prlimit64(0x0, 0xa, 0x0, 0x0)
sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000240)=0x4)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$restrict_keyring(0x1d, r1, &(0x7f00000000c0)='blacklist\x00', 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket(0x2c, 0x2, 0x2)
r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x5392, 0x2000, 0x1}, &(0x7f0000000440)=<r5=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4)
io_uring_enter(r4, 0xdb4, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r7, @ANYBLOB="0800260090150000080057"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x808)
r9 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES64=r3], 0xe0}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000340)=0x8)
ioctl$TCFLSH(r9, 0x40204706, 0x20000000)
socket(0x40000000015, 0x5, 0x4)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
connect$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x80, @random="48bd00"}, 0x10)
r11 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r11, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)

123.159458ms ago: executing program 0 (id=243):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x68, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0xf5}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x800}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

362.753µs ago: executing program 1 (id=244):
socket$alg(0x26, 0x5, 0x0) (async)
openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x40040, 0x0)
userfaultfd(0x1) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8900) (async, rerun: 64)
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') (rerun: 64)
syz_open_dev$video4linux(&(0x7f0000000180), 0x2, 0x800) (async)
read$FUSE(r3, &(0x7f0000000780)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020) (async)
io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async)
add_key(0x0, 0x0, 0x0, 0x0, 0x0) (async)
recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)}, 0x10000) (async, rerun: 64)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r5) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='contention_end\x00', r6}, 0x18)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r7, @ANYRES64, @ANYBLOB="010000000000000012002b0000000c00050000000000000000000a0001007770616e30000000", @ANYRESHEX=r2, @ANYRES64=r4], 0x2c}}, 0x0) (async, rerun: 32)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32)
ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) (async)
ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) (async, rerun: 64)
r9 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f0000000300)={0x0, 'vxcan1\x00'}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x20, 0x0, &(0x7f0000000240)=[@exit_looper, @increfs_done, @register_looper, @exit_looper], 0x1, 0x0, &(0x7f0000000280)="c0"})
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000000000)={0x7, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffd, @remote}}}, 0x104) (async)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'bridge0\x00', 0x3})
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)

0s ago: executing program 0 (id=245):
openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x4, 0x4, 0x324, 0xffffffff, 0x194, 0xc8, 0x0, 0xfeffffff, 0xffffffff, 0x25c, 0x25c, 0x25c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2, [], [], 'batadv_slave_0\x00', 'team_slave_1\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @private0, [], [], 'hsr0\x00', 'veth0_macvtap\x00'}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x380)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x141341)
ioctl$USBDEVFS_IOCTL(r1, 0xc00c5512, &(0x7f0000000200))
syz_emit_ethernet(0x96, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0)
ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x14, 0x10, &(0x7f0000000040)})
r2 = dup(0xffffffffffffffff)
write$UHID_INPUT(r2, &(0x7f00000029c0)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34393b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc00da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c00000000b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f6bee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa88af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d460f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281faa654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc4394c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602060000000000007007ad1519ad5470de3dd6d6080cafccf81f4f48e104ab0972c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935f7d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29380022fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0xffffffffffffffad}}, 0x1065)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340100001a0001000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000a00000000000000480003006465666c6174e5af567a00"/236], 0x134}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$ttynull(0xffffffffffffff9c, 0x0, 0x14800, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00')
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x63)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:55566' (ED25519) to the list of known hosts.
[   32.317286][ T5851] cgroup: Unknown subsys name 'net'
[   32.469814][ T5851] cgroup: Unknown subsys name 'cpuset'
[   32.474589][ T5851] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   33.377798][ T5851] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   35.678681][ T5932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   35.681824][ T5932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   35.684701][ T5932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   35.688733][ T5932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   35.693257][ T5936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   35.696781][ T5936] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   35.699478][ T5936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   35.701959][ T5936] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   35.705130][ T5936] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   35.707997][ T5936] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   35.712211][ T5934] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   35.715850][ T5934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   35.718614][ T5934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   35.721074][ T5939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   35.722390][ T5934] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   35.723532][ T5939] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   35.724320][ T5940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   35.724840][ T5940] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   35.725042][ T5940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   35.727414][ T5934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   35.737301][ T5934] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   35.738214][ T5943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   35.739451][ T5934] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   35.743460][ T5934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   35.960100][ T5941] chnl_net:caif_netlink_parms(): no params data found
[   35.969625][ T5930] chnl_net:caif_netlink_parms(): no params data found
[   36.008681][ T5933] chnl_net:caif_netlink_parms(): no params data found
[   36.015044][ T5937] chnl_net:caif_netlink_parms(): no params data found
[   36.165357][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.171729][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.174293][ T5930] bridge_slave_0: entered allmulticast mode
[   36.177333][ T5930] bridge_slave_0: entered promiscuous mode
[   36.185222][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.187934][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.190449][ T5941] bridge_slave_0: entered allmulticast mode
[   36.193309][ T5941] bridge_slave_0: entered promiscuous mode
[   36.215415][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.218165][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.221230][ T5930] bridge_slave_1: entered allmulticast mode
[   36.224862][ T5930] bridge_slave_1: entered promiscuous mode
[   36.243392][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.245928][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.250446][ T5941] bridge_slave_1: entered allmulticast mode
[   36.253365][ T5941] bridge_slave_1: entered promiscuous mode
[   36.269690][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.272261][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.274839][ T5933] bridge_slave_0: entered allmulticast mode
[   36.278138][ T5933] bridge_slave_0: entered promiscuous mode
[   36.319865][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.322360][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.324871][ T5933] bridge_slave_1: entered allmulticast mode
[   36.331307][ T5933] bridge_slave_1: entered promiscuous mode
[   36.337653][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.354255][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.360438][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.392893][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.396062][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.399060][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.401449][ T5937] bridge_slave_0: entered allmulticast mode
[   36.403827][ T5937] bridge_slave_0: entered promiscuous mode
[   36.407358][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.409850][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.412323][ T5937] bridge_slave_1: entered allmulticast mode
[   36.414980][ T5937] bridge_slave_1: entered promiscuous mode
[   36.435445][ T5941] team0: Port device team_slave_0 added
[   36.493307][ T5941] team0: Port device team_slave_1 added
[   36.496140][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.501316][ T5930] team0: Port device team_slave_0 added
[   36.518236][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.533251][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.537774][ T5930] team0: Port device team_slave_1 added
[   36.540461][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.585839][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.588252][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.595893][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.601003][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.603341][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.610350][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.650420][ T5933] team0: Port device team_slave_0 added
[   36.652947][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.655190][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.662927][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.668416][ T5937] team0: Port device team_slave_0 added
[   36.672079][ T5937] team0: Port device team_slave_1 added
[   36.682478][ T5933] team0: Port device team_slave_1 added
[   36.684769][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.687156][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.694504][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.753590][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.756004][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.764606][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.769427][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.771899][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.781394][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.785746][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.787848][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.795489][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.801565][ T5941] hsr_slave_0: entered promiscuous mode
[   36.804385][ T5941] hsr_slave_1: entered promiscuous mode
[   36.807997][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.810110][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.817430][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.848225][ T5930] hsr_slave_0: entered promiscuous mode
[   36.850182][ T5930] hsr_slave_1: entered promiscuous mode
[   36.852081][ T5930] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   36.854223][ T5930] Cannot create hsr debugfs directory
[   36.917253][ T5933] hsr_slave_0: entered promiscuous mode
[   36.920102][ T5933] hsr_slave_1: entered promiscuous mode
[   36.922517][ T5933] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   36.925184][ T5933] Cannot create hsr debugfs directory
[   36.976413][ T5937] hsr_slave_0: entered promiscuous mode
[   36.978832][ T5937] hsr_slave_1: entered promiscuous mode
[   36.980598][ T5937] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   36.982439][ T5937] Cannot create hsr debugfs directory
[   37.209268][ T5930] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   37.215030][ T5930] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   37.224375][ T5930] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   37.232628][ T5930] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   37.243876][ T5933] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   37.250855][ T5933] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   37.257212][ T5933] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   37.261238][ T5933] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   37.293915][ T5937] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   37.298270][ T5937] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   37.310031][ T5937] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   37.313476][ T5937] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   37.343080][ T5941] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   37.347606][ T5941] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   37.351269][ T5941] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   37.359887][ T5941] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   37.376917][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.401738][ T5930] 8021q: adding VLAN 0 to HW filter on device team0
[   37.411449][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.419968][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.421876][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.433840][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.435630][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.442763][ T5933] 8021q: adding VLAN 0 to HW filter on device team0
[   37.459075][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.461592][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.480236][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.482854][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.495801][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.508480][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.533679][ T5937] 8021q: adding VLAN 0 to HW filter on device team0
[   37.542184][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.543983][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.548485][ T5941] 8021q: adding VLAN 0 to HW filter on device team0
[   37.559558][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.561945][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.569957][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.571811][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.581253][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.583530][ T1052] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.614535][ T5941] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   37.617600][ T5941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   37.625284][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.663137][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.665856][ T5930] veth0_vlan: entered promiscuous mode
[   37.670936][ T5930] veth1_vlan: entered promiscuous mode
[   37.693799][ T5933] veth0_vlan: entered promiscuous mode
[   37.699662][ T5930] veth0_macvtap: entered promiscuous mode
[   37.704579][ T5930] veth1_macvtap: entered promiscuous mode
[   37.712383][ T5933] veth1_vlan: entered promiscuous mode
[   37.718575][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.722084][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.727145][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.732368][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.738625][ T5930] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.741074][ T5930] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.743575][ T5930] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.746912][ T5930] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.767766][ T5933] veth0_macvtap: entered promiscuous mode
[   37.778269][ T5933] veth1_macvtap: entered promiscuous mode
[   37.797570][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   37.800396][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.803408][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.807238][ T5934] Bluetooth: hci1: command tx timeout
[   37.807372][ T5943] Bluetooth: hci3: command tx timeout
[   37.816298][ T5943] Bluetooth: hci2: command tx timeout
[   37.816453][ T5934] Bluetooth: hci0: command tx timeout
[   37.823955][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.826921][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.830811][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.833546][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   37.835397][ T5933] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.835960][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   37.838425][ T5933] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.838442][ T5933] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.838456][ T5933] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.860089][ T5941] veth0_vlan: entered promiscuous mode
[   37.869905][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   37.872520][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   37.881049][ T5941] veth1_vlan: entered promiscuous mode
[   37.894514][ T5937] veth0_vlan: entered promiscuous mode
[   37.905075][ T5930] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   37.907427][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   37.910697][ T5937] veth1_vlan: entered promiscuous mode
[   37.911509][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   37.933541][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   37.937290][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   37.943271][ T5941] veth0_macvtap: entered promiscuous mode
[   37.951842][ T5941] veth1_macvtap: entered promiscuous mode
[   37.965520][ T5998] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   37.967114][ T5937] veth0_macvtap: entered promiscuous mode
[   37.991043][ T5998] bond1 (unregistering): Released all slaves
[   38.001348][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.004298][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.006941][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.009586][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.012790][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.017569][ T5937] veth1_macvtap: entered promiscuous mode
[   38.024007][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.027503][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.030066][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.033648][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.037881][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.049770][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.053237][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.055733][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.059160][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.061681][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.064423][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.067558][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.075238][ T5941] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.078222][ T5941] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.080570][ T5941] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.082810][ T5941] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.092358][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.096389][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.099803][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.103332][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.107144][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.110309][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.114551][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.120158][ T5937] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.123324][ T5937] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.126823][ T5937] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.129910][ T5937] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.191115][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.193856][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.203025][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.205642][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.246991][ T2285] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   38.253534][ T1052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.257389][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.259412][ T6006] usb usb4: usbfs: process 6006 (syz.1.5) did not claim interface 0 before use
[   38.259484][ T1052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.260204][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.376440][ T2285] usb 7-1: device descriptor read/64, error -71
[   38.399012][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   38.490088][ T6022] binder: 6014:6022 ioctl c0306201 20000680 returned -22
[   38.553894][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   38.627133][ T2285] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   38.756557][ T2285] usb 7-1: device descriptor read/64, error -71
[   38.867422][ T2285] usb usb7-port1: attempt power cycle
[   39.058516][ T6027] usb usb4: usbfs: process 6027 (syz.1.8) did not claim interface 0 before use
[   39.206667][ T2285] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   39.234652][ T2285] usb 7-1: device descriptor read/8, error -71
[   39.486302][ T2285] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   39.522812][ T2285] usb 7-1: device descriptor read/8, error -71
[   39.636358][ T2285] usb usb7-port1: unable to enumerate USB device
[   39.781382][ T6035] usb usb4: usbfs: process 6035 (syz.1.10) did not claim interface 0 before use
[   39.886497][ T5934] Bluetooth: hci2: command tx timeout
[   39.886897][ T5943] Bluetooth: hci3: command tx timeout
[   39.896426][ T5943] Bluetooth: hci0: command tx timeout
[   39.896458][ T5934] Bluetooth: hci1: command tx timeout
[   40.196829][ T6037] fuse: Bad value for 'fd'
[   40.584764][ T6038] netlink: 'syz.3.11': attribute type 10 has an invalid length.
[   40.590954][ T6038] team0: Device hsr_slave_0 failed to register rx_handler
[   40.658190][   T39] audit: type=1804 audit(1734756471.751:2): pid=6040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.12" name="/newroot/4/file0/file0" dev="9p" ino=38928566 res=1 errno=0
[   40.721037][   T39] audit: type=1804 audit(1734756471.811:3): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.12" name="/newroot/4/file0/file0" dev="9p" ino=38928566 res=1 errno=0
[   41.089595][ T6046] binder: Bad value for 'max'
[   41.371015][ T6058] fuse: Bad value for 'fd'
[   41.435109][ T6060] 9pnet_virtio: no channels available for device syz
[   41.441213][ T5943] block nbd2: Receive control failed (result -107)
[   41.507919][ T6063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   41.527329][ T6044] nbd2: detected capacity change from 0 to 20
[   41.531511][ T5945] block nbd2: Dead connection, failed to find a fallback
[   41.534073][ T5945] block nbd2: shutting down sockets
[   41.536853][ T5945] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   41.540382][ T5945] Buffer I/O error on dev nbd2, logical block 0, async page read
[   41.543244][ T5945] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   41.546649][ T5945] Buffer I/O error on dev nbd2, logical block 0, async page read
[   41.549575][ T5945] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   41.552831][ T5945] Buffer I/O error on dev nbd2, logical block 0, async page read
[   41.555715][ T5945] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   41.559229][ T5945] Buffer I/O error on dev nbd2, logical block 0, async page read
[   41.561567][ T5945] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   41.563906][ T5945] Buffer I/O error on dev nbd2, logical block 0, async page read
[   41.565979][ T5945] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   41.568481][ T5945] Buffer I/O error on dev nbd2, logical block 0, async page read
[   41.570575][ T5945] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   41.572937][ T5945] Buffer I/O error on dev nbd2, logical block 0, async page read
[   41.574997][ T5945] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   41.576552][ T6061] netlink: 'syz.3.16': attribute type 10 has an invalid length.
[   41.577624][ T5945] Buffer I/O error on dev nbd2, logical block 0, async page read
[   41.582047][ T5945] ldm_validate_partition_table(): Disk read failed.
[   41.582368][ T6061] team0: Device hsr_slave_0 failed to register rx_handler
[   41.583855][ T5945] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   41.588517][ T5945] Buffer I/O error on dev nbd2, logical block 0, async page read
[   41.590609][ T5945] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   41.592927][ T5945] Buffer I/O error on dev nbd2, logical block 0, async page read
[   41.595060][ T5945] Dev nbd2: unable to read RDB block 0
[   41.597095][ T5945]  nbd2: unable to read partition table
[   41.598662][ T5945] nbd2: partition table beyond EOD, truncated
[   41.602056][ T5945] ldm_validate_partition_table(): Disk read failed.
[   41.604281][ T5945] Dev nbd2: unable to read RDB block 0
[   41.605846][ T5945]  nbd2: unable to read partition table
[   41.607584][ T5945] nbd2: partition table beyond EOD, truncated
[   41.627062][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   41.663865][ T6066] usb usb4: usbfs: process 6066 (syz.1.19) did not claim interface 0 before use
[   41.766346][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   41.776383][   T64] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   41.796639][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   41.926348][   T64] usb 5-1: Using ep0 maxpacket: 8
[   41.935130][   T64] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[   41.957758][   T64] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[   41.960896][   T64] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[   41.964079][   T64] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[   41.968480][ T5934] Bluetooth: hci2: command tx timeout
[   41.968552][ T5943] Bluetooth: hci1: command tx timeout
[   41.976849][ T5934] Bluetooth: hci0: command tx timeout
[   41.979861][ T5943] Bluetooth: hci3: command tx timeout
[   42.014078][   T64] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[   42.020353][   T64] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[   42.025943][   T64] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   42.033465][   T64] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[   42.035412][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   42.035940][   T64] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[   42.043654][   T64] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[   42.048145][   T64] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[   42.082878][   T64] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[   42.090638][   T64] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[   42.096236][   T64] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   42.103024][   T64] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[   42.105684][   T64] usb 5-1: config 246 descriptor has 1 excess byte, ignoring
[   42.107971][   T64] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42
[   42.110792][   T64] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[   42.114012][   T64] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[   42.117130][   T64] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[   42.119837][   T64] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   42.137856][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   42.176591][   T64] usb 5-1: string descriptor 0 read error: -22
[   42.178450][   T64] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   42.180981][   T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.218150][   T64] adutux 5-1:246.0: ADU100  now attached to /dev/usb/adutux0
[   42.241221][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   42.367214][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[   42.516209][    C0] vkms_vblank_simulate: vblank timer overrun
[   42.649862][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   42.649915][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   42.708980][ T6078] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   43.243639][ T6087] binder: Bad value for 'max'
[   43.248593][   T39] audit: type=1804 audit(1734756474.341:4): pid=6085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.23" name="/newroot/6/file0/file0" dev="9p" ino=38928566 res=1 errno=0
[   43.313780][   T39] audit: type=1804 audit(1734756474.401:5): pid=6091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.23" name="/newroot/6/file0/file0" dev="9p" ino=38928566 res=1 errno=0
[   43.442693][ T6097] xt_HMARK: proto mask must be zero with L3 mode
[   43.514841][ T6099] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   43.793564][ T6108] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   43.953357][ T6110] netlink: 20 bytes leftover after parsing attributes in process `syz.3.28'.
[   44.046415][ T5943] Bluetooth: hci3: command tx timeout
[   44.050336][ T5936] Bluetooth: hci0: command tx timeout
[   44.051755][ T5934] Bluetooth: hci1: command tx timeout
[   44.052447][ T5936] Bluetooth: hci2: command tx timeout
[   44.155048][ T6114] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   44.281101][ T6115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.29'.
[   44.283915][ T6115] nbd: device at index 64 is going down
[   44.455009][  T832] usb 5-1: USB disconnect, device number 2
[   44.520371][ T6121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.30'.
[   45.520370][ T6156] trusted_key: syz.1.35 sent an empty control message without MSG_MORE.
[   45.577078][ T6153] ALSA: mixer_oss: invalid OSS volume 'PHONEIÎ'
[   46.898049][ T6184] FAULT_INJECTION: forcing a failure.
[   46.898049][ T6184] name failslab, interval 1, probability 0, space 0, times 0
[   46.916286][ T6184] CPU: 1 UID: 0 PID: 6184 Comm: syz.2.40 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[   46.919108][ T6184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   46.921936][ T6184] Call Trace:
[   46.922821][ T6184]  <TASK>
[   46.923689][ T6184]  dump_stack_lvl+0x16c/0x1f0
[   46.925052][ T6184]  should_fail_ex+0x497/0x5b0
[   46.926401][ T6184]  ? fs_reclaim_acquire+0xae/0x150
[   46.927793][ T6184]  should_failslab+0xc2/0x120
[   46.929092][ T6184]  __kmalloc_node_noprof+0xd1/0x520
[   46.930453][ T6184]  ? alloc_slab_obj_exts+0x41/0xa0
[   46.931818][ T6184]  alloc_slab_obj_exts+0x41/0xa0
[   46.933119][ T6184]  __memcg_slab_post_alloc_hook+0x2a7/0x9b0
[   46.934686][ T6184]  __kmalloc_cache_noprof+0x367/0x420
[   46.936096][ T6184]  ? __pfx_lock_release+0x10/0x10
[   46.937461][ T6184]  ? trace_lock_acquire+0x14e/0x1f0
[   46.938925][ T6184]  alloc_pipe_info+0x10e/0x590
[   46.940656][ T6184]  splice_direct_to_actor+0x793/0xa40
[   46.942424][ T6184]  ? __pfx_direct_splice_actor+0x10/0x10
[   46.944123][ T6184]  ? hlock_class+0x4e/0x130
[   46.945634][ T6184]  ? __pfx___lock_acquire+0x10/0x10
[   46.947022][ T6184]  ? __pfx_aa_file_perm+0x10/0x10
[   46.948355][ T6184]  ? __pfx_splice_direct_to_actor+0x10/0x10
[   46.949904][ T6184]  do_splice_direct+0x178/0x250
[   46.951144][ T6184]  ? __pfx_do_splice_direct+0x10/0x10
[   46.952552][ T6184]  ? __do_sys_copy_file_range+0x1a2/0x450
[   46.954012][ T6184]  ? __pfx_direct_file_splice_eof+0x10/0x10
[   46.955555][ T6184]  vfs_copy_file_range+0x5d3/0x15b0
[   46.956907][ T6184]  ? __pfx_vfs_copy_file_range+0x10/0x10
[   46.958351][ T6184]  ? lock_acquire+0x2f/0xb0
[   46.959633][ T6184]  ? __might_fault+0xe3/0x190
[   46.960926][ T6184]  ? __might_fault+0xe3/0x190
[   46.962216][ T6184]  __do_sys_copy_file_range+0x1a2/0x450
[   46.963799][ T6184]  ? __pfx___do_sys_copy_file_range+0x10/0x10
[   46.965448][ T6184]  ? ksys_write+0x1ba/0x250
[   46.966675][ T6184]  ? __pfx_ksys_write+0x10/0x10
[   46.967986][ T6184]  __do_fast_syscall_32+0x73/0x120
[   46.969395][ T6184]  do_fast_syscall_32+0x32/0x80
[   46.970661][ T6184]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   46.972301][ T6184] RIP: 0023:0xf7f93579
[   46.973411][ T6184] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   46.978524][ T6184] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000179
[   46.980756][ T6184] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000080
[   46.982898][ T6184] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 00000000fffffff8
[   46.985557][ T6184] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   46.987660][ T6184] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   46.989808][ T6184] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   46.991930][ T6184]  </TASK>
[   46.992710][ T6189] netlink: 68 bytes leftover after parsing attributes in process `syz.0.41'.
[   47.503031][ T6194] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   47.581515][ T6196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.42'.
[   47.593898][ T6198] netlink: 56 bytes leftover after parsing attributes in process `syz.1.43'.
[   47.859503][ T6213] netlink: 20 bytes leftover after parsing attributes in process `syz.1.45'.
[   48.117660][ T6216] usb usb4: usbfs: process 6216 (syz.0.48) did not claim interface 0 before use
[   48.148007][ T6216] FAULT_INJECTION: forcing a failure.
[   48.148007][ T6216] name failslab, interval 1, probability 0, space 0, times 0
[   48.151356][ T6216] CPU: 0 UID: 0 PID: 6216 Comm: syz.0.48 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[   48.154495][ T6216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   48.157278][ T6216] Call Trace:
[   48.158150][ T6216]  <TASK>
[   48.158934][ T6216]  dump_stack_lvl+0x16c/0x1f0
[   48.160198][ T6216]  should_fail_ex+0x497/0x5b0
[   48.161442][ T6216]  should_failslab+0xc2/0x120
[   48.162716][ T6216]  kmem_cache_alloc_noprof+0x6e/0x3b0
[   48.164221][ T6216]  ? skb_clone+0xbd/0x3f0
[   48.165347][ T6216]  ? skb_clone+0x190/0x3f0
[   48.166527][ T6216]  skb_clone+0x190/0x3f0
[   48.167628][ T6216]  netlink_deliver_tap+0xafd/0xca0
[   48.168970][ T6216]  netlink_unicast+0x5e1/0x7f0
[   48.170216][ T6216]  ? __pfx_netlink_unicast+0x10/0x10
[   48.171595][ T6216]  ? __phys_addr_symbol+0x30/0x80
[   48.173010][ T6216]  ? __check_object_size+0x4a1/0x710
[   48.174898][ T6216]  netlink_sendmsg+0x8b8/0xd70
[   48.176398][ T6216]  ? __pfx_netlink_sendmsg+0x10/0x10
[   48.177791][ T6216]  ____sys_sendmsg+0x9ae/0xb40
[   48.179051][ T6216]  ? __pfx_____sys_sendmsg+0x10/0x10
[   48.180417][ T6216]  ? get_compat_msghdr+0x11b/0x170
[   48.181788][ T6216]  ___sys_sendmsg+0x135/0x1e0
[   48.183040][ T6216]  ? __pfx____sys_sendmsg+0x10/0x10
[   48.184411][ T6216]  ? __pfx_lock_release+0x10/0x10
[   48.185713][ T6216]  ? trace_lock_acquire+0x14e/0x1f0
[   48.187088][ T6216]  ? __fget_files+0x206/0x3a0
[   48.188327][ T6216]  __sys_sendmsg+0x16e/0x220
[   48.189543][ T6216]  ? __pfx___sys_sendmsg+0x10/0x10
[   48.191089][ T6216]  __do_fast_syscall_32+0x73/0x120
[   48.192448][ T6216]  do_fast_syscall_32+0x32/0x80
[   48.194096][ T6216]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   48.195743][ T6216] RIP: 0023:0xf7f0f579
[   48.196815][ T6216] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   48.201701][ T6216] RSP: 002b:00000000f504555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[   48.203914][ T6216] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000200000c0
[   48.205948][ T6216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   48.207980][ T6216] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   48.210000][ T6216] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   48.212032][ T6216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   48.214616][ T6216]  </TASK>
[   48.263570][ T6212] kernel read not supported for file /\}![@)B$ (pid: 6212 comm: syz.3.47)
[   48.269415][   T39] audit: type=1800 audit(1734756479.361:6): pid=6212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.47" name="\}![@)B$" dev="mqueue" ino=12366 res=0 errno=0
[   48.390572][ T6220] netlink: 'syz.3.49': attribute type 1 has an invalid length.
[   48.427676][ T6220] bond1 (unregistering): Released all slaves
[   48.592448][ T6227] fuse: Bad value for 'fd'
[   48.654027][ T6228] netlink: 'syz.3.52': attribute type 10 has an invalid length.
[   48.658132][ T6228] team0: Device hsr_slave_0 failed to register rx_handler
[   48.779366][ T6230] netlink: 72 bytes leftover after parsing attributes in process `syz.2.53'.
[   48.843538][ T6232] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   48.871150][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'.
[   48.949980][ T6235] netlink: 20 bytes leftover after parsing attributes in process `syz.2.54'.
[   48.971986][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.56'.
[   48.978261][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.981780][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.352001][ T6250] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   49.364080][ T6247] usb usb4: usbfs: process 6247 (syz.2.59) did not claim interface 0 before use
[   49.944328][ T6266] FAULT_INJECTION: forcing a failure.
[   49.944328][ T6266] name failslab, interval 1, probability 0, space 0, times 0
[   49.947940][ T6266] CPU: 3 UID: 0 PID: 6266 Comm: syz.1.63 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[   49.950691][ T6266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   49.953508][ T6266] Call Trace:
[   49.954458][ T6266]  <TASK>
[   49.955220][ T6266]  dump_stack_lvl+0x16c/0x1f0
[   49.956472][ T6266]  should_fail_ex+0x497/0x5b0
[   49.957706][ T6266]  ? fs_reclaim_acquire+0xae/0x150
[   49.959024][ T6266]  should_failslab+0xc2/0x120
[   49.960230][ T6266]  __kmalloc_noprof+0xce/0x4f0
[   49.961463][ T6266]  ? ktime_get_coarse_real_ts64_mg+0x2a4/0x310
[   49.963055][ T6266]  ? iter_file_splice_write+0x1cd/0x10b0
[   49.964563][ T6266]  iter_file_splice_write+0x1cd/0x10b0
[   49.965985][ T6266]  ? __pfx___lock_acquire+0x10/0x10
[   49.967357][ T6266]  ? __pfx_iter_file_splice_write+0x10/0x10
[   49.968905][ T6266]  ? touch_atime+0x90/0x5d0
[   49.970101][ T6266]  ? __pfx_lock_acquire.part.0+0x10/0x10
[   49.971053][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'.
[   49.971562][ T6266]  ? splice_direct_to_actor+0x346/0xa40
[   49.975648][ T6266]  ? __pfx_iter_file_splice_write+0x10/0x10
[   49.977207][ T6266]  direct_splice_actor+0x18f/0x6c0
[   49.978561][ T6266]  splice_direct_to_actor+0x346/0xa40
[   49.979975][ T6266]  ? __pfx_direct_splice_actor+0x10/0x10
[   49.981454][ T6266]  ? __pfx_splice_direct_to_actor+0x10/0x10
[   49.983048][ T6266]  do_splice_direct+0x178/0x250
[   49.984337][ T6266]  ? __pfx_do_splice_direct+0x10/0x10
[   49.985734][ T6266]  ? __do_sys_copy_file_range+0x1a2/0x450
[   49.987234][ T6266]  ? __pfx_direct_file_splice_eof+0x10/0x10
[   49.988905][ T6266]  vfs_copy_file_range+0x5d3/0x15b0
[   49.990283][ T6266]  ? __pfx_vfs_copy_file_range+0x10/0x10
[   49.991749][ T6266]  ? lock_acquire+0x2f/0xb0
[   49.992987][ T6266]  ? __might_fault+0xe3/0x190
[   49.994230][ T6266]  ? __might_fault+0xe3/0x190
[   49.995467][ T6266]  __do_sys_copy_file_range+0x1a2/0x450
[   49.996922][ T6266]  ? __pfx___do_sys_copy_file_range+0x10/0x10
[   49.998510][ T6266]  ? ksys_write+0x1ba/0x250
[   49.999730][ T6266]  ? __pfx_ksys_write+0x10/0x10
[   50.001099][ T6266]  __do_fast_syscall_32+0x73/0x120
[   50.002519][ T6266]  do_fast_syscall_32+0x32/0x80
[   50.003814][ T6266]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   50.005501][ T6266] RIP: 0023:0xf7f98579
[   50.006624][ T6266] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   50.011718][ T6266] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000179
[   50.013953][ T6266] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000080
[   50.016010][ T6266] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 00000000fffffff8
[   50.018083][ T6266] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   50.020137][ T6266] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   50.022195][ T6266] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   50.024351][ T6266]  </TASK>
[   50.250102][ T6278] netlink: 56 bytes leftover after parsing attributes in process `syz.1.67'.
[   50.282312][ T6279] usb usb4: usbfs: process 6279 (syz.2.66) did not claim interface 0 before use
[   50.602055][ T6293] tmpfs: Unknown parameter 'usrquota‚block_hapdlimit'
[   50.698750][ T6297] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.710694][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.72'.
[   50.771440][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.73'.
[   51.148861][ T6320] FAULT_INJECTION: forcing a failure.
[   51.148861][ T6320] name failslab, interval 1, probability 0, space 0, times 0
[   51.148915][ T6320] CPU: 2 UID: 0 PID: 6320 Comm: syz.0.80 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[   51.148935][ T6320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   51.148945][ T6320] Call Trace:
[   51.148951][ T6320]  <TASK>
[   51.148958][ T6320]  dump_stack_lvl+0x16c/0x1f0
[   51.148983][ T6320]  should_fail_ex+0x497/0x5b0
[   51.149004][ T6320]  ? fs_reclaim_acquire+0xae/0x150
[   51.149026][ T6320]  should_failslab+0xc2/0x120
[   51.149050][ T6320]  kmem_cache_alloc_node_noprof+0x72/0x3b0
[   51.149074][ T6320]  ? __alloc_skb+0x2b3/0x380
[   51.149100][ T6320]  __alloc_skb+0x2b3/0x380
[   51.149122][ T6320]  ? __pfx___alloc_skb+0x10/0x10
[   51.149153][ T6320]  tcf_action_add+0x242/0x5d0
[   51.149178][ T6320]  ? __pfx_tcf_action_add+0x10/0x10
[   51.149239][ T6320]  ? __nla_parse+0x40/0x60
[   51.149268][ T6320]  tc_ctl_action+0x35d/0x470
[   51.149294][ T6320]  ? __pfx_tc_ctl_action+0x10/0x10
[   51.149315][ T6320]  ? rtnetlink_rcv_msg+0x35a/0xea0
[   51.149345][ T6320]  ? __pfx_tc_ctl_action+0x10/0x10
[   51.149369][ T6320]  rtnetlink_rcv_msg+0x3c7/0xea0
[   51.149393][ T6320]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   51.149414][ T6320]  ? __pfx___dev_queue_xmit+0x10/0x10
[   51.149443][ T6320]  netlink_rcv_skb+0x165/0x410
[   51.149463][ T6320]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   51.149494][ T6320]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   51.149525][ T6320]  ? netlink_deliver_tap+0x1ae/0xca0
[   51.149548][ T6320]  netlink_unicast+0x53c/0x7f0
[   51.149569][ T6320]  ? __pfx_netlink_unicast+0x10/0x10
[   51.149589][ T6320]  ? __phys_addr_symbol+0x30/0x80
[   51.149610][ T6320]  ? __check_object_size+0x488/0x710
[   51.149658][ T6320]  netlink_sendmsg+0x8b8/0xd70
[   51.149682][ T6320]  ? __pfx_netlink_sendmsg+0x10/0x10
[   51.149711][ T6320]  ____sys_sendmsg+0x9ae/0xb40
[   51.149731][ T6320]  ? __pfx_____sys_sendmsg+0x10/0x10
[   51.149749][ T6320]  ? get_compat_msghdr+0x11b/0x170
[   51.149788][ T6320]  ___sys_sendmsg+0x135/0x1e0
[   51.149813][ T6320]  ? __pfx____sys_sendmsg+0x10/0x10
[   51.149848][ T6320]  ? __pfx_lock_release+0x10/0x10
[   51.149865][ T6320]  ? trace_lock_acquire+0x14e/0x1f0
[   51.149897][ T6320]  ? __fget_files+0x206/0x3a0
[   51.149925][ T6320]  __sys_sendmsg+0x16e/0x220
[   51.149949][ T6320]  ? __pfx___sys_sendmsg+0x10/0x10
[   51.149990][ T6320]  __do_fast_syscall_32+0x73/0x120
[   51.150013][ T6320]  do_fast_syscall_32+0x32/0x80
[   51.150037][ T6320]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   51.150063][ T6320] RIP: 0023:0xf7f0f579
[   51.150078][ T6320] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   51.150094][ T6320] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[   51.150113][ T6320] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020007940
[   51.150125][ T6320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   51.150135][ T6320] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   51.150146][ T6320] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   51.150157][ T6320] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   51.150181][ T6320]  </TASK>
[   51.649988][ T6334] veth0_to_team: entered allmulticast mode
[   52.472017][ T6333] veth0_to_team: left allmulticast mode
[   52.837378][ T6376] usb usb4: usbfs: process 6376 (syz.0.91) did not claim interface 0 before use
[   52.868851][ T6376] FAULT_INJECTION: forcing a failure.
[   52.868851][ T6376] name failslab, interval 1, probability 0, space 0, times 0
[   52.872160][ T6376] CPU: 0 UID: 0 PID: 6376 Comm: syz.0.91 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[   52.874799][ T6376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   52.877580][ T6376] Call Trace:
[   52.878457][ T6376]  <TASK>
[   52.879233][ T6376]  dump_stack_lvl+0x16c/0x1f0
[   52.880462][ T6376]  should_fail_ex+0x497/0x5b0
[   52.881721][ T6376]  ? fs_reclaim_acquire+0xae/0x150
[   52.883072][ T6376]  should_failslab+0xc2/0x120
[   52.884318][ T6376]  __kmalloc_node_noprof+0xd1/0x520
[   52.885693][ T6376]  ? __kvmalloc_node_noprof+0xad/0x1a0
[   52.887158][ T6376]  __kvmalloc_node_noprof+0xad/0x1a0
[   52.888550][ T6376]  xfrm_user_rcv_msg_compat+0x36a/0x12d0
[   52.890008][ T6376]  ? __pfx_xfrm_user_rcv_msg_compat+0x10/0x10
[   52.891583][ T6376]  ? ___sys_sendmsg+0x135/0x1e0
[   52.892896][ T6376]  ? __do_fast_syscall_32+0x73/0x120
[   52.894293][ T6376]  ? __pfx_xfrm_user_rcv_msg_compat+0x10/0x10
[   52.895882][ T6376]  xfrm_user_rcv_msg+0x308/0xbf0
[   52.897184][ T6376]  ? kfree_skbmem+0x1a4/0x1f0
[   52.898413][ T6376]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[   52.899825][ T6376]  ? hlock_class+0x4e/0x130
[   52.901041][ T6376]  ? __lock_acquire+0x15a9/0x3c40
[   52.902332][ T6376]  ? __mutex_trylock_common+0xea/0x250
[   52.903762][ T6376]  ? __pfx___mutex_trylock_common+0x10/0x10
[   52.905307][ T6376]  netlink_rcv_skb+0x165/0x410
[   52.906575][ T6376]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[   52.908003][ T6376]  ? __mutex_lock+0x1cc/0xa60
[   52.909248][ T6376]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   52.910629][ T6376]  ? netlink_deliver_tap+0x1ae/0xca0
[   52.912011][ T6376]  xfrm_netlink_rcv+0x71/0x90
[   52.913250][ T6376]  netlink_unicast+0x53c/0x7f0
[   52.914501][ T6376]  ? __pfx_netlink_unicast+0x10/0x10
[   52.915880][ T6376]  ? __phys_addr_symbol+0x30/0x80
[   52.917226][ T6376]  ? __check_object_size+0x488/0x710
[   52.918603][ T6376]  netlink_sendmsg+0x8b8/0xd70
[   52.919860][ T6376]  ? __pfx_netlink_sendmsg+0x10/0x10
[   52.921245][ T6376]  ____sys_sendmsg+0x9ae/0xb40
[   52.922500][ T6376]  ? __pfx_____sys_sendmsg+0x10/0x10
[   52.923874][ T6376]  ? get_compat_msghdr+0x11b/0x170
[   52.925224][ T6376]  ___sys_sendmsg+0x135/0x1e0
[   52.926467][ T6376]  ? __pfx____sys_sendmsg+0x10/0x10
[   52.927832][ T6376]  ? __pfx_lock_release+0x10/0x10
[   52.929158][ T6376]  ? trace_lock_acquire+0x14e/0x1f0
[   52.930520][ T6376]  ? __fget_files+0x206/0x3a0
[   52.931756][ T6376]  __sys_sendmsg+0x16e/0x220
[   52.932994][ T6376]  ? __pfx___sys_sendmsg+0x10/0x10
[   52.934337][ T6376]  __do_fast_syscall_32+0x73/0x120
[   52.935688][ T6376]  do_fast_syscall_32+0x32/0x80
[   52.936970][ T6376]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   52.938609][ T6376] RIP: 0023:0xf7f0f579
[   52.939684][ T6376] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   52.944651][ T6376] RSP: 002b:00000000f504555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[   52.946822][ T6376] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000200000c0
[   52.948874][ T6376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   52.950907][ T6376] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   52.952977][ T6376] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   52.955174][ T6376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   52.957326][ T6376]  </TASK>
[   52.980810][ T6385] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   53.104793][ T6387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.93'.
[   53.394679][ T6391] fuse: Bad value for 'fd'
[   53.557352][ T6391] netlink: 'syz.2.94': attribute type 10 has an invalid length.
[   53.570355][ T6391] team0: Device hsr_slave_0 failed to register rx_handler
[   53.931489][ T5936] block nbd0: Receive control failed (result -107)
[   54.046322][ T6400] nbd0: detected capacity change from 0 to 20
[   54.051028][ T6398] block nbd0: shutting down sockets
[   55.066781][ T6413] netlink: 'syz.2.100': attribute type 5 has an invalid length.
[   55.119434][ T6418] netlink: 56 bytes leftover after parsing attributes in process `syz.2.102'.
[   55.380466][ T6428] binder: Bad value for 'max'
[   55.797676][ T5936] block nbd0: Receive control failed (result -107)
[   55.886460][ T6433] nbd0: detected capacity change from 0 to 20
[   55.890994][ T5945] block nbd0: Dead connection, failed to find a fallback
[   55.892970][ T5945] block nbd0: shutting down sockets
[   55.894665][ T5945] blk_print_req_error: 25 callbacks suppressed
[   55.894672][ T5945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   55.898731][ T5945] buffer_io_error: 25 callbacks suppressed
[   55.898737][ T5945] Buffer I/O error on dev nbd0, logical block 0, async page read
[   55.903056][ T5945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   55.918067][ T5945] Buffer I/O error on dev nbd0, logical block 0, async page read
[   55.920238][ T5945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   55.922555][ T5945] Buffer I/O error on dev nbd0, logical block 0, async page read
[   55.948556][ T5945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   55.953067][ T5945] Buffer I/O error on dev nbd0, logical block 0, async page read
[   55.958879][ T5945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   55.963389][ T5945] Buffer I/O error on dev nbd0, logical block 0, async page read
[   55.969582][ T5945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   55.973202][ T5945] Buffer I/O error on dev nbd0, logical block 0, async page read
[   55.976328][ T5945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   55.978885][ T5945] Buffer I/O error on dev nbd0, logical block 0, async page read
[   55.981837][ T5945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   55.985089][ T5945] Buffer I/O error on dev nbd0, logical block 0, async page read
[   55.989150][ T5945] ldm_validate_partition_table(): Disk read failed.
[   55.992081][ T5945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   55.995010][ T5945] Buffer I/O error on dev nbd0, logical block 0, async page read
[   55.997540][ T5945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   55.999976][ T5945] Buffer I/O error on dev nbd0, logical block 0, async page read
[   56.002279][ T5945] Dev nbd0: unable to read RDB block 0
[   56.004295][ T5945]  nbd0: unable to read partition table
[   56.009730][ T5945] nbd0: partition table beyond EOD, truncated
[   56.198451][ T6444] usb usb4: usbfs: process 6444 (syz.3.107) did not claim interface 0 before use
[   56.274421][ T5945] ldm_validate_partition_table(): Disk read failed.
[   56.286479][ T5945] Dev nbd0: unable to read RDB block 0
[   56.288076][ T5945]  nbd0: unable to read partition table
[   56.289613][ T5945] nbd0: partition table beyond EOD, truncated
[   57.689438][ T6456] random: crng reseeded on system resumption
[   57.694399][ T6456] capability: warning: `syz.3.110' uses deprecated v2 capabilities in a way that may be insecure
[   57.815873][ T6460] netlink: 72 bytes leftover after parsing attributes in process `syz.2.112'.
[   58.226328][ T6008] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   58.378283][ T6008] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   58.380713][ T6008] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   58.383442][ T6008] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[   58.385880][ T6008] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   58.389367][ T6008] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   58.393521][ T6008] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   58.395964][ T6008] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   58.398490][ T6008] usb 8-1: Product: syz
[   58.399702][ T6008] usb 8-1: Manufacturer: syz
[   58.410811][ T6008] cdc_wdm 8-1:1.0: skipping garbage
[   58.412299][ T6008] cdc_wdm 8-1:1.0: skipping garbage
[   58.419290][ T6008] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[   58.421041][ T6008] cdc_wdm 8-1:1.0: Unknown control protocol
[   58.938405][ T6477] usb usb4: usbfs: process 6477 (syz.2.117) did not claim interface 0 before use
[   59.396360][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'.
[   59.544867][ T6486] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   59.670648][ T6489] netlink: 20 bytes leftover after parsing attributes in process `syz.0.121'.
[   59.801489][ T5865] block nbd64: NBD_DISCONNECT
[   60.096270][ T6498] binder: Bad value for 'max'
[   60.537546][ T6518] usb usb4: usbfs: process 6518 (syz.0.127) did not claim interface 0 before use
[   60.554549][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'.
[   61.351597][ T6009] usb 8-1: USB disconnect, device number 2
[   61.352064][   T39] audit: type=1804 audit(1734756492.441:7): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.131" name="/newroot/32/file0/file0" dev="9p" ino=38928566 res=1 errno=0
[   61.409457][   T39] audit: type=1804 audit(1734756492.501:8): pid=6532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.131" name="/newroot/32/file0/file0" dev="9p" ino=38928566 res=1 errno=0
[   61.667282][ T6538] binder: Bad value for 'max'
[   61.773356][ T5936] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[   61.777302][ T5936] CPU: 3 UID: 0 PID: 5936 Comm: kworker/u33:4 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[   61.781310][ T5936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   61.785190][ T5936] Workqueue: hci3 hci_rx_work
[   61.786900][ T5936] Call Trace:
[   61.788093][ T5936]  <TASK>
[   61.789187][ T5936]  dump_stack_lvl+0x16c/0x1f0
[   61.790919][ T5936]  sysfs_warn_dup+0x7f/0xa0
[   61.792601][ T5936]  sysfs_create_dir_ns+0x24d/0x2b0
[   61.794485][ T5936]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[   61.796536][ T5936]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   61.798511][ T5936]  ? kobject_add_internal+0x12d/0x990
[   61.800486][ T5936]  ? do_raw_spin_unlock+0x172/0x230
[   61.802385][ T5936]  kobject_add_internal+0x2c8/0x990
[   61.804310][ T5936]  kobject_add+0x16f/0x240
[   61.805974][ T5936]  ? __pfx_kobject_add+0x10/0x10
[   61.807807][ T5936]  ? class_to_subsys+0x3e/0x160
[   61.809621][ T5936]  ? do_raw_spin_unlock+0x172/0x230
[   61.811536][ T5936]  ? kobject_put+0xab/0x5a0
[   61.813222][ T5936]  device_add+0x289/0x1a70
[   61.814783][ T5936]  ? __pfx_dev_set_name+0x10/0x10
[   61.816635][ T5936]  ? __pfx_device_add+0x10/0x10
[   61.818518][ T5936]  ? mgmt_send_event_skb+0x2f2/0x460
[   61.820485][ T5936]  hci_conn_add_sysfs+0x17e/0x230
[   61.822374][ T5936]  le_conn_complete_evt+0xfce/0x1d10
[   61.824143][ T5936]  ? __pfx_le_conn_complete_evt+0x10/0x10
[   61.826043][ T5936]  ? __mutex_lock+0x1cc/0xa60
[   61.827431][ T5936]  hci_le_conn_complete_evt+0x23c/0x370
[   61.829141][ T5936]  hci_le_meta_evt+0x2e2/0x5d0
[   61.830890][ T5936]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[   61.832954][ T5936]  hci_event_packet+0x666/0x1190
[   61.834319][ T5936]  ? __pfx_hci_le_meta_evt+0x10/0x10
[   61.835593][ T5936]  ? __pfx_hci_event_packet+0x10/0x10
[   61.836912][ T5936]  ? mark_held_locks+0x9f/0xe0
[   61.838497][ T5936]  ? kcov_remote_start+0x3cf/0x6e0
[   61.840328][ T5936]  ? lockdep_hardirqs_on+0x7c/0x110
[   61.842089][ T5936]  hci_rx_work+0x2c5/0x16b0
[   61.843682][ T5936]  ? process_one_work+0x8bb/0x1b30
[   61.845437][ T5936]  process_one_work+0x958/0x1b30
[   61.846933][ T5936]  ? __pfx_lock_acquire.part.0+0x10/0x10
[   61.848308][ T5936]  ? __pfx_process_one_work+0x10/0x10
[   61.849659][ T5936]  ? rcu_is_watching+0x12/0xc0
[   61.850835][ T5936]  ? assign_work+0x1a0/0x250
[   61.852006][ T5936]  worker_thread+0x6c8/0xf00
[   61.853236][ T5936]  ? __pfx_worker_thread+0x10/0x10
[   61.855127][ T5936]  kthread+0x2c1/0x3a0
[   61.856661][ T5936]  ? _raw_spin_unlock_irq+0x23/0x50
[   61.858614][ T5936]  ? __pfx_kthread+0x10/0x10
[   61.860341][ T5936]  ret_from_fork+0x45/0x80
[   61.861946][ T5936]  ? __pfx_kthread+0x10/0x10
[   61.863546][ T5936]  ret_from_fork_asm+0x1a/0x30
[   61.865274][ T5936]  </TASK>
[   61.866736][ T5936] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   61.871531][ T5936] Bluetooth: hci3: failed to register connection device
[   61.920491][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'.
[   62.137312][ T6561] binder: Bad value for 'max'
[   63.121953][ T6582] Zero length message leads to an empty skb
[   63.186988][ T6598] binder: Bad value for 'max'
[   63.448806][ T6609] syz.0.152 uses obsolete (PF_INET,SOCK_PACKET)
[   63.746385][  T832] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   63.910161][  T832] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[   63.912450][  T832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   63.916238][  T832] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   63.919128][  T832] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   63.921442][  T832] usb 5-1: Manufacturer: syz
[   63.925736][  T832] usb 5-1: config 0 descriptor??
[   63.952891][   T39] audit: type=1804 audit(1734756495.041:9): pid=6622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.156" name="/newroot/38/file0/file0" dev="9p" ino=38928566 res=1 errno=0
[   63.976452][  T832] rc_core: IR keymap rc-hauppauge not found
[   63.980296][  T832] Registered IR keymap rc-empty
[   63.983782][  T832] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0
[   63.987223][  T832] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input5
[   64.013218][   T39] audit: type=1804 audit(1734756495.101:10): pid=6625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.156" name="/newroot/38/file0/file0" dev="9p" ino=38928566 res=1 errno=0
[   64.046306][ T5936] Bluetooth: hci0: command tx timeout
[   64.133853][  T832] usb 5-1: USB disconnect, device number 3
[   64.163087][ T6630] xt_HMARK: proto mask must be zero with L3 mode
[   64.266401][ T6633] cgroup: name respecified
[   64.685455][ T6644] 9pnet_virtio: no channels available for device syz
[   64.724373][ T6646] random: crng reseeded on system resumption
[   64.976271][ T6009] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   65.055955][ T6652] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   65.120598][ T6653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.168'.
[   65.137598][ T6009] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   65.140563][ T6009] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   65.143255][ T6009] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[   65.145455][ T6009] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   65.149912][ T6009] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   65.153867][ T6009] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   65.156315][ T6009] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   65.158505][ T6009] usb 5-1: Product: syz
[   65.159620][ T6009] usb 5-1: Manufacturer: syz
[   65.165147][ T6009] cdc_wdm 5-1:1.0: skipping garbage
[   65.166963][ T6009] cdc_wdm 5-1:1.0: skipping garbage
[   65.169309][ T6009] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[   65.170756][ T6009] cdc_wdm 5-1:1.0: Unknown control protocol
[   65.276922][ T6657] syz_tun: entered promiscuous mode
[   65.285108][ T6657] batadv_slave_1: entered promiscuous mode
[   65.377440][  T832] usb 5-1: USB disconnect, device number 4
[   65.378920][ T6659] mkiss: ax0: crc mode is auto.
[   65.414432][ T6659] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   65.417860][ T6662] FAULT_INJECTION: forcing a failure.
[   65.417860][ T6662] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   65.417892][ T6662] CPU: 1 UID: 0 PID: 6662 Comm: syz.2.171 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[   65.417911][ T6662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   65.429969][ T6662] Call Trace:
[   65.431194][ T6662]  <TASK>
[   65.432275][ T6662]  dump_stack_lvl+0x16c/0x1f0
[   65.433901][ T6662]  should_fail_ex+0x497/0x5b0
[   65.435557][ T6662]  __fpu_restore_sig+0xf5/0x1430
[   65.437347][ T6662]  ? lock_acquire.part.0+0x11b/0x380
[   65.439213][ T6662]  ? __pfx___fpu_restore_sig+0x10/0x10
[   65.441213][ T6662]  ? lock_acquire+0x2f/0xb0
[   65.442829][ T6662]  ? __might_fault+0xe3/0x190
[   65.444551][ T6662]  fpu__restore_sig+0x113/0x190
[   65.446333][ T6662]  ia32_restore_sigcontext+0x40f/0x5d0
[   65.448308][ T6662]  ? __pfx_ia32_restore_sigcontext+0x10/0x10
[   65.450448][ T6662]  ? __pfx_lock_release+0x10/0x10
[   65.452263][ T6662]  ? _raw_spin_unlock_irq+0x23/0x50
[   65.454107][ T6662]  ? lockdep_hardirqs_on+0x7c/0x110
[   65.456023][ T6662]  __do_compat_sys_sigreturn+0x14b/0x200
[   65.458052][ T6662]  ? __pfx___do_compat_sys_sigreturn+0x10/0x10
[   65.460293][ T6662]  do_int80_emulation+0x104/0x200
[   65.462144][ T6662]  asm_int80_emulation+0x1a/0x20
[   65.463946][ T6662] RIP: 0023:0xf7f93579
[   65.465417][ T6662] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   65.472243][ T6662] RSP: 002b:00000000f50e655c EFLAGS: 00000296
[   65.474304][ T6662] RAX: 00000000fffffffc RBX: 0000000000000006 RCX: 0000000020000080
[   65.477071][ T6662] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 00000000fffffff8
[   65.479830][ T6662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   65.483097][ T6662] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   65.486296][ T6662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   65.489376][ T6662]  </TASK>
[   65.581903][   T39] audit: type=1804 audit(1734756496.671:11): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.174" name="/newroot/37/file0/file0" dev="9p" ino=38928566 res=1 errno=0
[   65.635450][   T39] audit: type=1804 audit(1734756496.721:12): pid=6672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.174" name="/newroot/37/file0/file0" dev="9p" ino=38928566 res=1 errno=0
[   65.814551][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'.
[   66.117129][ T5943] block nbd1: Receive control failed (result -107)
[   66.216820][ T6684] nbd1: detected capacity change from 0 to 20
[   66.247390][ T6680] block nbd1: shutting down sockets
[   66.536356][ T5943] Bluetooth: hci0: command 0x0406 tx timeout
[   66.933280][ T6696] fuse: Bad value for 'fd'
[   67.004030][ T6700] 9pnet_fd: Insufficient options for proto=fd
[   67.093848][ T6701] netlink: 'syz.0.180': attribute type 10 has an invalid length.
[   67.097133][ T6701] team0: Device hsr_slave_0 failed to register rx_handler
[   69.280267][   T39] audit: type=1804 audit(1734756500.361:13): pid=6732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.191" name="/newroot/46/file0/file0" dev="9p" ino=38928566 res=1 errno=0
[   69.339938][   T39] audit: type=1804 audit(1734756500.431:14): pid=6734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.191" name="/newroot/46/file0/file0" dev="9p" ino=38928566 res=1 errno=0
[   69.360440][ T6733] usb usb4: usbfs: process 6733 (syz.0.189) did not claim interface 0 before use
[   69.488848][ T6738] netlink: 72 bytes leftover after parsing attributes in process `syz.3.192'.
[   69.842528][ T6747] netlink: 168 bytes leftover after parsing attributes in process `syz.3.195'.
[   70.002898][ T6749] netlink: 'syz.1.196': attribute type 1 has an invalid length.
[   70.044175][ T6749] 8021q: adding VLAN 0 to HW filter on device bond2
[   70.051530][ T6749] bond1: (slave bond2): making interface the new active one
[   70.055357][ T6749] bond1: (slave bond2): Enslaving as an active interface with an up link
[   70.128820][ T6753] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   70.212283][ T6754] netlink: 20 bytes leftover after parsing attributes in process `syz.1.197'.
[   70.598435][ T6767] netlink: 'syz.0.202': attribute type 1 has an invalid length.
[   70.663544][ T6767] 8021q: adding VLAN 0 to HW filter on device bond2
[   70.664187][ T6767] bond1: (slave bond2): making interface the new active one
[   70.664317][ T6767] bond1: (slave bond2): Enslaving as an active interface with an up link
[   70.697098][ T1411] ieee802154 phy0 wpan0: encryption failed: -22
[   70.697245][ T1411] ieee802154 phy1 wpan1: encryption failed: -22
[   70.969564][ T6779] usb usb4: usbfs: process 6779 (syz.0.204) did not claim interface 0 before use
[   72.759737][ T6792] binder: Bad value for 'max'
[   73.665494][   T39] audit: type=1326 audit(1734756504.741:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.1.211" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f98579 code=0x0
[   74.040926][ T6800] FAULT_INJECTION: forcing a failure.
[   74.040926][ T6800] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   74.045594][ T6800] CPU: 0 UID: 0 PID: 6800 Comm: syz.0.210 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[   74.049390][ T6800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   74.053138][ T6800] Call Trace:
[   74.054359][ T6800]  <TASK>
[   74.055454][ T6800]  dump_stack_lvl+0x16c/0x1f0
[   74.057199][ T6800]  should_fail_ex+0x497/0x5b0
[   74.058939][ T6800]  _copy_from_user+0x2e/0xd0
[   74.060653][ T6800]  copy_from_buffer+0x86/0xb0
[   74.062385][ T6800]  copy_uabi_to_xstate+0xb5/0x670
[   74.064113][ T6800]  ? find_held_lock+0x2d/0x110
[   74.065369][ T6800]  ? __pfx_copy_uabi_to_xstate+0x10/0x10
[   74.066867][ T6800]  ? __pfx_lock_release+0x10/0x10
[   74.068199][ T6800]  ? trace_lock_acquire+0x14e/0x1f0
[   74.069572][ T6800]  ? __local_bh_enable_ip+0xa4/0x120
[   74.070969][ T6800]  __fpu_restore_sig+0x1062/0x1430
[   74.072317][ T6800]  ? __pfx___fpu_restore_sig+0x10/0x10
[   74.073766][ T6800]  ? lock_acquire+0x2f/0xb0
[   74.074961][ T6800]  ? __might_fault+0xe3/0x190
[   74.076204][ T6800]  fpu__restore_sig+0x113/0x190
[   74.077496][ T6800]  ia32_restore_sigcontext+0x40f/0x5d0
[   74.078932][ T6800]  ? __pfx_ia32_restore_sigcontext+0x10/0x10
[   74.080585][ T6800]  ? __pfx_lock_release+0x10/0x10
[   74.081903][ T6800]  ? _raw_spin_unlock_irq+0x23/0x50
[   74.083243][ T6800]  ? lockdep_hardirqs_on+0x7c/0x110
[   74.084608][ T6800]  __do_compat_sys_sigreturn+0x14b/0x200
[   74.086064][ T6800]  ? __pfx___do_compat_sys_sigreturn+0x10/0x10
[   74.087777][ T6800]  do_int80_emulation+0x104/0x200
[   74.089299][ T6800]  asm_int80_emulation+0x1a/0x20
[   74.090853][ T6800] RIP: 0023:0xf7f0f579
[   74.092307][ T6800] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   74.098144][ T6800] RSP: 002b:00000000f506655c EFLAGS: 00000296
[   74.099777][ T6800] RAX: 00000000fffffffc RBX: 0000000000000006 RCX: 0000000020000080
[   74.101862][ T6800] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 00000000fffffff8
[   74.103996][ T6800] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   74.106147][ T6800] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   74.108294][ T6800] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   74.110392][ T6800]  </TASK>
[   74.228507][ T6815] netlink: 'syz.1.212': attribute type 27 has an invalid length.
[   74.454822][ T5943] Bluetooth: hci3: command 0x0406 tx timeout
[   74.466130][   T39] audit: type=1804 audit(1734756505.551:16): pid=6822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.214" name="/newroot/59/file0/file0" dev="9p" ino=38928566 res=1 errno=0
[   74.532252][   T39] audit: type=1804 audit(1734756505.621:17): pid=6824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.214" name="/newroot/59/file0/file0" dev="9p" ino=38928566 res=1 errno=0
[   75.501931][ T6837] binder: Bad value for 'max'
[   75.723409][ T6842] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[   75.762770][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.217'.
[   75.808782][   T57] cfg80211: failed to load regulatory.db
[   75.886385][ T6849] nbd2: detected capacity change from 0 to 22
[   75.909021][ T6851] block nbd2: shutting down sockets
[   75.914223][    C3] blk_print_req_error: 25 callbacks suppressed
[   75.914240][    C3] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   75.918741][    C3] buffer_io_error: 25 callbacks suppressed
[   75.918748][    C3] Buffer I/O error on dev nbd2, logical block 0, async page read
[   75.922865][ T5945] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   75.925330][ T5945] Buffer I/O error on dev nbd2, logical block 0, async page read
[   75.927539][ T5945] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   75.929954][ T5945] Buffer I/O error on dev nbd2, logical block 0, async page read
[   75.932013][ T5945] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   75.935607][ T5945] Buffer I/O error on dev nbd2, logical block 0, async page read
[   75.938321][ T5945] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   75.940677][ T5945] Buffer I/O error on dev nbd2, logical block 0, async page read
[   75.942764][ T5945] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   75.945142][ T5945] Buffer I/O error on dev nbd2, logical block 0, async page read
[   75.957918][ T5945] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   75.960390][ T5945] Buffer I/O error on dev nbd2, logical block 0, async page read
[   75.962436][ T5945] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   75.964778][ T5945] Buffer I/O error on dev nbd2, logical block 0, async page read
[   75.967217][ T5983] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   75.970017][ T5945] ldm_validate_partition_table(): Disk read failed.
[   75.976433][ T5945] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   75.978796][ T5945] Buffer I/O error on dev nbd2, logical block 0, async page read
[   75.981229][ T5945] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   75.984127][ T5945] Buffer I/O error on dev nbd2, logical block 0, async page read
[   75.987940][ T5945] Dev nbd2: unable to read RDB block 0
[   75.989648][ T5945]  nbd2: unable to read partition table
[   75.992290][ T5945] nbd2: partition table beyond EOD, truncated
[   75.996711][ T6849] ldm_validate_partition_table(): Disk read failed.
[   75.998622][ T6849] Dev nbd2: unable to read RDB block 0
[   76.000188][ T6849]  nbd2: unable to read partition table
[   76.001711][ T6849] nbd2: partition table beyond EOD, truncated
[   76.006580][ T5945] ldm_validate_partition_table(): Disk read failed.
[   76.008490][ T5945] Dev nbd2: unable to read RDB block 0
[   76.010799][ T5945]  nbd2: unable to read partition table
[   76.012412][ T5945] nbd2: partition table beyond EOD, truncated
[   76.058167][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'.
[   76.129594][ T5983] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 81, changing to 10
[   76.134715][ T5983] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.143679][ T5983] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   76.157164][ T5983] usb 8-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00
[   76.158506][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'.
[   76.171205][ T5983] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.174736][ T6870] netlink: 20 bytes leftover after parsing attributes in process `syz.1.221'.
[   76.193281][ T5983] usb 8-1: config 0 descriptor??
[   76.359571][ T6879] usb usb4: usbfs: process 6879 (syz.0.224) did not claim interface 0 before use
[   76.405723][ T6879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.224'.
[   76.408425][ T6879] netlink: 288 bytes leftover after parsing attributes in process `syz.0.224'.
[   76.849317][ T5983] usbhid 8-1:0.0: can't add hid device: -71
[   76.850961][ T5983] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[   76.862687][ T5983] usb 8-1: USB disconnect, device number 3
[   76.948634][   T39] audit: type=1804 audit(1734756508.041:18): pid=6889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.227" name="/newroot/61/file0/file0" dev="9p" ino=38928566 res=1 errno=0
[   77.034553][   T39] audit: type=1804 audit(1734756508.121:19): pid=6890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.227" name="/newroot/61/file0/file0" dev="9p" ino=38928566 res=1 errno=0
[   77.471070][ T6901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.231'.
[   77.476915][ T6901] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.479647][ T6901] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.537625][ T6903] netlink: 72 bytes leftover after parsing attributes in process `syz.3.232'.
[   78.183090][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.237'.
[   78.893432][ T6935] FAULT_INJECTION: forcing a failure.
[   78.893432][ T6935] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   78.898517][ T6935] CPU: 1 UID: 0 PID: 6935 Comm: syz.0.239 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[   78.901239][ T6935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   78.904023][ T6935] Call Trace:
[   78.904907][ T6935]  <TASK>
[   78.905692][ T6935]  dump_stack_lvl+0x16c/0x1f0
[   78.907022][ T6935]  should_fail_ex+0x497/0x5b0
[   78.908285][ T6935]  __fpu_restore_sig+0xf5/0x1430
[   78.909589][ T6935]  ? __pfx___fpu_restore_sig+0x10/0x10
[   78.911092][ T6935]  ? lock_acquire+0x2f/0xb0
[   78.912363][ T6935]  ? __might_fault+0xe3/0x190
[   78.913626][ T6935]  fpu__restore_sig+0x113/0x190
[   78.914920][ T6935]  ia32_restore_sigcontext+0x40f/0x5d0
[   78.916420][ T6935]  ? __pfx_ia32_restore_sigcontext+0x10/0x10
[   78.918012][ T6935]  ? __pfx_lock_release+0x10/0x10
[   78.919352][ T6935]  ? _raw_spin_unlock_irq+0x23/0x50
[   78.920751][ T6935]  ? lockdep_hardirqs_on+0x7c/0x110
[   78.921998][ T6935]  __do_compat_sys_sigreturn+0x14b/0x200
[   78.923466][ T6935]  ? __pfx___do_compat_sys_sigreturn+0x10/0x10
[   78.925117][ T6935]  do_int80_emulation+0x104/0x200
[   78.926477][ T6935]  asm_int80_emulation+0x1a/0x20
[   78.927889][ T6935] RIP: 0023:0xf7f0f579
[   78.929027][ T6935] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   78.934129][ T6935] RSP: 002b:00000000f506655c EFLAGS: 00000296
[   78.935764][ T6935] RAX: 00000000fffffffc RBX: 0000000000000006 RCX: 0000000020000080
[   78.937868][ T6935] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 00000000fffffff8
[   78.940523][ T6935] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   78.943062][ T6935] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   78.945163][ T6935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   78.947262][ T6935]  </TASK>
[   79.008540][ T6943] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   79.171075][ T6947] netlink: 20 bytes leftover after parsing attributes in process `syz.1.241'.
[   80.047472][ T6960] usb usb4: usbfs: process 6960 (syz.0.245) did not claim interface 0 before use
[   80.119679][ T6956] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   80.122261][ T6956] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   80.159196][ T6956] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   80.165822][ T6956] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   80.211238][ T6956] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   80.389894][ T6956] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   80.396299][ T6956] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   80.420754][ T6956] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   80.441514][ T6956] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   80.450652][ T6956] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   80.482234][ T6956] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   80.484643][ T6956] list_del corruption. prev->next should be ffff888012db3550, but was 0000000000000000. (prev=ffff888012db4550)
[   80.498698][ T6956] ------------[ cut here ]------------
[   80.500861][ T6956] kernel BUG at lib/list_debug.c:62!
[   80.505476][ T6956] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI
[   80.509226][ T6956] CPU: 3 UID: 0 PID: 6956 Comm: syz.1.244 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[   80.513026][ T6956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   80.516913][ T6956] RIP: 0010:__list_del_entry_valid_or_report+0x12c/0x1c0
[   80.519479][ T6956] Code: e8 99 11 db fc 90 0f 0b 48 89 ca 48 c7 c7 c0 72 b1 8b e8 87 11 db fc 90 0f 0b 48 89 c2 48 c7 c7 20 73 b1 8b e8 75 11 db fc 90 <0f> 0b 48 89 d1 48 c7 c7 a0 73 b1 8b 48 89 c2 e8 60 11 db fc 90 0f
[   80.526331][ T6956] RSP: 0018:ffffc9002690f250 EFLAGS: 00010286
[   80.528496][ T6956] RAX: 000000000000006d RBX: ffff888012db3000 RCX: ffffffff8178e1e9
[   80.531268][ T6956] RDX: 0000000000000000 RSI: ffffffff81798976 RDI: 0000000000000005
[   80.534028][ T6956] RBP: ffff888012db3550 R08: 0000000000000005 R09: 0000000000000000
[   80.536812][ T6956] R10: 0000000080000000 R11: 0000000000000008 R12: 00000000ffffffff
[   80.539549][ T6956] R13: ffff888012db3558 R14: ffff888012db4000 R15: ffff88801284b010
[   80.542285][ T6956] FS:  0000000000000000(0000) GS:ffff88802b700000(0063) knlGS:00000000f50c5b40
[   80.545391][ T6956] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[   80.547700][ T6956] CR2: 0000000020e39000 CR3: 0000000066d04000 CR4: 0000000000352ef0
[   80.550493][ T6956] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   80.553188][ T6956] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   80.555859][ T6956] Call Trace:
[   80.556969][ T6956]  <TASK>
[   80.558005][ T6956]  ? die+0x31/0x80
[   80.559290][ T6956]  ? do_trap+0x232/0x430
[   80.560749][ T6956]  ? __list_del_entry_valid_or_report+0x12c/0x1c0
[   80.562921][ T6956]  ? __list_del_entry_valid_or_report+0x12c/0x1c0
[   80.565159][ T6956]  ? do_error_trap+0xf4/0x230
[   80.566830][ T6956]  ? __list_del_entry_valid_or_report+0x12c/0x1c0
[   80.569073][ T6956]  ? handle_invalid_op+0x34/0x40
[   80.570811][ T6956]  ? __list_del_entry_valid_or_report+0x12c/0x1c0
[   80.573032][ T6956]  ? exc_invalid_op+0x2e/0x50
[   80.574607][ T6956]  ? asm_exc_invalid_op+0x1a/0x20
[   80.576376][ T6956]  ? __wake_up_klogd.part.0+0x99/0xf0
[   80.578180][ T6956]  ? vprintk+0x86/0xa0
[   80.579585][ T6956]  ? __list_del_entry_valid_or_report+0x12c/0x1c0
[   80.581758][ T6956]  ? __local_bh_enable_ip+0xa4/0x120
[   80.583512][ T6956]  bt_accept_unlink+0x34/0x2e0
[   80.584747][ T6956]  l2cap_sock_teardown_cb+0x1a3/0x3c0
[   80.586071][ T6956]  l2cap_chan_del+0xba/0x8f0
[   80.587260][ T6956]  l2cap_conn_del+0x37c/0x730
[   80.588418][ T6956]  l2cap_connect_cfm+0x7aa/0xf10
[   80.589632][ T6956]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[   80.590950][ T6956]  ? hci_cb_lookup+0x319/0x4e0
[   80.592133][ T6956]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[   80.593459][ T6956]  hci_conn_failed+0x225/0x3e0
[   80.594622][ T6956]  ? __pfx_hci_conn_failed+0x10/0x10
[   80.595982][ T6956]  ? lock_acquire+0x2f/0xb0
[   80.597249][ T6956]  ? hci_abort_conn_sync+0x172/0x1030
[   80.598848][ T6956]  hci_abort_conn_sync+0x968/0x1030
[   80.600498][ T6956]  ? __pfx_hci_abort_conn_sync+0x10/0x10
[   80.602282][ T6956]  ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0
[   80.604196][ T6956]  ? __pfx_lock_release+0x10/0x10
[   80.605653][ T6956]  ? trace_lock_acquire+0x14e/0x1f0
[   80.607289][ T6956]  ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0
[   80.609168][ T6956]  hci_disconnect_all_sync.constprop.0+0x104/0x3c0
[   80.611126][ T6956]  hci_suspend_sync+0x772/0xab0
[   80.612467][ T6956]  ? __pfx_hci_suspend_sync+0x10/0x10
[   80.613953][ T6956]  ? __pfx_mgmt_suspending+0x10/0x10
[   80.615555][ T6956]  hci_suspend_dev+0x27d/0x5e0
[   80.616967][ T6956]  hci_suspend_notifier+0x28d/0x2f0
[   80.618349][ T6956]  notifier_call_chain+0xb7/0x410
[   80.619835][ T6956]  ? __pfx_hci_suspend_notifier+0x10/0x10
[   80.621694][ T6956]  blocking_notifier_call_chain_robust+0xc9/0x170
[   80.623522][ T6956]  ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10
[   80.625704][ T6956]  pm_notifier_call_chain_robust+0x27/0x60
[   80.627468][ T6956]  snapshot_open+0x189/0x2b0
[   80.628719][ T6956]  ? __pfx_snapshot_open+0x10/0x10
[   80.630020][ T6956]  misc_open+0x35a/0x420
[   80.631459][ T6956]  ? __pfx_misc_open+0x10/0x10
[   80.633121][ T6956]  chrdev_open+0x237/0x6a0
[   80.634645][ T6956]  ? __pfx_apparmor_file_open+0x10/0x10
[   80.636490][ T6956]  ? __pfx_chrdev_open+0x10/0x10
[   80.638040][ T6956]  do_dentry_open+0xf59/0x1ea0
[   80.639287][ T6956]  ? __pfx_chrdev_open+0x10/0x10
[   80.640582][ T6956]  vfs_open+0x82/0x3f0
[   80.641640][ T6956]  ? may_open+0x1f2/0x400
[   80.642747][ T6956]  path_openat+0x1e6a/0x2d60
[   80.643940][ T6956]  ? __pfx_path_openat+0x10/0x10
[   80.645193][ T6956]  ? __pfx___lock_acquire+0x10/0x10
[   80.646532][ T6956]  ? lock_acquire.part.0+0x11b/0x380
[   80.647889][ T6956]  ? find_held_lock+0x2d/0x110
[   80.649108][ T6956]  do_filp_open+0x20c/0x470
[   80.650215][ T6956]  ? __pfx_do_filp_open+0x10/0x10
[   80.651469][ T6956]  ? find_held_lock+0x2d/0x110
[   80.652768][ T6956]  ? alloc_fd+0x41f/0x760
[   80.653883][ T6956]  do_sys_openat2+0x17a/0x1e0
[   80.655090][ T6956]  ? __pfx_do_sys_openat2+0x10/0x10
[   80.656410][ T6956]  ? _copy_from_user+0x59/0xd0
[   80.657741][ T6956]  __ia32_compat_sys_openat+0x16e/0x210
[   80.659465][ T6956]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[   80.661458][ T6956]  ? __pfx_lock_release+0x10/0x10
[   80.662727][ T6956]  __do_fast_syscall_32+0x73/0x120
[   80.664041][ T6956]  do_fast_syscall_32+0x32/0x80
[   80.665255][ T6956]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   80.666826][ T6956] RIP: 0023:0xf7f98579
[   80.667823][ T6956] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   80.673088][ T6956] RSP: 002b:00000000f50c555c EFLAGS: 00000296 ORIG_RAX: 0000000000000127
[   80.675723][ T6956] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000080
[   80.678279][ T6956] RDX: 0000000000040040 RSI: 0000000000000000 RDI: 0000000000000000
[   80.680819][ T6956] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   80.683373][ T6956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   80.685932][ T6956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   80.688479][ T6956]  </TASK>
[   80.689285][ T6956] Modules linked in:
[   80.691487][ T6956] ---[ end trace 0000000000000000 ]---
[   80.701572][ T6956] RIP: 0010:__list_del_entry_valid_or_report+0x12c/0x1c0
[   80.706241][ T6956] Code: e8 99 11 db fc 90 0f 0b 48 89 ca 48 c7 c7 c0 72 b1 8b e8 87 11 db fc 90 0f 0b 48 89 c2 48 c7 c7 20 73 b1 8b e8 75 11 db fc 90 <0f> 0b 48 89 d1 48 c7 c7 a0 73 b1 8b 48 89 c2 e8 60 11 db fc 90 0f
[   80.712724][ T6956] RSP: 0018:ffffc9002690f250 EFLAGS: 00010286
[   80.714811][ T6956] RAX: 000000000000006d RBX: ffff888012db3000 RCX: ffffffff8178e1e9
[   80.717494][ T6956] RDX: 0000000000000000 RSI: ffffffff81798976 RDI: 0000000000000005
[   80.722021][ T6956] RBP: ffff888012db3550 R08: 0000000000000005 R09: 0000000000000000
[   80.724256][ T6956] R10: 0000000080000000 R11: 0000000000000008 R12: 00000000ffffffff
[   80.726925][ T6956] R13: ffff888012db3558 R14: ffff888012db4000 R15: ffff88801284b010
[   80.731001][ T6956] FS:  0000000000000000(0000) GS:ffff88802b700000(0063) knlGS:00000000f50c5b40
[   80.733409][ T6956] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[   80.735089][ T6956] CR2: 0000000020e39000 CR3: 0000000066d04000 CR4: 0000000000352ef0
[   80.739397][ T6956] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   80.741429][ T6956] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   80.743394][ T6956] Kernel panic - not syncing: Fatal exception
[   80.745383][ T6956] Kernel Offset: disabled
[   80.746442][ T6956] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:48:31  Registers:
info registers vcpu 0

CPU#0
RAX=fffffbfff2d36da4 RBX=fffffbfff2d36da4 RCX=ffffffff81761502 RDX=fffffbfff2d36da4
RSI=0000000000000008 RDI=ffffffff969b6d18 RBP=fffffbfff2d36da3 RSP=ffffc9002582f138
R8 =0000000000000000 R9 =fffffbfff2d36da3 R10=ffffffff969b6d1f R11=0000000000000001
R12=ffffed100475f5e3 R13=ffff888023afa440 R14=0000000000000004 R15=ffff888023afaf48
RIP=ffffffff81fbb47f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000f4c01da4 CR3=0000000068b7e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000002a030c RBX=0000000000000001 RCX=ffffffff8b1a3819 RDX=ffffed10056a6fee
RSI=ffffffff8bb16e40 RDI=ffffffff81702e19 RBP=ffffed10039dc910 RSP=ffffc9000047fe08
R8 =0000000000000000 R9 =ffffed10056a6fed R10=ffff88802b537f6b R11=0000000000000001
R12=0000000000000001 R13=ffff88801cee4880 R14=ffffffff901ce390 R15=0000000000000000
RIP=ffffffff8b1a4bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b500000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000020029000 CR3=0000000069d9c000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=00000000001304f1 RBX=0000000000000002 RCX=ffffffff8b1a3819 RDX=0000000000000000
RSI=ffffffff8b4cd180 RDI=ffffffff8bb16ec0 RBP=ffffed10039df000 RSP=ffffc9000048fe08
R8 =0000000000000001 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=0000000000000001
R12=0000000000000002 R13=ffff88801cef8000 R14=ffffffff901ce390 R15=0000000000000000
RIP=ffffffff8b1a4bff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000020e77000 CR3=000000002604a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7423ff4
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=000000000000004f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85142675 RDI=ffffffff9a6672c0 RBP=ffffffff9a667280 RSP=ffffc9002690ebb8
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f
R12=0000000000000000 R13=000000000000004f R14=ffffffff85142610 R15=0000000000000000
RIP=ffffffff8514269f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000020e39000 CR3=0000000066d04000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000