last executing test programs:

4m21.98485196s ago: executing program 0 (id=489):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32)
r2 = syz_io_uring_setup(0x121d, &(0x7f0000000480)={0x0, 0xfffffffd, 0x80, 0x0, 0x2ef}, &(0x7f00000002c0), &(0x7f0000000080)) (async, rerun: 32)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async)
r4 = eventfd(0xffffffff) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073597a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c00014000000000000000002c0001800a0001006c696d69740000001c0002800c00024000000000100000000c0001"], 0x110}}, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async)
r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000000)={0x4000000}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x1, r8, 0x0, 0x10000, 0x1}) (async)
ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x2, r8, 0x0, &(0x7f0000000780)="5dfeff4ba80d7db15cd787", 0xb, 0xa}) (async, rerun: 32)
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) (async, rerun: 32)
ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x2)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1)

4m21.835735153s ago: executing program 0 (id=491):
syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000380)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
iopl(0x3)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009})
pread64(r0, 0x0, 0x0, 0xce2) (fail_nth: 59)

4m21.268135459s ago: executing program 0 (id=497):
socket$inet_smc(0x2b, 0x1, 0x0)
userfaultfd(0x801)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socket$inet(0x2, 0x3, 0x5)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
socket(0x10, 0x3, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$can_j1939(0x1d, 0x2, 0x7)
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18)
pipe(&(0x7f00000001c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[@ANYRES64=r5], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

4m21.110579356s ago: executing program 0 (id=500):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0xa, @pix_mp={0x4, 0x40000000, 0x0, 0x0, 0x8, [{0x1, 0x4}, {}, {0xfffffffc}, {}, {0x0, 0x1}, {0xfffffffe}, {0x20}], 0xfc, 0x0, 0x1}}) (async)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x45) (async)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
getsockopt$nfc_llcp(r1, 0x118, 0x1, &(0x7f0000000340)=""/250, 0xfa) (async)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1, 0x0, r5}}, 0x40) (async)
mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) (async)
shutdown(0xffffffffffffffff, 0x1)

4m20.934516991s ago: executing program 0 (id=501):
r0 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0a45320, &(0x7f00000001c0)={0x80, 0x0, 'client1\x00', 0x0, "706283c421ca447c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0"})
mknodat$null(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0, 0x103)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x26b4}}]}})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)})
r3 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
readv(0xffffffffffffffff, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000240)=""/108, 0x6c}], 0x2)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1})
io_uring_enter(r3, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r6, &(0x7f00000023c0)={0x2020}, 0x2081)
r7 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x109000, 0x0)
mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x810, r7, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r8}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000f75ffffff0e000000000000000300000007000000030000ca75ffffff00000000000000002e"], 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
writev(r8, &(0x7f0000000080), 0x0)

4m20.605835167s ago: executing program 0 (id=502):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
inotify_init()
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100), 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x2020)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x402423}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0x100, 0x0, 0x2, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0xe4, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb8}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_FLAGS={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x20008000}, 0x40084)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x0, 0x101000)
r5 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f00000003c0)={0x4, 0x0, 0x2})
ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000340)=0x8001)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$sr(0xffffff9c, &(0x7f0000000d40), 0x40, 0x0)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d80)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1, 0x13, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd2}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffd}, @call={0x85, 0x0, 0x0, 0x80}, @generic={0x9, 0x7, 0x1, 0x2, 0x1c0000}, @ldst={0x2, 0x2, 0x6, 0xb, 0x3, 0xfffffffffffffff0, 0xfffffffffffffffc}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x2}, @tail_call]}, &(0x7f0000000900)='GPL\x00', 0x0, 0x1000, &(0x7f0000001600)=""/4096, 0x41100, 0x34, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x2, 0x9, 0x1a1e, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000e00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, r8], &(0x7f0000000e40)=[{0x1, 0x5, 0x6, 0xb}, {0x5, 0x2, 0x6, 0xe}, {0x1, 0x2, 0x2, 0x8}, {0x5, 0x3, 0x8, 0x5}, {0x3, 0x3, 0x4, 0x8}, {0x0, 0x2, 0x1, 0x4}], 0x10, 0x9, @void, @value}, 0x94)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a10800000001080044001a800e000100697036677265f4000000300002800500160085000000080015002daf0c0014000600fc02000000000000000000000000020000000000b2817470ea3f2227ce7fd221b43888ee828ecd"], 0x64}, 0x1, 0xba01, 0x0, 0x4004}, 0x810)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e040c122022"], 0x7)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000005000600002000000a00000000000000000000000000000000000000000000000700000000000000080012000000040000"], 0xa0}}, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000040800000", @ANYRES32, @ANYBLOB="0000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x1f, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000009000000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000004c5c008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYBLOB="0000000000000000b70500000800000085000000b3"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x7, 0x8, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

4m20.458357975s ago: executing program 32 (id=502):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
inotify_init()
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100), 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x2020)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x402423}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0x100, 0x0, 0x2, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0xe4, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb8}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_FLAGS={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x20008000}, 0x40084)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x0, 0x101000)
r5 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f00000003c0)={0x4, 0x0, 0x2})
ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000340)=0x8001)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$sr(0xffffff9c, &(0x7f0000000d40), 0x40, 0x0)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d80)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1, 0x13, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd2}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffd}, @call={0x85, 0x0, 0x0, 0x80}, @generic={0x9, 0x7, 0x1, 0x2, 0x1c0000}, @ldst={0x2, 0x2, 0x6, 0xb, 0x3, 0xfffffffffffffff0, 0xfffffffffffffffc}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x2}, @tail_call]}, &(0x7f0000000900)='GPL\x00', 0x0, 0x1000, &(0x7f0000001600)=""/4096, 0x41100, 0x34, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x2, 0x9, 0x1a1e, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000e00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, r8], &(0x7f0000000e40)=[{0x1, 0x5, 0x6, 0xb}, {0x5, 0x2, 0x6, 0xe}, {0x1, 0x2, 0x2, 0x8}, {0x5, 0x3, 0x8, 0x5}, {0x3, 0x3, 0x4, 0x8}, {0x0, 0x2, 0x1, 0x4}], 0x10, 0x9, @void, @value}, 0x94)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a10800000001080044001a800e000100697036677265f4000000300002800500160085000000080015002daf0c0014000600fc02000000000000000000000000020000000000b2817470ea3f2227ce7fd221b43888ee828ecd"], 0x64}, 0x1, 0xba01, 0x0, 0x4004}, 0x810)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e040c122022"], 0x7)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000005000600002000000a00000000000000000000000000000000000000000000000700000000000000080012000000040000"], 0xa0}}, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000040800000", @ANYRES32, @ANYBLOB="0000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x1f, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000009000000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000004c5c008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYBLOB="0000000000000000b70500000800000085000000b3"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x7, 0x8, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

53.670838048s ago: executing program 1 (id=1588):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/kernel/profiling', 0x22042, 0x0)
mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x13, r0, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x19, 0xd, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000005c0), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000002f00)={0x0})
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000100)=0x15)
ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x3, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001bf80)=""/102398, 0x18ffe)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0404190c4feefd25ad2983456cc952f1e6fc"], 0xd)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
io_uring_setup(0x2195, &(0x7f0000000400)={0x0, 0x7897, 0x200, 0x3, 0x25e, 0x0, r0})

53.230704731s ago: executing program 1 (id=1589):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 64)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 64)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) (async)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0))
accept4(r1, 0x0, 0x0, 0x800) (async)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x101a02, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460ca807080000000000000000010006009bd6e2905aab8e44839024b3a5755094050000009c0100000000000040000000000000009902000000000000040000000600380001000100f4ff090005000000050000000b000000000000000800000000000000000200000000000001800000000000000900"/136], 0x78) (async, rerun: 64)
r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000000)={r5, 0x0, 0x5, 0x0, 0x3}) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000780)=@ethtool_per_queue_op={0x4b, 0xe, [0x3, 0x53c21de4, 0x6, 0xf44, 0x20000000, 0xc19d, 0x80000001, 0xffffff48, 0xff5, 0x10, 0x52c, 0x5, 0x7f, 0x8cc1, 0x40, 0x7, 0x3, 0x7, 0x9, 0xfffffffc, 0x1887ff7a, 0x400, 0x3, 0x9, 0x2, 0x10, 0xa5f7, 0x3d1, 0x49ff, 0x5, 0x7fff, 0x5, 0x7, 0x90, 0x10, 0x2, 0x0, 0x3, 0x8, 0x0, 0x9, 0x529, 0x5, 0x4, 0x5, 0x20000, 0xcdc, 0x3b5, 0x4, 0x6, 0x40, 0x1d5, 0x4, 0x9, 0x7, 0x2, 0x401, 0x5, 0x2, 0x0, 0x3, 0x7fff, 0xafc, 0x5, 0x7, 0x100, 0x1, 0x0, 0x4, 0x2, 0xe, 0x1, 0x9, 0x8, 0x8, 0x6, 0x9, 0x7, 0x7fffffff, 0x1, 0x2, 0x4, 0x10001, 0xedb9, 0x7ce2, 0x81, 0x4, 0x8, 0x8, 0x0, 0x9, 0xd, 0xc, 0x7, 0x100, 0x29e5, 0xb737, 0xc5e, 0x1, 0x6, 0x100, 0x40, 0x81, 0x7, 0x6, 0x2, 0x0, 0xfffffffb, 0x39, 0x10000, 0x0, 0x1000, 0x5, 0x80000001, 0xc4d46928, 0x100, 0xffffff7f, 0x6, 0x8, 0x3, 0xe35, 0x7fffffff, 0xe, 0x0, 0x7, 0x80, 0x7, 0xa94], "1b3d0e4eb255a6e10a995509226a9678fe56afacf9f455556aa44e84c8d851b5ab0efe91e0b37878cfd5b3157dcf1226386728f6d205755dc2a6f085ed1a8f1216387f7cc04c828d7b2022c1e3e52c7c4ca82839e75fb458f028b5947b7ce458f8d7c6697a7feb6b6e59fb1141a5596005cc8036c025f19bbd9461a663ea6fc3509cf2903a53ceedf4506513c4822b63b5f18c9c0e03a8856c5f0af2526731e609805d8c20d21edd5b3927f6e5caa04509840caed113e5d9a50b2482923ab99a01e348348ea2344d597d328dd56517651660ff0556bb3f250cee17762a0917b82fe1b5d8716d3be0f6df855895ce032872721f2327248c"}}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) (async, rerun: 64)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="12010002000000406a05de0040000102030109022d00010110500f09040000020301cd03092109000401221c080905db160ecc06095909050203ff03fc5705"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
symlink(&(0x7f0000000040)='.\x00', &(0x7f00000001c0)='./file0\x00') (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40000, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_off}]}) (async)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x400000, 0x69)
mknodat$loop(r7, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) (async, rerun: 32)
chdir(&(0x7f0000000140)='./bus\x00') (async, rerun: 32)
rename(&(0x7f0000000500)='./file1\x00', &(0x7f0000000000)='./file0\x00')

53.22774084s ago: executing program 1 (id=1590):
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58)
socket$kcm(0x10, 0x2, 0x10) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xec, 0x10, 0x300, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0xa, 0x0, 0x20, 0x2c}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2, 0x63}}, 0xec}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)

53.139356203s ago: executing program 1 (id=1591):
r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x18e}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
creat(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000500)='nfs4\x00', 0x800000, &(0x7f00000001c0)='\x01')
r2 = timerfd_create(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

53.010406162s ago: executing program 1 (id=1592):
socket$netlink(0x10, 0x3, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async)
memfd_secret(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$sock_timeval(r2, 0x1, 0x43, 0x0, &(0x7f00000000c0)) (async)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x1a4c, 0x400, 0x1, 0xbfdffffc}, &(0x7f0000000000)=<r5=>0x0, &(0x7f00000000c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_ACCEPT={0xd, 0x20, 0x3, r3, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x8000, 0x0, 0x0, 0x1, 0x0, "000100"}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newtaction={0x130, 0x30, 0x0, 0x1, 0x25dfdbfd, {}, [{0x11c, 0x1, [@m_ct={0x34, 0x802, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010101}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0xe4, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffff}]}, {0xb0, 0x6, "bc7840626c166c74cddfaba44ac00b8c31a5ed29ef72000000005011929419c1c79b6b561284060077440aa8ecd5e93c7e68add7c370fa4cf46dbf438c6dfc34d49ecceebdefd0523c322e4bb4c1fef0d4f534aa463ea5266326494561ef8bef52a9aca4cc6f06507341a15565cee6213275d9571efc73616d23bf1c4700a5f857d4b185c46c6978541d4f4c7f609afef8dfbb48578d3026a0e69273bcc345143376d5a00715bd4e89daa951"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async)
r7 = getpid() (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r8=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) (async)
r9 = openat$pfkey(0xffffff9c, &(0x7f00000001c0), 0x14000, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x0, 0x0, 0x0) (async)
quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) (async)
unshare(0x6e060000)
dup(0xffffffffffffffff)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x480043, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

52.658355569s ago: executing program 1 (id=1595):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000001cc0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=', @ANYBLOB='`']) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=', @ANYBLOB='`'])
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
pipe2(&(0x7f00000000c0), 0x80000) (async)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80000)
write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50)
fcntl$setpipe(r4, 0x407, 0x2000000)
ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000380)) (async)
ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000380))
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xc) (async)
socket$netlink(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)=@getqdisc={0x3c, 0x26, 0x8, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0xfff1}, {0x0, 0xffe0}, {0xf, 0xfff1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000801)
ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="00000000440400"/28, @ANYRES32=r5, @ANYBLOB="000000000300"/28, @ANYRES32=r5, @ANYBLOB="000000000200"/28, @ANYRES32=r5, @ANYBLOB="00000000000000000000008000"/28, @ANYRES32=r5, @ANYBLOB="00000000040e00"/28, @ANYRES32=r5, @ANYBLOB="00000000000000000000008000"/28, @ANYRES32=r3, @ANYBLOB="000000001d00"/28, @ANYRES32=r3, @ANYBLOB='\x00'/28])
socket$netlink(0x10, 0x3, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0xfff1}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})

37.369821736s ago: executing program 33 (id=1595):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000001cc0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=', @ANYBLOB='`']) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=', @ANYBLOB='`'])
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
pipe2(&(0x7f00000000c0), 0x80000) (async)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80000)
write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50)
fcntl$setpipe(r4, 0x407, 0x2000000)
ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000380)) (async)
ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000380))
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xc) (async)
socket$netlink(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)=@getqdisc={0x3c, 0x26, 0x8, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0xfff1}, {0x0, 0xffe0}, {0xf, 0xfff1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000801)
ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="00000000440400"/28, @ANYRES32=r5, @ANYBLOB="000000000300"/28, @ANYRES32=r5, @ANYBLOB="000000000200"/28, @ANYRES32=r5, @ANYBLOB="00000000000000000000008000"/28, @ANYRES32=r5, @ANYBLOB="00000000040e00"/28, @ANYRES32=r5, @ANYBLOB="00000000000000000000008000"/28, @ANYRES32=r3, @ANYBLOB="000000001d00"/28, @ANYRES32=r3, @ANYBLOB='\x00'/28])
socket$netlink(0x10, 0x3, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0xfff1}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})

3.575513484s ago: executing program 2 (id=1880):
r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x408000, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
sendmmsg(r0, &(0x7f0000006e00)=[{{&(0x7f0000000040)=@x25, 0x80, &(0x7f00000014c0)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000000c0)="f922a42428b46ecdfc0c7870bef006d83d700e1bd1eca48c6dffd6b0e462969476d81911e1026ad58c994b9459061b6e8f85d0fdba1cea7e8bad02ab54832c452a76c4cd3c40c965f0fed9b3d2cadeed5fe0d8a6e2", 0x55}, {&(0x7f0000000140)="16ef88175bf542fc4da313d2cf4474dbfc8d40884ff88a778fcffedb073b50c29411d3592f0f01a592d910d78da646d02a5359b1e4caf60ae9eeff5ceb7a05fbc9e91c93cf88f08c15e68d7bd09b65fedbba619efe09989cb92f22ea42d2cfb9b2836e7afec634f251ca1b16b1fb3a22a5652aeb092520f6cf024225087bc287ff9ef54886b5c8e41ac249057fd881eb252cd080f6b9eb01ad2ab168e3c14ad6eb4da7acefb30d83f59b5a243485de7c164a56a394e9cb46d05c521be6495a9d2f30e369b67569f4e84df714a2b81dd8c9db3e54e8ec8821f5058355d1a6e80b48466168d5bf7b8f926c814878fa402b30195aeb6e28", 0xf6}, {&(0x7f0000000240)="f5ec6888cc8fc9717a2ae21667", 0xd}, {&(0x7f0000000300)="68c92454c652c0b97e69b8532ac96855351503ec5ab6ac934b8beffc60548c6d5141459970954294fdc6b084f8d2d8110fb149d0f07708c87627c65809b42735f14bc6d31f057fe9e9e080dae39d76a11946e19baec2be2c399cc89a32808fa2831493cd85181f04dc51480462709a872a2553da4568f521441f9e7734ad99bb1189f738f030e59f3b7cfefa5005cd15a0ad6e68b490753379d0c636aa16955454bf400bc2db23243601402c0dcb151f99d48637660162917fe89865cad576199f586e16d7", 0xc5}, {&(0x7f0000000280)="447f1c0cfc74a9971cb08f7c8a9cd27594f5727fc6576cd823b9b7108c0f7ed854acdcae512b282e1a9c9683a69c7d786edefdc32d7ecf97", 0x38}, {&(0x7f0000000400)="1df79a8cd5e9eae8d21c4027e7d4849a10f952bf", 0x14}], 0x7, &(0x7f0000001500)=[{0x54, 0x11, 0xd265, "dee0e4f517cee4113e4ffc6183ef21f097a91b33b03efc4fd6dded8a9a566706a22afa9037f714070d982e6919151c6e72013c761de0eb1ab5ec16250f8abf4b6cc1ecc024a9"}, {0x8c, 0x6, 0x8a8, "58050702739802b2f9201593487af504686e3f9687bb6e75723debf9cfbbce4b87ebdd1bb4a31c7d09ceb36b2f9417cfcfcf47cfc5773e0213db7c8ea793b1ff0660001ce03aaf85817189a6c8bb6bf1be85c1a4795bc561ead95f491f2d8d06d1d4e08e6ce1222f68fd75c1ff4515eb2c6bc70597898c9c795b62fbcc80019c"}], 0xe0}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001600)="3fd01b6223b3c7ce1272e78f744f2beacd015e7794c9bdb953a05e3c102874dee926532dd21c9afde4163ba30bb445c4c4179def627888a747b5a371a760509286c8f6a1af1f3a4a83184409254cf23b3f65ba1a64c7e1308440617baebc7cd131edf5bbd9ce9ad82a5466408535202fb9d971dcbc1d0bd65bbe4c15b01762a0e5f88c6460dcaaf7", 0x88}, {&(0x7f00000016c0)="2ade191124e2d3a37029dd0970404e0d1d957488d382419577bdd5e2af3ca82f24627e34fa84b82ccc8cdfa5cc5db101505fe953d90a0c872bfa816af8dbb56176fa8747058d89caea67aaebe759e2266b1f7db60353fe511abffe859b2c8856d7a2f62f194f8ae4f972a93acf0c4c9542001c5956ca975f54", 0x79}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000002740)="bc18d675cc848c83803f972b3ebe92bb576831665a0d0456f2e2a76ccb770a21c80a1a53ed29bb1dbfb3b2c92f3a302dbb8bc52ec978ca387b10fbe730326e0048c442b0dcd782b2ee1e2802df0e8931e222abcdd833dcd0535d113c56a6e61f37837aeed42458339c145c556801ab555061e4c8ba9d7432055fc5a16262236b9d8639726bb36529b089cbee99cd02eff37941970f7f5ef40a3cf1dad55306d876d476d22b6c086d49ef585c44c1af01903c47f2fd56d594978979ba9e0ec5d13821fbcbf6b142803b95b36017fdfa1859c448a57e8b1e170fce32c681311e1b56f02167a61717f77356326c49316826a4b5624235082f", 0xf7}, {&(0x7f0000002840)="5f4a67e9c325ffcd6003bb3869c4f442ce0cf7086434b466b8743b4babb8aba53a9c3b98b377bfd3cd23661f230b8960a2dd4e4c98eb85898345399d0de12deb6516bb1169bce19cc5f9c1d1a71d8d42e54cb8da59fa43ec84bc2808e972ec2896c42301ef48d10f4699d02d34d4364471f594dfe9c06cb63029e669d5ed1cfdec204e117162daddc352a4fac7427941e7f19b575d4da42e048ded36c54d3fca4efd5cef17c5ecdf69b566489363ed2ef5f333cd0999da660f2f512821dbfecb2dd657a86afe8ccb0823c92dea327f44b6b12ea06f7e8df12b4f473b0a12f876c34c51e1a1b6", 0xe6}, {&(0x7f0000002940)="c00909c5aa2a9ff3811ae825c30d3b39fde03241d3325ebfe5a591591e287f9416ab8fa890002930fdf2a48a655880da0c156c254aa97459172f961b4f6b9789294753ab7c24e53e8dd2653fb93e57464e9c8de46bdfe2333b9e67d8d224587b2c62d8bb133c448531d365539c02d6479844033a4039de85ca2163d215121a615040b48b69b18453d483b5bc46b00375a1a6d58427b6deb03d6d9f01b2ca86091d52a18794a1cec61c5a7f3f2ded", 0xae}, {&(0x7f0000002a00)="cb6f334252752818230958a611e7dfe16570e9b46c68cd2d0be620f9e798ac41e94218e6c0ff6a4c9919ed401c5455e353aa5cbdf05b2096d703febb5f7194c2c03e60ef9244e51913510b0d04c6639602ad64ba9cc3645c1a54d095304c50be3f67fdcfe71b79c8d421c09c98840e6569e9a08ac38bba04a65593e95a6f72926c81243f1a79e4cf0bb876c2", 0x8c}, {&(0x7f0000002ac0)="d1bd58ec60df5cd5711529af7513b43c08b4666abb4a57acc0bef18096aa60beec65b48457c2124f7c6d078e7c88869bb13591f306f99c8eec1b968a536963da02d0adc72e8307eb7dd285", 0x4b}], 0x8, &(0x7f0000002b80)=[{0x3c, 0xff, 0xf000, "7c197d26dbc0c9e00d8759bcfe8a058a873c4ecb43ba6083b47f06e5822ec43c21cab39acd5e738cc18538c1e1"}], 0x3c}}, {{&(0x7f0000002bc0)=@qipcrtr={0x2a, 0x1, 0x2}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002c40)="f2092d317d6e1e164f2b32f5ff2c83d959f64c7e3b4d289879bbdd7b6fa84965d89823c438bd8880d9307935807071", 0x2f}, {&(0x7f0000002c80)="095451ccc8fba484ebc1c14b3119bd759902b606d2caebfddc0eac96deba9a02a7b35f8e8bc49e56f06112ad115320b462923cbf57b4a483d02a126f", 0x3c}, {&(0x7f0000002cc0)="b3b2a293", 0x4}, {&(0x7f0000002d00)="e5d7a2a92752b7dfba2ec27446117910955a3dd9c7a9e4b58ed2e35d9e1fa788b7b581f7f50ec625b6fc1c9d4740dd22f4302a998191a5fce3d3446ff06ef6f870a3dc1f1a14eed4031e06f4d5f04767911c4e7af3f5acef6bd35fcbc369a435c0f0ba945b6662d8afdfb8", 0x6b}, {&(0x7f0000002d80)="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", 0x1000}, {&(0x7f0000003d80)="d795d5578acc5875664dcfa380fd1dcb83e0d614056c720966ab18756fa32c3d43a157ee506f4ae43dda73116db0c66c1b10341469fcc6ed039e08b90933e954287d3a34815f4a7b2af64208335204f32d2b8ef8029bc96e6e517a0d39c471f664821d822ab3f914989c107f34c12dd0166db5d6fe6d52c8f644e55e7158eb9fc4ccce45b0fca0d0", 0x88}], 0x6, &(0x7f0000003e80)=[{0x5c, 0x88, 0x0, "220110ed72fe19d7d204e4dc5e665f238f1ed8aed6416d36dac0bb67c041718b1ebd15e7945c2de7143545262a5f0c1113a9a59130a142521c3e26c3122c1b2f981d5ce10674a0e5871b56121d8fed"}, {0x10c, 0x84, 0x1, "348d898852de71046c8311bc61aae0cd239753870909d0d5dcebbb72de71282d4b82553ffb7d9ff18e9797b1a73ae484a9550eb92c131eded90b3ced466109e265b5c1f808c7bf3f06cddc1fd2592c9b8ec8259748d718c8e53fed99ed45727d0f4253b005b4f846cd4397e6ea31f9b43101a3e4433b535c589f641bedf627879c3073467fe07ee881c9b946aebb427787135707c0fb858403b70e5256c34178e125012b98d01d611117c89821e5c2ad0c5cf79f75f230791cf1e25f5acc76809c75ce2a7fafa1f10b92e32d31e0ed530e4e7eb33d15553548379fc72507fbfb1d6be2752c0fd952d66846a482d3e9e219094f1573b6c7610fbcb751eb"}, {0xd8, 0xff, 0x7, "87ad8e662b814ea89f9a8425c7d16e93873bb340b66329502860e2d4d3dac109e5863564fa9d6bcc066208c781c7426767c2b4535877136f949619d76d4e486adf53acba0edc48ebe3da079d2f64e69eb677fc8e081a979e372e51f00ebe14c60b7ad3d31badf5f59006e7d728088f8050bb3390668a6a2e167fb4e179f849a8c566be4a7d915c9a53c4dfd2ca34cf4fc9ccbfa32d571b6c08e4a3238b1b29f84b720755170b5ff72bcc09a33c5f193068dc3b0e0ba15437c6a03a878697778efae78b435d6d9491e87700f8"}, {0xbc, 0x116, 0x5, "65a11a2425bc34893c83a7fe3f7c8425975fe79be138b1badc0c7923146a21a3c9fd30eee10d9bdfc3d9c872fd2eb66bc2f466d76dfb6ea6d643eb5f5c65a899b729685a024566395c8c509c22489de34b3d856e870d33e0ecd5b38b1866063df0880a2d261af49cf6da85c4a3bbc7f85c9a8beba836665b94d866c4f1e20436ed461f71648fef0dd5eb0b3988b9efb2fa64c2cf81d9f9188ee9a3f73546b28dd62241135c26d3a6a7810ee753"}, {0x100c, 0x10d, 0x0, "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"}, {0x14, 0x1b54b48c84464d03, 0x2, "e49ad44b837e28"}], 0x131c}}, {{&(0x7f00000051c0)=@isdn={0x22, 0x4, 0x10, 0x2, 0x40}, 0x80, &(0x7f0000005600)=[{&(0x7f0000005240)="1f382994b6232ee4285d69defb9ccb19ea0e40b3a6e5b3031d505adc20f716d656e605a36230ad2942dd50e3b15ccc0e476db2c969ab75059c2da832cf8924bdd7cbeb02a9db6ab6d51c4cc1d077af181be8109e5661880a397a2ea29d995eb9d561d4a46a7c9df725e50b11f1a6b19ee10203e9c1bf202208f53d6bac9381ed12f9fe211ee4f35c655f35e620e7c5b998b03f959682f874edd398e35be198fb266f75478c484dcfaaba14b3c0b2ec7b2508ead10e74f253e585b3196de931729ae8626dac5b8903cc507c7b21c5d27d715c6730afdd981438c14ff5a5f3", 0xde}, {&(0x7f0000005340)="315e34add91c9ffb4e6337a5ffca38de6860ad6d5886803fe667f61c673173aa89cc94781ede7e97aeb73c2b16005d053d0f35b6e842b1f8317caa37f3a9880b3c2e7b9651ca77f60cb67a657e1ae40f5ee3f4bd3a7cf76d410867a897aeb03adf92985f7d93bca5980b7b4f45675a71363a05", 0x73}, {&(0x7f00000053c0)="537984254c5516a294d1a7af2c940aa4a66784828448a8a3b30cc3a32ba34b2ed1879732e8cd35f677489d4c8e2dfb783721acba137089ab4a6c1195f15ef3e72c8ab2f3b5e611e093e62588caf9dcfcc93ad9444bdf4098b94972ea40c7347bec153950025c8f8d5d44c231a4c742aa9901027db93e518c938a78a52bd5a8a20cb1", 0x82}, {&(0x7f0000005480)="1ae437ffe350e16e2c1d9f5282f79eda860cbc51f84b14594bd84cab481a751ec547b75ba0161475a6cea696781a34b617c31ecd4b770b993debd303d1a4419be128ac97efc3b6e8da3f139027436a6bc139036902c56822070b5099bf8013be5eff5365678d87cc0dd53f8ea574df3ecb3708a9936d3db2bb4553b8a74c952e0ae72487929bcbf129694caab1e26320e9202f8ca3115b5611480ec2f6c160a27b5f7ffa991267065c507471afd77ae34499443ee5fa67b63aa2001565cadf899d9447831658133ecdc9a9bc49d774c32d962afc7cf6c4df2b82", 0xda}, {&(0x7f0000005580)="687be2e43dfa6e1b1e1654bc642ba1d1214a41a80d2d6e6048acf363e765b28f3f6d294dc03f9f8d899ac310c904086be64e05c1df9ecfb023e678f124918c261adbfa", 0x43}], 0x5, &(0x7f0000005640)=[{0x74, 0x101, 0x2, "5dcd36d1b2c3dc648be823ea98218c1b2b34a29f4835b9b5ade4b8f4c7efa0544d206261b3a61df456f366c672534b517638105eae99779b60fa15fb24ab4be723b8b8bd283731cec83bf42493557f740d6bfba5fdabb3325f01b6d199c4eb665e88c1440a44"}, {0xc, 0x1, 0xffffffff}, {0x100, 0x102, 0x1, "a8dcbf04cead3cc62195438e587c072540d847e2b2b73f227bf24a7f1d7793c633ce5ea5ad70462fcf04eeb8b9515e4ea64f1c23416e23c9d9cf2bfba42b2359e9cf284eb9c6ecc48b87f00731bf4aba9fea35b238040918779f85750cacd6d9eedc1f875f4952ddb3f80bacb1227af8b7f7f58fbb5e9c3516a27384f539ede054ededcb666b66ba3b54d75156abae5ad41d85bd30b65f2ac55e10079f962fb0669432238e98e473f32cdcc0315bd9ba6097d3a00839273b4798b3896dd5c51f8465c5d542f051be1c1bff91c3afba45ee48cff3665c427e007484d848e33ee1c3cb29ce9aa9c382bec3caf62a3ef83fa1"}, {0xfc, 0x102, 0x9, "7c8aabc1edfc428847984fd417fcac0031f494fdf8757f85e26b9ac675fbab1ce04814fa8067ed5791f50b59839bddec5b2a4e0c868605f1439f5016f38c8154844287b8f2f9cd06a48e0dea095ccf0dff8134a1f8911f101a6968230a82891999c5a60a145be48ab2e74eb1bbdd6b707362117ceff184513fd3ef72fa7b2104c56047c261b43e672f22c9cb409eef7bb91819623b233134e24d4af735c3f26f6dff6abeffbf57df7bf70737f2cd704f4b899397cc47c162fcc2323433cc6949cb1fe983659f3f87573ee91be56863ad544db74315f2ecf01eea0ddd24ffc0ff564f5dde963f365033921331c4"}, {0xdc, 0x113, 0x10, "4b63cbf47c80a30ef7ec069045f1e3af0b5b1c8f0e968ae0e2511e15384eb8c057f7fd6d8e980cfa47f0b8a8445ca23e9b29c3fea7c97357d46da75000dbfac38c9a080537ce3cee11fbe8d072ec647a04e35b5a1d512325061bf3d337d6fb943fa2a0944425a19af02a1161fc60cc4ce08bfe6798da0620be067f52f70d9bc9d46341fb3bfae2033a96dfda949ff4986ea2f460b3357362140696de85f6ac8af9fb99f73c421b9e1302e98b8adcf821a6d8d2e83df5b1b9279f55f4b2f75be9936fa6bd68d91d2625786fb753a7"}], 0x358}}, {{&(0x7f00000059c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x2, 0x4, 0x1, {0xa, 0x4e20, 0x1, @empty, 0x9}}}, 0x80, &(0x7f0000005d80)=[{&(0x7f0000005a40)="e16dbdad08e5dede423f90a7b4aedb7dc95783da314d2b0bea52f4d0197c6c500066b6e3ea7b3e097f7413fcff5247c7403538889baab9e5bc9b9e48d7efadb1399838d11f9a84be464b5ed3fb610d342db3a0856601955ee3eed5fd8e0acdaed0c708ef15bf1d94e313b99d404557962eed2286e0824238e7a700fa12b5bb4f35b987e63f4e9f91d42ee7ddd927560d51461d65", 0x94}, {&(0x7f0000005b00)="94e9849581e107bab5e9ccf990ac8b9a3b98e305f5c649419dd3b4fa7baa9af7618acae25472578e775f32b3b0d93ca94337452b8428d84d8037a167603ba5e6dea44b70a661e344ec0b863896b75b8abfed57952a7ee516b5b497dec863163ba5a2d05b25a7e4c26b186f233abc34ebe4b7954a3fb21b3c09277939056f6ae2a01076725d11fe7afb664cbd2319b8a469f405375c34c6d0ba07447ca9d0db9929175c9812bdfea897241fcc77beecde4bf8ed5fef313b21b4dab37d8f161869d022113fdb539f7005203444e67749b1a0ba007de39419ebb0ffefdd413ece7f748c", 0xe2}, {&(0x7f0000005c00)="354d3f9e86e79667e383c0dd61aaa5a7c4860c90bcdc0987c23a122b2bdd331eac151667083a178f524401e77744dfb3d2052cc1d1dc9f3066a81fdadd3878491b68e432c7e416f7", 0x48}, {&(0x7f0000005c80)="d8ec88317b2f78784c7dde84aabe74057ea77841667f0bdc8716167bfb00303d548099ac23dcd44658f3a165bd8c64e683bb864fd26d9a8329b79d2268a55b37e27d74b9991b599dea0a6d64d531181d7e535e53b219cf42618197308dac7a1fbb163bb651dc9dc23fd148c5b17db7dc31be8094a1b9d161055cac755e022732724e79110d6729ac59bb9f8420e7ab9b3ca36b2f2be0b1cf022198618575f4f7ab0fb2b9f4892f1c395ca40e7533a2549bf2afd097600069eb17b6d3c7bd7cd8ffe89fdc809a7c1580d4bf7032129c687c7900f27c9771384528f4ad282147f8587789b02f80", 0xe6}], 0x4, &(0x7f0000005dc0)=[{0x7c, 0x112, 0x7f, "bda0b3fd89daccb5f0843c02ed97d5b88e72fe1320ea6bf6791eb0ce7fed824431eac7ad0504c4c4f95d05daac8e551a8dd5182ece337c5c82e2c426d9161a8e2a968a2f24ed321248279f7e66c17c151caf3757deb218cc039cbcc1ad60c92bf0a9d0fd1cbe1e3d12da5c54c47e"}, {0x78, 0x101, 0x0, "329259c40786e21735208acdc509de7c0d0776c98954ab1286d086159c3b74d8743eccd442aa9fb8f12a94c4c9deda4055d29053d2edabe1471cbaf77b5b9dd0ef579408228110cbf2032a838519c8272ed80b49a12a0c055e31ba702f9360a3a357a5ef5b81b19a7f4313"}], 0xf4}}, {{&(0x7f0000005ec0)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000005f40)="785e8f36c742875ee55330d687a850b3ec661b0a8370f9c8e36fdf0a06ce1185fab6514f7a39fc1278249546ca3d7b83890f8b87fe0c8931b7e0ad0130a43d2168e5c3cea183ca3c6ab8c9ed9357575b0cc41e99ba68017db7de0a987d00e2ff3cf4a9f344ea74a94adfdc", 0x6b}], 0x1, &(0x7f0000006000)=[{0x10, 0x29, 0x8, "cd05e4"}, {0xa8, 0x88, 0x5, "6fe7da5eb4a9beec7c787e6f2bc66be0f48a3250d82719ac0afa3eb2bea41933ab214a49fb43ba128f149f312db40b587251e3b1259fc4b1897e3b8face8494b0f13aa43d8d3ec69b442fccb4bcb45de0b09caca35cbc5d6bf36171da5f162cad6c9f4696c8e19c32b9cced923c11edaba2d8bcc9a05d1d588bb47aa5a2afab8393626cd23abee33eb2a1b0f87d4c3d91cde7a0eb6ea91d6f194686a"}, {0xfc, 0xff, 0x7, "7a871b4fe5446be864ece2b675126ba12db70282a3783738adcef66400ba680f2dbb7ae857ca276354b545689f89ad26878d4754e035d97a0e1df76bef148d97990a7c1402e9a7eb2311f4b8f397cd230de46b15fb52a065633ab8f20592232072379f95bd9a0dda66db6096c0f07843d45476ac9d6ca13d0f928073f1f3cdee43c8e461d8f1ca8ba7b5f06dceab13273464e38c305e4f6ac6e6b4c7156293a12b2c0103802388181adca4d41b3125ef090df3820806a9c7d94d55d4921f764852965dd5d252917d66a197ab0c9f0825804358f066adb36416f16a0d0079787c4cee8f7f37a2472a1a524d4158a7ddef"}, {0x74, 0x104, 0x7fffffff, "7fa41abb49c29161c3fcca62d1302d4bca63195a6fbd9b55ef867b9a0755d444214f029059e6dd157c48fdfb7a38e510ceb71f6cde1e7ae561b65a5e2a963da34ef2ba83ae30defb404651e4fe7e17c04e5ff4989d681c010eb93bf7655c0d0630182c13ed"}, {0xd0, 0x3a, 0x8, "e9aae53f25501774c0fea25ddb7ceaa59c0178ba66d62babd2b8628a3bf87794fd2ad0fe656b44abe39dcd9abecf912a9ab7ad870dcb9d5a3168d1c72c1cde3fb8941b47f529921b6794fe0780b48ac37f32d0dae3dc858672f134cc14a8cdd888256b468ff55c909c8890f6abb111c2e2f508e3c2380f58f7229362bfbd88434ebe26183d2dd56cca0fe48b91752966f885317bca585234593afb011d8d0da5b030b570e09209f8a87e68ee2c2da8f921b437f2331d9b5a6a2e13479975c1836011bb"}, {0x104, 0x6, 0x6, "b3b36f0bdef2620d9fca4896f4e98b1d384675b8b105dd4b5a9fc44665ff742b6c5aedf9280e4f6e1fb8b802457aa29fe3481383189cb95acbf0cd0367d6438bf65ad3c4a412f56de1caffcc8b2606b291c1534526ae9f41f31e808c0892dc9859f0e28412b7679870e858adcd45b8bdd0c4491e3184d095f136b2558409362a67d5d1444ab83bba2dc828d801a1d96e5c1520846fab13ae38523124de9372dca72840ca7cf2598a58d9be698d531c9e61a27f918d092f17261c9c885672fe29a5715058b152c843692ed9ecee97fca66d1afd8129ab2084d84cd43d5fe4c2da6be3e238cfa6fdc276efdecafb10e654cec55306c1bc5d"}, {0x98, 0x101, 0x4, "e0cf83d98937a0c1f560dac607008d4900f4c8b3bbe100fffc39f8cbcc988eb91dacf45ccbc1270deb0188422f62465b99a5b85c4268be2cbb0da788c014a9f5b88c35d31b2c1240a905494b64d2bec4db6ba27bc37fd48b5baf6182e5843048cf65a238e0324d71d219c0d35a76da1770b131e3074f05018ce96767083c1e1adeca7a375e98bee05125"}, {0xb0, 0x110, 0xa5221f26, "89267b5e7d555902b221fd2a11eadae424ea8769ce6a543c266b9a7b58c5ce03bd5c372811eb2f8b3c363e1416fab4814d05591d9f1b08e52ae474f948f1d684956debf518b03031993052038ffd0a5ebec6712cf86ba7446b08a31536f31e078c675bf2bb986590a7480ea47f9682ce6dae547aa234e7cd2f8da9f2c665762dc070be529876b7aff87af92e863952345673f3ccea259c5ecdddaaccac53300594"}], 0x544}}, {{&(0x7f0000006580)=@generic={0x37, "3cbad05a896b78189ef127ef92f3e3cdc520bf5c857133e74994ddd01e9fd4f1a44a0e02bd77be8716a7162b8ded35197fc04885e2350569da3f32766fbeb98e2fe109a820662e61e317f0b864afae548d29a5ee27f46eef628e20f7be56d16e154c81100f16ad47d8d09c6b05095a712d7c6402275b37c039230213c8ad"}, 0x80, &(0x7f0000006700)=[{&(0x7f0000006600)="e6e1af79aa6dbb0fa9083067d7d20e904806f0d92a749db0b375bafe5c970ec56474c551b509db65b2c74f3b839d59e409a093e80ee7fbfc9f8ecddd7019ba77901d3ae42134513ebca6b21f57c32053a348a63726e0e071362f934f1aae07baf80691b53121251ab35e852772b557b6a755087f979c83a78f22430ed08f90d7852a54415b7c164ec1ecfce6473d1f312ee5693bfcf22729c8b18754bd94cc214ca58666fc9b0575ded01bd8ccbd71e29cbcda24b2e4e2683d3978eebe5caf228ee07cdabdc61ca8f1a22acc6017f0f6b39ed8f36335ff4403f80db4f7a0f2fb63b3035f106a250df4831a0533f1fad1", 0xf0}], 0x1, &(0x7f0000006740)=[{0x28, 0x103, 0x9, "4487f33f19970c68a44073071554968e1893df0e00c07af3e1cb53"}], 0x28}}, {{&(0x7f0000006780)=@l2tp={0x2, 0x0, @private=0xa010102, 0x3}, 0x80, &(0x7f0000006a40)=[{&(0x7f0000006800)="d7f58c1abe767772b234ec508dac74260a07284f5ddcba54a96253c16e918a39a742cb63c0", 0x25}, {&(0x7f0000006840)="6049683871270024b1e1bf6eac2dd01c9bd928630cb329bd06a41f", 0x1b}, {&(0x7f0000006880)="2be58325b417bdbd44eee4e250214f9a74873ab2b99bad29cf752c814c70eabbfb8a6a2196e443bb69949cb7c16616b398c9a6e4ee8e3f", 0x37}, {&(0x7f00000068c0)="7be6659704557fe0f5ca8baf3004714cc08a5b08381aa8015cb18ebc6d3f0d6eaf8c0bb27c363734ae15922e4b2950081be74a7f1f17f192545ceed6f7dbda7918604e80d5e7eba8a548f62b93570caa7dfffd8e29176692f795e48fd713f0a2dc8c0cd6741e01e6a8d7b7e2c6cee3c66f213cff752f225e0bd283b87d38afe3e3dd23671e511f11e375f739925686597258069b316bbe50424f9ff259e81da1a36e094faa949df477ab761b6f954315db9728ad133953e4d76ff37069d9fed2334129c5", 0xc4}, {&(0x7f00000069c0)="45b94b8d9e1d0b10c0cbcb09943079ed35c0e9d87c67f940e247c8ebf1b538a85c83375248688a9ae830a41269abcfdc30dca8dd3d9763122db5f05b0a0c4dda79a9171b1d228ef9f7cc35de6b29b987a106107dea3558", 0x57}], 0x5, &(0x7f0000006a80)=[{0x10c, 0x112, 0x2, "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"}, {0x58, 0x101, 0x2, "f7fdf10249fcd5e1e11a3a94c60e45eab32ce38223b9c8a80c647ea7101455acd1b149861cd95039ca57cbb7b8e4547669d3d4115027fc041c405d153580d95db097238a838bdc967f14835d"}, {0x58, 0x101, 0x9, "25cd58a0ab48b0245f16be562507d22d1cfdd26042077651d23478e13fb2d4edd41190bb1fdfed356d2142e89ea618eccd795a54cc927de4b91c588fec380733e3bbb57aa476152cda895e"}, {0x50, 0x108, 0x9, "bdf41732c9f82fef099f934d457ec3b9f3bfc1dd6b6403fd36f268561d089fd953a91b0b6606c2ac6cb64b28636aba05383abe8d8f2223c1e0719833e20c17cca5"}, {0x9c, 0x29, 0x8, "35e95c8e23f4e54cb9f4e2c1244a87087874b722e030b6a3ccce3325a5b31f797d4dc27cfea1f4bf7abdfbcdd1e4c62ef3789edd4a3417fa6bd02822e9ce2300b042de5c5a87287a8a8656d52c3cb51bbc6db23407eb93b755b53ece88b316aa47f4ebc398f831ce4f04acb565d9eb8419f10ff2815d186652a1dcd222f9f4636af62a5e67110b3b83432cb512a7"}, {0xcc, 0x3a, 0x4, "6f1fafa1f7e146da0b8a4e82f852be9185ebe64987deafa9ede5ca7a5556034506c0a056af8bb7c2b3f1b30ee64b1d6ec4ee08017428866a1051a6a75a6616a679dbac99eeb1c1636f7978b059807c17aa389bb6edebe9810cbb9a732d714531cc683b665749f228f964cac270b26d8c7a6e30f20e2e055f6a563446fd3a3cb3bc4546a1981d0b62fb3db6e11ee802c9c5b80aac6a860283110411d1f15ca92c9ce4334e9f4c0c977a3f793acaeb3cbb4f0bdbefdd1009cc7af69de750f10874"}], 0x374}}], 0x8, 0xcf19d6c936267b3a) (async)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000000514f9c2873a000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0)

3.575350959s ago: executing program 2 (id=1881):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl(0xffffffffffffffff, 0x8b2c, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setregid(0xffffffffffffffff, 0x0)
setuid(0xee01)
syz_io_uring_setup(0x109, &(0x7f0000000580)={0x0, 0x1161, 0x80, 0x4}, 0x0, &(0x7f0000000600))
clock_nanosleep(0x9, 0x0, &(0x7f0000000680)={0x0, 0x989680}, 0x0)
chdir(0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
listen(r4, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000b00000/0x1000)=nil, 0x1000, 0x17)
ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f0000000000)={0x4, &(0x7f0000000100)=[{}, {}, {}, {}]})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)

2.980058258s ago: executing program 3 (id=1883):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140))

2.89959164s ago: executing program 3 (id=1884):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x20004084}, 0x8044)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x2f, 0x2, @thr={&(0x7f00000005c0)="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", &(0x7f00000000c0)="a07be9aedfbd5029e330f29a81dc0f24d6afffcd8f6166b1190e0333b5777887e473dabcadcfdec1297f81f4620aeb7db1d2889e8f6bc40c8da197e28136f245280b8e2d8f489f148296228773a2e2f784282cbca016f7860376788f88f451acb2fda4c39871e6563424bf7ccd69b881fc83366aeac16773a2ee270a11ae43b6bd16b9807f5f9c378ff1362886f9492ec2e50caf1ba783aec758413a51158d8f1dbe7009e12de4c879e479e84a9252c59f2f7cd1366de3e3131859c9377dbf0fa8a275d2f484e9ce0feb920fef0fd697fe24aef7e6bdc22d5f1a3f50d516"}}, &(0x7f00000001c0)=<r3=>0x0)
clock_gettime(0x0, &(0x7f0000000200)={<r4=>0x0, <r5=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2)
bind(r0, &(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80)
mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='romfs\x00', 0x0, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fcntl$lock(r6, 0x24, &(0x7f0000000300))
mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='romfs\x00', 0x0, 0x0)
timer_settime(r3, 0x1, &(0x7f0000000240)={{0x77359400}, {r4, r5+60000000}}, &(0x7f0000000280))
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0xfffffffe, 0x80003}]}})
chdir(&(0x7f00000000c0)='./file0\x00')

2.669921251s ago: executing program 2 (id=1886):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = getpgid(0xffffffffffffffff)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x10b500, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x46360af6b5e99d42}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x16}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4000)
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x6, 0x4000, 0x0, r6, 0x1})
prctl$PR_SCHED_CORE(0x3e, 0x2, r1, 0x3, &(0x7f0000000080))
getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000040), &(0x7f0000000000)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x448ca000)

2.384794799s ago: executing program 3 (id=1888):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x80000001, 0x0, 0x1, 0x200}, 0x0, 0x0, 0x0, 0x0)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="931c00007d00000005f000000000000000000000000000000000000080ff00000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232)

1.919684234s ago: executing program 5 (id=1892):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0xd, 0x7, 0x4, 0x40008, 0x3, 0x8, 0xffffffff}]})

1.919452266s ago: executing program 2 (id=1893):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r7 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000900)=ANY=[@ANYBLOB="38000000030401002dbd7000000000000900020073797a30000000f70800410073697700ba9d5feeb2b2224ac87ae3ff0201df140033006c6f0000000000000000000000000000d0b9446af8194b76fdb9a2c51da45e1b70d4b05c61d63caf0ee758e74e4ae8776de099d2b8c5f70d277bebbec71ed9bc3750e83ecce6cdd6b5467f1e3d1788d0223336b729f7bcdb96f3"], 0x38}, 0x1, 0x0, 0x0, 0x408d4}, 0x800)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
sendmsg$nl_route_sched(r7, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x6, 0xfff2}, {0x480bd72125a0c189, 0x5}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4808}, 0x880)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
preadv(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x1, 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="180003000200000000000000f800000065600900f0ffffff8520000003000000185200001000000000000000000000009500000000000095000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0xfffffff6, 0x71, &(0x7f0000000680)=""/113, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.824422393s ago: executing program 5 (id=1894):
syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x19fe, 0x8000, 0x8000, 0x40024e}, &(0x7f00000003c0)=<r0=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
epoll_create1(0x80000)
fanotify_init(0x10, 0x101000)
r1 = syz_open_dev$video4linux(&(0x7f0000000480), 0xfb1, 0x121c00)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0205649, &(0x7f0000000500)={0x0, 0x0, {0x4, 0xfefffffe, 0x3007, 0x2, 0x7, 0x0, 0x1}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd74)
r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x908, 0x7, 0x288, 0x0, r3}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000180))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
fdatasync(r6)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x1ff)
syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x3)
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0)

1.440391928s ago: executing program 3 (id=1895):
socket$key(0xf, 0x3, 0x2)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x8040)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x37b2, 0x10100, 0x0, 0x8a}, &(0x7f0000000180), &(0x7f0000000280))
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r3)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)
r4 = memfd_create(&(0x7f0000000480)='/!-(\x00\xa1\xad\x83e`\xa7\xc42\xdd\x9c~\xa9\x8e\xb0u\x7fT{ \x92yX\x14R_\xc8\x00\x00\x04\x00\x00\x00\x00\x03\xb3\x138\xc3\xbf\xf0\x89\xec<\x80\xe2Bj.u\x9f\x1ct<\x0f\xccn\xefP\xc0\xaab\xb8_\r\x9c\x80\xa9\xad\xd4EV\xa4\xfct\xbd\x96', 0x5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00000100000000050013"], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000900)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x4810}, 0x4000084)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x810)
socket$xdp(0x2c, 0x3, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
read$FUSE(r6, &(0x7f0000002080)={0x2020}, 0x2020)
io_uring_register$IORING_REGISTER_MEM_REGION(r6, 0x22, 0x0, 0x1)
sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac080001000000000009000200"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000440))

939.027167ms ago: executing program 4 (id=1897):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baf80c66b8ec3fba8766efbafc0c66b80020000066ef2e0f01caf20f2a796f0fc75d00660fc777c2baf80c66b8de03f38166efbafc0cb80020ef66660f38821f66b9800000c00f326635002000000f303626660f3808fa3e3e0fc75e2f", 0x5d}], 0x1, 0x13, &(0x7f00000001c0)=[@cstype0={0x4, 0x3}], 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000080))
ioctl$TCSETS(r0, 0x89f3, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x7ff, 0xd, "5dee000000594000"})

850.365496ms ago: executing program 2 (id=1898):
r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async)
prlimit64(0x0, 0x4, &(0x7f0000000140)={0x4, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000500)={@val={0x1c, 0xf5}, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x3e, 0x58, 0x66, 0x0, 0x6, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2d}}, {{}, {0x1, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x6, 0x2, 0x1, 0x2, 0x6, 0x3}, 0x1, {0xd4}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0xe, 0x2, 0x1, 0x0, 0x1, 0x40}, 0x2, {0x4, 0xe, 0x0, 0x4, 0x1, 0x0, 0x3, 0x1, 0x1}}}}}}}, 0x66) (async)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) (async)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x4000, &(0x7f0000002240)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}})
shmctl$SHM_LOCK(r0, 0xb)
recvmsg(r3, &(0x7f0000000280)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000300)=""/231, 0xe7}, 0x2020) (async)
shmctl$IPC_RMID(r0, 0x0)

800.361974ms ago: executing program 5 (id=1899):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setregid(0xffffffffffffffff, 0x0)
setuid(0xee01)
syz_io_uring_setup(0x109, &(0x7f0000000580)={0x0, 0x1161, 0x80, 0x4}, 0x0, &(0x7f0000000600))
clock_nanosleep(0x9, 0x0, &(0x7f0000000680)={0x0, 0x989680}, 0x0)
chdir(0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
listen(r4, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f0000000000)={0x4, &(0x7f0000000100)=[{}, {}, {}, {}]})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1})

800.112944ms ago: executing program 4 (id=1900):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r0, &(0x7f0000000380)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

730.22756ms ago: executing program 4 (id=1901):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x120)
read$FUSE(r1, &(0x7f0000002080)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000400)={0xa0, 0x0, r2, {{0x6, 0x3, 0x8, 0x5, 0x6, 0xfbf, {0x0, 0x1, 0x5, 0x7, 0x5f23, 0x807c, 0x2, 0x5, 0x2000004, 0x1000, 0xffffffff, 0x0, 0x0, 0x81, 0x800}}, {0x0, 0x8}}}, 0xa0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendto$inet6(r0, 0x0, 0x0, 0x840, 0x0, 0x0)
pipe2(0x0, 0x800)
socket$inet6_udplite(0xa, 0x2, 0x88)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0})
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xe, 0x4}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x1000006, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
futex(0x0, 0x80, 0x1, 0x0, 0x0, 0x1)
sendmmsg$inet6(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="2ec15575afe867fdba546430ca1a47eb15c41b179f8897fc1fbbfc164b92054405964c6c9d2f2ca1430c84c3ceb4810d0311a5c28fa9c1eb7511923f6ae5d4c7cdf4890a373d318f0a00"/90, 0x5a}, {&(0x7f0000000880)="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", 0x16e}, {&(0x7f0000005000)="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", 0xe38}], 0x3}}], 0x1, 0x884)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40)

670.340476ms ago: executing program 4 (id=1902):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'gretap0\x00', &(0x7f00000000c0)=@ethtool_ts_info={0x49}}) (async)
mount(&(0x7f0000000000)=@sr0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='affs\x00', 0x200001, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = dup(r3)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xaece, 0x0)
read$FUSE(r5, 0x0, 0x0) (async)
r6 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ipv6_route\x00')
preadv(r7, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/7, 0x7}], 0x1, 0xffffffbf, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r10=>0x0})
sendto$packet(r8, 0x0, 0xfc, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r10, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x60a, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async)
r12 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r12, 0x400, 0x1) (async)
fcntl$setlease(r12, 0x400, 0x300000000000000) (async)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r13, 0x58, &(0x7f0000000100)}, 0x87) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x23, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x7, 0x1, 0x0, 0x8, 0x8, 0xffffffffffffffe0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @ldst={0x511e89d4a96df587, 0x2, 0x4, 0x4, 0x2, 0xffffffffffffffe0, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6c}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x5619, 0xe2, &(0x7f00000002c0)=""/226, 0x41000, 0x50, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x8, 0x9, 0x1ff}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0x1, r11, r12, r13, 0x1], &(0x7f0000000500)=[{0x5, 0x3, 0x6, 0x40fb610a3e10449d}, {0x0, 0x2, 0xf, 0x2}, {0x1, 0x2, 0x10, 0x7}, {0x3, 0x3, 0x3, 0xc}, {0x1, 0x2, 0xd, 0x9}, {0x1, 0x1, 0x9, 0x5}], 0x10, 0xff, @void, @value}, 0x94)

670.139343ms ago: executing program 2 (id=1903):
socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0xd)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x3, 0x1, 0x8000000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x1)
fchdir(r4)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x4d)
getdents(r5, &(0x7f0000000200)=""/223, 0xdf)
lseek(r5, 0x101, 0x1)
getdents64(r5, &(0x7f0000003340)=""/48, 0x30)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r6, 0x400455c8, 0x4)
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)

488.23958ms ago: executing program 4 (id=1904):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x7f4a, 0x0, 0x2}, 0x18, 0x0)
landlock_restrict_self(r0, 0x5)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
r1 = getpgrp(0x0)
tkill(r1, 0x16)

481.615444ms ago: executing program 3 (id=1905):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0xd, 0x7, 0x4, 0x40008, 0x3, 0x8, 0xffffffff}]})

481.182958ms ago: executing program 5 (id=1906):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0xd, 0x7, 0x4, 0x40008, 0x3, 0x8, 0xffffffff}]}) (fail_nth: 2)

420.263461ms ago: executing program 4 (id=1907):
syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x19fe, 0x8000, 0x8000, 0x40024e}, &(0x7f00000003c0)=<r0=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
epoll_create1(0x80000)
fanotify_init(0x10, 0x101000)
r1 = syz_open_dev$video4linux(&(0x7f0000000480), 0xfb1, 0x121c00)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0205649, &(0x7f0000000500)={0x0, 0x0, {0x4, 0xfefffffe, 0x3007, 0x2, 0x7, 0x0, 0x1}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd74)
r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x908, 0x7, 0x288, 0x0, r3}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000180))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
fdatasync(r6)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x1ff)
syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x3)
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0)

316.685444ms ago: executing program 3 (id=1908):
r0 = socket(0x10, 0x3, 0x0)
r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
pread64(r1, &(0x7f0000000340)=""/76, 0x4c, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
openat$vhost_vsock(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = timerfd_create(0x8, 0x0)
timerfd_settime(r5, 0x3, &(0x7f0000000240)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
socket(0x10, 0x3, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x1008000, &(0x7f0000000280)='grpquota')
mkdir(&(0x7f0000000100)='./file1\x00', 0x244)
r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x0, 0x21218, 0x1, 0x1, '\x00', 0x0, r6, 0xfffffffc, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$afs(&(0x7f0000000080)=@cell={0x25, '', 'syz1', '.readonly'}, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x70bd26, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x0, 0x0, 0x53df}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x8080)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)

230.332144ms ago: executing program 5 (id=1909):
r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x18e}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
creat(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000500)='nfs4\x00', 0x800000, &(0x7f00000001c0)='\x01')
r2 = timerfd_create(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36)

0s ago: executing program 5 (id=1910):
r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = getpgrp(0x0)
fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3})
sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x38, 0x701, 0x70bd2a, 0x0, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x10004891}, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), r4)

kernel console output (not intermixed with test programs):

  213.631294][   T46] vhci_hcd: disconnect device
[  214.176450][ T9088] siw: device registration error -23
[  214.761750][ T6031] vhci_hcd: vhci_device speed not set
[  215.099631][ T9109] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.445753][ T9133] lo speed is unknown, defaulting to 1000
[  216.698682][ T9098] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  216.742057][ T9137] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  216.744466][ T9137] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  216.747420][ T9137] vhci_hcd vhci_hcd.0: Device attached
[  216.972900][ T9148] siw: device registration error -23
[  217.009517][ T9140] vhci_hcd: connection closed
[  217.010010][ T1179] vhci_hcd: stop threads
[  217.013231][ T1179] vhci_hcd: release socket
[  217.014901][ T1179] vhci_hcd: disconnect device
[  217.025423][ T6031] usb 45-1: new low-speed USB device number 3 using vhci_hcd
[  217.027924][ T6031] usb 45-1: enqueue for inactive port 0
[  217.097458][ T6031] vhci_hcd: vhci_device speed not set
[  217.456329][ T9157] input: syz1 as /devices/virtual/input/input8
[  218.987559][ T9189] FAULT_INJECTION: forcing a failure.
[  218.987559][ T9189] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  218.992573][ T9189] CPU: 3 UID: 0 PID: 9189 Comm: syz.4.815 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  218.992588][ T9189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  218.992595][ T9189] Call Trace:
[  218.992600][ T9189]  <TASK>
[  218.992605][ T9189]  dump_stack_lvl+0x16c/0x1f0
[  218.992627][ T9189]  should_fail_ex+0x512/0x640
[  218.992646][ T9189]  _copy_from_iter+0x29f/0x16f0
[  218.992667][ T9189]  ? __pfx__copy_from_iter+0x10/0x10
[  218.992686][ T9189]  ? __pfx___might_resched+0x10/0x10
[  218.992702][ T9189]  file_tty_write.constprop.0+0x488/0x9b0
[  218.992724][ T9189]  vfs_write+0x6c4/0x1150
[  218.992740][ T9189]  ? __pfx_tty_write+0x10/0x10
[  218.992758][ T9189]  ? __pfx_vfs_write+0x10/0x10
[  218.992772][ T9189]  ? find_held_lock+0x2b/0x80
[  218.992792][ T9189]  ksys_write+0x12a/0x250
[  218.992807][ T9189]  ? __pfx_ksys_write+0x10/0x10
[  218.992824][ T9189]  ? rcu_is_watching+0x12/0xc0
[  218.992837][ T9189]  __do_fast_syscall_32+0x7c/0x3a0
[  218.992849][ T9189]  do_fast_syscall_32+0x32/0x80
[  218.992860][ T9189]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  218.992874][ T9189] RIP: 0023:0xf70fe579
[  218.992883][ T9189] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  218.992894][ T9189] RSP: 002b:00000000f50cd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004
[  218.992920][ T9189] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080001040
[  218.992926][ T9189] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000000
[  218.992932][ T9189] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  218.992938][ T9189] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  218.992944][ T9189] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  218.992958][ T9189]  </TASK>
[  219.083209][ T9194] fuse: Bad value for 'fd'
[  219.815512][ T9197] siw: device registration error -23
[  220.658995][ T9224] binder: 9223:9224 ioctl c0385720 0 returned -22
[  220.661302][ T9224] binder: 9223:9224 ioctl c0306201 80000480 returned -11
[  220.665558][ T9224] netlink: 20 bytes leftover after parsing attributes in process `syz.3.825'.
[  220.704799][ T9224] netlink: 20 bytes leftover after parsing attributes in process `syz.3.825'.
[  220.787181][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'.
[  220.798746][ T9227] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  221.067742][ T9231] siw: device registration error -23
[  221.466088][ T9233] can: request_module (can-proto-0) failed.
[  221.996990][ T9251] FAULT_INJECTION: forcing a failure.
[  221.996990][ T9251] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  222.001030][ T9251] CPU: 3 UID: 0 PID: 9251 Comm: syz.3.832 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  222.001046][ T9251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  222.001057][ T9251] Call Trace:
[  222.001061][ T9251]  <TASK>
[  222.001066][ T9251]  dump_stack_lvl+0x16c/0x1f0
[  222.001087][ T9251]  should_fail_ex+0x512/0x640
[  222.001106][ T9251]  _copy_from_iter+0x29f/0x16f0
[  222.001127][ T9251]  ? __pfx__copy_from_iter+0x10/0x10
[  222.001147][ T9251]  ? __pfx___might_resched+0x10/0x10
[  222.001162][ T9251]  file_tty_write.constprop.0+0x488/0x9b0
[  222.001185][ T9251]  vfs_write+0x6c4/0x1150
[  222.001201][ T9251]  ? __pfx_tty_write+0x10/0x10
[  222.001219][ T9251]  ? __pfx_vfs_write+0x10/0x10
[  222.001233][ T9251]  ? find_held_lock+0x2b/0x80
[  222.001254][ T9251]  ksys_write+0x12a/0x250
[  222.001268][ T9251]  ? __pfx_ksys_write+0x10/0x10
[  222.001285][ T9251]  ? rcu_is_watching+0x12/0xc0
[  222.001299][ T9251]  __do_fast_syscall_32+0x7c/0x3a0
[  222.001311][ T9251]  do_fast_syscall_32+0x32/0x80
[  222.001321][ T9251]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  222.001335][ T9251] RIP: 0023:0xf7f02579
[  222.001344][ T9251] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  222.001355][ T9251] RSP: 002b:00000000f500555c EFLAGS: 00000296 ORIG_RAX: 0000000000000004
[  222.001365][ T9251] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080001040
[  222.001372][ T9251] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000000
[  222.001378][ T9251] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  222.001384][ T9251] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  222.001390][ T9251] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  222.001404][ T9251]  </TASK>
[  223.473136][ T9271] netlink: 'syz.3.837': attribute type 5 has an invalid length.
[  223.475772][ T9271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.837'.
[  223.642013][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.839'.
[  223.755968][ T9280] IPv6: sit1: Disabled Multicast RS
[  223.758352][ T9280] sit1: entered allmulticast mode
[  224.363739][ T9284] siw: device registration error -23
[  224.804188][ T9289] siw: device registration error -23
[  225.185210][ T9299] FAULT_INJECTION: forcing a failure.
[  225.185210][ T9299] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  225.197585][ T9299] CPU: 2 UID: 0 PID: 9299 Comm: syz.1.845 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  225.197615][ T9299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  225.197622][ T9299] Call Trace:
[  225.197628][ T9299]  <TASK>
[  225.197633][ T9299]  dump_stack_lvl+0x16c/0x1f0
[  225.197655][ T9299]  should_fail_ex+0x512/0x640
[  225.197674][ T9299]  _copy_from_iter+0x29f/0x16f0
[  225.197695][ T9299]  ? __pfx__copy_from_iter+0x10/0x10
[  225.197714][ T9299]  ? __pfx___might_resched+0x10/0x10
[  225.197729][ T9299]  file_tty_write.constprop.0+0x488/0x9b0
[  225.197752][ T9299]  vfs_write+0x6c4/0x1150
[  225.197774][ T9299]  ? __pfx_tty_write+0x10/0x10
[  225.197792][ T9299]  ? __pfx_vfs_write+0x10/0x10
[  225.197806][ T9299]  ? find_held_lock+0x2b/0x80
[  225.197826][ T9299]  ksys_write+0x12a/0x250
[  225.197841][ T9299]  ? __pfx_ksys_write+0x10/0x10
[  225.197857][ T9299]  ? rcu_is_watching+0x12/0xc0
[  225.197870][ T9299]  __do_fast_syscall_32+0x7c/0x3a0
[  225.197882][ T9299]  do_fast_syscall_32+0x32/0x80
[  225.197893][ T9299]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  225.197906][ T9299] RIP: 0023:0xf708e579
[  225.197915][ T9299] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  225.197926][ T9299] RSP: 002b:00000000f505d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004
[  225.197937][ T9299] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080001040
[  225.197944][ T9299] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000000
[  225.197950][ T9299] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  225.197956][ T9299] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  225.197962][ T9299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  225.197976][ T9299]  </TASK>
[  226.233172][ T9315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.850'.
[  226.236620][ T9315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.850'.
[  226.329706][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.849'.
[  227.941906][   T46] Bluetooth: hci4: Frame reassembly failed (-84)
[  229.179690][ T9369] netlink: 24 bytes leftover after parsing attributes in process `syz.3.865'.
[  229.216516][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.865'.
[  229.230870][ T9363] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  229.685374][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  230.706829][ T9399] netdevsim netdevsim2: Direct firmware load for ��0���Pq���D"�2�N�ktT�Wj��%�N�� failed with error -2
[  230.711416][ T9399] netdevsim netdevsim2: Falling back to sysfs fallback for: ��0���Pq���D"�2�N�ktT�Wj��%�N��
[  232.281268][ T9426] siw: device registration error -23
[  232.902754][ T9437] ubi: mtd0 is already attached to ubi31
[  234.321295][ T9466] siw: device registration error -23
[  236.134977][ T9489] syz_tun: entered allmulticast mode
[  236.139387][ T9488] syz_tun: left allmulticast mode
[  236.556330][ T9499] siw: device registration error -23
[  236.759297][ T9512] netlink: 96 bytes leftover after parsing attributes in process `syz.2.907'.
[  237.277213][ T9519] siw: device registration error -23
[  237.925329][ T9522] siw: device registration error -23
[  239.292206][ T9568] lo speed is unknown, defaulting to 1000
[  239.436802][ T9566] siw: device registration error -23
[  239.860199][ T9581] ieee802154 phy0 wpan0: encryption failed: -22
[  239.866960][ T9581] netlink: 40 bytes leftover after parsing attributes in process `syz.2.927'.
[  239.939436][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.926'.
[  241.395933][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.936'.
[  241.426628][ T9617] ubi: mtd0 is already attached to ubi31
[  241.510256][ T9618] netlink: 24 bytes leftover after parsing attributes in process `syz.3.938'.
[  241.678194][ T9626] cgroup: release_agent respecified
[  241.715623][ T9623] siw: device registration error -23
[  241.836553][ T6374] udevd[6374]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  242.164983][ T9616] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  242.167088][ T9616] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  242.169629][ T9616] vhci_hcd vhci_hcd.0: Device attached
[  242.218233][ T9630] vhci_hcd: connection closed
[  242.219886][ T6383] vhci_hcd: stop threads
[  242.222867][ T6383] vhci_hcd: release socket
[  242.224323][ T6383] vhci_hcd: disconnect device
[  243.661683][ T9655] siw: device registration error -23
[  244.053787][ T9661] siw: device registration error -23
[  244.406250][ T9674] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  244.408483][ T9674] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  244.437131][ T9674] vhci_hcd vhci_hcd.0: Device attached
[  244.834808][ T6087] usb 42-1: SetAddress Request (2) to port 0
[  244.839578][ T6087] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd
[  244.899205][ T9675] vhci_hcd: connection reset by peer
[  244.901859][   T46] vhci_hcd: stop threads
[  244.903711][   T46] vhci_hcd: release socket
[  244.906098][   T46] vhci_hcd: disconnect device
[  244.951588][ T9699] netdevsim netdevsim1: Direct firmware load for @ failed with error -2
[  244.954356][ T9699] netdevsim netdevsim1: Falling back to sysfs fallback for: @
[  245.001806][ T9702] netlink: 'syz.4.958': attribute type 1 has an invalid length.
[  245.029038][ T9704] fuse: Unknown parameter '0x0000000000000008'
[  245.032609][ T5953] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  245.225480][ T9707] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  245.228102][ T9707] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  245.231658][ T9707] vhci_hcd vhci_hcd.0: Device attached
[  245.424626][   T53] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  245.514729][ T5998] usb 46-1: SetAddress Request (2) to port 0
[  245.516720][ T5998] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd
[  245.587713][   T53] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  245.590596][   T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.593377][   T53] usb 8-1: Product: syz
[  245.595348][   T53] usb 8-1: Manufacturer: syz
[  245.596843][   T53] usb 8-1: SerialNumber: syz
[  245.604898][   T53] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  246.408841][   T53] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  246.540258][ T9727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.964'.
[  246.570288][ T9727] bond1: entered promiscuous mode
[  246.571933][ T9727] bond1: entered allmulticast mode
[  246.606715][ T9730] binder: 9729:9730 unknown command 1600285812
[  246.608902][ T9730] binder: 9729:9730 ioctl c0306201 80000640 returned -22
[  246.681623][ T9733] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  247.454547][   T53] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[  247.457979][   T53] ath9k_htc: Failed to initialize the device
[  247.481608][   T53] usb 8-1: ath9k_htc: USB layer deinitialized
[  247.812111][ T9751] netlink: 'syz.1.972': attribute type 9 has an invalid length.
[  247.819491][ T9751] bond_slave_0: entered promiscuous mode
[  247.821398][ T9751] bond_slave_1: entered promiscuous mode
[  247.823359][ T9751] macvlan2: entered promiscuous mode
[  247.825360][ T9751] bond0: entered promiscuous mode
[  247.829740][ T9751] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  247.862372][ T9751] 9pnet_fd: Insufficient options for proto=fd
[  248.029700][ T5991] usb 8-1: USB disconnect, device number 7
[  248.136030][ T9708] vhci_hcd: connection reset by peer
[  248.144996][   T46] vhci_hcd: stop threads
[  248.146492][   T46] vhci_hcd: release socket
[  248.149673][   T46] vhci_hcd: disconnect device
[  248.812318][ T9777] siw: device registration error -23
[  250.054660][ T6087] usb 42-1: device descriptor read/8, error -110
[  250.575202][ T5998] usb 46-1: device descriptor read/8, error -110
[  250.604917][ T6087] usb usb42-port1: attempt power cycle
[  250.964816][ T5998] usb usb46-port1: attempt power cycle
[  251.251655][ T6087] usb usb42-port1: unable to enumerate USB device
[  251.523094][ T9852] x_tables: duplicate underflow at hook 3
[  251.555947][ T5998] usb usb46-port1: unable to enumerate USB device
[  252.350466][ T9885] siw: device registration error -23
[  252.468463][ T9887] 9pnet_virtio: no channels available for device ./file0/file0
[  252.472479][ T9888] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1005'.
[  252.475290][ T9888] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1005'.
[  252.710192][   T40] kauditd_printk_skb: 7 callbacks suppressed
[  252.710203][   T40] audit: type=1326 audit(2000000020.871:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9899 comm="syz.2.1009" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000
[  252.711498][ T9900] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  252.712960][   T40] audit: type=1326 audit(2000000020.871:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9899 comm="syz.2.1009" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000
[  252.732502][   T40] audit: type=1326 audit(2000000020.871:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9899 comm="syz.2.1009" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7fc8579 code=0x7ffc0000
[  252.740656][   T40] audit: type=1326 audit(2000000020.871:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9899 comm="syz.2.1009" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000
[  252.748310][   T40] audit: type=1326 audit(2000000020.871:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9899 comm="syz.2.1009" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000
[  252.756021][   T40] audit: type=1326 audit(2000000020.871:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9899 comm="syz.2.1009" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc8579 code=0x7ffc0000
[  252.762838][   T40] audit: type=1326 audit(2000000020.911:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9899 comm="syz.2.1009" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000
[  252.769702][   T40] audit: type=1326 audit(2000000020.911:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9899 comm="syz.2.1009" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000
[  254.028860][ T9936] input: syz0 as /devices/virtual/input/input9
[  254.044324][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'.
[  254.870579][ T9959] siw: device registration error -23
[  255.045373][ T6031] libceph: connect (1)[c::]:6789 error -101
[  255.061181][ T6031] libceph: mon0 (1)[c::]:6789 connect error
[  255.079031][ T9965] ALSA: mixer_oss: invalid OSS volume ''
[  255.219460][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  255.325160][ T6031] libceph: connect (1)[c::]:6789 error -101
[  255.327228][ T6031] libceph: mon0 (1)[c::]:6789 connect error
[  255.474162][ T9982] 9pnet_fd: Insufficient options for proto=fd
[  255.571170][ T9986] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1037'.
[  255.579123][ T9986] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1037'.
[  255.835629][ T1330] libceph: connect (1)[c::]:6789 error -101
[  255.837664][ T1330] libceph: mon0 (1)[c::]:6789 connect error
[  255.837958][ T9962] ceph: No mds server is up or the cluster is laggy
[  256.359542][ T9984] lo speed is unknown, defaulting to 1000
[  256.391237][T10002] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 2, id = 0
[  256.426475][T10004] 9pnet_fd: Insufficient options for proto=fd
[  256.503222][T10008] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535)
[  256.837641][ T1179] Bluetooth: hci4: Frame reassembly failed (-84)
[  256.840309][ T1186] Bluetooth: hci4: Frame reassembly failed (-84)
[  256.850374][T10020] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  256.852492][T10020] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  256.857882][T10020] vhci_hcd vhci_hcd.0: Device attached
[  257.094186][ T5998] usb 45-1: new low-speed USB device number 4 using vhci_hcd
[  257.275090][T10032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1052'.
[  257.516996][T10021] vhci_hcd: connection reset by peer
[  257.519583][ T1186] vhci_hcd: stop threads
[  257.521549][ T1186] vhci_hcd: release socket
[  257.523323][ T1186] vhci_hcd: disconnect device
[  257.641464][T10036] 9pnet_fd: Insufficient options for proto=fd
[  258.884017][ T5954] Bluetooth: hci4: command 0x1003 tx timeout
[  258.934008][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  259.108840][T10053] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  259.164763][T10044] syz.3.1056: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  259.170478][T10044] CPU: 0 UID: 0 PID: 10044 Comm: syz.3.1056 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  259.170496][T10044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  259.170514][T10044] Call Trace:
[  259.170519][T10044]  <TASK>
[  259.170524][T10044]  dump_stack_lvl+0x16c/0x1f0
[  259.170546][T10044]  warn_alloc+0x248/0x3a0
[  259.170565][T10044]  ? __pfx_warn_alloc+0x10/0x10
[  259.170587][T10044]  ? hash_netportnet_create+0x3ec/0x1250
[  259.170603][T10044]  ? __vmalloc_node_noprof+0xad/0xf0
[  259.170620][T10044]  __vmalloc_node_range_noprof+0x101b/0x14b0
[  259.170639][T10044]  ? hash_netportnet_create+0x3ec/0x1250
[  259.170657][T10044]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  259.170677][T10044]  ? hash_netportnet_create+0x3ec/0x1250
[  259.170691][T10044]  __vmalloc_node_noprof+0xad/0xf0
[  259.170705][T10044]  ? hash_netportnet_create+0x3ec/0x1250
[  259.170721][T10044]  __vmalloc_node_range_noprof+0xb73/0x14b0
[  259.170735][T10044]  ? nfnetlink_rcv_msg+0x9f9/0x1200
[  259.170754][T10044]  ? hash_netportnet_create+0x3ec/0x1250
[  259.170772][T10044]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  259.170787][T10044]  ? __alloc_pages_noprof+0xb/0x1b0
[  259.170804][T10044]  ? ___kmalloc_large_node+0x84/0x1e0
[  259.170820][T10044]  __kvmalloc_node_noprof+0x30a/0x620
[  259.170836][T10044]  ? hash_netportnet_create+0x3ec/0x1250
[  259.170851][T10044]  ? hash_netportnet_create+0x3ec/0x1250
[  259.170868][T10044]  ? hash_netportnet_create+0x3ec/0x1250
[  259.170881][T10044]  hash_netportnet_create+0x3ec/0x1250
[  259.170897][T10044]  ? __nla_parse+0x5b/0x60
[  259.170909][T10044]  ? __pfx_hash_netportnet_create+0x10/0x10
[  259.170925][T10044]  ip_set_create+0x7e1/0x14d0
[  259.170945][T10044]  ? __pfx_ip_set_create+0x10/0x10
[  259.170972][T10044]  ? find_held_lock+0x2b/0x80
[  259.170987][T10044]  nfnetlink_rcv_msg+0x9f9/0x1200
[  259.171011][T10044]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  259.171029][T10044]  ? consume_skb+0xcc/0x100
[  259.171054][T10044]  ? __pfx___dev_queue_xmit+0x10/0x10
[  259.171073][T10044]  netlink_rcv_skb+0x155/0x420
[  259.171087][T10044]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  259.171103][T10044]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  259.171122][T10044]  ? ns_capable+0xd7/0x110
[  259.171136][T10044]  nfnetlink_rcv+0x1b3/0x430
[  259.171151][T10044]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  259.171165][T10044]  ? netlink_deliver_tap+0x1ae/0xd30
[  259.171180][T10044]  netlink_unicast+0x53d/0x7f0
[  259.171194][T10044]  ? __pfx_netlink_unicast+0x10/0x10
[  259.171211][T10044]  netlink_sendmsg+0x8d1/0xdd0
[  259.171226][T10044]  ? __pfx_netlink_sendmsg+0x10/0x10
[  259.171240][T10044]  ? __import_iovec+0x1dd/0x650
[  259.171254][T10044]  ____sys_sendmsg+0xa98/0xc70
[  259.171271][T10044]  ? __pfx_____sys_sendmsg+0x10/0x10
[  259.171284][T10044]  ? get_compat_msghdr+0x11a/0x170
[  259.171298][T10044]  ? __pfx_futex_wake_mark+0x10/0x10
[  259.171317][T10044]  ___sys_sendmsg+0x134/0x1d0
[  259.171336][T10044]  ? __pfx____sys_sendmsg+0x10/0x10
[  259.171361][T10044]  ? find_held_lock+0x2b/0x80
[  259.171381][T10044]  __sys_sendmsg+0x16d/0x220
[  259.171399][T10044]  ? __pfx___sys_sendmsg+0x10/0x10
[  259.171416][T10044]  ? __ia32_sys_futex_time32+0x1d9/0x460
[  259.171437][T10044]  ? rcu_is_watching+0x12/0xc0
[  259.171450][T10044]  __do_fast_syscall_32+0x7c/0x3a0
[  259.171463][T10044]  do_fast_syscall_32+0x32/0x80
[  259.171473][T10044]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  259.171513][T10044] RIP: 0023:0xf7f02579
[  259.171523][T10044] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  259.171534][T10044] RSP: 002b:00000000f500555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  259.171544][T10044] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040
[  259.171551][T10044] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  259.171558][T10044] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  259.171564][T10044] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  259.171571][T10044] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  259.171585][T10044]  </TASK>
[  259.171687][T10044] Mem-Info:
[  259.300096][T10044] active_anon:11717 inactive_anon:2924 isolated_anon:0
[  259.300096][T10044]  active_file:8894 inactive_file:14533 isolated_file:0
[  259.300096][T10044]  unevictable:1769 dirty:104 writeback:0
[  259.300096][T10044]  slab_reclaimable:7188 slab_unreclaimable:55909
[  259.300096][T10044]  mapped:29815 shmem:11799 pagetables:1135
[  259.300096][T10044]  sec_pagetables:322 bounce:0
[  259.300096][T10044]  kernel_misc_reclaimable:0
[  259.300096][T10044]  free:28937 free_pcp:1117 free_cma:0
[  259.314081][T10044] Node 0 active_anon:72kB inactive_anon:4kB active_file:1972kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8052kB pagetables:1092kB sec_pagetables:1176kB all_unreclaimable? yes Balloon:0kB
[  259.328131][T10044] Node 1 active_anon:45772kB inactive_anon:11692kB active_file:33604kB inactive_file:58132kB unevictable:3540kB isolated(anon):0kB isolated(file):0kB mapped:119168kB dirty:416kB writeback:0kB shmem:42736kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6508kB pagetables:3448kB sec_pagetables:112kB all_unreclaimable? no Balloon:0kB
[  259.338330][T10044] Node 0 DMA free:1804kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB
[  259.348143][T10044] lowmem_reserve[]: 0 289 289 289 289
[  259.350980][T10044] Node 0 DMA32 free:20320kB boost:8192kB min:21408kB low:24712kB high:28016kB reserved_highatomic:2048KB free_highatomic:796KB active_anon:72kB inactive_anon:4kB active_file:1968kB inactive_file:0kB unevictable:3536kB writepending:0kB present:1032196kB managed:296392kB mlocked:0kB bounce:0kB free_pcp:1940kB local_pcp:1916kB free_cma:0kB
[  259.360691][T10044] lowmem_reserve[]: 0 0 0 0 0
[  259.362281][T10044] Node 1 DMA32 free:93524kB boost:14336kB min:61480kB low:73264kB high:85048kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43572kB inactive_anon:11692kB active_file:33604kB inactive_file:58132kB unevictable:3540kB writepending:416kB present:1048432kB managed:948268kB mlocked:0kB bounce:0kB free_pcp:6140kB local_pcp:288kB free_cma:0kB
[  259.373443][T10044] lowmem_reserve[]: 0 0 0 0 0
[  259.375088][T10044] Node 0 DMA: 1*4kB (M) 1*8kB (M) 2*16kB (UM) 1*32kB (M) 1*64kB (U) 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 1804kB
[  259.379640][T10044] Node 0 DMA32: 90*4kB (UMEH) 95*8kB (UMEH) 66*16kB (UMEH) 59*32kB (UMEH) 36*64kB (MEH) 21*128kB (UMEH) 14*256kB (UME) 5*512kB (UM) 5*1024kB (UM) 0*2048kB 0*4096kB = 20320kB
[  259.386123][T10044] Node 1 DMA32: 501*4kB (ME) 41*8kB (UME) 321*16kB (ME) 148*32kB (ME) 245*64kB (ME) 74*128kB (UME) 30*256kB (UME) 24*512kB (ME) 7*1024kB (UM) 6*2048kB (M) 4*4096kB (M) = 93164kB
[  259.392593][T10044] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  259.414028][T10044] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  259.443918][T10044] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  259.447083][T10044] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  259.452085][T10044] 34616 total pagecache pages
[  259.453736][T10044] 99 pages in swap cache
[  259.483929][T10044] Free swap  = 123164kB
[  259.485736][T10044] Total swap = 124996kB
[  259.494047][T10044] 524155 pages RAM
[  259.495777][T10044] 0 pages HighMem/MovableOnly
[  259.499031][T10044] 209150 pages reserved
[  259.500652][T10044] 0 pages cma reserved
[  260.198300][T10063] siw: device registration error -23
[  260.591576][T10069] lo speed is unknown, defaulting to 1000
[  260.906223][T10079] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1066'.
[  261.329057][ T1179] Bluetooth: hci4: Frame reassembly failed (-84)
[  261.552929][T10098] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  261.555010][T10098] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  261.557608][T10098] vhci_hcd vhci_hcd.0: Device attached
[  261.790333][T10100] vhci_hcd: connection closed
[  261.790553][ T7669] vhci_hcd: stop threads
[  261.793859][ T7669] vhci_hcd: release socket
[  261.795647][ T7669] vhci_hcd: disconnect device
[  261.829506][T10104] siw: device registration error -23
[  261.864906][T10107] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  261.867015][T10107] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  261.870323][T10107] vhci_hcd vhci_hcd.0: Device attached
[  262.113760][   T61] usb 41-1: new low-speed USB device number 10 using vhci_hcd
[  262.233816][ T5998] vhci_hcd: vhci_device speed not set
[  262.374677][T10109] vhci_hcd: connection reset by peer
[  262.376613][ T1142] vhci_hcd: stop threads
[  262.379095][ T1142] vhci_hcd: release socket
[  262.380558][ T1142] vhci_hcd: disconnect device
[  263.002436][T10131] siw: device registration error -23
[  263.363664][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  263.363685][ T5954] Bluetooth: hci4: command 0x1003 tx timeout
[  263.698210][T10139] FAULT_INJECTION: forcing a failure.
[  263.698210][T10139] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  263.703336][T10139] CPU: 0 UID: 0 PID: 10139 Comm: syz.2.1084 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  263.703351][T10139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  263.703359][T10139] Call Trace:
[  263.703363][T10139]  <TASK>
[  263.703368][T10139]  dump_stack_lvl+0x16c/0x1f0
[  263.703389][T10139]  should_fail_ex+0x512/0x640
[  263.703408][T10139]  _copy_from_user+0x2e/0xd0
[  263.703425][T10139]  get_compat_msghdr+0xa7/0x170
[  263.703437][T10139]  ? __pfx_get_compat_msghdr+0x10/0x10
[  263.703470][T10139]  ___sys_sendmsg+0x1ae/0x1d0
[  263.703490][T10139]  ? __pfx____sys_sendmsg+0x10/0x10
[  263.703524][T10139]  ? find_held_lock+0x2b/0x80
[  263.703545][T10139]  __sys_sendmsg+0x16d/0x220
[  263.703563][T10139]  ? __pfx___sys_sendmsg+0x10/0x10
[  263.703586][T10139]  ? rcu_is_watching+0x12/0xc0
[  263.703599][T10139]  __do_fast_syscall_32+0x7c/0x3a0
[  263.703611][T10139]  do_fast_syscall_32+0x32/0x80
[  263.703621][T10139]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  263.703635][T10139] RIP: 0023:0xf7fc8579
[  263.703643][T10139] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  263.703654][T10139] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  263.703665][T10139] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200
[  263.703672][T10139] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000
[  263.703678][T10139] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  263.703684][T10139] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  263.703690][T10139] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  263.703704][T10139]  </TASK>
[  264.368515][T10148] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1087'.
[  264.379116][T10148] netlink: 'syz.1.1087': attribute type 2 has an invalid length.
[  264.391422][T10148] : entered promiscuous mode
[  264.481166][T10151] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  264.483810][T10151] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  264.487412][T10151] vhci_hcd vhci_hcd.0: Device attached
[  264.790093][T10154] vhci_hcd: connection closed
[  264.790341][ T1186] vhci_hcd: stop threads
[  264.793382][ T1186] vhci_hcd: release socket
[  264.795067][ T1186] vhci_hcd: disconnect device
[  265.049804][T10171] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.588219][T10175] FAULT_INJECTION: forcing a failure.
[  265.588219][T10175] name failslab, interval 1, probability 0, space 0, times 0
[  265.592208][T10175] CPU: 3 UID: 0 PID: 10175 Comm: syz.1.1096 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  265.592223][T10175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  265.592230][T10175] Call Trace:
[  265.592234][T10175]  <TASK>
[  265.592238][T10175]  dump_stack_lvl+0x16c/0x1f0
[  265.592258][T10175]  should_fail_ex+0x512/0x640
[  265.592274][T10175]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  265.592293][T10175]  should_failslab+0xc2/0x120
[  265.592303][T10175]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  265.592322][T10175]  ? __alloc_skb+0x2b2/0x380
[  265.592348][T10175]  __alloc_skb+0x2b2/0x380
[  265.592371][T10175]  ? __pfx___alloc_skb+0x10/0x10
[  265.592399][T10175]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  265.592423][T10175]  netlink_alloc_large_skb+0x69/0x130
[  265.592446][T10175]  netlink_sendmsg+0x6a1/0xdd0
[  265.592466][T10175]  ? __pfx_netlink_sendmsg+0x10/0x10
[  265.592492][T10175]  ? __import_iovec+0x1dd/0x650
[  265.592506][T10175]  ____sys_sendmsg+0xa98/0xc70
[  265.592522][T10175]  ? __pfx_____sys_sendmsg+0x10/0x10
[  265.592534][T10175]  ? get_compat_msghdr+0x11a/0x170
[  265.592551][T10175]  ___sys_sendmsg+0x134/0x1d0
[  265.592570][T10175]  ? __pfx____sys_sendmsg+0x10/0x10
[  265.592594][T10175]  ? find_held_lock+0x2b/0x80
[  265.592614][T10175]  __sys_sendmsg+0x16d/0x220
[  265.592631][T10175]  ? __pfx___sys_sendmsg+0x10/0x10
[  265.592655][T10175]  ? rcu_is_watching+0x12/0xc0
[  265.592668][T10175]  __do_fast_syscall_32+0x7c/0x3a0
[  265.592681][T10175]  do_fast_syscall_32+0x32/0x80
[  265.592696][T10175]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  265.592710][T10175] RIP: 0023:0xf708e579
[  265.592719][T10175] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  265.592730][T10175] RSP: 002b:00000000f507e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  265.592741][T10175] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200
[  265.592747][T10175] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000
[  265.592754][T10175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  265.592760][T10175] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  265.592766][T10175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  265.592779][T10175]  </TASK>
[  265.856222][   T46] Bluetooth: hci4: Frame reassembly failed (-84)
[  266.317538][T10195] /dev/nullb0: Can't open blockdev
[  266.340562][T10195] lo speed is unknown, defaulting to 1000
[  266.846735][T10214] siw: device registration error -23
[  266.867451][T10216] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  266.870048][T10216] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  266.873172][T10216] vhci_hcd vhci_hcd.0: Device attached
[  267.400536][T10217] vhci_hcd: connection closed
[  267.400758][   T46] vhci_hcd: stop threads
[  267.404922][   T46] vhci_hcd: release socket
[  267.407397][   T46] vhci_hcd: disconnect device
[  267.490089][   T61] vhci_hcd: vhci_device speed not set
[  267.936208][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  268.338506][T10239] FAULT_INJECTION: forcing a failure.
[  268.338506][T10239] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  268.342517][T10239] CPU: 2 UID: 0 PID: 10239 Comm: syz.2.1117 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  268.342532][T10239] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  268.342539][T10239] Call Trace:
[  268.342543][T10239]  <TASK>
[  268.342547][T10239]  dump_stack_lvl+0x16c/0x1f0
[  268.342569][T10239]  should_fail_ex+0x512/0x640
[  268.342588][T10239]  _copy_from_iter+0x29f/0x16f0
[  268.342607][T10239]  ? __alloc_skb+0x200/0x380
[  268.342624][T10239]  ? __pfx__copy_from_iter+0x10/0x10
[  268.342642][T10239]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  268.342659][T10239]  netlink_sendmsg+0x829/0xdd0
[  268.342674][T10239]  ? __pfx_netlink_sendmsg+0x10/0x10
[  268.342687][T10239]  ? __import_iovec+0x1dd/0x650
[  268.342700][T10239]  ____sys_sendmsg+0xa98/0xc70
[  268.342715][T10239]  ? __pfx_____sys_sendmsg+0x10/0x10
[  268.342728][T10239]  ? get_compat_msghdr+0x11a/0x170
[  268.342745][T10239]  ___sys_sendmsg+0x134/0x1d0
[  268.342763][T10239]  ? __pfx____sys_sendmsg+0x10/0x10
[  268.342787][T10239]  ? find_held_lock+0x2b/0x80
[  268.342807][T10239]  __sys_sendmsg+0x16d/0x220
[  268.342824][T10239]  ? __pfx___sys_sendmsg+0x10/0x10
[  268.342847][T10239]  ? rcu_is_watching+0x12/0xc0
[  268.342861][T10239]  __do_fast_syscall_32+0x7c/0x3a0
[  268.342873][T10239]  do_fast_syscall_32+0x32/0x80
[  268.342883][T10239]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  268.342897][T10239] RIP: 0023:0xf7fc8579
[  268.342906][T10239] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  268.342921][T10239] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  268.342931][T10239] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200
[  268.342938][T10239] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000
[  268.342944][T10239] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  268.342950][T10239] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  268.342956][T10239] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  268.342979][T10239]  </TASK>
[  268.881721][T10259] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  268.883745][T10259] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  268.887717][T10259] vhci_hcd vhci_hcd.0: Device attached
[  269.123353][   T10] usb 39-1: new low-speed USB device number 8 using vhci_hcd
[  269.203729][   T46] Bluetooth: hci4: Frame reassembly failed (-84)
[  269.419448][T10271] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1126'.
[  269.422339][T10271] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  269.487275][T10260] vhci_hcd: connection reset by peer
[  269.492092][   T46] vhci_hcd: stop threads
[  269.493627][   T46] vhci_hcd: release socket
[  269.500400][   T46] vhci_hcd: disconnect device
[  269.564875][T10278] FAULT_INJECTION: forcing a failure.
[  269.564875][T10278] name failslab, interval 1, probability 0, space 0, times 0
[  269.569081][T10278] CPU: 3 UID: 0 PID: 10278 Comm: syz.2.1127 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  269.569118][T10278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  269.569126][T10278] Call Trace:
[  269.569131][T10278]  <TASK>
[  269.569138][T10278]  dump_stack_lvl+0x16c/0x1f0
[  269.569167][T10278]  should_fail_ex+0x512/0x640
[  269.569189][T10278]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  269.569216][T10278]  should_failslab+0xc2/0x120
[  269.569231][T10278]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  269.569256][T10278]  ? __alloc_skb+0x2b2/0x380
[  269.569287][T10278]  __alloc_skb+0x2b2/0x380
[  269.569313][T10278]  ? __pfx___alloc_skb+0x10/0x10
[  269.569335][T10278]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  269.569366][T10278]  netlink_ack+0x15d/0xb80
[  269.569382][T10278]  ? __lock_acquire+0x622/0x1c90
[  269.569399][T10278]  netlink_rcv_skb+0x332/0x420
[  269.569411][T10278]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  269.569424][T10278]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  269.569441][T10278]  ? netlink_deliver_tap+0x1ae/0xd30
[  269.569452][T10278]  ? is_vmalloc_addr+0x86/0xa0
[  269.569470][T10278]  netlink_unicast+0x53d/0x7f0
[  269.569484][T10278]  ? __pfx_netlink_unicast+0x10/0x10
[  269.569500][T10278]  netlink_sendmsg+0x8d1/0xdd0
[  269.569514][T10278]  ? __pfx_netlink_sendmsg+0x10/0x10
[  269.569527][T10278]  ? __import_iovec+0x1dd/0x650
[  269.569541][T10278]  ____sys_sendmsg+0xa98/0xc70
[  269.569555][T10278]  ? __pfx_____sys_sendmsg+0x10/0x10
[  269.569573][T10278]  ? get_compat_msghdr+0x11a/0x170
[  269.569589][T10278]  ___sys_sendmsg+0x134/0x1d0
[  269.569607][T10278]  ? __pfx____sys_sendmsg+0x10/0x10
[  269.569631][T10278]  ? find_held_lock+0x2b/0x80
[  269.569650][T10278]  __sys_sendmsg+0x16d/0x220
[  269.569667][T10278]  ? __pfx___sys_sendmsg+0x10/0x10
[  269.569690][T10278]  ? rcu_is_watching+0x12/0xc0
[  269.569703][T10278]  __do_fast_syscall_32+0x7c/0x3a0
[  269.569716][T10278]  do_fast_syscall_32+0x32/0x80
[  269.569726][T10278]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  269.569741][T10278] RIP: 0023:0xf7fc8579
[  269.569749][T10278] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  269.569760][T10278] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  269.569770][T10278] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200
[  269.569777][T10278] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000
[  269.569783][T10278] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  269.569789][T10278] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  269.569795][T10278] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  269.569809][T10278]  </TASK>
[  270.409281][T10292] [U] 
[  270.410364][T10292] [U] 
[  270.411250][T10292] [U] 
[  270.412166][T10292] [U] 
[  270.413083][T10292] [U] 
[  270.413989][T10292] [U] 
[  270.415065][T10292] [U] 
[  270.416203][T10292] [U] 
[  270.417978][T10292] [U] 
[  270.418881][T10292] [U] 
[  270.419748][T10292] [U] 
[  270.420607][T10292] [U] 
[  270.421566][T10292] [U] 
[  270.422440][T10292] [U] 
[  270.423298][T10292] [U] 
[  270.424168][T10292] [U] 
[  270.425236][T10292] [U] 
[  270.426133][T10292] [U] 
[  270.426993][T10292] [U] 
[  270.427858][T10292] [U] 
[  270.428764][T10292] [U] 
[  270.429633][T10292] [U] 
[  270.430488][T10292] [U] 
[  270.431353][T10292] [U] 
[  270.432285][T10292] [U] 
[  270.433177][T10292] [U] 
[  270.434033][T10292] [U] 
[  270.434895][T10292] [U] 
[  270.436815][T10292] [U] 
[  270.437870][T10292] [U] 
[  270.439006][T10292] [U] 
[  270.440000][T10292] [U] 
[  270.440959][T10292] [U] 
[  270.441830][T10292] [U] 
[  270.442680][T10292] [U] 
[  270.443554][T10292] [U] 
[  270.444846][T10292] [U] 
[  270.445739][T10292] [U] 
[  270.446644][T10292] [U] 
[  270.447560][T10292] [U] 
[  270.448471][T10292] [U] 
[  270.449340][T10292] [U] 
[  270.450196][T10292] [U] 
[  270.451069][T10292] [U] 
[  270.451984][T10292] [U] 
[  270.452863][T10292] [U] 
[  270.453766][T10292] [U] 
[  270.454659][T10292] [U] 
[  270.456156][T10292] [U] 
[  270.457100][T10292] [U] 
[  270.457995][T10292] [U] 
[  270.458884][T10292] [U] 
[  270.460335][T10292] [U] 
[  270.461226][T10292] [U] 
[  270.462101][T10292] [U] 
[  270.462973][T10292] [U] 
[  270.464175][T10292] [U] 
[  270.465087][T10292] [U] 
[  270.465973][T10292] [U] 
[  270.466870][T10292] [U] 
[  270.467822][T10292] [U] 
[  270.468702][T10292] [U] 
[  270.469583][T10292] [U] 
[  270.470444][T10292] [U] 
[  270.471317][T10292] [U] 
[  270.472192][T10292] [U] 
[  270.473062][T10292] [U] 
[  270.473937][T10292] [U] 
[  270.475342][T10292] [U] 
[  270.476244][T10292] [U] 
[  270.477145][T10292] [U] 
[  270.478030][T10292] [U] 
[  270.479002][T10292] [U] 
[  270.479906][T10292] [U] 
[  270.480773][T10292] [U] 
[  270.481660][T10292] [U] 
[  270.482535][T10292] [U] 
[  270.483432][T10292] [U] 
[  270.484300][T10292] [U] 
[  270.485175][T10292] [U] 
[  270.486575][T10292] [U] 
[  270.487531][T10292] [U] 
[  270.488403][T10292] [U] 
[  270.489273][T10292] [U] 
[  270.490493][T10292] [U] 
[  270.490528][T10295] geneve2: entered promiscuous mode
[  270.491391][T10292] [U] 
[  270.492987][T10295] geneve2: entered allmulticast mode
[  270.493845][T10292] [U] 
[  270.493866][T10292] [U] 
[  270.494062][T10292] [U] 
[  270.498142][T10292] [U] 
[  270.498994][T10292] [U] 
[  270.499857][T10292] [U] 
[  270.500861][T10292] [U] 
[  270.501740][T10292] [U] 
[  270.502608][T10292] [U] 
[  270.503499][T10292] [U] 
[  270.504605][T10292] [U] 
[  270.505513][T10292] [U] 
[  270.506402][T10292] [U] 
[  270.507292][T10292] [U] 
[  270.508266][T10292] [U] 
[  270.509176][T10292] [U] 
[  270.510046][T10292] [U] 
[  270.510902][T10292] [U] 
[  270.511889][T10292] [U] 
[  270.512780][T10292] [U] 
[  270.513661][T10292] [U] 
[  270.514544][T10292] [U] 
[  270.515586][T10292] [U] 
[  270.516459][T10292] [U] 
[  270.517315][T10292] [U] 
[  270.518175][T10292] [U] 
[  270.519220][T10292] [U] 
[  270.520158][T10292] [U] 
[  270.521009][T10292] [U] 
[  270.521875][T10292] [U] 
[  270.522862][T10292] [U] 
[  270.523741][T10292] [U] 
[  270.524611][T10292] [U] 
[  270.525514][T10292] [U] 
[  270.526658][T10292] [U] 
[  270.527572][T10292] [U] 
[  270.528432][T10292] [U] 
[  270.529296][T10292] [U] 
[  270.530225][T10292] [U] 
[  270.531088][T10292] [U] 
[  270.531967][T10292] [U] 
[  270.559116][T10291] [U] 
[  270.799025][T10300] siw: device registration error -23
[  271.040339][T10306] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11)
[  271.042333][T10306] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  271.047665][T10306] vhci_hcd vhci_hcd.0: Device attached
[  271.050724][T10307] vhci_hcd: connection closed
[  271.052579][ T7669] vhci_hcd: stop threads
[  271.055882][ T7669] vhci_hcd: release socket
[  271.057290][ T7669] vhci_hcd: disconnect device
[  271.203262][ T5954] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  272.090672][T10322] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  272.092757][T10322] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  272.095272][T10322] vhci_hcd vhci_hcd.0: Device attached
[  272.235179][T10324] vhci_hcd: connection closed
[  272.235501][   T46] vhci_hcd: stop threads
[  272.238413][   T46] vhci_hcd: release socket
[  272.240031][   T46] vhci_hcd: disconnect device
[  272.253781][T10328] FAULT_INJECTION: forcing a failure.
[  272.253781][T10328] name failslab, interval 1, probability 0, space 0, times 0
[  272.257716][T10328] CPU: 2 UID: 0 PID: 10328 Comm: syz.3.1141 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  272.257745][T10328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  272.257752][T10328] Call Trace:
[  272.257757][T10328]  <TASK>
[  272.257761][T10328]  dump_stack_lvl+0x16c/0x1f0
[  272.257782][T10328]  should_fail_ex+0x512/0x640
[  272.257799][T10328]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  272.257818][T10328]  should_failslab+0xc2/0x120
[  272.257829][T10328]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  272.257845][T10328]  ? __alloc_skb+0x2b2/0x380
[  272.257864][T10328]  __alloc_skb+0x2b2/0x380
[  272.257880][T10328]  ? __pfx___alloc_skb+0x10/0x10
[  272.257906][T10328]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  272.257928][T10328]  netlink_ack+0x15d/0xb80
[  272.257946][T10328]  netlink_rcv_skb+0x332/0x420
[  272.257958][T10328]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  272.257970][T10328]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  272.257988][T10328]  ? netlink_deliver_tap+0x1ae/0xd30
[  272.258001][T10328]  netlink_unicast+0x53d/0x7f0
[  272.258015][T10328]  ? __pfx_netlink_unicast+0x10/0x10
[  272.258031][T10328]  netlink_sendmsg+0x8d1/0xdd0
[  272.258046][T10328]  ? __pfx_netlink_sendmsg+0x10/0x10
[  272.258059][T10328]  ? __import_iovec+0x1dd/0x650
[  272.258072][T10328]  ____sys_sendmsg+0xa98/0xc70
[  272.258087][T10328]  ? __pfx_____sys_sendmsg+0x10/0x10
[  272.258099][T10328]  ? get_compat_msghdr+0x11a/0x170
[  272.258116][T10328]  ___sys_sendmsg+0x134/0x1d0
[  272.258134][T10328]  ? __pfx____sys_sendmsg+0x10/0x10
[  272.258158][T10328]  ? find_held_lock+0x2b/0x80
[  272.258178][T10328]  __sys_sendmsg+0x16d/0x220
[  272.258196][T10328]  ? __pfx___sys_sendmsg+0x10/0x10
[  272.258218][T10328]  ? rcu_is_watching+0x12/0xc0
[  272.258232][T10328]  __do_fast_syscall_32+0x7c/0x3a0
[  272.258243][T10328]  do_fast_syscall_32+0x32/0x80
[  272.258253][T10328]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  272.258267][T10328] RIP: 0023:0xf7f02579
[  272.258276][T10328] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  272.258287][T10328] RSP: 002b:00000000f502655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  272.258297][T10328] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200
[  272.258304][T10328] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000
[  272.258310][T10328] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  272.258316][T10328] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  272.258322][T10328] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  272.258336][T10328]  </TASK>
[  273.537170][T10355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1150'.
[  273.586876][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1144'.
[  273.694840][T10357] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.714753][ T1179] Bluetooth: hci4: Frame reassembly failed (-84)
[  273.948923][T10357] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.076133][T10357] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.098306][ T5953] Bluetooth: hci3: unexpected event for opcode 0x1004
[  274.293327][   T10] vhci_hcd: vhci_device speed not set
[  274.347198][T10357] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.555583][T10357] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.580534][T10357] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.590948][T10357] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.606542][T10357] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.833220][T10371] FAULT_INJECTION: forcing a failure.
[  274.833220][T10371] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  274.837443][T10371] CPU: 3 UID: 0 PID: 10371 Comm: syz.2.1154 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  274.837458][T10371] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  274.837465][T10371] Call Trace:
[  274.837469][T10371]  <TASK>
[  274.837475][T10371]  dump_stack_lvl+0x16c/0x1f0
[  274.837495][T10371]  should_fail_ex+0x512/0x640
[  274.837514][T10371]  _copy_to_user+0x32/0xd0
[  274.837533][T10371]  simple_read_from_buffer+0xcb/0x170
[  274.837548][T10371]  proc_fail_nth_read+0x197/0x270
[  274.837562][T10371]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  274.837576][T10371]  ? rw_verify_area+0xcf/0x680
[  274.837589][T10371]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  274.837606][T10371]  vfs_read+0x1e1/0xc60
[  274.837621][T10371]  ? fdget_pos+0x2a2/0x370
[  274.837639][T10371]  ? __pfx_vfs_read+0x10/0x10
[  274.837652][T10371]  ? find_held_lock+0x2b/0x80
[  274.837667][T10371]  ? __fget_files+0x20e/0x3c0
[  274.837686][T10371]  ksys_read+0x12a/0x250
[  274.837701][T10371]  ? __pfx_ksys_read+0x10/0x10
[  274.837717][T10371]  ? rcu_is_watching+0x12/0xc0
[  274.837730][T10371]  __do_fast_syscall_32+0x7c/0x3a0
[  274.837742][T10371]  do_fast_syscall_32+0x32/0x80
[  274.837753][T10371]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  274.837766][T10371] RIP: 0023:0xf7fc8579
[  274.837775][T10371] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  274.837786][T10371] RSP: 002b:00000000f50e6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  274.837797][T10371] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f50e6620
[  274.837803][T10371] RDX: 000000000000000f RSI: 00000000f7452ff4 RDI: 0000000000000000
[  274.837809][T10371] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  274.837815][T10371] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  274.837821][T10371] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  274.837835][T10371]  </TASK>
[  275.202696][T10377] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  275.204763][T10377] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  275.210067][T10377] vhci_hcd vhci_hcd.0: Device attached
[  275.512987][   T10] usb 41-1: new high-speed USB device number 11 using vhci_hcd
[  275.763019][ T5953] Bluetooth: hci4: command 0x1003 tx timeout
[  275.763041][ T5954] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  275.813282][T10378] vhci_hcd: connection reset by peer
[  275.815525][ T1186] vhci_hcd: stop threads
[  275.817294][ T1186] vhci_hcd: release socket
[  275.819207][ T1186] vhci_hcd: disconnect device
[  276.338322][T10402] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  277.951119][ T7669] Bluetooth: hci4: Frame reassembly failed (-84)
[  277.963191][T10443] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  277.965270][T10443] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  277.967935][T10443] vhci_hcd vhci_hcd.0: Device attached
[  278.164259][ T5953] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  278.166883][ T5953] Bluetooth: hci3: Injecting HCI hardware error event
[  278.169971][ T5953] Bluetooth: hci3: hardware error 0x00
[  278.249585][T10453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1179'.
[  278.252579][T10454] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1179'.
[  278.310136][T10454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1179'.
[  278.426491][T10444] vhci_hcd: connection closed
[  278.426665][ T1179] vhci_hcd: stop threads
[  278.431634][ T1179] vhci_hcd: release socket
[  278.433200][ T1179] vhci_hcd: disconnect device
[  278.442370][T10459] siw: device registration error -23
[  278.886241][T10462] siw: device registration error -23
[  280.012767][   T63] Bluetooth: hci4: command 0x1003 tx timeout
[  280.029518][ T5954] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  280.243240][ T5953] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  280.456631][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1192'.
[  280.464324][T10496] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.550323][T10498] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  280.552330][T10498] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  280.554964][T10498] vhci_hcd vhci_hcd.0: Device attached
[  280.555718][T10496] bridge_slave_1 (unregistering): left allmulticast mode
[  280.558812][T10496] bridge_slave_1 (unregistering): left promiscuous mode
[  280.561489][T10496] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.141496][T10499] vhci_hcd: connection reset by peer
[  281.156196][ T7669] vhci_hcd: stop threads
[  281.162644][ T7669] vhci_hcd: release socket
[  281.168818][ T7669] vhci_hcd: disconnect device
[  281.232688][   T10] vhci_hcd: vhci_device speed not set
[  282.064536][ T7668] Bluetooth: hci4: Frame reassembly failed (-84)
[  282.430178][T10537] siw: device registration error -23
[  283.344618][T10555] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  283.346625][T10555] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  283.349843][T10555] vhci_hcd vhci_hcd.0: Device attached
[  283.612493][   T10] usb 45-1: new low-speed USB device number 5 using vhci_hcd
[  283.635595][T10556] vhci_hcd: connection reset by peer
[  283.637461][ T6383] vhci_hcd: stop threads
[  283.638775][ T6383] vhci_hcd: release socket
[  283.640234][ T6383] vhci_hcd: disconnect device
[  283.922493][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  285.824082][ T1186] Bluetooth: hci4: Frame reassembly failed (-84)
[  285.826182][ T6383] Bluetooth: hci4: Frame reassembly failed (-84)
[  286.409857][T10612] FAULT_INJECTION: forcing a failure.
[  286.409857][T10612] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  286.414077][T10612] CPU: 0 UID: 0 PID: 10612 Comm: syz.4.1226 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  286.414092][T10612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  286.414110][T10612] Call Trace:
[  286.414115][T10612]  <TASK>
[  286.414119][T10612]  dump_stack_lvl+0x16c/0x1f0
[  286.414156][T10612]  should_fail_ex+0x512/0x640
[  286.414179][T10612]  _copy_to_user+0x32/0xd0
[  286.414197][T10612]  simple_read_from_buffer+0xcb/0x170
[  286.414213][T10612]  proc_fail_nth_read+0x197/0x270
[  286.414227][T10612]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  286.414241][T10612]  ? rw_verify_area+0xcf/0x680
[  286.414254][T10612]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  286.414267][T10612]  vfs_read+0x1e1/0xc60
[  286.414282][T10612]  ? fdget_pos+0x2a2/0x370
[  286.414299][T10612]  ? __pfx_vfs_read+0x10/0x10
[  286.414313][T10612]  ? find_held_lock+0x2b/0x80
[  286.414328][T10612]  ? __fget_files+0x20e/0x3c0
[  286.414346][T10612]  ksys_read+0x12a/0x250
[  286.414361][T10612]  ? __pfx_ksys_read+0x10/0x10
[  286.414377][T10612]  ? rcu_is_watching+0x12/0xc0
[  286.414390][T10612]  __do_fast_syscall_32+0x7c/0x3a0
[  286.414403][T10612]  do_fast_syscall_32+0x32/0x80
[  286.414413][T10612]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  286.414427][T10612] RIP: 0023:0xf70fe579
[  286.414435][T10612] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  286.414445][T10612] RSP: 002b:00000000f50cd590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  286.414455][T10612] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f50cd620
[  286.414462][T10612] RDX: 000000000000000f RSI: 00000000f7462ff4 RDI: 0000000000000000
[  286.414468][T10612] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  286.414474][T10612] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  286.414485][T10612] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  286.414498][T10612]  </TASK>
[  286.484760][T10614] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  286.486730][T10614] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  286.489048][T10614] vhci_hcd vhci_hcd.0: Device attached
[  286.732313][    T9] usb 41-1: new low-speed USB device number 12 using vhci_hcd
[  287.039680][T10615] vhci_hcd: connection reset by peer
[  287.041455][ T1186] vhci_hcd: stop threads
[  287.042999][ T1186] vhci_hcd: release socket
[  287.046158][ T1186] vhci_hcd: disconnect device
[  287.718507][T10626] netlink: 'syz.2.1229': attribute type 10 has an invalid length.
[  287.724377][T10626] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  287.730345][T10626] gfs2: gfs2 mount does not exist
[  287.842434][ T5954] Bluetooth: hci4: command 0x1003 tx timeout
[  287.842921][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  288.716479][   T10] vhci_hcd: vhci_device speed not set
[  288.739941][T10641] lo speed is unknown, defaulting to 1000
[  288.952556][T10644] siw: device registration error -23
[  289.621460][T10657] syz.3.1238: attempt to access beyond end of device
[  289.621460][T10657] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0
[  289.633705][T10657] syz.3.1238: attempt to access beyond end of device
[  289.633705][T10657] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0
[  289.637650][T10657] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  289.640716][T10657] syz.3.1238: attempt to access beyond end of device
[  289.640716][T10657] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0
[  289.645048][T10657] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  289.648753][T10657] syz.3.1238: attempt to access beyond end of device
[  289.648753][T10657] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0
[  289.655233][T10657] syz.3.1238: attempt to access beyond end of device
[  289.655233][T10657] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0
[  289.658980][T10657] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  289.661860][T10657] syz.3.1238: attempt to access beyond end of device
[  289.661860][T10657] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0
[  289.666053][T10657] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  289.670616][T10657] syz.3.1238: attempt to access beyond end of device
[  289.670616][T10657] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0
[  289.675023][T10657] syz.3.1238: attempt to access beyond end of device
[  289.675023][T10657] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0
[  289.679023][T10657] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  289.681962][T10657] syz.3.1238: attempt to access beyond end of device
[  289.681962][T10657] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0
[  289.686343][T10657] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  289.689819][T10657] syz.3.1238: attempt to access beyond end of device
[  289.689819][T10657] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0
[  289.694531][T10657] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  289.697460][T10657] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  289.700260][T10657] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1)
[  289.747184][T10661] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  289.749213][T10661] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  289.751480][T10661] vhci_hcd vhci_hcd.0: Device attached
[  290.242113][ T6143] usb 39-1: new low-speed USB device number 9 using vhci_hcd
[  290.413601][T10662] vhci_hcd: connection reset by peer
[  290.415364][ T1186] vhci_hcd: stop threads
[  290.416774][ T1186] vhci_hcd: release socket
[  290.418231][ T1186] vhci_hcd: disconnect device
[  291.388398][ T1186] Bluetooth: hci4: Frame reassembly failed (-84)
[  291.423781][T10690] siw: device registration error -23
[  291.832065][    T9] vhci_hcd: vhci_device speed not set
[  291.973281][T10703] 9pnet_fd: Insufficient options for proto=fd
[  292.128035][T10707] siw: device registration error -23
[  292.516546][T10718] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  292.519111][T10718] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  292.522971][T10718] vhci_hcd vhci_hcd.0: Device attached
[  293.092243][T10719] vhci_hcd: connection closed
[  293.092428][ T1142] vhci_hcd: stop threads
[  293.095317][ T1142] vhci_hcd: release socket
[  293.096906][ T1142] vhci_hcd: disconnect device
[  293.125531][T10725] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1257'.
[  293.371991][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  293.372055][ T5954] Bluetooth: hci4: command 0x1003 tx timeout
[  294.002028][T10732] 9pnet_fd: Insufficient options for proto=fd
[  294.166898][T10738] siw: device registration error -23
[  295.311369][T10761] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  295.314138][T10761] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  295.319273][T10761] vhci_hcd vhci_hcd.0: Device attached
[  295.352612][ T6143] vhci_hcd: vhci_device speed not set
[  295.373298][T10767] 9pnet_fd: Insufficient options for proto=fd
[  295.571857][ T6011] usb 45-1: new low-speed USB device number 6 using vhci_hcd
[  295.892912][T10762] vhci_hcd: connection reset by peer
[  295.899300][ T1179] vhci_hcd: stop threads
[  295.900760][ T1179] vhci_hcd: release socket
[  295.902321][ T1179] vhci_hcd: disconnect device
[  296.554904][ T7668] Bluetooth: hci4: Frame reassembly failed (-84)
[  296.646656][T10784] siw: device registration error -23
[  297.775955][T10801] 9pnet_fd: Insufficient options for proto=fd
[  298.105680][T10813] siw: device registration error -23
[  298.561724][ T5954] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  298.563404][   T63] Bluetooth: hci4: command 0x1003 tx timeout
[  298.575754][T10819] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  298.577828][T10819] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  298.580332][T10819] vhci_hcd vhci_hcd.0: Device attached
[  298.787695][T10820] vhci_hcd: connection closed
[  298.787855][ T7668] vhci_hcd: stop threads
[  298.792562][ T7668] vhci_hcd: release socket
[  298.794875][ T7668] vhci_hcd: disconnect device
[  298.864951][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1287'.
[  298.867874][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1287'.
[  298.927989][T10828] 9pnet_fd: Insufficient options for proto=fd
[  298.954575][T10826] siw: device registration error -23
[  299.842633][T10848] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1295'.
[  300.654197][T10859] 9pnet_fd: Insufficient options for proto=fd
[  300.710836][ T1142] Bluetooth: hci4: Frame reassembly failed (-84)
[  300.720965][ T6011] vhci_hcd: vhci_device speed not set
[  300.967710][T10864] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  300.969791][T10864] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  300.972735][T10864] vhci_hcd vhci_hcd.0: Device attached
[  301.282503][ T6011] usb 45-1: device descriptor read/64, error -110
[  301.537709][T10865] vhci_hcd: connection closed
[  301.537967][ T7668] vhci_hcd: stop threads
[  301.540767][ T7668] vhci_hcd: release socket
[  301.542899][ T7668] vhci_hcd: disconnect device
[  301.551538][ T6011] usb 45-1: new low-speed USB device number 7 using vhci_hcd
[  301.554030][ T6011] usb 45-1: enqueue for inactive port 0
[  301.621535][ T6011] vhci_hcd: vhci_device speed not set
[  302.721443][ T5954] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  303.077003][T10891] 9pnet_fd: Insufficient options for proto=fd
[  303.293732][T10902] netlink: 'syz.3.1311': attribute type 10 has an invalid length.
[  303.312239][T10902] veth0_vlan: left promiscuous mode
[  303.316606][T10902] veth0_vlan: entered promiscuous mode
[  303.347781][T10902] team0: Device veth0_vlan failed to register rx_handler
[  303.613921][T10914] siw: device registration error -23
[  303.631498][T10899] siw: device registration error -23
[  304.114197][T10917] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  304.116266][T10917] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  304.125151][T10917] vhci_hcd vhci_hcd.0: Device attached
[  304.204783][T10921] 9pnet_fd: Insufficient options for proto=fd
[  304.304236][T10918] vhci_hcd: connection closed
[  304.304342][ T7668] vhci_hcd: stop threads
[  304.307631][ T7668] vhci_hcd: release socket
[  304.324858][ T7668] vhci_hcd: disconnect device
[  304.456688][T10924] siw: device registration error -23
[  304.851283][ T6383] Bluetooth: hci4: Frame reassembly failed (-84)
[  305.325207][T10947] 9pnet_fd: Insufficient options for proto=fd
[  306.529115][T10972] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  306.531168][T10972] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  306.535291][T10972] vhci_hcd vhci_hcd.0: Device attached
[  306.781231][ T6143] usb 41-1: new low-speed USB device number 13 using vhci_hcd
[  306.881293][ T5954] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  306.881326][   T63] Bluetooth: hci4: command 0x1003 tx timeout
[  307.171455][T10973] vhci_hcd: connection reset by peer
[  307.175368][   T46] vhci_hcd: stop threads
[  307.176731][   T46] vhci_hcd: release socket
[  307.178185][   T46] vhci_hcd: disconnect device
[  307.520667][T10986] siw: device registration error -23
[  307.578875][T10988] 9pnet_fd: Insufficient options for proto=fd
[  308.604360][T11002] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20003
[  309.211226][T11012] siw: device registration error -23
[  309.438165][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1348'.
[  310.593484][ T6383] Bluetooth: hci4: Frame reassembly failed (-84)
[  311.290984][ T6087] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  311.464412][ T6087] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  311.467341][ T6087] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.469923][ T6087] usb 9-1: Product: syz
[  311.471615][ T6087] usb 9-1: Manufacturer: syz
[  311.473223][ T6087] usb 9-1: SerialNumber: syz
[  311.484723][ T6087] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  311.496505][ T1020] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  311.953913][ T6143] vhci_hcd: vhci_device speed not set
[  312.123099][T11070] siw: device registration error -23
[  312.560903][ T5954] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  312.679765][ T1020] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[  312.738629][ T1020] ath9k_htc: Failed to initialize the device
[  312.759983][ T1020] usb 9-1: ath9k_htc: USB layer deinitialized
[  313.817273][T11082] siw: device registration error -23
[  313.823957][ T6087] usb 9-1: USB disconnect, device number 3
[  315.468333][ T7669] Bluetooth: hci4: Frame reassembly failed (-84)
[  316.310678][ T6087] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  316.474286][ T6087] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  316.477603][ T6087] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.480836][ T6087] usb 6-1: Product: syz
[  316.482191][ T6087] usb 6-1: Manufacturer: syz
[  316.483679][ T6087] usb 6-1: SerialNumber: syz
[  316.488383][ T6087] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  316.503350][ T6087] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  316.726446][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  317.087506][T11135] netlink: 'syz.3.1379': attribute type 1 has an invalid length.
[  317.090867][T11135] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1379'.
[  317.454107][ T5991] libceph: connect (1)[c::]:6789 error -101
[  317.458448][ T5991] libceph: mon0 (1)[c::]:6789 connect error
[  317.462346][ T5991] libceph: connect (1)[c::]:6789 error -101
[  317.465899][ T5991] libceph: mon0 (1)[c::]:6789 connect error
[  317.520754][ T5954] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  317.521855][   T63] Bluetooth: hci4: command 0x1003 tx timeout
[  317.530641][ T6087] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  317.533018][ T6087] ath9k_htc: Failed to initialize the device
[  317.553829][ T6087] usb 6-1: ath9k_htc: USB layer deinitialized
[  317.721031][ T5991] libceph: connect (1)[c::]:6789 error -101
[  317.723872][ T5991] libceph: mon0 (1)[c::]:6789 connect error
[  318.024669][T11144] ceph: No mds server is up or the cluster is laggy
[  318.287361][T11151] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  318.289452][T11151] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  318.307840][T11151] vhci_hcd vhci_hcd.0: Device attached
[  318.680642][ T5991] usb 41-1: new low-speed USB device number 14 using vhci_hcd
[  318.854971][ T1020] usb 6-1: USB disconnect, device number 11
[  318.916683][T11156] vhci_hcd: connection reset by peer
[  318.925497][ T1142] vhci_hcd: stop threads
[  318.927118][ T1142] vhci_hcd: release socket
[  318.931273][ T1142] vhci_hcd: disconnect device
[  319.200596][T11174] lo speed is unknown, defaulting to 1000
[  319.233595][T11176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1387'.
[  319.311847][T11176] wireguard0: entered promiscuous mode
[  319.322375][T11176] wireguard0: entered allmulticast mode
[  319.440515][T11185] mkiss: ax0: crc mode is auto.
[  319.920186][ T1186] Bluetooth: hci4: Frame reassembly failed (-84)
[  320.420301][T11205] siw: device registration error -23
[  321.422245][T11218] Bluetooth: MGMT ver 1.23
[  321.920456][ T5954] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  323.052896][T11240] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  323.055401][T11240] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  323.058298][T11240] vhci_hcd vhci_hcd.0: Device attached
[  323.193429][T11238] siw: device registration error -23
[  323.300261][ T6031] usb 45-1: new low-speed USB device number 8 using vhci_hcd
[  323.628539][T11241] vhci_hcd: connection reset by peer
[  323.631760][ T7668] vhci_hcd: stop threads
[  323.633174][ T7668] vhci_hcd: release socket
[  323.635209][ T7668] vhci_hcd: disconnect device
[  323.840256][ T5991] vhci_hcd: vhci_device speed not set
[  324.305601][ T6383] Bluetooth: hci4: Frame reassembly failed (-84)
[  324.394998][T11255] netlink: 'syz.3.1408': attribute type 1 has an invalid length.
[  324.398062][T11255] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1408'.
[  324.412622][T11255] netlink: 'syz.3.1408': attribute type 1 has an invalid length.
[  324.415107][T11255] netlink: 'syz.3.1408': attribute type 2 has an invalid length.
[  324.418167][T11255] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1408'.
[  326.320397][   T63] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  326.321164][ T5954] Bluetooth: hci4: command 0x1003 tx timeout
[  326.660785][   T40] audit: type=1326 audit(2000000094.825:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.2.1420" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x0
[  326.678245][T11303] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  326.680343][T11303] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  326.683260][T11303] vhci_hcd vhci_hcd.0: Device attached
[  326.946142][    T9] hid-generic 0009:FFFFFF01:0004.0002: unexpected long global item
[  326.949530][    T9] hid-generic 0009:FFFFFF01:0004.0002: probe with driver hid-generic failed with error -22
[  327.063014][T11319] siw: device registration error -23
[  327.293941][T11304] vhci_hcd: connection closed
[  327.294337][ T1179] vhci_hcd: stop threads
[  327.297274][ T1179] vhci_hcd: release socket
[  327.299519][ T1179] vhci_hcd: disconnect device
[  328.190605][T11330] siw: device registration error -23
[  328.400055][ T6031] vhci_hcd: vhci_device speed not set
[  328.450018][T11329] siw: device registration error -23
[  329.367109][T11335] siw: device registration error -23
[  330.431837][ T1179] Bluetooth: hci4: Frame reassembly failed (-84)
[  330.433896][ T1179] Bluetooth: hci4: Frame reassembly failed (-84)
[  330.435940][ T6383] Bluetooth: hci4: Frame reassembly failed (-84)
[  332.489760][ T5955] Bluetooth: hci4: command 0x1003 tx timeout
[  332.489933][   T63] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  332.895101][ T6383] Bluetooth: hci5: Frame reassembly failed (-84)
[  332.897170][ T1142] Bluetooth: hci5: Frame reassembly failed (-84)
[  333.774509][T11399] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1446'.
[  334.343194][T11405] siw: device registration error -23
[  334.960819][ T5953] Bluetooth: hci5: command 0x1003 tx timeout
[  334.966421][   T63] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  335.385217][   T46] Bluetooth: hci4: Frame reassembly failed (-84)
[  336.389833][T11435] siw: device registration error -23
[  336.624598][T11445] 9pnet_fd: Insufficient options for proto=fd
[  336.686523][T11446] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  336.688970][T11446] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  336.970618][T11457] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1465'.
[  337.449571][   T63] Bluetooth: hci4: command 0x1003 tx timeout
[  337.452380][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  338.128123][T11469] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  338.130212][T11469] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  338.133847][T11469] vhci_hcd vhci_hcd.0: Device attached
[  338.377758][T11470] vhci_hcd: connection closed
[  338.381606][   T46] vhci_hcd: stop threads
[  338.399238][ T6031] usb 45-1: new low-speed USB device number 9 using vhci_hcd
[  338.402485][   T46] vhci_hcd: release socket
[  338.404273][   T46] vhci_hcd: disconnect device
[  339.215399][ T5953] Bluetooth: hci0: unexpected event for opcode 0x201c
[  339.343617][T11501] siw: device registration error -23
[  339.467259][T11512] bio_check_eod: 2 callbacks suppressed
[  339.467278][T11512] syz.2.1480: attempt to access beyond end of device
[  339.467278][T11512] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0
[  339.475057][T11512] qnx6: unable to read the first superblock
[  339.477108][T11512] syz.2.1480: attempt to access beyond end of device
[  339.477108][T11512] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[  339.489924][T11512] qnx6: unable to read the first superblock
[  339.491816][T11512] qnx6: unable to read the first superblock
[  339.500508][T11512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1480'.
[  339.509200][T11512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1480'.
[  339.634036][T11520] 9pnet_fd: Insufficient options for proto=fd
[  340.099319][   T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  340.249732][   T10] usb 9-1: Using ep0 maxpacket: 16
[  340.252912][   T10] usb 9-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  340.255865][   T10] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  340.259048][   T10] usb 9-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  340.263274][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.281443][   T10] usb 9-1: config 0 descriptor??
[  340.796192][T11543] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  342.721744][T11594] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  343.065841][   T53] usb 9-1: USB disconnect, device number 4
[  343.266119][T11600] lo speed is unknown, defaulting to 1000
[  343.602241][ T6031] vhci_hcd: vhci_device speed not set
[  343.829335][T11613] random: crng reseeded on system resumption
[  343.882257][T11619] openvswitch: netlink: IPv4 tunnel dst address is zero
[  344.203776][T11625] lo speed is unknown, defaulting to 1000
[  344.424517][T11628] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1510'.
[  344.591528][   T40] audit: type=1326 audit(2000000112.756:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11635 comm="syz.4.1513" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70fe579 code=0x0
[  344.660452][T11638] lo speed is unknown, defaulting to 1000
[  345.807211][T11660] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  345.809322][T11660] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  345.818091][T11660] vhci_hcd vhci_hcd.0: Device attached
[  345.867321][T11664] xt_HMARK: spi-set and port-set can't be combined
[  345.882330][T11661] vhci_hcd: connection closed
[  345.882538][ T7668] vhci_hcd: stop threads
[  345.885439][ T7668] vhci_hcd: release socket
[  345.886966][ T7668] vhci_hcd: disconnect device
[  345.955815][T11668] random: crng reseeded on system resumption
[  346.126507][T11672] netlink: 'syz.3.1520': attribute type 1 has an invalid length.
[  346.137584][T11672] 8021q: adding VLAN 0 to HW filter on device bond1
[  346.149037][T11672] vlan2: entered promiscuous mode
[  346.150718][T11672] bond1: entered promiscuous mode
[  346.152428][T11672] vlan2: entered allmulticast mode
[  346.154077][T11672] bond1: entered allmulticast mode
[  346.188273][ T6031] IPVS: starting estimator thread 0...
[  346.298979][T11682] IPVS: using max 43 ests per chain, 103200 per kthread
[  347.410827][T11704] random: crng reseeded on system resumption
[  347.892595][T11720] fuse: Bad value for 'rootmode'
[  348.441884][T11725] lo speed is unknown, defaulting to 1000
[  348.557563][T11724] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  348.559663][T11724] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  348.564410][T11724] vhci_hcd vhci_hcd.0: Device attached
[  349.089912][T11745] vhci_hcd: connection closed
[  349.090538][   T46] vhci_hcd: stop threads
[  349.093493][   T46] vhci_hcd: release socket
[  349.095055][   T46] vhci_hcd: disconnect device
[  349.148509][ T5991] usb 45-1: new low-speed USB device number 10 using vhci_hcd
[  349.156912][ T5991] usb 45-1: enqueue for inactive port 0
[  349.561448][ T5991] vhci_hcd: vhci_device speed not set
[  350.608347][T11791] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1552'.
[  351.693376][T11823] ALSA: mixer_oss: invalid OSS volume ''
[  351.723667][T11826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1560'.
[  352.384630][T11839] openvswitch: netlink: IPv4 tunnel dst address is zero
[  353.345374][T11850] No source specified
[  353.367519][T11854] lo speed is unknown, defaulting to 1000
[  353.793111][T11871] netlink: 'syz.3.1570': attribute type 4 has an invalid length.
[  354.128584][ T5998] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  354.356974][ T5998] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  354.364143][ T5998] usb 7-1: config 0 has no interfaces?
[  354.365906][ T5998] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  354.368742][ T5998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.372551][ T5998] usb 7-1: config 0 descriptor??
[  354.766218][T11869] lo speed is unknown, defaulting to 1000
[  356.727716][ T1020] usb 7-1: USB disconnect, device number 10
[  356.996758][T11918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1584'.
[  357.320304][   T63] Bluetooth: unknown link type 108
[  357.321970][   T63] Bluetooth: hci1: connection err: -111
[  357.523074][T11931] openvswitch: netlink: Missing key (keys=40, expected=100)
[  357.583584][T11931] trusted_key: encrypted_key: master key parameter is missing
[  358.594645][T11963] lo speed is unknown, defaulting to 1000
[  358.740014][T11970] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  359.812890][T11991] tipc: Started in network mode
[  359.814468][T11991] tipc: Node identity ac1414aa, cluster identity 4711
[  359.817833][T11991] tipc: Enabled bearer <udp:syz2>, priority 10
[  359.841853][T11991] tipc: Enabled bearer <eth:team0>, priority 0
[  360.351774][T12009] can0: slcan on pty26.
[  360.928359][   T10] tipc: Node number set to 2886997162
[  361.228826][T12006] can0 (unregistered): slcan off pty26.
[  361.383719][T12018] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1611'.
[  361.562207][T12022] siw: device registration error -23
[  362.301199][T12029] xt_CT: You must specify a L4 protocol and not use inversions on it
[  362.395134][T12033] lo speed is unknown, defaulting to 1000
[  362.709469][   T63] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  363.481979][T12046] netlink: 'syz.2.1619': attribute type 13 has an invalid length.
[  363.794400][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1622'.
[  363.950769][T12065] xt_CT: No such helper "pptp"
[  364.273746][T12046] warn_alloc: 3 callbacks suppressed
[  364.273764][T12046] syz.2.1619: vmalloc error: size 2625536, failed to allocated page array size 5128, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  364.285825][T12046] CPU: 0 UID: 0 PID: 12046 Comm: syz.2.1619 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  364.285849][T12046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  364.285861][T12046] Call Trace:
[  364.285867][T12046]  <TASK>
[  364.285874][T12046]  dump_stack_lvl+0x16c/0x1f0
[  364.285907][T12046]  warn_alloc+0x248/0x3a0
[  364.285936][T12046]  ? __pfx_warn_alloc+0x10/0x10
[  364.285989][T12046]  ? pfifo_fast_change_tx_queue_len+0x156/0xbb0
[  364.286019][T12046]  ? __vmalloc_node_noprof+0xad/0xf0
[  364.286046][T12046]  __vmalloc_node_range_noprof+0x101b/0x14b0
[  364.286079][T12046]  ? pfifo_fast_change_tx_queue_len+0x156/0xbb0
[  364.286115][T12046]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  364.286139][T12046]  ? __alloc_pages_noprof+0xb/0x1b0
[  364.286164][T12046]  ? ___kmalloc_large_node+0x84/0x1e0
[  364.286192][T12046]  __kvmalloc_node_noprof+0x30a/0x620
[  364.286230][T12046]  ? pfifo_fast_change_tx_queue_len+0x156/0xbb0
[  364.286260][T12046]  ? pfifo_fast_change_tx_queue_len+0x156/0xbb0
[  364.286293][T12046]  ? pfifo_fast_change_tx_queue_len+0x156/0xbb0
[  364.286320][T12046]  pfifo_fast_change_tx_queue_len+0x156/0xbb0
[  364.286360][T12046]  ? __pfx_pfifo_fast_change_tx_queue_len+0x10/0x10
[  364.286387][T12046]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  364.286415][T12046]  ? ip6_route_dev_notify+0xe4/0x750
[  364.286441][T12046]  ? __pfx_pfifo_fast_change_tx_queue_len+0x10/0x10
[  364.286468][T12046]  dev_qdisc_change_tx_queue_len+0x166/0x380
[  364.286493][T12046]  netif_change_tx_queue_len+0x1a1/0x1e0
[  364.286540][T12046]  ? __pfx_netif_change_tx_queue_len+0x10/0x10
[  364.286573][T12046]  ? netif_change_flags+0x10d/0x160
[  364.286604][T12046]  do_setlink.constprop.0+0xd00/0x4380
[  364.286627][T12046]  ? __pfx_console_unlock+0x10/0x10
[  364.286648][T12046]  ? __pfx_do_setlink.constprop.0+0x10/0x10
[  364.286669][T12046]  ? __wake_up_klogd.part.0+0x99/0xf0
[  364.286701][T12046]  ? __lock_acquire+0xb8a/0x1c90
[  364.286733][T12046]  ? __mutex_trylock_common+0xe9/0x250
[  364.286764][T12046]  ? __pfx___mutex_trylock_common+0x10/0x10
[  364.286790][T12046]  ? __pfx___might_resched+0x10/0x10
[  364.286809][T12046]  ? rcu_is_watching+0x12/0xc0
[  364.286827][T12046]  ? trace_contention_end+0xdd/0x130
[  364.286851][T12046]  ? __mutex_lock+0x1ca/0xb90
[  364.286869][T12046]  ? rcu_is_watching+0x12/0xc0
[  364.286887][T12046]  ? rtnl_newlink+0x600/0x2000
[  364.286901][T12046]  ? trace_cap_capable+0x18d/0x200
[  364.286920][T12046]  ? __pfx___mutex_lock+0x10/0x10
[  364.286935][T12046]  ? apparmor_capable+0x114/0x1d0
[  364.286963][T12046]  ? netlink_ns_capable+0xfa/0x130
[  364.286986][T12046]  rtnl_newlink+0x18e0/0x2000
[  364.287010][T12046]  ? __pfx_rtnl_newlink+0x10/0x10
[  364.287029][T12046]  ? arch_stack_walk+0xa6/0x100
[  364.287069][T12046]  ? __lock_acquire+0x622/0x1c90
[  364.287095][T12046]  ? rcu_is_watching+0x12/0xc0
[  364.287112][T12046]  ? trace_cap_capable+0x18d/0x200
[  364.287135][T12046]  ? find_held_lock+0x2b/0x80
[  364.287152][T12046]  ? __pfx_rtnl_newlink+0x10/0x10
[  364.287168][T12046]  ? __pfx_rtnl_newlink+0x10/0x10
[  364.287184][T12046]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  364.287202][T12046]  ? __pfx_rtnl_newlink+0x10/0x10
[  364.287220][T12046]  rtnetlink_rcv_msg+0x95e/0xe90
[  364.287240][T12046]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  364.287263][T12046]  ? __lock_acquire+0x622/0x1c90
[  364.287291][T12046]  netlink_rcv_skb+0x155/0x420
[  364.287311][T12046]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  364.287329][T12046]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  364.287359][T12046]  ? netlink_deliver_tap+0x1ae/0xd30
[  364.287378][T12046]  ? is_vmalloc_addr+0x86/0xa0
[  364.287407][T12046]  netlink_unicast+0x53d/0x7f0
[  364.287429][T12046]  ? __pfx_netlink_unicast+0x10/0x10
[  364.287456][T12046]  netlink_sendmsg+0x8d1/0xdd0
[  364.287481][T12046]  ? __pfx_netlink_sendmsg+0x10/0x10
[  364.287504][T12046]  ? __import_iovec+0x1dd/0x650
[  364.287526][T12046]  ____sys_sendmsg+0xa98/0xc70
[  364.287551][T12046]  ? __pfx_____sys_sendmsg+0x10/0x10
[  364.287572][T12046]  ? get_compat_msghdr+0x11a/0x170
[  364.287593][T12046]  ? __pfx_futex_wake_mark+0x10/0x10
[  364.287623][T12046]  ___sys_sendmsg+0x134/0x1d0
[  364.287652][T12046]  ? __pfx____sys_sendmsg+0x10/0x10
[  364.287690][T12046]  ? find_held_lock+0x2b/0x80
[  364.287723][T12046]  __sys_sendmsg+0x16d/0x220
[  364.287757][T12046]  ? __pfx___sys_sendmsg+0x10/0x10
[  364.287785][T12046]  ? __ia32_sys_futex_time32+0x1d9/0x460
[  364.287821][T12046]  ? rcu_is_watching+0x12/0xc0
[  364.287843][T12046]  __do_fast_syscall_32+0x7c/0x3a0
[  364.287862][T12046]  do_fast_syscall_32+0x32/0x80
[  364.287880][T12046]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  364.287902][T12046] RIP: 0023:0xf7fc8579
[  364.287916][T12046] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  364.287935][T12046] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  364.287953][T12046] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000180
[  364.287965][T12046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  364.287974][T12046] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  364.287984][T12046] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  364.287995][T12046] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  364.288018][T12046]  </TASK>
[  364.288158][T12046] Mem-Info:
[  364.498630][T12046] active_anon:4310 inactive_anon:4503 isolated_anon:0
[  364.498630][T12046]  active_file:6380 inactive_file:5331 isolated_file:0
[  364.498630][T12046]  unevictable:1769 dirty:259 writeback:1
[  364.498630][T12046]  slab_reclaimable:6447 slab_unreclaimable:60945
[  364.498630][T12046]  mapped:23605 shmem:7689 pagetables:1323
[  364.498630][T12046]  sec_pagetables:326 bounce:0
[  364.498630][T12046]  kernel_misc_reclaimable:0
[  364.498630][T12046]  free:43528 free_pcp:235 free_cma:0
[  364.517433][T12046] Node 0 active_anon:188kB inactive_anon:4kB active_file:3440kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:200kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8020kB pagetables:1100kB sec_pagetables:1180kB all_unreclaimable? yes Balloon:0kB
[  364.530679][T12046] Node 1 active_anon:17052kB inactive_anon:17908kB active_file:22080kB inactive_file:21224kB unevictable:3540kB isolated(anon):200kB isolated(file):0kB mapped:94220kB dirty:1036kB writeback:4kB shmem:27220kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6476kB pagetables:4192kB sec_pagetables:124kB all_unreclaimable? no Balloon:0kB
[  364.544447][T12046] Node 0 DMA free:2100kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:4kB free_cma:0kB
[  364.556535][T12046] lowmem_reserve[]: 0 289 289 289 289
[  364.559683][T12046] Node 0 DMA32 free:26652kB boost:10240kB min:23456kB low:26760kB high:30064kB reserved_highatomic:0KB free_highatomic:0KB active_anon:176kB inactive_anon:4kB active_file:3436kB inactive_file:0kB unevictable:3536kB writepending:0kB present:1032196kB managed:296392kB mlocked:0kB bounce:0kB free_pcp:520kB local_pcp:520kB free_cma:0kB
[  364.572345][T12046] lowmem_reserve[]: 0 0 0 0 0
[  364.574346][T12046] Node 1 DMA32 free:146248kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17452kB inactive_anon:17508kB active_file:22080kB inactive_file:21224kB unevictable:3540kB writepending:1040kB present:1048432kB managed:948268kB mlocked:0kB bounce:0kB free_pcp:456kB local_pcp:136kB free_cma:0kB
[  364.587418][T12046] lowmem_reserve[]: 0 0 0 0 0
[  364.589636][T12046] Node 0 DMA: 2*4kB (M) 3*8kB (M) 3*16kB (UM) 7*32kB (UM) 4*64kB (UM) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2096kB
[  364.595091][T12046] Node 0 DMA32: 89*4kB (UME) 89*8kB (UME) 57*16kB (UME) 151*32kB (UME) 86*64kB (UME) 22*128kB (UME) 13*256kB (UME) 4*512kB (UME) 6*1024kB (UM) 0*2048kB 0*4096kB = 26652kB
[  364.601809][T12046] Node 1 DMA32: 1444*4kB (UME) 848*8kB (UME) 537*16kB (UME) 511*32kB (UME) 380*64kB (UME) 129*128kB (UME) 19*256kB (UME) 48*512kB (UM) 31*1024kB (UM) 3*2048kB (M) 0*4096kB = 145664kB
[  364.607669][T12046] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  364.610906][T12046] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  364.614092][T12046] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  364.617952][T12046] Node 1 hugepages_total=4 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  364.623567][T12046] 19528 total pagecache pages
[  364.625499][T12046] 146 pages in swap cache
[  364.627276][T12046] Free swap  = 114196kB
[  364.629283][T12046] Total swap = 124996kB
[  364.630965][T12046] 524155 pages RAM
[  364.632559][T12046] 0 pages HighMem/MovableOnly
[  364.634548][T12046] 209150 pages reserved
[  364.636357][T12046] 0 pages cma reserved
[  364.643051][T12046] team0: refused to change device tx_queue_len
[  364.645828][T12046] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  364.718377][   T63] Bluetooth: hci2: command 0x0406 tx timeout
[  366.319096][T12097] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[  366.349353][T12099] netlink: 'syz.2.1631': attribute type 1 has an invalid length.
[  366.351930][T12099] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1631'.
[  366.357403][T12099] netlink: 'syz.2.1631': attribute type 4 has an invalid length.
[  366.360212][T12099] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1631'.
[  367.074901][T12107] siw: device registration error -23
[  367.099680][T12105] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1633'.
[  367.104205][T12105] trusted_key: encrypted_key: insufficient parameters specified
[  367.110001][T12105] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1633'.
[  367.145591][T12111] nfs4: Unknown parameter '
'
[  367.263920][T12115] 9pnet_fd: Insufficient options for proto=fd
[  367.301090][T12117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1638'.
[  367.315931][ T7669] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  368.311163][ T1142] Bluetooth: hci4: Frame reassembly failed (-84)
[  368.532913][T12140] tap0: tun_chr_ioctl cmd 1074025677
[  368.534753][T12140] tap0: linktype set to 804
[  368.634351][T12143] netlink: 'syz.4.1645': attribute type 3 has an invalid length.
[  369.433999][T12158] Cannot find del_set index 3 as target
[  369.446847][T12158] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1648'.
[  370.318438][   T63] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  370.318448][ T5955] Bluetooth: hci4: command 0x1003 tx timeout
[  370.803445][T12179] xt_CT: No such helper "syz1"
[  371.118518][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  372.110747][T12210] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  372.112846][T12210] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  372.116119][T12210] vhci_hcd vhci_hcd.0: Device attached
[  372.125354][T12210] netdevsim netdevsim3: Direct firmware load for @ failed with error -2
[  372.128117][T12210] netdevsim netdevsim3: Falling back to sysfs fallback for: @
[  372.232689][T12219] 9pnet_fd: Insufficient options for proto=fd
[  372.348368][ T5991] usb 43-1: new low-speed USB device number 13 using vhci_hcd
[  372.713266][T12211] vhci_hcd: connection reset by peer
[  372.715297][ T1142] vhci_hcd: stop threads
[  372.717138][ T1142] vhci_hcd: release socket
[  372.719349][ T1142] vhci_hcd: disconnect device
[  373.089448][ T1020] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  373.268373][ T1020] usb 7-1: not running at top speed; connect to a high speed hub
[  373.272257][ T1020] usb 7-1: config 155 has an invalid interface number: 207 but max is 3
[  373.274883][ T1020] usb 7-1: config 155 has an invalid interface number: 187 but max is 3
[  373.277431][ T1020] usb 7-1: config 155 has an invalid interface association descriptor of length 5, skipping
[  373.280712][ T1020] usb 7-1: config 155 has an invalid interface number: 34 but max is 3
[  373.283338][ T1020] usb 7-1: config 155 has an invalid interface number: 133 but max is 3
[  373.285969][ T1020] usb 7-1: config 155 has an invalid interface number: 54 but max is 3
[  373.289603][ T1020] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  373.292907][ T1020] usb 7-1: config 155 has 5 interfaces, different from the descriptor's value: 4
[  373.295827][ T1020] usb 7-1: config 155 has no interface number 0
[  373.297817][ T1020] usb 7-1: config 155 has no interface number 1
[  373.299779][ T1020] usb 7-1: config 155 has no interface number 2
[  373.301785][ T1020] usb 7-1: config 155 has no interface number 3
[  373.303865][ T1020] usb 7-1: config 155 has no interface number 4
[  373.418366][ T1020] usb 7-1: config 155 interface 207 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  373.422298][ T1020] usb 7-1: config 155 interface 187 altsetting 237 has an invalid descriptor for endpoint zero, skipping
[  373.438320][ T1020] usb 7-1: config 155 interface 187 altsetting 237 has an invalid descriptor for endpoint zero, skipping
[  373.442280][ T1020] usb 7-1: config 155 interface 187 altsetting 237 has 12 endpoint descriptors, different from the interface descriptor's value: 1
[  373.448140][ T1020] usb 7-1: config 155 interface 34 altsetting 252 endpoint 0x1 has invalid maxpacket 1015, setting to 64
[  373.458339][ T1020] usb 7-1: config 155 interface 34 altsetting 252 endpoint 0x3 has invalid maxpacket 1600, setting to 64
[  373.463013][ T1020] usb 7-1: config 155 interface 34 altsetting 252 has a duplicate endpoint with address 0xB, skipping
[  373.467510][ T1020] usb 7-1: config 155 interface 34 altsetting 252 has a duplicate endpoint with address 0x3, skipping
[  373.489593][ T1020] usb 7-1: config 155 interface 34 altsetting 252 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  373.492999][ T1020] usb 7-1: config 155 interface 34 altsetting 252 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  373.496375][ T1020] usb 7-1: config 155 interface 34 altsetting 252 has a duplicate endpoint with address 0xC, skipping
[  373.555155][ T1020] usb 7-1: config 155 interface 133 altsetting 6 endpoint 0x8 has invalid maxpacket 1024, setting to 1023
[  373.573409][ T1020] usb 7-1: config 155 interface 133 altsetting 6 has a duplicate endpoint with address 0x8, skipping
[  373.576902][ T1020] usb 7-1: config 155 interface 133 altsetting 6 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  373.578480][ T1142] Bluetooth: hci4: Frame reassembly failed (-84)
[  373.586593][ T1020] usb 7-1: config 155 interface 133 altsetting 6 endpoint 0x7 has an invalid bInterval 192, changing to 4
[  373.596180][ T1020] usb 7-1: config 155 interface 133 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  373.599737][ T1020] usb 7-1: config 155 interface 133 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  373.603125][ T1020] usb 7-1: config 155 interface 54 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  373.607463][ T1020] usb 7-1: config 155 interface 207 has no altsetting 0
[  373.610302][ T1020] usb 7-1: config 155 interface 187 has no altsetting 0
[  373.612737][ T1020] usb 7-1: config 155 interface 34 has no altsetting 0
[  373.614913][ T1020] usb 7-1: config 155 interface 133 has no altsetting 0
[  373.617138][ T1020] usb 7-1: config 155 interface 54 has no altsetting 0
[  373.621053][ T1020] usb 7-1: New USB device found, idVendor=05a9, idProduct=8519, bcdDevice=ae.f0
[  373.624065][ T1020] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.633819][ T1020] usb 7-1: Product: Є
[  373.635320][ T1020] usb 7-1: Manufacturer: 吲殌쨓㔖Ｕ펵恸篩ෲ⚔䯲裁ᝠ鑸쏣ҭ࿘涉髳뵯覠ﱜ┝ὣ拆枭죣詐ᚦ乳ᨛ耊⯙灎ᐛﭤ밡뽫놵򾐳囡綀鉶뺝⅌激ⲟ숥根燯퓺皣唧㻙㊯讞ᑧᘾ㻶ޮ緳啄묗ꟗ埋ꁫ愠部ᨋ䕎菙뭔a됧ﴥ퀿
[  373.644934][ T1020] usb 7-1: SerialNumber: syz
[  374.034278][ T5954] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  374.038053][ T5954] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  374.041730][ T5954] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  374.045603][ T5954] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  374.048061][ T5954] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  374.068006][T12241] lo speed is unknown, defaulting to 1000
[  374.200995][T12241] chnl_net:caif_netlink_parms(): no params data found
[  374.202938][T12253] /dev/sr0: Can't open blockdev
[  374.231876][T12255] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1672'.
[  374.295159][T12241] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.297568][T12241] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.300286][T12241] bridge_slave_0: entered allmulticast mode
[  374.302147][T12260] (syz.4.1673,12260,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory.
[  374.303153][T12241] bridge_slave_0: entered promiscuous mode
[  374.309118][T12241] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.311395][T12241] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.313810][T12241] bridge_slave_1: entered allmulticast mode
[  374.316425][T12241] bridge_slave_1: entered promiscuous mode
[  374.353984][T12241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  374.359151][T12241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  374.421315][T12241] team0: Port device team_slave_0 added
[  374.428023][T12241] team0: Port device team_slave_1 added
[  374.485217][T12241] batman_adv: batadv0: Adding interface: batadv_slave_0
[  374.487529][T12241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  374.495648][T12241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  374.499983][T12241] batman_adv: batadv0: Adding interface: batadv_slave_1
[  374.502215][T12241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  374.511259][T12241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  374.556833][T12241] hsr_slave_0: entered promiscuous mode
[  374.559395][T12241] hsr_slave_1: entered promiscuous mode
[  374.562929][T12241] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  374.565317][T12241] Cannot create hsr debugfs directory
[  374.692696][T12241] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  374.698538][T12241] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  374.703874][T12241] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  374.711304][T12241] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  374.742303][T12241] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.745291][T12241] bridge0: port 2(bridge_slave_1) entered forwarding state
[  374.748574][T12241] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.751513][T12241] bridge0: port 1(bridge_slave_0) entered forwarding state
[  374.792313][T12241] 8021q: adding VLAN 0 to HW filter on device bond0
[  374.803784][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.808906][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.829265][T12241] 8021q: adding VLAN 0 to HW filter on device team0
[  374.837081][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.839612][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state
[  374.849363][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.851777][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state
[  374.881945][T12273] netlink: 'syz.4.1675': attribute type 1 has an invalid length.
[  374.909540][T12273] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  374.929105][T12273] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[  374.933806][T12273] bond1 (unregistering): Released all slaves
[  374.996166][T12241] 8021q: adding VLAN 0 to HW filter on device batadv0
[  375.149952][T12241] veth0_vlan: entered promiscuous mode
[  375.155399][T12241] veth1_vlan: entered promiscuous mode
[  375.177109][T12241] veth0_macvtap: entered promiscuous mode
[  375.181882][T12241] veth1_macvtap: entered promiscuous mode
[  375.190579][T12241] batman_adv: batadv0: Interface activated: batadv_slave_0
[  375.198541][T12241] batman_adv: batadv0: Interface activated: batadv_slave_1
[  375.203303][T12241] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.206882][T12241] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  375.210654][T12241] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  375.213606][T12241] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  375.249055][ T6383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.251604][ T6383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.270839][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.273429][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.297831][    C1] vcan0: j1939_tp_rxtimer: 0xffff88804ac80400: rx timeout, send abort
[  375.308359][ T6031] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  375.508384][ T6031] usb 9-1: device descriptor read/64, error -71
[  375.598554][   T63] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  375.758364][ T6031] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  375.799254][    C1] vcan0: j1939_tp_rxtimer: 0xffff88804ac83000: rx timeout, send abort
[  375.801758][    C1] vcan0: j1939_tp_rxtimer: 0xffff88804ac80400: abort rx timeout. Force session deactivation
[  375.815230][ T1020] usb 7-1: USB disconnect, device number 11
[  375.898512][ T6031] usb 9-1: device descriptor read/64, error -71
[  376.010372][ T6031] usb usb9-port1: attempt power cycle
[  376.078454][   T63] Bluetooth: hci5: command tx timeout
[  376.301728][    C1] vcan0: j1939_tp_rxtimer: 0xffff88804ac83000: abort rx timeout. Force session deactivation
[  376.359879][ T6031] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  376.374393][   T40] audit: type=1326 audit(2000000400.541:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12298 comm="syz.5.1679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88579 code=0x7ffc0000
[  376.385354][   T40] audit: type=1326 audit(2000000400.541:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12298 comm="syz.5.1679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88579 code=0x7ffc0000
[  376.402397][   T40] audit: type=1326 audit(2000000400.551:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12298 comm="syz.5.1679" exe="/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7f88579 code=0x7ffc0000
[  376.418749][ T6031] usb 9-1: device descriptor read/8, error -71
[  376.419712][   T40] audit: type=1326 audit(2000000400.551:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12298 comm="syz.5.1679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88579 code=0x7ffc0000
[  376.427401][   T40] audit: type=1326 audit(2000000400.551:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12298 comm="syz.5.1679" exe="/syz-executor" sig=0 arch=40000003 syscall=256 compat=1 ip=0xf7f88579 code=0x7ffc0000
[  376.434532][   T40] audit: type=1326 audit(2000000400.551:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12298 comm="syz.5.1679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88579 code=0x7ffc0000
[  376.711293][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1683'.
[  376.714074][T12310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1683'.
[  376.788344][ T6031] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  376.928960][ T6031] usb 9-1: device descriptor read/8, error -71
[  377.043895][ T6031] usb usb9-port1: unable to enumerate USB device
[  377.383829][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'.
[  377.428444][ T5991] vhci_hcd: vhci_device speed not set
[  377.567610][T12319] siw: device registration error -23
[  378.079982][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  378.159124][   T63] Bluetooth: hci5: command tx timeout
[  378.718462][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  380.248629][ T5954] Bluetooth: hci5: command tx timeout
[  380.250348][ T5955] Bluetooth: hci4: command 0x1003 tx timeout
[  380.268727][   T63] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  380.273029][   T40] audit: type=1326 audit(2000000404.441:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.2.1704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000
[  380.282040][   T40] audit: type=1326 audit(2000000404.441:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.2.1704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000
[  380.310710][   T40] audit: type=1326 audit(2000000404.481:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.2.1704" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc8579 code=0x7ffc0000
[  380.317217][   T40] audit: type=1326 audit(2000000404.481:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.2.1704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000
[  380.657944][T12396] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1707'.
[  380.755934][T12396] netlink: 'syz.4.1707': attribute type 12 has an invalid length.
[  380.880314][T12399] openvswitch: netlink: ct_state flags 01010164 unsupported
[  381.306929][T12406] nfs4: Unknown parameter '
lan1'
[  382.318456][ T5955] Bluetooth: hci5: command tx timeout
[  382.378694][ T1142] Bluetooth: hci4: Frame reassembly failed (-84)
[  382.595538][T12439] siw: device registration error -23
[  383.448497][T12462] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1724'.
[  383.792682][T12474] lo speed is unknown, defaulting to 1000
[  384.318657][   T63] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  384.321608][ T5955] Bluetooth: hci4: command 0x1003 tx timeout
[  384.952804][T12490] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  384.954890][T12490] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  384.957339][T12490] vhci_hcd vhci_hcd.0: Device attached
[  385.209296][   T40] kauditd_printk_skb: 13 callbacks suppressed
[  385.209314][   T40] audit: type=1326 audit(2000000409.381:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12494 comm="syz.4.1732" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x0
[  385.238865][   T10] usb 47-1: new low-speed USB device number 2 using vhci_hcd
[  385.355785][T12491] vhci_hcd: connection reset by peer
[  385.475935][ T1142] vhci_hcd: stop threads
[  385.477506][ T1142] vhci_hcd: release socket
[  385.479346][ T1142] vhci_hcd: disconnect device
[  385.686205][T12514] siw: device registration error -23
[  386.323231][T12532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1744'.
[  386.326115][T12532] bridge_slave_0: left allmulticast mode
[  386.328010][T12532] bridge_slave_0: left promiscuous mode
[  386.335593][T12532] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.713728][T12550] veth3: entered promiscuous mode
[  386.791674][T12555] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  386.793693][T12555] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  386.796836][T12555] vhci_hcd vhci_hcd.0: Device attached
[  386.969409][T12554] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1753'.
[  387.028552][    T9] usb 43-1: new low-speed USB device number 14 using vhci_hcd
[  387.238751][T12569] Bluetooth: MGMT ver 1.23
[  387.243644][T12569] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1755'.
[  387.263864][   T40] audit: type=1804 audit(2000000411.431:61): pid=12569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1755" name="/newroot/17/bus/bus" dev="overlay" ino=125 res=1 errno=0
[  387.314851][T12571] overlayfs: missing 'lowerdir'
[  387.367454][T12556] vhci_hcd: connection reset by peer
[  387.369597][ T1179] vhci_hcd: stop threads
[  387.371043][ T1179] vhci_hcd: release socket
[  387.372541][ T1179] vhci_hcd: disconnect device
[  387.998978][T12582] ip6erspan0: entered allmulticast mode
[  388.262419][T12594] siw: device registration error -23
[  388.274153][T12597] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1765'.
[  388.478360][ T5991] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  388.641876][ T5991] usb 9-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 8
[  388.648501][ T5991] usb 9-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1024
[  388.651708][ T5991] usb 9-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  388.655819][ T5991] usb 9-1: config 1 interface 0 has no altsetting 0
[  388.659994][ T5991] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  388.668449][ T5991] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.671054][ T5991] usb 9-1: Product: 䴌헤ผ酹⿹⭘ĩ᳡쨹쿥償ḍ柆神㬻窘侀葬洿䡻
[  388.674152][ T5991] usb 9-1: Manufacturer: ᛠÆ딌닌ح栏ꭁ燪洋嘃໴馤㒻麬謽ແ딓ਖՀꟐ秵댠縝Ჵ檳㴂縡㷛⇂䔍歙햁䉛ﭢ䶭棆얜靽著쇐䣜伦䉌䀥撰嵫뭰뮆犆촪肥ぎ狲菼雑爰伆掫撼샲멓ߊᨎꇈ卆࣡恮ଳ먢។똗ྋ
[  388.689055][ T5991] usb 9-1: SerialNumber: 뾽忂쓐䱣황ޯݓꔫ鬱鰕ꦘ鉻ŭ⸀鼛쩗圿笼턎㑫ᩱ껑ᶙ㉟⧩臾莻鱤䃣묂亮㥃艶ᛨຎ㋱간凫ᓳǤ盽旰乛䟟ᎂ濛疀컉⇀᤮饰꺂꒿㋒揼彇弢꧕뛯痭ค譮
[  388.715479][T12596] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  388.717820][T12596] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  388.927879][T12596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  388.932169][T12596] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  389.069197][T12602] usb usb2: usbfs: process 12602 (syz.5.1767) did not claim interface 0 before use
[  389.081557][ T5991] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71
[  389.086858][ T5991] usb 9-1: USB disconnect, device number 9
[  389.469234][T12625] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  389.471333][T12625] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  389.475581][T12625] vhci_hcd vhci_hcd.0: Device attached
[  390.038777][T12626] vhci_hcd: connection closed
[  390.318378][T12627] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  390.543301][ T1142] vhci_hcd: stop threads
[  390.545125][ T1142] vhci_hcd: release socket
[  390.549629][ T1142] vhci_hcd: disconnect device
[  390.618372][   T10] vhci_hcd: vhci_device speed not set
[  391.097371][T12644] IPv6: NLM_F_REPLACE set, but no existing node found!
[  391.156535][T12648] Invalid source name
[  391.157861][T12648] UBIFS error (pid: 12648): cannot open "./file0", error -22
[  391.692533][T12681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1787'.
[  392.158564][    T9] vhci_hcd: vhci_device speed not set
[  392.222856][T12694] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  392.224927][T12694] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  392.230440][T12694] vhci_hcd vhci_hcd.0: Device attached
[  392.468382][   T10] usb 41-1: new low-speed USB device number 15 using vhci_hcd
[  392.841610][T12695] vhci_hcd: connection reset by peer
[  392.848832][ T6383] vhci_hcd: stop threads
[  392.850222][ T6383] vhci_hcd: release socket
[  392.851850][ T6383] vhci_hcd: disconnect device
[  393.030913][T12715] lo speed is unknown, defaulting to 1000
[  393.438637][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  394.216666][T12727] siw: device registration error -23
[  395.320805][T12737] lo speed is unknown, defaulting to 1000
[  395.342889][T12742] devpts: Bad value for 'max'
[  396.027765][T12752] siw: device registration error -23
[  396.109793][T12764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1807'.
[  396.831205][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1813'.
[  396.836305][T12783] dlm: plock device version mismatch: kernel (1.2.0), user (4207673345.1574799195.3139252685)
[  397.269418][T12791] siw: device registration error -23
[  397.284653][T12794] netlink: 'syz.3.1816': attribute type 32 has an invalid length.
[  397.287589][T12794] netlink: 'syz.3.1816': attribute type 32 has an invalid length.
[  397.598529][   T10] vhci_hcd: vhci_device speed not set
[  399.725883][T12831] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  399.743215][T12830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1823'.
[  399.750691][T12830] dlm: plock device version mismatch: kernel (1.2.0), user (4207673345.1574799195.3139252685)
[  399.757784][T12817] "syz.3.1820" (12817) uses obsolete ecb(arc4) skcipher
[  400.093583][T12854] siw: device registration error -23
[  401.671922][T12889] evm: overlay not supported
[  402.039312][T12909] overlay: filesystem on ./bus not supported as upperdir
[  402.041983][T12909] overlay: filesystem on ./bus not supported as upperdir
[  402.045110][T12909] overlay: filesystem on ./bus not supported as upperdir
[  402.939111][T12927] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1848'.
[  404.377531][T12964] bond0: (slave bond_slave_0): Releasing backup interface
[  404.384853][T12964] bond0: (slave bond_slave_1): Releasing backup interface
[  404.415084][T12964] team0: Port device team_slave_0 removed
[  404.434502][T12964] team0: Port device team_slave_1 removed
[  404.437514][T12964] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  404.440497][T12964] batman_adv: batadv0: Removing interface: batadv_slave_0
[  404.443921][T12964] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  404.446362][T12964] batman_adv: batadv0: Removing interface: batadv_slave_1
[  404.475519][ T6011] syz1: Port: 1 Link DOWN
[  404.520797][T12965] team0: Mode changed to "loadbalance"
[  404.559304][T12964] netlink: 'syz.4.1858': attribute type 10 has an invalid length.
[  404.570344][T12964] 8021q: adding VLAN 0 to HW filter on device bond0
[  404.575237][T12964] team0: Port device bond0 added
[  404.593416][T12964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1858'.
[  404.714715][T12964] team0 (unregistering): Port device bond0 removed
[  404.825984][T12968] FAULT_INJECTION: forcing a failure.
[  404.825984][T12968] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  404.831545][T12968] CPU: 0 UID: 0 PID: 12968 Comm: syz.3.1859 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  404.831562][T12968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  404.831569][T12968] Call Trace:
[  404.831573][T12968]  <TASK>
[  404.831577][T12968]  dump_stack_lvl+0x16c/0x1f0
[  404.831599][T12968]  should_fail_ex+0x512/0x640
[  404.831618][T12968]  _copy_to_user+0x32/0xd0
[  404.831636][T12968]  simple_read_from_buffer+0xcb/0x170
[  404.831653][T12968]  proc_fail_nth_read+0x197/0x270
[  404.831668][T12968]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  404.831682][T12968]  ? rw_verify_area+0xcf/0x680
[  404.831695][T12968]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  404.831708][T12968]  vfs_read+0x1e1/0xc60
[  404.831724][T12968]  ? fdget_pos+0x2a2/0x370
[  404.831742][T12968]  ? __pfx_vfs_read+0x10/0x10
[  404.831755][T12968]  ? find_held_lock+0x2b/0x80
[  404.831770][T12968]  ? __fget_files+0x20e/0x3c0
[  404.831789][T12968]  ksys_read+0x12a/0x250
[  404.831804][T12968]  ? __pfx_ksys_read+0x10/0x10
[  404.831820][T12968]  ? rcu_is_watching+0x12/0xc0
[  404.831834][T12968]  __do_fast_syscall_32+0x7c/0x3a0
[  404.831846][T12968]  do_fast_syscall_32+0x32/0x80
[  404.831856][T12968]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  404.831869][T12968] RIP: 0023:0xf7f02579
[  404.831878][T12968] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  404.831888][T12968] RSP: 002b:00000000f5026590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  404.831899][T12968] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 00000000f5026620
[  404.831906][T12968] RDX: 000000000000000f RSI: 00000000f7392ff4 RDI: 0000000000000000
[  404.831912][T12968] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  404.831918][T12968] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  404.831924][T12968] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  404.831938][T12968]  </TASK>
[  405.142123][T12990] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1865'.
[  406.004205][   T40] audit: type=1804 audit(2000000430.171:62): pid=13006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1867" name="/newroot/485/file1" dev="fuse" ino=1 res=1 errno=0
[  406.010718][   T40] audit: type=1800 audit(2000000430.171:63): pid=13006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1867" name="/" dev="fuse" ino=1 res=0 errno=0
[  406.016816][   T40] audit: type=1800 audit(2000000430.171:64): pid=13005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1867" name="/" dev="fuse" ino=1 res=0 errno=0
[  406.473124][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1870'.
[  406.514966][T13019] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  407.393732][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1880'.
[  407.703161][T13057] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1879'.
[  407.707464][T13057] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1879'.
[  407.996221][T13052] siw: device registration error -23
[  408.116583][T13063] bridge2: entered promiscuous mode
[  408.118476][T13063] bridge2: entered allmulticast mode
[  408.130304][T13063] team0: Port device bridge2 added
[  408.141764][T13063] MTD: Attempt to mount non-MTD device "/dev/sr0"
[  408.193505][T13064] MTD: Attempt to mount non-MTD device "/dev/sr0"
[  408.313263][T13063] /dev/sr0: Can't open blockdev
[  408.462732][T13071] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  408.464847][T13071] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  408.468218][T13071] vhci_hcd vhci_hcd.0: Device attached
[  408.506977][T13064] /dev/sr0: Can't open blockdev
[  408.718689][   T10] usb 45-1: new low-speed USB device number 11 using vhci_hcd
[  409.079042][T13072] vhci_hcd: connection reset by peer
[  409.082102][ T1186] vhci_hcd: stop threads
[  409.083887][ T1186] vhci_hcd: release socket
[  409.086064][ T1186] vhci_hcd: disconnect device
[  409.585224][T13101] siw: device registration error -23
[  409.979478][T13104] [U] v�3��f��"S��/��4:�XTz�W�t��lW��=
[  409.981550][T13104] [U] J"�e:��"


[  409.986789][T13104] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3261
[  410.242734][T13117] binder: 13116:13117 ioctl c0306201 80000540 returned -14
[  410.296922][T13121] affs: No valid root block on device sr0
[  410.518493][T13129] FAULT_INJECTION: forcing a failure.
[  410.518493][T13129] name failslab, interval 1, probability 0, space 0, times 0
[  410.523995][T13129] CPU: 0 UID: 0 PID: 13129 Comm: syz.5.1906 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  410.524023][T13129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  410.524035][T13129] Call Trace:
[  410.524041][T13129]  <TASK>
[  410.524048][T13129]  dump_stack_lvl+0x16c/0x1f0
[  410.524079][T13129]  should_fail_ex+0x512/0x640
[  410.524104][T13129]  ? fs_reclaim_acquire+0xae/0x150
[  410.524127][T13129]  ? tomoyo_encode2+0x100/0x3e0
[  410.524149][T13129]  should_failslab+0xc2/0x120
[  410.524165][T13129]  __kmalloc_noprof+0xd2/0x510
[  410.524197][T13129]  tomoyo_encode2+0x100/0x3e0
[  410.524223][T13129]  tomoyo_encode+0x29/0x50
[  410.524246][T13129]  tomoyo_realpath_from_path+0x18f/0x6e0
[  410.524273][T13129]  ? tomoyo_profile+0x47/0x60
[  410.524307][T13129]  tomoyo_path_number_perm+0x245/0x580
[  410.524327][T13129]  ? tomoyo_path_number_perm+0x237/0x580
[  410.524347][T13129]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  410.524394][T13129]  ? find_held_lock+0x2b/0x80
[  410.524413][T13129]  ? hook_file_ioctl_common+0x145/0x410
[  410.524438][T13129]  ? __fget_files+0x20e/0x3c0
[  410.524458][T13129]  ? fput+0x60/0xf0
[  410.524479][T13129]  security_file_ioctl_compat+0x9b/0x240
[  410.524503][T13129]  __ia32_compat_sys_ioctl+0xc3/0x370
[  410.524527][T13129]  __do_fast_syscall_32+0x7c/0x3a0
[  410.524546][T13129]  do_fast_syscall_32+0x32/0x80
[  410.524563][T13129]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  410.524584][T13129] RIP: 0023:0xf7f88579
[  410.524598][T13129] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  410.524615][T13129] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  410.524631][T13129] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004008ae90
[  410.524642][T13129] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000
[  410.524653][T13129] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  410.524662][T13129] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  410.524673][T13129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  410.524695][T13129]  </TASK>
[  410.524713][T13129] ERROR: Out of memory at tomoyo_realpath_from_path.
[  410.651470][ T1186] Bluetooth: hci4: Frame reassembly failed (-84)
[  410.895340][T13143] kAFS: No cell specified
[  411.162387][T13146] 
[  411.163473][T13146] =====================================================
[  411.166366][T13146] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  411.169463][T13146] 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 Not tainted
[  411.174497][T13146] -----------------------------------------------------
[  411.177343][T13146] syz.5.1910/13146 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  411.180537][T13146] ffffffff8e20c098 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0xed/0xc80
[  411.184128][T13146] 
[  411.184128][T13146] and this task is already holding:
[  411.187182][T13146] ffff88806bc97220 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x5f/0xc80
[  411.190936][T13146] which would create a new lock dependency:
[  411.193404][T13146]  (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3}
[  411.196579][T13146] 
[  411.196579][T13146] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  411.200318][T13146]  (&dev->event_lock#2){..-.}-{3:3}
[  411.200351][T13146] 
[  411.200351][T13146] ... which became SOFTIRQ-irq-safe at:
[  411.204293][T13146]   lock_acquire+0x179/0x350
[  411.205746][T13146]   _raw_spin_lock_irqsave+0x3a/0x60
[  411.207410][T13146]   input_inject_event+0x9f/0x390
[  411.209042][T13146]   led_set_brightness+0x217/0x290
[  411.211199][T13146]   led_trigger_event+0xda/0x270
[  411.213265][T13146]   kbd_bh+0x21b/0x300
[  411.214708][T13146]   tasklet_action_common+0x281/0x400
[  411.216372][T13146]   handle_softirqs+0x219/0x8e0
[  411.217886][T13146]   __irq_exit_rcu+0x109/0x170
[  411.219419][T13146]   irq_exit_rcu+0x9/0x30
[  411.220764][T13146]   sysvec_apic_timer_interrupt+0xa4/0xc0
[  411.222543][T13146]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  411.224439][T13146]   __tasklet_schedule_common+0x10d/0x190
[  411.226143][T13146]   vt_set_leds_compute_shiftstate+0x76/0x80
[  411.227960][T13146]   redraw_screen+0x542/0x760
[  411.229529][T13146]   complete_change_console+0x110/0x600
[  411.231230][T13146]   change_console+0x1ac/0x560
[  411.232739][T13146]   console_callback+0x1a1/0x4c0
[  411.234290][T13146]   process_one_work+0x9cf/0x1b70
[  411.235867][T13146]   worker_thread+0x6c8/0xf10
[  411.237341][T13146]   kthread+0x3c2/0x780
[  411.238660][T13146]   ret_from_fork+0x5d4/0x6f0
[  411.240184][T13146]   ret_from_fork_asm+0x1a/0x30
[  411.241713][T13146] 
[  411.241713][T13146] to a SOFTIRQ-irq-unsafe lock:
[  411.243893][T13146]  (tasklist_lock){.+.+}-{3:3}
[  411.243910][T13146] 
[  411.243910][T13146] ... which became SOFTIRQ-irq-unsafe at:
[  411.247842][T13146] ...
[  411.247847][T13146]   lock_acquire+0x179/0x350
[  411.250223][T13146]   _raw_read_lock+0x5f/0x70
[  411.251707][T13146]   __do_wait+0x105/0x890
[  411.253068][T13146]   do_wait+0x21e/0x5a0
[  411.254382][T13146]   kernel_wait+0x9f/0x160
[  411.255784][T13146]   call_usermodehelper_exec_work+0xf1/0x170
[  411.257647][T13146]   process_one_work+0x9cf/0x1b70
[  411.259267][T13146]   worker_thread+0x6c8/0xf10
[  411.260740][T13146]   kthread+0x3c2/0x780
[  411.262045][T13146]   ret_from_fork+0x5d4/0x6f0
[  411.263521][T13146]   ret_from_fork_asm+0x1a/0x30
[  411.265031][T13146] 
[  411.265031][T13146] other info that might help us debug this:
[  411.265031][T13146] 
[  411.268132][T13146] Chain exists of:
[  411.268132][T13146]   &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock
[  411.268132][T13146] 
[  411.272130][T13146]  Possible interrupt unsafe locking scenario:
[  411.272130][T13146] 
[  411.274701][T13146]        CPU0                    CPU1
[  411.276360][T13146]        ----                    ----
[  411.278023][T13146]   lock(tasklist_lock);
[  411.279402][T13146]                                local_irq_disable();
[  411.281465][T13146]                                lock(&dev->event_lock#2);
[  411.283698][T13146]                                lock(&f_owner->lock);
[  411.285819][T13146]   <Interrupt>
[  411.286922][T13146]     lock(&dev->event_lock#2);
[  411.288409][T13146] 
[  411.288409][T13146]  *** DEADLOCK ***
[  411.288409][T13146] 
[  411.291319][T13146] 2 locks held by syz.5.1910/13146:
[  411.292986][T13146]  #0: ffff88805161d940 (&u->lock){+.+.}-{3:3}, at: unix_stream_sendmsg+0xc7b/0x11d0
[  411.295969][T13146]  #1: ffff88806bc97220 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x5f/0xc80
[  411.298816][T13146] 
[  411.298816][T13146] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  411.302055][T13146]    -> (&dev->event_lock#2){..-.}-{3:3} {
[  411.303905][T13146]       IN-SOFTIRQ-W at:
[  411.305273][T13146]                           lock_acquire+0x179/0x350
[  411.307376][T13146]                           _raw_spin_lock_irqsave+0x3a/0x60
[  411.309684][T13146]                           input_inject_event+0x9f/0x390
[  411.311899][T13146]                           led_set_brightness+0x217/0x290
[  411.314164][T13146]                           led_trigger_event+0xda/0x270
[  411.316338][T13146]                           kbd_bh+0x21b/0x300
[  411.318263][T13146]                           tasklet_action_common+0x281/0x400
[  411.320616][T13146]                           handle_softirqs+0x219/0x8e0
[  411.322760][T13146]                           __irq_exit_rcu+0x109/0x170
[  411.324881][T13146]                           irq_exit_rcu+0x9/0x30
[  411.326863][T13146]                           sysvec_apic_timer_interrupt+0xa4/0xc0
[  411.329279][T13146]                           asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  411.331796][T13146]                           __tasklet_schedule_common+0x10d/0x190
[  411.334184][T13146]                           vt_set_leds_compute_shiftstate+0x76/0x80
[  411.336643][T13146]                           redraw_screen+0x542/0x760
[  411.338726][T13146]                           complete_change_console+0x110/0x600
[  411.341093][T13146]                           change_console+0x1ac/0x560
[  411.343203][T13146]                           console_callback+0x1a1/0x4c0
[  411.345363][T13146]                           process_one_work+0x9cf/0x1b70
[  411.347560][T13146]                           worker_thread+0x6c8/0xf10
[  411.349665][T13146]                           kthread+0x3c2/0x780
[  411.351620][T13146]                           ret_from_fork+0x5d4/0x6f0
[  411.353643][T13146]                           ret_from_fork_asm+0x1a/0x30
[  411.355810][T13146]       INITIAL USE at:
[  411.357117][T13146]                          lock_acquire+0x179/0x350
[  411.359336][T13146]                          _raw_spin_lock_irqsave+0x3a/0x60
[  411.361594][T13146]                          input_inject_event+0x9f/0x390
[  411.363847][T13146]                          led_set_brightness+0x217/0x290
[  411.366039][T13146]                          kbd_led_trigger_activate+0xcb/0x110
[  411.368387][T13146]                          led_trigger_set+0x59a/0xc50
[  411.370534][T13146]                          led_trigger_set_default+0x1e0/0x2e0
[  411.372877][T13146]                          led_classdev_register_ext+0x7b8/0xa10
[  411.375269][T13146]                          input_leds_connect+0x552/0x8e0
[  411.377455][T13146]                          input_attach_handler.isra.0+0x184/0x260
[  411.379928][T13146]                          input_register_device+0xa84/0x1130
[  411.382255][T13146]                          atkbd_connect+0x5da/0xa20
[  411.384343][T13146]                          serio_driver_probe+0x74/0xb0
[  411.386497][T13146]                          really_probe+0x23e/0xa90
[  411.388548][T13146]                          __driver_probe_device+0x1de/0x440
[  411.390868][T13146]                          driver_probe_device+0x4c/0x1b0
[  411.393115][T13146]                          __driver_attach+0x283/0x580
[  411.395169][T13146]                          bus_for_each_dev+0x13e/0x1d0
[  411.397242][T13146]                          serio_handle_event+0x247/0xa50
[  411.399459][T13146]                          process_one_work+0x9cf/0x1b70
[  411.401550][T13146]                          worker_thread+0x6c8/0xf10
[  411.403627][T13146]                          kthread+0x3c2/0x780
[  411.405545][T13146]                          ret_from_fork+0x5d4/0x6f0
[  411.407601][T13146]                          ret_from_fork_asm+0x1a/0x30
[  411.409800][T13146]     }
[  411.410693][T13146]     ... key      at: [<ffffffff9b0bb740>] __key.7+0x0/0x40
[  411.412984][T13146]   -> (&client->buffer_lock){....}-{3:3} {
[  411.414852][T13146]      INITIAL USE at:
[  411.416138][T13146]                        lock_acquire+0x179/0x350
[  411.418133][T13146]                        _raw_spin_lock+0x2e/0x40
[  411.420154][T13146]                        evdev_pass_values+0x10e/0x9b0
[  411.422279][T13146]                        evdev_events+0x1bb/0x390
[  411.424270][T13146]                        input_pass_values+0x6c7/0x890
[  411.426400][T13146]                        input_handle_event+0xf00/0x14d0
[  411.428563][T13146]                        input_inject_event+0x1cd/0x390
[  411.430726][T13146]                        evdev_write+0x2e1/0x440
[  411.432705][T13146]                        vfs_write+0x2a0/0x1150
[  411.434678][T13146]                        ksys_write+0x1f8/0x250
[  411.436620][T13146]                        __do_fast_syscall_32+0x7c/0x3a0
[  411.438790][T13146]                        do_fast_syscall_32+0x32/0x80
[  411.440895][T13146]                        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  411.443640][T13146]    }
[  411.444533][T13146]    ... key      at: [<ffffffff9b0bbbc0>] __key.1+0x0/0x40
[  411.446815][T13146]    ... acquired at:
[  411.448071][T13146]    _raw_spin_lock+0x2e/0x40
[  411.449587][T13146]    evdev_pass_values+0x10e/0x9b0
[  411.451218][T13146]    evdev_events+0x1bb/0x390
[  411.452702][T13146]    input_pass_values+0x6c7/0x890
[  411.454307][T13146]    input_handle_event+0xf00/0x14d0
[  411.455956][T13146]    input_inject_event+0x1cd/0x390
[  411.457579][T13146]    evdev_write+0x2e1/0x440
[  411.459081][T13146]    vfs_write+0x2a0/0x1150
[  411.460516][T13146]    ksys_write+0x1f8/0x250
[  411.462020][T13146]    __do_fast_syscall_32+0x7c/0x3a0
[  411.464189][T13146]    do_fast_syscall_32+0x32/0x80
[  411.466251][T13146]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  411.468885][T13146] 
[  411.469912][T13146]  -> (&new->fa_lock){....}-{3:3} {
[  411.472072][T13146]     INITIAL USE at:
[  411.473709][T13146]                      lock_acquire+0x179/0x350
[  411.476260][T13146]                      _raw_write_lock_irq+0x36/0x50
[  411.478949][T13146]                      fasync_remove_entry+0xb2/0x1e0
[  411.481653][T13146]                      fasync_helper+0xaf/0xd0
[  411.484168][T13146]                      lease_modify+0x232/0x500
[  411.486700][T13146]                      locks_remove_file+0x29e/0x5c0
[  411.489382][T13146]                      __fput+0x351/0xb70
[  411.491693][T13146]                      task_work_run+0x150/0x240
[  411.494290][T13146]                      do_exit+0x864/0x2bd0
[  411.496702][T13146]                      do_group_exit+0xd3/0x2a0
[  411.499233][T13146]                      get_signal+0x2673/0x26d0
[  411.501776][T13146]                      arch_do_signal_or_restart+0x8f/0x790
[  411.504745][T13146]                      exit_to_user_mode_loop+0x84/0x110
[  411.507600][T13146]                      __do_fast_syscall_32+0x2ac/0x3a0
[  411.510468][T13146]                      do_fast_syscall_32+0x32/0x80
[  411.513215][T13146]                      entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  411.516554][T13146]     INITIAL READ USE at:
[  411.518441][T13146]                           lock_acquire+0x179/0x350
[  411.520628][T13146]                           _raw_read_lock_irqsave+0x74/0x90
[  411.522896][T13146]                           kill_fasync+0x138/0x510
[  411.524954][T13146]                           lease_break_callback+0x23/0x30
[  411.527266][T13146]                           __break_lease+0x671/0x1810
[  411.529437][T13146]                           vfs_truncate+0x4d3/0x6e0
[  411.531521][T13146]                           __ia32_compat_sys_truncate+0x171/0x1e0
[  411.533963][T13146]                           __do_fast_syscall_32+0x7c/0x3a0
[  411.536244][T13146]                           do_fast_syscall_32+0x32/0x80
[  411.538410][T13146]                           entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  411.541027][T13146]   }
[  411.541884][T13146]   ... key      at: [<ffffffff9ade9740>] __key.0+0x0/0x40
[  411.544122][T13146]   ... acquired at:
[  411.545346][T13146]    _raw_read_lock_irqsave+0x74/0x90
[  411.547026][T13146]    kill_fasync+0x138/0x510
[  411.548477][T13146]    evdev_pass_values+0x619/0x9b0
[  411.550110][T13146]    evdev_events+0x1bb/0x390
[  411.551609][T13146]    input_pass_values+0x6c7/0x890
[  411.553227][T13146]    input_handle_event+0xf00/0x14d0
[  411.554884][T13146]    input_inject_event+0x1cd/0x390
[  411.556515][T13146]    evdev_write+0x2e1/0x440
[  411.557971][T13146]    vfs_write+0x2a0/0x1150
[  411.559449][T13146]    ksys_write+0x1f8/0x250
[  411.560881][T13146]    __do_fast_syscall_32+0x7c/0x3a0
[  411.562529][T13146]    do_fast_syscall_32+0x32/0x80
[  411.564103][T13146]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  411.566219][T13146] 
[  411.567166][T13146] -> (&f_owner->lock){....}-{3:3} {
[  411.568892][T13146]    INITIAL USE at:
[  411.570155][T13146]                    lock_acquire+0x179/0x350
[  411.572079][T13146]                    _raw_write_lock_irq+0x36/0x50
[  411.574113][T13146]                    __f_setown+0x61/0x3c0
[  411.575927][T13146]                    generic_setlease+0xeef/0x1300
[  411.577935][T13146]                    kernel_setlease+0x106/0x140
[  411.580046][T13146]                    vfs_setlease+0x258/0x2d0
[  411.581935][T13146]                    fcntl_setlease+0x3ed/0x5a0
[  411.583879][T13146]                    do_fcntl+0x751/0x15a0
[  411.585709][T13146]                    do_compat_fcntl64+0x367/0x710
[  411.587986][T13146]                    __do_fast_syscall_32+0x7c/0x3a0
[  411.590690][T13146]                    do_fast_syscall_32+0x32/0x80
[  411.593281][T13146]                    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  411.596420][T13146]    INITIAL READ USE at:
[  411.598182][T13146]                         lock_acquire+0x179/0x350
[  411.600829][T13146]                         _raw_read_lock_irqsave+0x74/0x90
[  411.603736][T13146]                         send_sigio+0x31/0x3e0
[  411.606261][T13146]                         kill_fasync+0x214/0x510
[  411.608867][T13146]                         lease_break_callback+0x23/0x30
[  411.611705][T13146]                         __break_lease+0x671/0x1810
[  411.614406][T13146]                         vfs_truncate+0x4d3/0x6e0
[  411.617035][T13146]                         __ia32_compat_sys_truncate+0x171/0x1e0
[  411.620157][T13146]                         __do_fast_syscall_32+0x7c/0x3a0
[  411.623016][T13146]                         do_fast_syscall_32+0x32/0x80
[  411.625754][T13146]                         entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  411.628435][T13146]  }
[  411.629250][T13146]  ... key      at: [<ffffffff9ade9780>] __key.1+0x0/0x40
[  411.631470][T13146]  ... acquired at:
[  411.632674][T13146]    _raw_read_lock_irqsave+0x74/0x90
[  411.634354][T13146]    send_sigio+0x31/0x3e0
[  411.635746][T13146]    kill_fasync+0x214/0x510
[  411.637196][T13146]    lease_break_callback+0x23/0x30
[  411.638833][T13146]    __break_lease+0x671/0x1810
[  411.640352][T13146]    vfs_truncate+0x4d3/0x6e0
[  411.641828][T13146]    __ia32_compat_sys_truncate+0x171/0x1e0
[  411.643672][T13146]    __do_fast_syscall_32+0x7c/0x3a0
[  411.645321][T13146]    do_fast_syscall_32+0x32/0x80
[  411.646900][T13146]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  411.648916][T13146] 
[  411.649687][T13146] 
[  411.649687][T13146] the dependencies between the lock to be acquired
[  411.649693][T13146]  and SOFTIRQ-irq-unsafe lock:
[  411.653900][T13146] -> (tasklist_lock){.+.+}-{3:3} {
[  411.655530][T13146]    HARDIRQ-ON-R at:
[  411.656789][T13146]                     lock_acquire+0x179/0x350
[  411.658717][T13146]                     _raw_read_lock+0x5f/0x70
[  411.660638][T13146]                     __do_wait+0x105/0x890
[  411.662494][T13146]                     do_wait+0x21e/0x5a0
[  411.664346][T13146]                     kernel_wait+0x9f/0x160
[  411.666046][T13146]                     call_usermodehelper_exec_work+0xf1/0x170
[  411.668199][T13146]                     process_one_work+0x9cf/0x1b70
[  411.670072][T13146]                     worker_thread+0x6c8/0xf10
[  411.671864][T13146]                     kthread+0x3c2/0x780
[  411.673471][T13146]                     ret_from_fork+0x5d4/0x6f0
[  411.675239][T13146]                     ret_from_fork_asm+0x1a/0x30
[  411.677034][T13146]    SOFTIRQ-ON-R at:
[  411.678176][T13146]                     lock_acquire+0x179/0x350
[  411.679923][T13146]                     _raw_read_lock+0x5f/0x70
[  411.681656][T13146]                     __do_wait+0x105/0x890
[  411.683324][T13146]                     do_wait+0x21e/0x5a0
[  411.684935][T13146]                     kernel_wait+0x9f/0x160
[  411.686632][T13146]                     call_usermodehelper_exec_work+0xf1/0x170
[  411.688736][T13146]                     process_one_work+0x9cf/0x1b70
[  411.690589][T13146]                     worker_thread+0x6c8/0xf10
[  411.692356][T13146]                     kthread+0x3c2/0x780
[  411.693956][T13146]                     ret_from_fork+0x5d4/0x6f0
[  411.695723][T13146]                     ret_from_fork_asm+0x1a/0x30
[  411.697519][T13146]    INITIAL USE at:
[  411.698610][T13146]                    lock_acquire+0x179/0x350
[  411.700425][T13146]                    _raw_write_lock_irq+0x36/0x50
[  411.702256][T13146]                    copy_process+0x4caf/0x76a0
[  411.704011][T13146]                    kernel_clone+0xfc/0x960
[  411.705691][T13146]                    user_mode_thread+0xc7/0x110
[  411.707477][T13146]                    rest_init+0x23/0x2b0
[  411.709090][T13146]                    start_kernel+0x3ee/0x4d0
[  411.710800][T13146]                    x86_64_start_reservations+0x18/0x30
[  411.712756][T13146]                    x86_64_start_kernel+0x130/0x190
[  411.714628][T13146]                    common_startup_64+0x13e/0x148
[  411.716442][T13146]    INITIAL READ USE at:
[  411.717658][T13146]                         lock_acquire+0x179/0x350
[  411.719489][T13146]                         _raw_read_lock+0x5f/0x70
[  411.721307][T13146]                         __do_wait+0x105/0x890
[  411.723064][T13146]                         do_wait+0x21e/0x5a0
[  411.724781][T13146]                         kernel_wait+0x9f/0x160
[  411.726378][T13146]                         call_usermodehelper_exec_work+0xf1/0x170
[  411.728266][T13146]                         process_one_work+0x9cf/0x1b70
[  411.730106][T13146]                         worker_thread+0x6c8/0xf10
[  411.731972][T13146]                         kthread+0x3c2/0x780
[  411.733679][T13146]                         ret_from_fork+0x5d4/0x6f0
[  411.735524][T13146]                         ret_from_fork_asm+0x1a/0x30
[  411.737408][T13146]  }
[  411.738150][T13146]  ... key      at: [<ffffffff8e20c098>] tasklist_lock+0x18/0x40
[  411.740313][T13146]  ... acquired at:
[  411.741402][T13146]    lock_acquire+0x179/0x350
[  411.742740][T13146]    _raw_read_lock+0x5f/0x70
[  411.744075][T13146]    send_sigurg+0xed/0xc80
[  411.745359][T13146]    sk_send_sigurg+0x76/0x360
[  411.746721][T13146]    unix_stream_sendmsg+0xeb3/0x11d0
[  411.748231][T13146]    ____sys_sendmsg+0xa98/0xc70
[  411.749642][T13146]    ___sys_sendmsg+0x134/0x1d0
[  411.751024][T13146]    __sys_sendmsg+0x16d/0x220
[  411.752402][T13146]    __do_fast_syscall_32+0x7c/0x3a0
[  411.753887][T13146]    do_fast_syscall_32+0x32/0x80
[  411.755341][T13146]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  411.757158][T13146] 
[  411.757845][T13146] 
[  411.757845][T13146] stack backtrace:
[  411.759521][T13146] CPU: 0 UID: 0 PID: 13146 Comm: syz.5.1910 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  411.759537][T13146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  411.759544][T13146] Call Trace:
[  411.759549][T13146]  <TASK>
[  411.759554][T13146]  dump_stack_lvl+0x116/0x1f0
[  411.759572][T13146]  check_irq_usage+0x7dc/0x920
[  411.759590][T13146]  ? check_path.constprop.0+0x24/0x50
[  411.759604][T13146]  ? __lock_acquire+0x1285/0x1c90
[  411.759618][T13146]  __lock_acquire+0x1285/0x1c90
[  411.759634][T13146]  lock_acquire+0x179/0x350
[  411.759648][T13146]  ? send_sigurg+0xed/0xc80
[  411.759659][T13146]  ? finish_task_switch.isra.0+0x2fa/0xc10
[  411.759672][T13146]  _raw_read_lock+0x5f/0x70
[  411.759687][T13146]  ? send_sigurg+0xed/0xc80
[  411.759698][T13146]  send_sigurg+0xed/0xc80
[  411.759708][T13146]  ? find_held_lock+0x2b/0x80
[  411.759720][T13146]  sk_send_sigurg+0x76/0x360
[  411.759736][T13146]  unix_stream_sendmsg+0xeb3/0x11d0
[  411.759754][T13146]  ? aa_sk_perm+0x2f4/0xb10
[  411.759767][T13146]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  411.759784][T13146]  ? __pfx_aa_sk_perm+0x10/0x10
[  411.759796][T13146]  ? __import_iovec+0x1dd/0x650
[  411.759808][T13146]  ____sys_sendmsg+0xa98/0xc70
[  411.759822][T13146]  ? __pfx_____sys_sendmsg+0x10/0x10
[  411.759835][T13146]  ? get_compat_msghdr+0x11a/0x170
[  411.759847][T13146]  ? __pfx_futex_wake_mark+0x10/0x10
[  411.759864][T13146]  ___sys_sendmsg+0x134/0x1d0
[  411.759881][T13146]  ? __pfx____sys_sendmsg+0x10/0x10
[  411.759902][T13146]  ? find_held_lock+0x2b/0x80
[  411.759915][T13146]  __sys_sendmsg+0x16d/0x220
[  411.759933][T13146]  ? __pfx___sys_sendmsg+0x10/0x10
[  411.759949][T13146]  ? __ia32_sys_futex_time32+0x1d9/0x460
[  411.759967][T13146]  ? rcu_is_watching+0x12/0xc0
[  411.759979][T13146]  __do_fast_syscall_32+0x7c/0x3a0
[  411.759990][T13146]  do_fast_syscall_32+0x32/0x80
[  411.760000][T13146]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  411.760014][T13146] RIP: 0023:0xf7f88579
[  411.760023][T13146] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  411.760035][T13146] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  411.760046][T13146] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080
[  411.760053][T13146] RDX: 00000000240408c1 RSI: 0000000000000000 RDI: 0000000000000000
[  411.760059][T13146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  411.760066][T13146] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  411.760072][T13146] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  411.760082][T13146]  </TASK>
[  412.718349][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  412.718352][ T5955] Bluetooth: hci4: command 0x1003 tx timeout
[  413.828566][   T10] vhci_hcd: vhci_device speed not set

VM DIAGNOSIS:
09:56:38  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85582355 RDI=ffffffff9b06da80 RBP=ffffffff9b06da40 RSP=ffffc90002d97200
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e36312e36
R12=0000000000000000 R13=0000000000000033 R14=ffffffff9b06da40 R15=ffffffff855822f0
RIP=ffffffff8558237f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888097561000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000000c331820 CR3=000000005d6eb000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000a02c54 RBX=0000000000000001 RCX=ffffffff8b7c4be9 RDX=ffffed1005666646
RSI=ffffffff8c1562a0 RDI=ffffffff81918591 RBP=ffffed1003b59488 RSP=ffffc9000046fdc8
R8 =0000000000000000 R9 =ffffed1005666645 R10=ffff88802b33322b R11=0000000000000001
R12=0000000000000001 R13=ffff88801daca440 R14=ffffffff90a82f50 R15=0000000000000000
RIP=ffffffff810014f0 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888097661000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000560fb8223000 CR3=000000005019d000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a 0000002c00000012 0004000000080024 0000000000280030
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000077e 0000001000000000 0000000000000000 0000000000000014
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 006d766b2f766564 2f01ffffffffffff ffffed0801800308 000000bc00000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001ffffffffffff ffffe70805c8031f fffffffe080005c0 0310080005b80306
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080005b003208090 080005a803080800 05a0030e08000598 031a080005900300
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800058803020800 05800300080005b9 8208000100000208 0606041da2000800
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 05b8820800010000 00080606021da400 0400000800018002 01c70800080048a4
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 031a080005900300 0800058803020800 05800300080005b9 8208000100000208
ZMM25=8fe0bd628fe0bd62 8fe0bd628fe0bd62 8fe0bd628fe0bd62 8fe0bd628fe0bd62 8fe0bd628fe0bd62 8fe0bd628fe0bd62 8fe0bd628fe0bd62 8fe0bd628fe0bd62
ZMM26=8c82f6c18c82f6c1 8c82f6c18c82f6c1 8c82f6c18c82f6c1 8c82f6c18c82f6c1 8c82f6c18c82f6c1 8c82f6c18c82f6c1 8c82f6c18c82f6c1 8c82f6c18c82f6c1
ZMM27=50f5f76350f5f763 50f5f76350f5f763 50f5f76350f5f763 50f5f76350f5f763 50f5f76350f5f763 50f5f76350f5f763 50f5f76350f5f763 50f5f76350f5f763
ZMM28=000000600000005f 0000005e0000005d 0000005c0000005b 0000005a00000059 0000005800000057 0000005600000055 0000005400000053 0000005200000051
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=a00b0000a00b0000 a00b0000a00b0000 a00b0000a00b0000 a00b0000a00b0000 a00b0000a00b0000 a00b0000a00b0000 a00b0000a00b0000 a00b0000a00b0000
info registers vcpu 2

CPU#2
RAX=000000000064c224 RBX=0000000000000002 RCX=ffffffff8b7c4be9 RDX=ffffed1005686646
RSI=ffffffff8c1562a0 RDI=ffffffff81918591 RBP=ffffed1003b59910 RSP=ffffc9000047fdf8
R8 =0000000000000000 R9 =ffffed1005686645 R10=ffff88802b43322b R11=0000000000000001
R12=0000000000000002 R13=ffff88801dacc880 R14=ffffffff90a82f50 R15=0000000000000000
RIP=ffffffff8b7c374f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888097761000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000000c351fc0 CR3=00000000799f4000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=0000000000000080 RCX=ffffffff891ecbc5 RDX=ffff88801c740000
RSI=ffffffff891ecbd6 RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc900005df758
R8 =0000000000000005 R9 =00000000000000f0 R10=0000000000000080 R11=0000000000000001
R12=ffff888020511220 R13=0000000000000000 R14=dffffc0000000000 R15=0000000000000007
RIP=ffffffff81bb88d6 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888097861000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000008002e000 CR3=00000000799f4000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 61f372e11ae23983 ef20e4c62ac34203
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ac1692d89271c24f 29be52571f9d2a90
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 28f1ae79a15d595b 9f0a82f07654082b
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 16e36c02ecbea514 b7bea8d25c045c7b
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003080
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2b8c9ca02b8df05c 000000fa2b8e7786
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0080010000800100 008001002ba0d95e
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000fa00800100 2b8d64de000000fa
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00800100000000fa 000000fa000000fa
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d09b8b329b1086dc cecec1332f58a4d6
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fcaf949cabfe8b76 765270146d5bbf93
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000