last executing test programs:

39.427795257s ago: executing program 0 (id=735):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e80)={'xfrm0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r1, @ANYBLOB="da"], 0x20}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x7000000, 0x0, {0x0, 0x48, 0x0, r1, 0x22a0b}}, 0x20}}, 0x0)

39.34779655s ago: executing program 0 (id=736):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x4dc, 0x0, 0x268, 0x268, 0x0, 0xc8, 0x414, 0x414, 0x414, 0x414, 0x414, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa4, 0xc8, 0x0, {0x7a00000000000000}}, @HL={0x24, 'HL\x00', 0x0, {0x0, 0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [0x0, 0x0, 0xffffff00, 0xffffff00], [], 'syzkaller0\x00', 'team_slave_1\x00', {}, {}, 0x3c}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x4}, {0x0, 0xfe}, 0x1ff}}}, {{@ipv6={@mcast1, @remote, [0x0, 0x0, 0xffffff00], [], '\x00', 'dummy0\x00'}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x538)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000100)={0xfe42, 0x6, {r1}, {0xffffffffffffffff}, 0x1, 0x8})
r3 = dup(0xffffffffffffffff)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000026204809459514f51cd7c100fb3ad41cd14196613a9f6aa932948074ede0a4ae94de75096ed7f0fc07c2aa272304f700af65b2f5eda19edf7d089077889f18365ca69a9dd4dc13fd4efe697a8bfe16c7d1db1b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = io_uring_setup(0x7bda, &(0x7f0000000080))
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x1b, 0x20000009, r8)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0xe, 0x0, @fd_index=0x804, 0x0, 0x0, 0x0, {0x1000}, 0x0, {0x0, r8}})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x2000c080}, 0x48085)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000adf6cc47042d6eab2d7569000001ac74", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r10}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00'], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x20000000000000f4, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYRESDEC=r5, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="2497882a2dec2f6a4c017060ec9e9955750a39feac7744b3878da2f2000651edf48dae4c858c7ea7a0ae426490d959d38638a91b208c36bfe502e86837e7e9553ca95f9a5ef094453acd3dcf54fd23155ba3e4f1d6d6ac8220af4b7a95255a5d3e3c0ca769aaec768da7336096f796bde638e140c8cfd62c4c1062c904acc7346d9dbaaebcac0be8debce0168f826f0e6b502399792bac5f77cb664aff609de7d959421984d08de4632b4e68d659fd5ab5cca693d778bd5545a1586cc28f38caa273ca4394fb25e6745a7e86bc03fc14c4", @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRESHEX, @ANYRESDEC=r2, @ANYRESOCT=r7], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r11}, 0x10)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
clock_nanosleep(0xb, 0x3f, &(0x7f0000000080)={0x77359400}, 0x0)

38.409586811s ago: executing program 0 (id=738):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x15)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000380)={0x81, 0xdfc, 0xcb, 0x1, 0x16, "35d47c8dc78281b85107132e469921004cb5d9"})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002800)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="c2409babcdd1781a10528015f787b4f0f43b058ff0eaddd5d1b2bdec07354a361137a1745093b89843ac098aa823a069b7d217fc67ec6b"], 0x180}], 0x1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r1], 0x10}}, 0x0)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r5 = dup(r1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x204}})
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x8043, 0x0, 0x101}})
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
read$FUSE(r6, &(0x7f00000007c0)={0x2020}, 0x2020)

36.098739874s ago: executing program 0 (id=746):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5500, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xc7}, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x4, @time, {0x0, 0x4}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x5, 0x0, @time={0x2}, {}, {}, @connect}], 0xc4)

36.098349761s ago: executing program 0 (id=747):
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
set_mempolicy(0x0, &(0x7f00000003c0)=0xe, 0x2)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
connect$ax25(r2, 0x0, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth0_to_bond\x00'})
write$char_usb(r0, &(0x7f0000001c40)="c1f7", 0x2)

34.630119478s ago: executing program 0 (id=751):
socket$kcm(0x11, 0x3, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{0x2}, {0x0, 0x2}, {0x3}, {0x1}, {}, {0xfffffffc, 0x6}], 0x0, 0x0, 0x8, 0x0, 0x1}})
prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = openat$adsp1(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d09, &(0x7f0000000280))
read$msr(r0, &(0x7f0000002100)=""/102399, 0xfffffffffffffe46)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
creat(&(0x7f0000000240)='./file0/file0\x00', 0x0)
r3 = socket$inet6(0xa, 0x2, 0x3a)
r4 = dup(r3)
bind$unix(r4, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r2], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
open(&(0x7f00000002c0)='./file0\x00', 0x1c1042, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(r8, 0x4068aea3, &(0x7f0000000040)={0x80, 0x0, 0x2})
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0xdac)
ioctl$TCXONC(r6, 0x540a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

34.286478997s ago: executing program 1 (id=299):
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0x7ff, 0x2a, 0xc, 0xb, 0x59f, 0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8b1b, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000ebffffffff9400000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, 0x0, 0x20040800)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvlan0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0305000000000000140012800c0001006d6163766c616e0004000280080029008e608670eb000a00", @ANYRES32=r6, @ANYBLOB], 0x44}}, 0x0)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000004d00), 0xffffffffffffffff)
openat(0xffffffffffffffff, 0x0, 0x2, 0x36)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtclass={0x3c, 0x28, 0x200, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0x4, 0xffff}, {0x0, 0xfff2}, {0xa, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x81, 0xd4}}, @TCA_RATE={0x6, 0x5, {0xa, 0x6}}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8891}, 0x0)

27.743531249s ago: executing program 1 (id=299):
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0x7ff, 0x2a, 0xc, 0xb, 0x59f, 0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8b1b, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000ebffffffff9400000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, 0x0, 0x20040800)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvlan0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0305000000000000140012800c0001006d6163766c616e0004000280080029008e608670eb000a00", @ANYRES32=r6, @ANYBLOB], 0x44}}, 0x0)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000004d00), 0xffffffffffffffff)
openat(0xffffffffffffffff, 0x0, 0x2, 0x36)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtclass={0x3c, 0x28, 0x200, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0x4, 0xffff}, {0x0, 0xfff2}, {0xa, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x81, 0xd4}}, @TCA_RATE={0x6, 0x5, {0xa, 0x6}}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8891}, 0x0)

22.22821487s ago: executing program 1 (id=299):
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0x7ff, 0x2a, 0xc, 0xb, 0x59f, 0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8b1b, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000ebffffffff9400000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, 0x0, 0x20040800)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvlan0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0305000000000000140012800c0001006d6163766c616e0004000280080029008e608670eb000a00", @ANYRES32=r6, @ANYBLOB], 0x44}}, 0x0)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000004d00), 0xffffffffffffffff)
openat(0xffffffffffffffff, 0x0, 0x2, 0x36)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtclass={0x3c, 0x28, 0x200, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0x4, 0xffff}, {0x0, 0xfff2}, {0xa, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x81, 0xd4}}, @TCA_RATE={0x6, 0x5, {0xa, 0x6}}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8891}, 0x0)

19.673900894s ago: executing program 32 (id=751):
socket$kcm(0x11, 0x3, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{0x2}, {0x0, 0x2}, {0x3}, {0x1}, {}, {0xfffffffc, 0x6}], 0x0, 0x0, 0x8, 0x0, 0x1}})
prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = openat$adsp1(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d09, &(0x7f0000000280))
read$msr(r0, &(0x7f0000002100)=""/102399, 0xfffffffffffffe46)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
creat(&(0x7f0000000240)='./file0/file0\x00', 0x0)
r3 = socket$inet6(0xa, 0x2, 0x3a)
r4 = dup(r3)
bind$unix(r4, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r2], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
open(&(0x7f00000002c0)='./file0\x00', 0x1c1042, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(r8, 0x4068aea3, &(0x7f0000000040)={0x80, 0x0, 0x2})
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0xdac)
ioctl$TCXONC(r6, 0x540a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

16.256070091s ago: executing program 1 (id=299):
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0x7ff, 0x2a, 0xc, 0xb, 0x59f, 0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8b1b, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000ebffffffff9400000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, 0x0, 0x20040800)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvlan0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0305000000000000140012800c0001006d6163766c616e0004000280080029008e608670eb000a00", @ANYRES32=r6, @ANYBLOB], 0x44}}, 0x0)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000004d00), 0xffffffffffffffff)
openat(0xffffffffffffffff, 0x0, 0x2, 0x36)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtclass={0x3c, 0x28, 0x200, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0x4, 0xffff}, {0x0, 0xfff2}, {0xa, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x81, 0xd4}}, @TCA_RATE={0x6, 0x5, {0xa, 0x6}}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8891}, 0x0)

9.839966069s ago: executing program 1 (id=299):
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0x7ff, 0x2a, 0xc, 0xb, 0x59f, 0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8b1b, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000ebffffffff9400000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, 0x0, 0x20040800)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvlan0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0305000000000000140012800c0001006d6163766c616e0004000280080029008e608670eb000a00", @ANYRES32=r6, @ANYBLOB], 0x44}}, 0x0)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000004d00), 0xffffffffffffffff)
openat(0xffffffffffffffff, 0x0, 0x2, 0x36)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtclass={0x3c, 0x28, 0x200, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0x4, 0xffff}, {0x0, 0xfff2}, {0xa, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x81, 0xd4}}, @TCA_RATE={0x6, 0x5, {0xa, 0x6}}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8891}, 0x0)

5.613212325s ago: executing program 4 (id=829):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000400)="a99c383d33c9c607b1b9d49688a88354e3aac8b09a3e8fa0a08432e6c2d6e3d3d197", 0x22, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r3, &(0x7f0000001380)=[{{&(0x7f00000003c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000580)="da8350d419904f5be6298dfb009c742c98261f4b66fff9e908588f7dbd0ad668507c99de58734eca3b195404611fa1a6d93fea81fcafa39bf5c0a4b71721844d8a018d45dc0ee4043d43fde078473423c029dfe46fff0ff1bb7244a698818adaa9be97a7251cdeef49f34528177748fa9b36ed57ca4d0b79b8f754d71f67b290ba46bf9ce2fa72fc907bca297624e532d5947a8b85c88952502217003c3f026e7cc0962ef5ae893603102aea47974107adecb4b06e14b975bd688eddbde4b6028225d12ae6d8297149ac467ee367831d357834d1deb8f4f0", 0xd8}], 0x1, &(0x7f00000015c0)=[@ip_ttl={{0x10}}, @ip_ttl={{0x10, 0x0, 0x2, 0x6f6}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0xfd, [@loopback, @broadcast, @multicast1, @empty, @multicast1]}, @generic={0x44, 0x2}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r2, @remote, @dev={0xac, 0x14, 0x14, 0x2d}}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x78, 0x0, 0x1, [0x5, 0x7, 0xf]}, @cipso={0x86, 0x13, 0x0, [{0x0, 0x2}, {0x6, 0xb, "7bf777c5cc869f6559"}]}, @cipso={0x86, 0x28, 0x0, [{0x5, 0x2}, {0x7, 0x12, "247ce2da777996ffa960659f5ebf7a6e"}, {0x1, 0xe, "293dcf90229a311fa5938f82"}]}, @ssrr={0x89, 0x7, 0xa, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_retopts={{0xe0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x8f}, @timestamp_addr={0x44, 0x44, 0x6a, 0x1, 0x4, [{@rand_addr=0x64010101, 0x7}, {@rand_addr=0x64010101, 0xbc83}, {@private=0xa010102, 0x8}, {@loopback, 0xfffffffb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast1, 0x8}, {@multicast1, 0x66f1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x44}]}, @lsrr={0x83, 0x1b, 0xe6, [@rand_addr=0x64010100, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0x29}, @loopback]}, @timestamp_prespec={0x44, 0x14, 0xbc, 0x3, 0x0, [{@broadcast, 0x9}, {@multicast2, 0x6}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x24, 0x3, [{0x0, 0x9, "51481d5ab9f5a9"}, {0x1, 0x5, "d1701b"}, {0x2, 0x10, "fd230ca139ecb0dfc9129988b8d8"}]}, @generic={0x1b, 0xa, "3527e04a4ba6a498"}, @timestamp_prespec={0x44, 0xc, 0xb6, 0x3, 0xc, [{@private=0xa010102}]}, @timestamp_prespec={0x44, 0xc, 0xd3, 0x3, 0xc, [{@empty, 0x7fff}]}, @timestamp={0x44, 0x10, 0x7e, 0x0, 0x9, [0x3, 0x4, 0xb]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}, @ip_ttl={{0x10, 0x0, 0x2, 0x54eb}}], 0x1c0}}, {{&(0x7f0000000440)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000b40)="6903c2e024959c992b6d7b357e84d924a3f4c350d0ce5eeb8dac4327827758c9586c207044b5444e4b58d1e48575a88c88cb33eb16b50a811e4ba1a41ac304f09c215f48462c47d3eeef7bd44d403a1dfbb8c79e1b5de61be44177ee10d2b8e4f4e428c1807a173500347feebea15f52c488cb64782f7cbd0abcdd83f969b0c319d67af525e3d0962e6275d7ffdc4d54838655fedc53eb351891ea0562045d0b9ddbdfc226b8161759bec34f36f9412caec13a8208e88535e9f84ed6fe618457e1984f2f34c9501b9109bfdcaebe6f2e1e828d771d9f4e47f37812ad5feb", 0xde}], 0x1, &(0x7f00000006c0)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x8}}], 0x10}}, {{&(0x7f0000000700)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000c40)="5657cbdf684f0f64ccd25d681a4902af53e3dff88c513c8adb47e20f8cff0193f15e1b3811231401896b65c70609d687530ee3409bd6154b87f88969e8697fb377f32c3edd55c51e0c090fefb0406a7c28a3b9518199cbb58925fca52d73d9fb50705af502cfbfc335c83dc2e8091ded6e6da503759e372075a1506a405d56fa319ca6e9069048f448bcc46bf4fd757c4442411545c295ccadf4fd7383473150f78c72e456f9a33b0c26bc979f2a2aed187198c853dcf86899e78f6dd71cd85427d78f351cd68899326540e71d9cc0d3ff1c92dd730d323d1807ad1e9e7b30e3d58c28226eced77c846eb2736f51539c137ad187976a94d0", 0xf8}, {&(0x7f0000000a40)="76b024709d41e5694ca7ec0972fd72ee6996e8d5b5bef540a61cec8f18940531d66d9dc1a41b720269053af7fe4a9f52fa3ff879b56784be72ff6ff3e5f727048c33ccd73b688cc52df32ad77344c55b6227899dae3947cdebce49ed482c59e87991fb221a86c4ef7a86c16d6f0d460365a8ef53fd91ec0a85627e053e480fede0b7", 0x82}, {&(0x7f0000000d40)="bccd5833b0b9c5ba98cd6ba9d661ce9bb076ebf141d774ce69f1484d3727e98b324fc36061e766b08fb2e49995e290777c3f6061d4d1cef07c4743b84f66c9464bfe8c7d09caca083b52cb835200dd58cf3e0c906a9bc5473a92b7056fe90039027bda9c9951912ba7c8cac7f4197155c6a6225684e4a5d658d1c336f9c45030f0feb0e9188270f7d5558b20518fe7975658fdc20a6a3c406c3e9e9d2ad16bde9d442b299e6bc28e79185c136fbdccf66e6b8e9473c517a5bcb9cd717dcc6f9654b5cbb1ea111c53d14839a7c5c636c658c1375471414668076a2f629ae081f4060427353bddadb91a8ac103c2", 0xed}], 0x3, &(0x7f0000000e80)=[@ip_retopts={{0xc}}], 0xc}}, {{&(0x7f0000000f00)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000f40)="78502820b2fd1569636124b269a188c603c511ea09de64c3633c29e40e6ee58e199993046fa5ad25bb39eba56afa2f219e37d0a9da952737fa8e9fa0a282968dfc624b419b146f2c3cc3d1698211253d631c7fe214d354bee9cc366478abc10ede417bb444daf6d3c64b709540ea46aa4421caf542bf4b602fa08438c5e900d0c2b6c3c096e809ea9588", 0x8a}, {&(0x7f0000001000)="c91a1f248b9c5d77b5ad390ac0c1c89b3ac1cc001de03949130e855fdcb0044d8d5cc88312344f22dbc1f272f3b0bc2bd61e662706679cab37d9f10001606b6fcdf25c97e136d1dc13a69bc0d81c5b10050c24b2bbe0fb840e1535926cb043ac86e06869ea9581f9ff4b4b35d3ec7098933ea4f207c4dfadf1053ed0319f9de6a8429a5f4a1e189df941ceb8ca2a6afd672e05d0ce9019255baae815631a82b44d7b75f8b55eda3e015db295a53924a8e5d4cbbbefc9fc50a25fee2b14fff46648a5ed12e108219a6dd8a6250114015981c10f56e58c76b76a5e741079b4cdbad1a98419487dbb20827993", 0xeb}, {&(0x7f0000001100)="4e3285157049afe3586f5a1b5ecfec6d7aa73077944487ce697d4fb67a6762f874b3a194cb0a35a7f02fbfee55ffd1f687215d71163e41644841b34270203f5ea50a52b4910360c0ee69ac9cc4b5069e27ba91939a32e951af539b8d6955aa85a5c71cf30e050e61c47b89ea9a854d0bca58b012002d78bf2eaea6456948e881f6d2893ba9af70e0165972e044d9d778fd9e8434829d1fa5b5b43849174b3f0f8086bddca5cbf2de23d157026d90261e621eef6a3020", 0xb6}, {&(0x7f00000011c0)="c4b118b6cabd5f2a772a748e96ab446ddd3d0009b5790b7e9fec76f429ea0d081df5deaefd517d69d6a0d31e3d3a02ba1eb0d63b084ab37da2e248c4d567cf95541c2dc1b1395ec33b9f5fc21dac4dec60cda834cce93d204862a6b4a81a58bded969116ed6f8d0ffd3dbd74f68fc9697eec7bf23d38cc7b86d9def7e78917bcc3837ed82235356f33e26b4f57baf6a823378609bc90d49e8f51fdf8b3ce5602adb50dcb65393f6310ba615651f5a9e8985c8523f13309706fe13c1799a26cd87a28c3f45a4716a6041a7d121e0eb208", 0xd0}, {&(0x7f00000012c0)="a546f8edce842e52bebbe4bf03f11a6452388a93a3d4bdea5b8904bc51ec8d294919acaa7f4e791a738601c4", 0x2c}], 0x5, &(0x7f0000001340)=[@ip_retopts={{0x20, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xb5, [@loopback, @empty, @loopback, @broadcast]}]}}}], 0x20}}], 0x4, 0x24008054)

5.499786682s ago: executing program 4 (id=830):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x15)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000380)={0x81, 0xdfc, 0xcb, 0x1, 0x16, "35d47c8dc78281b85107132e469921004cb5d9"})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002800)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="c2409babcdd1781a10528015f787b4f0f43b058ff0eaddd5d1b2bdec07354a361137a1745093b89843ac098aa823a069b7d217fc67ec6bbf6749ff4caca107d38867ddcbee2d676888b20cd798ccdc49d297f698f913340013009e002f646576"], 0x180}], 0x1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r1], 0x10}}, 0x0)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r5 = dup(r1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x204}})
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x8043, 0x0, 0x101}})
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
read$FUSE(r6, &(0x7f00000007c0)={0x2020}, 0x2020)

4.401123456s ago: executing program 3 (id=833):
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
syz_io_uring_setup(0x4172, 0x0, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10)
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100020005e0c0000000000000e0021001400000002800000121f", 0x2e}], 0x1}, 0x24004800)

4.349938291s ago: executing program 3 (id=834):
r0 = socket(0x40000000015, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000fcef9cedb700", @ANYRES16=r1, @ANYBLOB="bfdf00000000000000003d000000"], 0x14}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0x10, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000e4fa48d6c65e2210ea68375b11ad5e6eed41ea79ee39e75c8a77fdcdc426c8a45858a0a6321b8cb45919a81503fcfaa6a9d94dd4c6a1790db40ce64733002b358bca8b2d88a765bd9c86d3ef8fcf9d515899e427604c65dc6619a864e71d42e473baa0adc11178b467b1276e0844153b3de340612ec507b274be5548a63883785efae69b19e68703fc9d510aa31222ea3020395372", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000980)='sys_enter\x00', r8}, 0x10)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
getpeername(r9, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', <r12=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000195c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {0x6}, {0xffff, 0xffff}, {0x0, 0x8}}, [@TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x4, 0x4, 0x4, 0x2, 0x7, 0x7, 0x7}}, {0x12, 0x2, [0xb, 0xfd48, 0xe5, 0x5, 0x0, 0xfff7, 0xafa]}}]}]}, 0x58}}, 0x0)
getsockopt(r0, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102385, &(0x7f0000000000)=0x18ff1)

3.852915058s ago: executing program 1 (id=299):
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0x7ff, 0x2a, 0xc, 0xb, 0x59f, 0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8b1b, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000ebffffffff9400000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, 0x0, 0x20040800)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvlan0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0305000000000000140012800c0001006d6163766c616e0004000280080029008e608670eb000a00", @ANYRES32=r6, @ANYBLOB], 0x44}}, 0x0)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000004d00), 0xffffffffffffffff)
openat(0xffffffffffffffff, 0x0, 0x2, 0x36)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtclass={0x3c, 0x28, 0x200, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0x4, 0xffff}, {0x0, 0xfff2}, {0xa, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x81, 0xd4}}, @TCA_RATE={0x6, 0x5, {0xa, 0x6}}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8891}, 0x0)

1.79689833s ago: executing program 3 (id=836):
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x400c4152, &(0x7f0000000640)={0x0, 0x0, 0x858})
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x2)
ioctl$TIOCVHANGUP(r7, 0x5437, 0x0)
r8 = socket(0x11, 0x800000003, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000500))
socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0xffffffffffffffa7}, [@NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r9 = dup(r1)
write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4010, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@cache_mmap}], [], 0x6b}})
chmod(&(0x7f0000000140)='./file0\x00', 0x0)

1.669671491s ago: executing program 2 (id=837):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x8, 0xad, &(0x7f0000000140)=""/173, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$SG_BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1a080, 0x0)
mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100))
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'lo\x00', @ifru_names='nicvf0\x00'})
chdir(&(0x7f00000000c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)

1.203856119s ago: executing program 4 (id=838):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000400)="a99c383d33c9c607b1b9d49688a88354e3aac8b09a3e8fa0a08432e6c2d6e3d3d197", 0x22, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r3, &(0x7f0000001380)=[{{&(0x7f00000003c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000580)="da8350d419904f5be6298dfb009c742c98261f4b66fff9e908588f7dbd0ad668507c99de58734eca3b195404611fa1a6d93fea81fcafa39bf5c0a4b71721844d8a018d45dc0ee4043d43fde078473423c029dfe46fff0ff1bb7244a698818adaa9be97a7251cdeef49f34528177748fa9b36ed57ca4d0b79b8f754d71f67b290ba46bf9ce2fa72fc907bca297624e532d5947a8b85c88952502217003c3f026e7cc0962ef5ae893603102aea47974107adecb4b06e14b975bd688eddbde4b6028225d12ae6d8297149ac467ee367831d357834d1deb8f4f0", 0xd8}], 0x1, &(0x7f00000015c0)=[@ip_ttl={{0x10}}, @ip_ttl={{0x10, 0x0, 0x2, 0x6f6}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0xfd, [@loopback, @broadcast, @multicast1, @empty, @multicast1]}, @generic={0x44, 0x2}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r2, @remote, @dev={0xac, 0x14, 0x14, 0x2d}}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x78, 0x0, 0x1, [0x5, 0x7, 0xf]}, @cipso={0x86, 0x13, 0x0, [{0x0, 0x2}, {0x6, 0xb, "7bf777c5cc869f6559"}]}, @cipso={0x86, 0x28, 0x0, [{0x5, 0x2}, {0x7, 0x12, "247ce2da777996ffa960659f5ebf7a6e"}, {0x1, 0xe, "293dcf90229a311fa5938f82"}]}, @ssrr={0x89, 0x7, 0xa, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_retopts={{0xe0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x8f}, @timestamp_addr={0x44, 0x44, 0x6a, 0x1, 0x4, [{@rand_addr=0x64010101, 0x7}, {@rand_addr=0x64010101, 0xbc83}, {@private=0xa010102, 0x8}, {@loopback, 0xfffffffb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast1, 0x8}, {@multicast1, 0x66f1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x44}]}, @lsrr={0x83, 0x1b, 0xe6, [@rand_addr=0x64010100, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0x29}, @loopback]}, @timestamp_prespec={0x44, 0x14, 0xbc, 0x3, 0x0, [{@broadcast, 0x9}, {@multicast2, 0x6}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x24, 0x3, [{0x0, 0x9, "51481d5ab9f5a9"}, {0x1, 0x5, "d1701b"}, {0x2, 0x10, "fd230ca139ecb0dfc9129988b8d8"}]}, @generic={0x1b, 0xa, "3527e04a4ba6a498"}, @timestamp_prespec={0x44, 0xc, 0xb6, 0x3, 0xc, [{@private=0xa010102}]}, @timestamp_prespec={0x44, 0xc, 0xd3, 0x3, 0xc, [{@empty, 0x7fff}]}, @timestamp={0x44, 0x10, 0x7e, 0x0, 0x9, [0x3, 0x4, 0xb]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}, @ip_ttl={{0x10, 0x0, 0x2, 0x54eb}}], 0x1c0}}, {{&(0x7f0000000440)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000b40)="6903c2e024959c992b6d7b357e84d924a3f4c350d0ce5eeb8dac4327827758c9586c207044b5444e4b58d1e48575a88c88cb33eb16b50a811e4ba1a41ac304f09c215f48462c47d3eeef7bd44d403a1dfbb8c79e1b5de61be44177ee10d2b8e4f4e428c1807a173500347feebea15f52c488cb64782f7cbd0abcdd83f969b0c319d67af525e3d0962e6275d7ffdc4d54838655fedc53eb351891ea0562045d0b9ddbdfc226b8161759bec34f36f9412caec13a8208e88535e9f84ed6fe618457e1984f2f34c9501b9109bfdcaebe6f2e1e828d771d9f4e47f37812ad5feb", 0xde}], 0x1, &(0x7f00000006c0)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x8}}], 0x10}}, {{&(0x7f0000000700)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000c40)="5657cbdf684f0f64ccd25d681a4902af53e3dff88c513c8adb47e20f8cff0193f15e1b3811231401896b65c70609d687530ee3409bd6154b87f88969e8697fb377f32c3edd55c51e0c090fefb0406a7c28a3b9518199cbb58925fca52d73d9fb50705af502cfbfc335c83dc2e8091ded6e6da503759e372075a1506a405d56fa319ca6e9069048f448bcc46bf4fd757c4442411545c295ccadf4fd7383473150f78c72e456f9a33b0c26bc979f2a2aed187198c853dcf86899e78f6dd71cd85427d78f351cd68899326540e71d9cc0d3ff1c92dd730d323d1807ad1e9e7b30e3d58c28226eced77c846eb2736f51539c137ad187976a94d0", 0xf8}, {&(0x7f0000000a40)="76b024709d41e5694ca7ec0972fd72ee6996e8d5b5bef540a61cec8f18940531d66d9dc1a41b720269053af7fe4a9f52fa3ff879b56784be72ff6ff3e5f727048c33ccd73b688cc52df32ad77344c55b6227899dae3947cdebce49ed482c59e87991fb221a86c4ef7a86c16d6f0d460365a8ef53fd91ec0a85627e053e480fede0b7", 0x82}, {&(0x7f0000000d40)="bccd5833b0b9c5ba98cd6ba9d661ce9bb076ebf141d774ce69f1484d3727e98b324fc36061e766b08fb2e49995e290777c3f6061d4d1cef07c4743b84f66c9464bfe8c7d09caca083b52cb835200dd58cf3e0c906a9bc5473a92b7056fe90039027bda9c9951912ba7c8cac7f4197155c6a6225684e4a5d658d1c336f9c45030f0feb0e9188270f7d5558b20518fe7975658fdc20a6a3c406c3e9e9d2ad16bde9d442b299e6bc28e79185c136fbdccf66e6b8e9473c517a5bcb9cd717dcc6f9654b5cbb1ea111c53d14839a7c5c636c658c1375471414668076a2f629ae081f4060427353bddadb91a8ac103c2", 0xed}], 0x3, &(0x7f0000000e80)=[@ip_retopts={{0xc}}], 0xc}}, {{&(0x7f0000000f00)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000f40)="78502820b2fd1569636124b269a188c603c511ea09de64c3633c29e40e6ee58e199993046fa5ad25bb39eba56afa2f219e37d0a9da952737fa8e9fa0a282968dfc624b419b146f2c3cc3d1698211253d631c7fe214d354bee9cc366478abc10ede417bb444daf6d3c64b709540ea46aa4421caf542bf4b602fa08438c5e900d0c2b6c3c096e809ea9588", 0x8a}, {&(0x7f0000001000)="c91a1f248b9c5d77b5ad390ac0c1c89b3ac1cc001de03949130e855fdcb0044d8d5cc88312344f22dbc1f272f3b0bc2bd61e662706679cab37d9f10001606b6fcdf25c97e136d1dc13a69bc0d81c5b10050c24b2bbe0fb840e1535926cb043ac86e06869ea9581f9ff4b4b35d3ec7098933ea4f207c4dfadf1053ed0319f9de6a8429a5f4a1e189df941ceb8ca2a6afd672e05d0ce9019255baae815631a82b44d7b75f8b55eda3e015db295a53924a8e5d4cbbbefc9fc50a25fee2b14fff46648a5ed12e108219a6dd8a6250114015981c10f56e58c76b76a5e741079b4cdbad1a98419487dbb20827993", 0xeb}, {&(0x7f0000001100)="4e3285157049afe3586f5a1b5ecfec6d7aa73077944487ce697d4fb67a6762f874b3a194cb0a35a7f02fbfee55ffd1f687215d71163e41644841b34270203f5ea50a52b4910360c0ee69ac9cc4b5069e27ba91939a32e951af539b8d6955aa85a5c71cf30e050e61c47b89ea9a854d0bca58b012002d78bf2eaea6456948e881f6d2893ba9af70e0165972e044d9d778fd9e8434829d1fa5b5b43849174b3f0f8086bddca5cbf2de23d157026d90261e621eef6a3020", 0xb6}, {&(0x7f00000011c0)="c4b118b6cabd5f2a772a748e96ab446ddd3d0009b5790b7e9fec76f429ea0d081df5deaefd517d69d6a0d31e3d3a02ba1eb0d63b084ab37da2e248c4d567cf95541c2dc1b1395ec33b9f5fc21dac4dec60cda834cce93d204862a6b4a81a58bded969116ed6f8d0ffd3dbd74f68fc9697eec7bf23d38cc7b86d9def7e78917bcc3837ed82235356f33e26b4f57baf6a823378609bc90d49e8f51fdf8b3ce5602adb50dcb65393f6310ba615651f5a9e8985c8523f13309706fe13c1799a26cd87a28c3f45a4716a6041a7d121e0eb208", 0xd0}, {&(0x7f00000012c0)="a546f8edce842e52bebbe4bf03f11a6452388a93a3d4bdea5b8904bc51ec8d294919acaa7f4e791a738601c4", 0x2c}], 0x5, &(0x7f0000001340)=[@ip_retopts={{0x20, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xb5, [@loopback, @empty, @loopback, @broadcast]}]}}}], 0x20}}], 0x4, 0x24008054)

1.128530124s ago: executing program 4 (id=839):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
r6 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000300)=0x58, 0x81800)
clock_gettime(0x0, &(0x7f0000005940)={<r7=>0x0, <r8=>0x0})
recvmmsg(r6, &(0x7f0000005800)=[{{&(0x7f0000000340)=@xdp, 0x80, &(0x7f0000002780)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/233, 0xe9}, {&(0x7f00000003c0)=""/17, 0x11}, {&(0x7f0000001600)=""/94, 0x5e}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000400)=""/42, 0x2a}, {&(0x7f0000002680)=""/242, 0xf2}], 0x7, &(0x7f00000027c0)=""/39, 0x27}, 0x9}, {{&(0x7f0000002800)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002980)=[{&(0x7f0000002880)=""/69, 0x45}, {&(0x7f0000002900)=""/38, 0x26}, {0x0}], 0x3}, 0x6}, {{&(0x7f00000029c0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a40)=""/210, 0xd2}], 0x1, &(0x7f0000002b80)=""/232, 0xe8}, 0x33}, {{0x0, 0x0, &(0x7f00000034c0)}, 0x7}, {{&(0x7f00000035c0)=@nl=@unspec, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003640)=""/207, 0xcf}, {&(0x7f0000003740)=""/115, 0x73}], 0x2, &(0x7f0000003800)=""/219, 0xdb}}, {{&(0x7f0000003900)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003980)=""/252, 0xfc}, {&(0x7f0000003a80)=""/37, 0x25}, {&(0x7f0000003ac0)=""/145, 0x91}, {&(0x7f0000003b80)=""/182, 0xb6}, {&(0x7f0000003c40)=""/75, 0x4b}, {&(0x7f0000003cc0)=""/33, 0x21}, {&(0x7f0000003d00)=""/139, 0x8b}], 0x7, &(0x7f0000003e00)=""/45, 0x2d}, 0x6}, {{&(0x7f0000003e40)=@ieee802154, 0x80, &(0x7f00000043c0)=[{&(0x7f0000003ec0)=""/241, 0xf1}, {&(0x7f0000003fc0)=""/107, 0x6b}, {&(0x7f0000004040)=""/35, 0x23}, {&(0x7f0000004080)=""/151, 0x97}, {&(0x7f0000004140)=""/209, 0xd1}, {&(0x7f0000004240)=""/93, 0x5d}, {&(0x7f00000042c0)=""/245, 0xf5}], 0x7}, 0xd116028}, {{&(0x7f0000005400)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000005780), 0x0, &(0x7f00000057c0)}, 0x7}], 0x8, 0x40, &(0x7f0000005980)={r7, r8+10000000})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002940)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x22, 0x0, 0x0, 0x0, 0x10000, @value=r4}, 0x28)
r11 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000100)=0x2)
ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000040)=0x11)
r12 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r12, 0x89a2, &(0x7f0000000000)='bridge0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40900000000000061111000000000008510000002000000850000000900000095000000000000f19500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))

967.358837ms ago: executing program 3 (id=840):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=<r0=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

900.047044ms ago: executing program 3 (id=841):
r0 = openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r7, &(0x7f00000000c0), 0x10)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400", @ANYRES32=r4], 0x3c}}, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x111)
ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f00000002c0)={0x71f5b318, 0x31db, 0x3, 0x0, 0x4})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r9, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @desc3}})
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc04c5609, &(0x7f00000000c0)=@multiplanar_mmap={0x80, 0x0, 0x4, 0x800, 0x4, {}, {0x3, 0x3, 0x2, 0x0, 0x0, 0x0, "b86ae1c4"}, 0x7, 0x1, {&(0x7f0000000040)=[{0x8, 0xfffffff7, {0x4}, 0x3}, {0x0, 0x3, {0x5}, 0x1000}]}, 0xd, 0x0, r9})
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f00000003c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94)

749.723369ms ago: executing program 2 (id=842):
r0 = socket$inet(0xa, 0x801, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b", 0x2b}], 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff04"], 0x528}}, 0xc000)
sendmmsg$inet_sctp(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=@in6={0xa, 0x0, 0x2000, @private1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, &(0x7f0000001480)=[@dstaddrv6={0x20, 0x84, 0x8, @local}], 0x20}], 0x1, 0x0)

669.820199ms ago: executing program 2 (id=843):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c)

449.509724ms ago: executing program 2 (id=844):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x0, [0x7, 0x0, 0x0, 0x7ff, 0x1951, 0x51d8, 0x7ff, 0x60f4, 0x100, 0x7, 0x8, 0x5, 0x1006, 0x8, 0xfffa, 0x0, 0x1, 0x9, 0x4, 0x73, 0x6, 0x1, 0x7, 0x7fff, 0xfffa, 0x5, 0x5, 0x8000, 0x40, 0xfd7d, 0x7f, 0x3b, 0x401, 0xe, 0x7, 0xa, 0xfb, 0x5, 0x7, 0x0, 0x1, 0x9, 0x6, 0x7, 0x10, 0x0, 0x2, 0x5], 0x80000000}})
fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, <r1=>0x0})
prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x61)
read$msr(0xffffffffffffffff, &(0x7f00000066c0)=""/102389, 0x18ff5)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
io_uring_setup(0xd67, &(0x7f0000000040)={0x0, 0x88d2, 0x0, 0x2, 0xfffffffe})
socket$kcm(0x10, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = dup(0xffffffffffffffff)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2)
readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000700)=""/245, 0xf5}], 0x1)
socket$alg(0x26, 0x5, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/wireless\x00')
pread64(r4, &(0x7f000001a240)=""/102391, 0x18ff7, 0x1)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)

415.68362ms ago: executing program 2 (id=845):
r0 = syz_open_dev$mouse(&(0x7f0000000a80), 0x80000000, 0x41)
ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000c80)={0x0, 0x1, 0x0, 0x5, 0x0, 0x5000000})

349.76755ms ago: executing program 2 (id=846):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000780), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_setup(0x27, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800c200", @ANYRES32=r1, @ANYBLOB="df0061800400b1800400f280fedd5b602742a277320bfc2681b6bbef341bcb57f577b73a3d1133cb154e40be3d98250658a3cc6068b26ddf43712535ebffb2d3f4a0a0783b9081d464874cc3edf85e97c0c399a073f44a3f11589a9298a9249a69cb7ad62d194d25c96249cb9b5c69b0b2bc6147dfd4f54885dd3987db9feac7a6e9ce20eee320ed62c6ca248f805a761a1eee86d472af7dc00a8b66b65f763cf7a28ac2ee574773ca71cb711298651b620189244597c466b9551991455624225d4f1816c18f87ecfffe01bb732848f32fabd904003680040043800400f980001000e9800400508008000b00", @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00'], 0x368}, 0x1, 0x0, 0x0, 0x20000005}, 0x40)
syz_open_dev$sg(0x0, 0x0, 0x80000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r4}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000000100010000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0xdffffffffffffffe)
sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x40000)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x3, 0x0, 0xa, 0x1ff, 0x1})

209.730552ms ago: executing program 4 (id=847):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000400)="a99c383d33c9c607b1b9d49688a88354e3aac8b09a3e8fa0a08432e6c2d6e3d3d197", 0x22, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r3, &(0x7f0000001380)=[{{&(0x7f00000003c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000580)="da8350d419904f5be6298dfb009c742c98261f4b66fff9e908588f7dbd0ad668507c99de58734eca3b195404611fa1a6d93fea81fcafa39bf5c0a4b71721844d8a018d45dc0ee4043d43fde078473423c029dfe46fff0ff1bb7244a698818adaa9be97a7251cdeef49f34528177748fa9b36ed57ca4d0b79b8f754d71f67b290ba46bf9ce2fa72fc907bca297624e532d5947a8b85c88952502217003c3f026e7cc0962ef5ae893603102aea47974107adecb4b06e14b975bd688eddbde4b6028225d12ae6d8297149ac467ee367831d357834d1deb8f4f0", 0xd8}], 0x1, &(0x7f00000015c0)=[@ip_ttl={{0x10}}, @ip_ttl={{0x10, 0x0, 0x2, 0x6f6}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0xfd, [@loopback, @broadcast, @multicast1, @empty, @multicast1]}, @generic={0x44, 0x2}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r2, @remote, @dev={0xac, 0x14, 0x14, 0x2d}}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x78, 0x0, 0x1, [0x5, 0x7, 0xf]}, @cipso={0x86, 0x13, 0x0, [{0x0, 0x2}, {0x6, 0xb, "7bf777c5cc869f6559"}]}, @cipso={0x86, 0x28, 0x0, [{0x5, 0x2}, {0x7, 0x12, "247ce2da777996ffa960659f5ebf7a6e"}, {0x1, 0xe, "293dcf90229a311fa5938f82"}]}, @ssrr={0x89, 0x7, 0xa, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_retopts={{0xe0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x8f}, @timestamp_addr={0x44, 0x44, 0x6a, 0x1, 0x4, [{@rand_addr=0x64010101, 0x7}, {@rand_addr=0x64010101, 0xbc83}, {@private=0xa010102, 0x8}, {@loopback, 0xfffffffb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast1, 0x8}, {@multicast1, 0x66f1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x44}]}, @lsrr={0x83, 0x1b, 0xe6, [@rand_addr=0x64010100, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0x29}, @loopback]}, @timestamp_prespec={0x44, 0x14, 0xbc, 0x3, 0x0, [{@broadcast, 0x9}, {@multicast2, 0x6}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x24, 0x3, [{0x0, 0x9, "51481d5ab9f5a9"}, {0x1, 0x5, "d1701b"}, {0x2, 0x10, "fd230ca139ecb0dfc9129988b8d8"}]}, @generic={0x1b, 0xa, "3527e04a4ba6a498"}, @timestamp_prespec={0x44, 0xc, 0xb6, 0x3, 0xc, [{@private=0xa010102}]}, @timestamp_prespec={0x44, 0xc, 0xd3, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}]}, @timestamp={0x44, 0x10, 0x7e, 0x0, 0x9, [0x3, 0x4, 0xb]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}, @ip_ttl={{0x10, 0x0, 0x2, 0x54eb}}], 0x1c0}}, {{&(0x7f0000000440)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000b40)="6903c2e024959c992b6d7b357e84d924a3f4c350d0ce5eeb8dac4327827758c9586c207044b5444e4b58d1e48575a88c88cb33eb16b50a811e4ba1a41ac304f09c215f48462c47d3eeef7bd44d403a1dfbb8c79e1b5de61be44177ee10d2b8e4f4e428c1807a173500347feebea15f52c488cb64782f7cbd0abcdd83f969b0c319d67af525e3d0962e6275d7ffdc4d54838655fedc53eb351891ea0562045d0b9ddbdfc226b8161759bec34f36f9412caec13a8208e88535e9f84ed6fe618457e1984f2f34c9501b9109bfdcaebe6f2e1e828d771d9f4e47f37812ad5feb", 0xde}], 0x1, &(0x7f00000006c0)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x8}}], 0x10}}, {{&(0x7f0000000700)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000c40)="5657cbdf684f0f64ccd25d681a4902af53e3dff88c513c8adb47e20f8cff0193f15e1b3811231401896b65c70609d687530ee3409bd6154b87f88969e8697fb377f32c3edd55c51e0c090fefb0406a7c28a3b9518199cbb58925fca52d73d9fb50705af502cfbfc335c83dc2e8091ded6e6da503759e372075a1506a405d56fa319ca6e9069048f448bcc46bf4fd757c4442411545c295ccadf4fd7383473150f78c72e456f9a33b0c26bc979f2a2aed187198c853dcf86899e78f6dd71cd85427d78f351cd68899326540e71d9cc0d3ff1c92dd730d323d1807ad1e9e7b30e3d58c28226eced77c846eb2736f51539c137ad187976a94d0", 0xf8}, {&(0x7f0000000a40)="76b024709d41e5694ca7ec0972fd72ee6996e8d5b5bef540a61cec8f18940531d66d9dc1a41b720269053af7fe4a9f52fa3ff879b56784be72ff6ff3e5f727048c33ccd73b688cc52df32ad77344c55b6227899dae3947cdebce49ed482c59e87991fb221a86c4ef7a86c16d6f0d460365a8ef53fd91ec0a85627e053e480fede0b7", 0x82}, {&(0x7f0000000d40)="bccd5833b0b9c5ba98cd6ba9d661ce9bb076ebf141d774ce69f1484d3727e98b324fc36061e766b08fb2e49995e290777c3f6061d4d1cef07c4743b84f66c9464bfe8c7d09caca083b52cb835200dd58cf3e0c906a9bc5473a92b7056fe90039027bda9c9951912ba7c8cac7f4197155c6a6225684e4a5d658d1c336f9c45030f0feb0e9188270f7d5558b20518fe7975658fdc20a6a3c406c3e9e9d2ad16bde9d442b299e6bc28e79185c136fbdccf66e6b8e9473c517a5bcb9cd717dcc6f9654b5cbb1ea111c53d14839a7c5c636c658c1375471414668076a2f629ae081f4060427353bddadb91a8ac103c2", 0xed}], 0x3, &(0x7f0000000e80)=[@ip_retopts={{0xc}}], 0xc}}, {{&(0x7f0000000f00)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000f40)="78502820b2fd1569636124b269a188c603c511ea09de64c3633c29e40e6ee58e199993046fa5ad25bb39eba56afa2f219e37d0a9da952737fa8e9fa0a282968dfc624b419b146f2c3cc3d1698211253d631c7fe214d354bee9cc366478abc10ede417bb444daf6d3c64b709540ea46aa4421caf542bf4b602fa08438c5e900d0c2b6c3c096e809ea9588", 0x8a}, {&(0x7f0000001000)="c91a1f248b9c5d77b5ad390ac0c1c89b3ac1cc001de03949130e855fdcb0044d8d5cc88312344f22dbc1f272f3b0bc2bd61e662706679cab37d9f10001606b6fcdf25c97e136d1dc13a69bc0d81c5b10050c24b2bbe0fb840e1535926cb043ac86e06869ea9581f9ff4b4b35d3ec7098933ea4f207c4dfadf1053ed0319f9de6a8429a5f4a1e189df941ceb8ca2a6afd672e05d0ce9019255baae815631a82b44d7b75f8b55eda3e015db295a53924a8e5d4cbbbefc9fc50a25fee2b14fff46648a5ed12e108219a6dd8a6250114015981c10f56e58c76b76a5e741079b4cdbad1a98419487dbb20827993", 0xeb}, {&(0x7f0000001100)="4e3285157049afe3586f5a1b5ecfec6d7aa73077944487ce697d4fb67a6762f874b3a194cb0a35a7f02fbfee55ffd1f687215d71163e41644841b34270203f5ea50a52b4910360c0ee69ac9cc4b5069e27ba91939a32e951af539b8d6955aa85a5c71cf30e050e61c47b89ea9a854d0bca58b012002d78bf2eaea6456948e881f6d2893ba9af70e0165972e044d9d778fd9e8434829d1fa5b5b43849174b3f0f8086bddca5cbf2de23d157026d90261e621eef6a3020", 0xb6}, {&(0x7f00000011c0)="c4b118b6cabd5f2a772a748e96ab446ddd3d0009b5790b7e9fec76f429ea0d081df5deaefd517d69d6a0d31e3d3a02ba1eb0d63b084ab37da2e248c4d567cf95541c2dc1b1395ec33b9f5fc21dac4dec60cda834cce93d204862a6b4a81a58bded969116ed6f8d0ffd3dbd74f68fc9697eec7bf23d38cc7b86d9def7e78917bcc3837ed82235356f33e26b4f57baf6a823378609bc90d49e8f51fdf8b3ce5602adb50dcb65393f6310ba615651f5a9e8985c8523f13309706fe13c1799a26cd87a28c3f45a4716a6041a7d121e0eb208", 0xd0}, {&(0x7f00000012c0)="a546f8edce842e52bebbe4bf03f11a6452388a93a3d4bdea5b8904bc51ec8d294919acaa7f4e791a738601c4", 0x2c}], 0x5, &(0x7f0000001340)=[@ip_retopts={{0x20, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xb5, [@loopback, @empty, @loopback, @broadcast]}]}}}], 0x20}}], 0x4, 0x24008054)

209.374844ms ago: executing program 4 (id=848):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b70700000000000063119f00000000000700000000000000950000000000000086b223c17fd5c6311e80752befb60f283890ff0a97195cba4872b282cd13a47f256c1748557c"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x100, 0x1)
mount(&(0x7f0000000040)=@sr0, 0x0, 0x0, 0x0, 0x0)
read$snddsp(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x14, 0x25, 0x1}, 0x14}}, 0x0)
r5 = fsopen(&(0x7f0000000180)='ufs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
fsmount(r5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0, 0x0, 0x9}, 0x18)
connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x109000)
r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, <r9=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x9, 0x0, [<r10=>0x0], [0xff, 0x0, 0x39a], [], [0x100000001]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r10, 0x0, <r11=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})

0s ago: executing program 3 (id=849):
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x40}}, 0x0)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4010, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}})
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
write$binfmt_misc(r3, &(0x7f0000000600)='A', 0x1) (fail_nth: 5)

kernel console output (not intermixed with test programs):

68][ T9049] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  146.416740][ T9049] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000280
[  146.419337][ T9049] RDX: 000000000000c0b0 RSI: 0000000000000000 RDI: 0000000000000000
[  146.422013][ T9049] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  146.424691][ T9049] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  146.427364][ T9049] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  146.430028][ T9049]  </TASK>
[  146.702324][    T8] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  146.825995][ T9058] FAULT_INJECTION: forcing a failure.
[  146.825995][ T9058] name failslab, interval 1, probability 0, space 0, times 0
[  146.829929][ T9058] CPU: 3 UID: 0 PID: 9058 Comm: syz.3.644 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0
[  146.833913][ T9058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  146.838190][ T9058] Call Trace:
[  146.839615][ T9058]  <TASK>
[  146.840887][ T9058]  dump_stack_lvl+0x16c/0x1f0
[  146.842899][ T9058]  should_fail_ex+0x497/0x5b0
[  146.844837][ T9058]  ? fs_reclaim_acquire+0xae/0x150
[  146.846926][ T9058]  should_failslab+0xc2/0x120
[  146.848367][ T9058]  __kmalloc_node_track_caller_noprof+0xcf/0x520
[  146.850281][ T9058]  ? ovl_mount_dir+0x26/0x1f0
[  146.852053][ T9058]  kstrdup+0x42/0xb0
[  146.853402][ T9058]  ovl_mount_dir+0x26/0x1f0
[  146.855169][ T9058]  ovl_parse_param+0xf33/0x13d0
[  146.856992][ T9058]  ? __pfx_ovl_parse_param+0x10/0x10
[  146.859023][ T9058]  ? trace_kmalloc+0x2d/0xd0
[  146.860749][ T9058]  ? static_key_count+0x5a/0x70
[  146.862531][ T9058]  ? __pfx_ovl_parse_param+0x10/0x10
[  146.864484][ T9058]  vfs_parse_fs_param+0x208/0x3c0
[  146.866422][ T9058]  vfs_parse_fs_string+0xea/0x150
[  146.867126][    T8] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  146.868102][ T9058]  ? __pfx_vfs_parse_fs_string+0x10/0x10
[  146.868119][ T9058]  ? ovl_next_opt+0x143/0x1c0
[  146.868130][ T9058]  ? __pfx_ovl_next_opt+0x10/0x10
[  146.868146][ T9058]  vfs_parse_monolithic_sep+0x171/0x1f0
[  146.868158][ T9058]  ? __pfx_vfs_parse_monolithic_sep+0x10/0x10
[  146.871905][    T8] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  146.873681][ T9058]  ? alloc_fs_context+0x59b/0x9c0
[  146.873701][ T9058]  path_mount+0x69a/0x1f00
[  146.873722][ T9058]  ? kmem_cache_free+0x152/0x4c0
[  146.873742][ T9058]  ? __pfx_path_mount+0x10/0x10
[  146.873764][ T9058]  ? putname+0x13c/0x180
[  146.873786][ T9058]  __ia32_sys_mount+0x292/0x310
[  146.873801][ T9058]  ? __pfx___ia32_sys_mount+0x10/0x10
[  146.873823][ T9058]  ? rcu_is_watching+0x12/0xc0
[  146.873844][ T9058]  __do_fast_syscall_32+0x73/0x120
[  146.873866][ T9058]  do_fast_syscall_32+0x32/0x80
[  146.873886][ T9058]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  146.873911][ T9058] RIP: 0023:0xf707e579
[  146.873919][ T9058] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  146.873935][ T9058] RSP: 002b:00000000f504f55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  146.873952][ T9058] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000200000c0
[  146.873962][ T9058] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000020000900
[  146.875868][    T8] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  146.877440][ T9058] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  146.877451][ T9058] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  146.877457][ T9058] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  146.877472][ T9058]  </TASK>
[  146.932501][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.946008][ T9051] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  147.003952][    T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  147.233544][ T9060] virtio-fs: tag <(null)> not found
[  147.654509][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.645'.
[  147.826745][ T9066] netlink: 'syz.3.646': attribute type 1 has an invalid length.
[  148.176802][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.390472][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  149.393307][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  149.399506][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  149.402079][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  149.405400][ T5945] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  149.408372][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  149.421250][ T9078] lo speed is unknown, defaulting to 1000
[  149.471493][   T30] usb 5-1: USB disconnect, device number 24
[  149.615516][ T9078] chnl_net:caif_netlink_parms(): no params data found
[  149.666278][ T9078] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.668445][ T9078] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.670494][ T9078] bridge_slave_0: entered allmulticast mode
[  149.673023][ T9078] bridge_slave_0: entered promiscuous mode
[  149.676317][ T9078] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.678426][ T9078] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.680584][ T9078] bridge_slave_1: entered allmulticast mode
[  149.683491][ T9078] bridge_slave_1: entered promiscuous mode
[  149.701442][ T9078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.705411][ T9078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.725861][ T9078] team0: Port device team_slave_0 added
[  149.729318][ T9078] team0: Port device team_slave_1 added
[  149.748879][ T9078] batman_adv: batadv0: Adding interface: batadv_slave_0
[  149.751408][ T9078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.761299][ T9078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  149.765884][ T9078] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.768400][ T9078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.779158][ T9078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  149.807109][ T9078] hsr_slave_0: entered promiscuous mode
[  149.809530][ T9078] hsr_slave_1: entered promiscuous mode
[  149.811833][ T9078] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  149.814258][ T9078] Cannot create hsr debugfs directory
[  149.832273][ T5994] usb 7-1: new low-speed USB device number 17 using dummy_hcd
[  149.872351][   T30] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  149.878292][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.956471][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.983979][ T5994] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  149.986823][ T5994] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  149.989360][ T5994] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  149.992506][ T5994] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  149.995057][ T5994] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.998345][ T9089] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  150.001008][ T5994] hub 7-1:1.0: bad descriptor, ignoring hub
[  150.003066][ T5994] hub 7-1:1.0: probe with driver hub failed with error -5
[  150.005217][ T5994] cdc_wdm 7-1:1.0: skipping garbage
[  150.006685][ T5994] cdc_wdm 7-1:1.0: skipping garbage
[  150.008927][ T5994] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  150.010645][ T5994] cdc_wdm 7-1:1.0: Unknown control protocol
[  150.022290][   T30] usb 5-1: Using ep0 maxpacket: 8
[  150.033327][   T30] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  150.033397][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.035644][   T30] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  150.035658][   T30] usb 5-1: config 179 has no interface number 0
[  150.035671][   T30] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  150.054144][   T30] usb 5-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23
[  150.057820][   T30] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  150.060345][   T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.112379][   T12] bridge_slave_1: left allmulticast mode
[  150.114189][   T12] bridge_slave_1: left promiscuous mode
[  150.116214][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.122809][   T12] bridge_slave_0: left allmulticast mode
[  150.124460][   T12] bridge_slave_0: left promiscuous mode
[  150.126157][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.217484][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.220870][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.224249][   T12] bond0 (unregistering): Released all slaves
[  150.269421][  T832] usb 5-1: USB disconnect, device number 25
[  150.392410][   T25] usb 7-1: USB disconnect, device number 17
[  150.629016][   T12] hsr_slave_0: left promiscuous mode
[  150.631097][   T12] hsr_slave_1: left promiscuous mode
[  150.633114][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.635199][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.637539][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.639739][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.646520][   T12] veth1_macvtap: left promiscuous mode
[  150.648282][   T12] veth0_macvtap: left promiscuous mode
[  150.649957][   T12] veth1_vlan: left promiscuous mode
[  150.651441][   T12] veth0_vlan: left promiscuous mode
[  150.720585][   T12] team0 (unregistering): Port device team_slave_1 removed
[  150.725499][   T12] team0 (unregistering): Port device team_slave_0 removed
[  150.770935][ T9078] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  150.780611][ T9078] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  150.785575][ T9078] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  150.789540][ T9078] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  150.807896][ T9078] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.814260][ T9078] 8021q: adding VLAN 0 to HW filter on device team0
[  150.817727][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.819730][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.824117][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.826109][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.884365][ T9078] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.896729][ T9078] veth0_vlan: entered promiscuous mode
[  150.900080][ T9078] veth1_vlan: entered promiscuous mode
[  150.908567][ T9078] veth0_macvtap: entered promiscuous mode
[  150.914799][ T9078] veth1_macvtap: entered promiscuous mode
[  150.921313][ T9078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.924229][ T9078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.926891][ T9078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.929668][ T9078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.940427][ T9078] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.945660][ T9078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.948582][ T9078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.951783][ T9078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.954913][ T9078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.958040][ T9078] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.961011][ T9078] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.965319][ T9078] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.966141][ T9151] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[  150.967776][ T9078] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.973266][ T9078] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.991801][ T9155] FAULT_INJECTION: forcing a failure.
[  150.991801][ T9155] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  150.997586][ T9155] CPU: 2 UID: 0 PID: 9155 Comm: syz.2.659 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0
[  151.000494][ T9155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  151.003715][ T9155] Call Trace:
[  151.004685][ T9155]  <TASK>
[  151.005545][ T9155]  dump_stack_lvl+0x16c/0x1f0
[  151.006908][ T9155]  should_fail_ex+0x497/0x5b0
[  151.008269][ T9155]  _copy_from_user+0x2e/0xd0
[  151.009628][ T9155]  kstrtouint_from_user+0xd7/0x1c0
[  151.011099][ T9155]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  151.012765][ T9155]  ? __mutex_trylock_common+0xea/0x250
[  151.014326][ T9155]  proc_fail_nth_write+0x84/0x250
[  151.015789][ T9155]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  151.017403][ T9155]  ? ksys_write+0x12b/0x250
[  151.018724][ T9155]  ? lock_acquire+0x2f/0xb0
[  151.020385][ T9155]  ? ksys_write+0x12b/0x250
[  151.021804][ T9155]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  151.023413][ T9155]  vfs_write+0x24c/0x1150
[  151.024634][ T9155]  ? __fget_files+0x1fc/0x3a0
[  151.026141][ T9155]  ? __pfx___mutex_lock+0x10/0x10
[  151.027609][ T9155]  ? __pfx_vfs_write+0x10/0x10
[  151.029108][ T9155]  ? __fget_files+0x206/0x3a0
[  151.030890][ T9155]  ksys_write+0x12b/0x250
[  151.032125][ T9155]  ? __pfx_ksys_write+0x10/0x10
[  151.033558][ T9155]  ? rcu_is_watching+0x12/0xc0
[  151.034945][ T9155]  __do_fast_syscall_32+0x73/0x120
[  151.036376][ T9155]  do_fast_syscall_32+0x32/0x80
[  151.037773][ T9155]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  151.039613][ T9155] RIP: 0023:0xf7f8f579
[  151.040777][ T9155] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  151.046257][ T9155] RSP: 002b:00000000f50e6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004
[  151.048633][ T9155] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f50e6620
[  151.050925][ T9155] RDX: 0000000000000001 RSI: 00000000f7423ff4 RDI: 0000000000000000
[  151.053178][ T9155] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  151.055442][ T9155] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  151.057685][ T9155] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  151.059962][ T9155]  </TASK>
[  151.063804][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.655'.
[  151.064900][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.075052][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.081578][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.084920][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.812588][ T9187] FAULT_INJECTION: forcing a failure.
[  151.812588][ T9187] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  151.817701][ T9187] CPU: 1 UID: 0 PID: 9187 Comm: syz.0.662 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0
[  151.821060][ T9187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  151.824291][ T9187] Call Trace:
[  151.825245][ T9187]  <TASK>
[  151.826091][ T9187]  dump_stack_lvl+0x16c/0x1f0
[  151.827455][ T9187]  should_fail_ex+0x497/0x5b0
[  151.828816][ T9187]  _copy_to_user+0x32/0xd0
[  151.830106][ T9187]  simple_read_from_buffer+0xd0/0x160
[  151.831677][ T9187]  proc_fail_nth_read+0x198/0x270
[  151.833219][ T9187]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  151.834999][ T9187]  ? bpf_lsm_file_permission+0x9/0x10
[  151.836580][ T9187]  ? security_file_permission+0x71/0x210
[  151.838268][ T9187]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  151.839953][ T9187]  vfs_read+0x1df/0xbe0
[  151.841221][ T9187]  ? __fget_files+0x1fc/0x3a0
[  151.842672][ T9187]  ? __pfx___mutex_lock+0x10/0x10
[  151.844252][ T9187]  ? __pfx_vfs_read+0x10/0x10
[  151.844267][ T9187]  ? __fget_files+0x206/0x3a0
[  151.844279][ T9187]  ksys_read+0x12b/0x250
[  151.844290][ T9187]  ? __pfx_ksys_read+0x10/0x10
[  151.844300][ T9187]  ? rcu_is_watching+0x12/0xc0
[  151.844313][ T9187]  __do_fast_syscall_32+0x73/0x120
[  151.844326][ T9187]  do_fast_syscall_32+0x32/0x80
[  151.844337][ T9187]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  151.844352][ T9187] RIP: 0023:0xf7f01579
[  151.844360][ T9187] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  151.844369][ T9187] RSP: 002b:00000000f5035590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  151.844379][ T9187] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f5035620
[  151.844385][ T9187] RDX: 000000000000000f RSI: 00000000f7393ff4 RDI: 0000000000000000
[  151.844391][ T9187] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  151.844397][ T9187] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  151.844402][ T9187] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  151.844410][ T9187]  </TASK>
[  152.087821][ T9199] fuse: Bad value for 'user_id'
[  152.089809][ T9199] fuse: Bad value for 'user_id'
[  152.129090][ T9200] vlan2: entered allmulticast mode
[  152.131903][ T9200] bond0: entered allmulticast mode
[  152.142311][   T35] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  152.145591][ T9200] bond0: left allmulticast mode
[  152.242365][   T30] libceph: connect (1)[c::]:6789 error -101
[  152.244190][   T30] libceph: mon0 (1)[c::]:6789 connect error
[  152.322718][   T35] usb 5-1: Using ep0 maxpacket: 16
[  152.325421][   T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.329106][   T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.332295][   T35] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  152.335909][   T35] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  152.338446][   T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.343534][   T35] usb 5-1: config 0 descriptor??
[  152.365866][ T9208] FAULT_INJECTION: forcing a failure.
[  152.365866][ T9208] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  152.369976][ T9208] CPU: 1 UID: 0 PID: 9208 Comm: syz.3.668 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0
[  152.373182][ T9208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  152.376595][ T9208] Call Trace:
[  152.377549][ T9208]  <TASK>
[  152.378395][ T9208]  dump_stack_lvl+0x16c/0x1f0
[  152.379812][ T9208]  should_fail_ex+0x497/0x5b0
[  152.381137][ T9208]  _copy_from_user+0x2e/0xd0
[  152.382395][ T9208]  get_compat_msghdr+0xa8/0x170
[  152.383840][ T9208]  ? __pfx_get_compat_msghdr+0x10/0x10
[  152.385306][ T9208]  ? __pfx_lock_release+0x10/0x10
[  152.386753][ T9208]  ? trace_lock_acquire+0x14e/0x1f0
[  152.388205][ T9208]  ___sys_recvmsg+0x193/0x1a0
[  152.389597][ T9208]  ? __pfx____sys_recvmsg+0x10/0x10
[  152.391077][ T9208]  ? lock_release+0x4e2/0x6f0
[  152.392409][ T9208]  ? __fget_files+0x1fc/0x3a0
[  152.393759][ T9208]  ? trace_lock_acquire+0x14e/0x1f0
[  152.395245][ T9208]  ? __fget_files+0x206/0x3a0
[  152.396587][ T9208]  ? __pfx___might_resched+0x10/0x10
[  152.398083][ T9208]  do_recvmmsg+0x55d/0x740
[  152.399402][ T9208]  ? __pfx_do_recvmmsg+0x10/0x10
[  152.400973][ T9208]  ? preempt_count_add+0x76/0x150
[  152.402966][ T9208]  ? vfs_write+0x306/0x1150
[  152.404796][ T9208]  ? __fget_files+0x206/0x3a0
[  152.406737][ T9208]  __sys_recvmmsg+0x21e/0x280
[  152.408089][ T9208]  ? __pfx___sys_recvmmsg+0x10/0x10
[  152.409598][ T9208]  ? __pfx_ksys_write+0x10/0x10
[  152.411057][ T9208]  __ia32_compat_sys_recvmmsg_time32+0xc4/0x160
[  152.412850][ T9208]  ? syscall_enter_from_user_mode_prepare+0x68/0xe0
[  152.414724][ T9208]  __do_fast_syscall_32+0x73/0x120
[  152.416185][ T9208]  do_fast_syscall_32+0x32/0x80
[  152.417627][ T9208]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  152.419490][ T9208] RIP: 0023:0xf707e579
[  152.420679][ T9208] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  152.427109][ T9208] RSP: 002b:00000000f504755c EFLAGS: 00000296 ORIG_RAX: 0000000000000151
[  152.430032][ T9208] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020002440
[  152.432548][ T9208] RDX: 00000000ffffff67 RSI: 0000000000000000 RDI: 0000000000000000
[  152.435406][ T9208] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  152.438141][ T9208] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  152.440669][ T9208] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  152.442913][ T9208]  </TASK>
[  152.502643][ T5994] libceph: connect (1)[c::]:6789 error -101
[  152.504428][ T5994] libceph: mon0 (1)[c::]:6789 connect error
[  152.750440][   T35] input: HID 0955:7214 Haptics as /devices/virtual/input/input24
[  152.755076][   T35] shield 0003:0955:7214.0004: Registered Thunderstrike controller
[  152.757530][   T35] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0
[  152.919461][ T9199] ceph: No mds server is up or the cluster is laggy
[  152.949493][ T9190] random: crng reseeded on system resumption
[  152.961687][ T2139] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  152.965053][ T2139] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  152.968359][ T2139] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  152.971652][ T5974] usb 5-1: USB disconnect, device number 26
[  152.974510][ T2139] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  152.981853][ T9212] syz.2.669 (9212): drop_caches: 2
[  153.186445][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'.
[  153.572462][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.911687][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  154.914531][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  154.916732][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  154.919499][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  154.922287][ T5945] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  154.924636][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  154.936207][ T9236] lo speed is unknown, defaulting to 1000
[  155.042139][ T9236] chnl_net:caif_netlink_parms(): no params data found
[  155.108532][ T9236] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.111412][ T9236] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.113836][ T9236] bridge_slave_0: entered allmulticast mode
[  155.116554][ T9236] bridge_slave_0: entered promiscuous mode
[  155.120070][ T9236] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.123110][ T9236] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.125890][ T9236] bridge_slave_1: entered allmulticast mode
[  155.128003][ T9236] bridge_slave_1: entered promiscuous mode
[  155.145901][ T9236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.150442][ T9236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.175772][ T9236] team0: Port device team_slave_0 added
[  155.178269][ T9236] team0: Port device team_slave_1 added
[  155.192273][ T9236] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.194311][ T9236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.201696][ T9236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.205834][ T9236] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.207871][ T9236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.215310][ T9236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.239673][ T9236] hsr_slave_0: entered promiscuous mode
[  155.243102][ T9236] hsr_slave_1: entered promiscuous mode
[  155.245833][ T9236] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  155.248790][ T9236] Cannot create hsr debugfs directory
[  155.556257][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.616946][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.657309][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.765641][   T11] bridge_slave_1: left allmulticast mode
[  155.773222][   T11] bridge_slave_1: left promiscuous mode
[  155.774990][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.778315][   T11] bridge_slave_0: left allmulticast mode
[  155.780063][   T11] bridge_slave_0: left promiscuous mode
[  155.781754][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.878911][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.880071][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.880710][   T11] bond0 (unregistering): Released all slaves
[  155.906419][ T9257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  156.307742][   T11] hsr_slave_0: left promiscuous mode
[  156.315075][   T11] hsr_slave_1: left promiscuous mode
[  156.318499][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.320734][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.329750][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.332246][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.337254][   T11] veth1_macvtap: left promiscuous mode
[  156.338836][   T11] veth0_macvtap: left promiscuous mode
[  156.340438][   T11] veth1_vlan: left promiscuous mode
[  156.341940][   T11] veth0_vlan: left promiscuous mode
[  156.462334][   T11] team0 (unregistering): Port device team_slave_1 removed
[  156.470761][   T11] team0 (unregistering): Port device team_slave_0 removed
[  156.532745][ T9236] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  156.537623][ T9236] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  156.541351][ T9236] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  156.544716][ T9236] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  156.586356][ T9236] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.595223][ T9236] 8021q: adding VLAN 0 to HW filter on device team0
[  156.599605][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.601692][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.607112][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.609133][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.659403][ T9236] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.671121][ T9236] veth0_vlan: entered promiscuous mode
[  156.697581][ T9236] veth1_vlan: entered promiscuous mode
[  156.710925][ T9308] vivid-007: disconnect
[  156.750736][ T9236] veth0_macvtap: entered promiscuous mode
[  156.753966][ T9236] veth1_macvtap: entered promiscuous mode
[  156.758279][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.761404][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.765534][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.768493][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.771728][ T9236] batman_adv: batadv0: Interface activated: batadv_slave_0
[  156.775637][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  156.778616][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.781343][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  156.784765][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.787986][ T9236] batman_adv: batadv0: Interface activated: batadv_slave_1
[  156.791693][ T9236] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.794300][ T9236] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.796789][ T9236] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.799278][ T9236] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.817764][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.820685][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.831954][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.835647][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.089501][ T9314] overlay: Unknown parameter '/'
[  157.545027][ T9306] vivid-007: reconnect
[  157.743640][ T9358] overlayfs: failed to resolve './file0': -2
[  157.749460][ T9358] rdma_rxe: rxe_newlink: failed to add lo
[  158.039340][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'.
[  158.751635][ T9376] FAULT_INJECTION: forcing a failure.
[  158.751635][ T9376] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  158.757471][ T9376] CPU: 2 UID: 0 PID: 9376 Comm: syz.0.685 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0
[  158.761102][ T9376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  158.764183][ T9376] Call Trace:
[  158.765146][ T9376]  <TASK>
[  158.765998][ T9376]  dump_stack_lvl+0x16c/0x1f0
[  158.767374][ T9376]  should_fail_ex+0x497/0x5b0
[  158.768762][ T9376]  ? fs_reclaim_acquire+0xae/0x150
[  158.770245][ T9376]  should_fail_alloc_page+0xe7/0x130
[  158.771759][ T9376]  prepare_alloc_pages.constprop.0+0x16f/0x560
[  158.774137][ T9376]  __alloc_pages_noprof+0x190/0x25b0
[  158.775682][ T9376]  ? lock_release+0x4e2/0x6f0
[  158.777036][ T9376]  ? __pfx_lock_release+0x10/0x10
[  158.778514][ T9376]  ? trace_lock_acquire+0x14e/0x1f0
[  158.780047][ T9376]  ? do_raw_spin_trylock+0xb1/0x180
[  158.781526][ T9376]  ? free_unref_page_commit+0x3f3/0xfe0
[  158.783110][ T9376]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  158.784746][ T9376]  ? _raw_spin_unlock+0x28/0x50
[  158.786142][ T9376]  ? free_unref_folios+0x1000/0x14f0
[  158.787847][ T9376]  ? trace_irq_enable.constprop.0+0xea/0x140
[  158.789948][ T9376]  ? rcu_is_watching+0x12/0xc0
[  158.791328][ T9376]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  158.793000][ T9376]  ? policy_nodemask+0xea/0x4e0
[  158.794404][ T9376]  alloc_pages_mpol_noprof+0x2c9/0x610
[  158.795963][ T9376]  ? __pfx_alloc_pages_mpol_noprof+0x10/0x10
[  158.797664][ T9376]  folio_alloc_mpol_noprof+0x36/0xd0
[  158.799472][ T9376]  vma_alloc_folio_noprof+0xee/0x1b0
[  158.801200][ T9376]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  158.803586][ T9376]  ? trace_lock_acquire+0x14e/0x1f0
[  158.805482][ T9376]  ? rcu_is_watching+0x12/0xc0
[  158.806867][ T9376]  do_pte_missing+0x2017/0x3e00
[  158.808270][ T9376]  __handle_mm_fault+0x103c/0x2a40
[  158.809777][ T9376]  ? __pfx___handle_mm_fault+0x10/0x10
[  158.811347][ T9376]  ? lock_release+0x4e2/0x6f0
[  158.812695][ T9376]  ? follow_page_pte+0x3c3/0x1b20
[  158.814132][ T9376]  ? __pfx_lock_release+0x10/0x10
[  158.815581][ T9376]  ? __pfx___pte_offset_map_lock+0x10/0x10
[  158.817236][ T9376]  ? lock_release+0x4e2/0x6f0
[  158.818641][ T9376]  ? follow_page_pte+0x3f7/0x1b20
[  158.820109][ T9376]  handle_mm_fault+0x3fa/0xaa0
[  158.821473][ T9376]  __get_user_pages+0x8d9/0x3b50
[  158.822899][ T9376]  ? __pfx___get_user_pages+0x10/0x10
[  158.824445][ T9376]  ? down_read_killable+0xcc/0x380
[  158.825908][ T9376]  ? __pfx_down_read_killable+0x10/0x10
[  158.827744][ T9376]  ? stack_depot_save_flags+0x36d/0x9e0
[  158.829852][ T9376]  ? __pfx_lock_release+0x10/0x10
[  158.831877][ T9376]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  158.833993][ T9376]  __gup_longterm_locked+0x211/0x1870
[  158.836079][ T9376]  ? rcu_is_watching+0x12/0xc0
[  158.837935][ T9376]  ? __pfx___gup_longterm_locked+0x10/0x10
[  158.840287][ T9376]  ? gup_fast_fallback+0x84c/0x2690
[  158.842357][ T9376]  ? __pfx_lock_release+0x10/0x10
[  158.844364][ T9376]  ? lock_acquire+0x2f/0xb0
[  158.845750][ T9376]  ? ___pte_offset_map+0x42/0x540
[  158.847205][ T9376]  ? sanity_check_pinned_pages+0x23/0x11e0
[  158.848891][ T9376]  ? rcu_is_watching+0x12/0xc0
[  158.850294][ T9376]  gup_fast_fallback+0x1802/0x2690
[  158.851767][ T9376]  ? __pfx_gup_fast_fallback+0x10/0x10
[  158.853323][ T9376]  pin_user_pages_fast+0xa8/0x100
[  158.854772][ T9376]  ? __pfx_pin_user_pages_fast+0x10/0x10
[  158.856380][ T9376]  ? __kmalloc_noprof+0x23b/0x4f0
[  158.858000][ T9376]  ? rds_info_getsockopt+0x376/0x4f0
[  158.859673][ T9376]  rds_info_getsockopt+0x39a/0x4f0
[  158.861148][ T9376]  ? __might_fault+0x13b/0x190
[  158.862521][ T9376]  ? __pfx_rds_info_getsockopt+0x10/0x10
[  158.864117][ T9376]  ? trace_lock_acquire+0x14e/0x1f0
[  158.865592][ T9376]  ? __might_fault+0xe3/0x190
[  158.866945][ T9376]  ? lock_acquire+0x2f/0xb0
[  158.868246][ T9376]  ? __might_fault+0xe3/0x190
[  158.869651][ T9376]  ? __might_fault+0xe3/0x190
[  158.871007][ T9376]  rds_getsockopt+0x173/0x2d0
[  158.872359][ T9376]  ? __pfx_rds_getsockopt+0x10/0x10
[  158.873864][ T9376]  do_sock_getsockopt+0x3fe/0x870
[  158.875312][ T9376]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  158.876886][ T9376]  ? lock_acquire+0x2f/0xb0
[  158.878191][ T9376]  ? __fget_files+0x40/0x3a0
[  158.879680][ T9376]  ? __fget_files+0x206/0x3a0
[  158.881026][ T9376]  __sys_getsockopt+0x12f/0x260
[  158.882423][ T9376]  __ia32_sys_getsockopt+0xbc/0x160
[  158.883924][ T9376]  ? syscall_enter_from_user_mode_prepare+0x68/0xe0
[  158.885794][ T9376]  __do_fast_syscall_32+0x73/0x120
[  158.887287][ T9376]  do_fast_syscall_32+0x32/0x80
[  158.888713][ T9376]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  158.890543][ T9376] RIP: 0023:0xf7f01579
[  158.891676][ T9376] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  158.897105][ T9376] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 000000000000016d
[  158.899510][ T9376] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000114
[  158.901720][ T9376] RDX: 0000000000002720 RSI: 0000000020019580 RDI: 0000000020000000
[  158.903965][ T9376] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  158.906206][ T9376] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  158.908463][ T9376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  158.910728][ T9376]  </TASK>
[  158.996212][ T9380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  159.220868][ T9387] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  159.333933][ T9390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  159.598623][ T1146] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.872289][ T5932] Bluetooth: hci2: command 0x0406 tx timeout
[  161.061292][ T5932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  161.072636][ T5932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  161.075135][ T5932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  161.078207][ T5932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  161.080989][ T5932] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  161.085162][ T5932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  161.097049][ T9414] lo speed is unknown, defaulting to 1000
[  161.152568][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.693'.
[  161.330596][ T9414] chnl_net:caif_netlink_parms(): no params data found
[  161.349880][ T1146] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.433498][ T1146] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.459406][ T9414] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.462005][ T9414] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.465048][ T9414] bridge_slave_0: entered allmulticast mode
[  161.467845][ T9414] bridge_slave_0: entered promiscuous mode
[  161.472036][ T9414] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.474267][ T9414] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.476473][ T9414] bridge_slave_1: entered allmulticast mode
[  161.479463][ T9414] bridge_slave_1: entered promiscuous mode
[  161.522750][ T1146] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.529905][ T9414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.536288][ T9414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.584676][ T9414] team0: Port device team_slave_0 added
[  161.587161][ T9414] team0: Port device team_slave_1 added
[  161.602631][ T9414] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.604800][ T9414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.612693][ T9414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.618428][ T9414] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.621144][ T9414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.634657][ T9414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.710377][ T9414] hsr_slave_0: entered promiscuous mode
[  161.713981][ T9414] hsr_slave_1: entered promiscuous mode
[  161.716297][ T9414] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  161.718700][ T9414] Cannot create hsr debugfs directory
[  161.731588][ T1146] bridge_slave_1: left allmulticast mode
[  161.733405][ T1146] bridge_slave_1: left promiscuous mode
[  161.735072][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.737989][ T1146] bridge_slave_0: left allmulticast mode
[  161.739978][ T1146] bridge_slave_0: left promiscuous mode
[  161.741784][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.855496][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  161.858950][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  161.862157][ T1146] bond0 (unregistering): Released all slaves
[  162.027490][ T9439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  162.338955][ T1146] hsr_slave_0: left promiscuous mode
[  162.341539][ T1146] hsr_slave_1: left promiscuous mode
[  162.344084][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.346758][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.349348][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.351712][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.355682][ T1146] veth1_macvtap: left promiscuous mode
[  162.357466][ T1146] veth0_macvtap: left promiscuous mode
[  162.359278][ T1146] veth1_vlan: left promiscuous mode
[  162.360921][ T1146] veth0_vlan: left promiscuous mode
[  162.478254][ T1146] team0 (unregistering): Port device team_slave_1 removed
[  162.484484][ T1146] team0 (unregistering): Port device team_slave_0 removed
[  162.561482][ T9414] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  162.561597][ T9463] netlink: 'syz.0.703': attribute type 1 has an invalid length.
[  162.565804][ T9463] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.703'.
[  162.572623][ T9414] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  162.578537][ T9414] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  162.583751][ T9414] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  162.597786][ T9466] netlink: 'syz.0.704': attribute type 1 has an invalid length.
[  162.629858][ T9414] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.635502][ T9414] 8021q: adding VLAN 0 to HW filter on device team0
[  162.638984][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.641086][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.650463][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.652522][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.707466][ T9482] overlayfs: failed to resolve './file0': -2
[  162.710228][ T9482] rdma_rxe: rxe_newlink: failed to add lo
[  162.713738][ T9414] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.726979][ T9414] veth0_vlan: entered promiscuous mode
[  162.730232][ T9414] veth1_vlan: entered promiscuous mode
[  162.740394][ T9414] veth0_macvtap: entered promiscuous mode
[  162.744415][ T9414] veth1_macvtap: entered promiscuous mode
[  162.749281][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.753155][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.756011][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.759283][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.764174][ T9414] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.768004][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.771175][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.774402][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.777426][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.777829][ T9414] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.784292][ T9414] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.786833][ T9414] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.789385][ T9414] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.791852][ T9414] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.808888][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.811235][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.818837][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.821848][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.277618][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.709'.
[  163.748086][ T9543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  163.993882][ T9560] nbd: couldn't find device at index 2
[  164.082927][ T9560] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.165110][ T9584] infiniband s
z1: set active
[  164.167014][ T9584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  164.184504][ T9584] infiniband s
z1: set active
[  164.193469][ T2139] lo speed is unknown, defaulting to 1000
[  164.218739][ T2139] lo speed is unknown, defaulting to 1000
[  164.909736][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.725'.
[  165.081992][ T9605] FAULT_INJECTION: forcing a failure.
[  165.081992][ T9605] name failslab, interval 1, probability 0, space 0, times 0
[  165.085694][ T9605] CPU: 1 UID: 0 PID: 9605 Comm: syz.0.726 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0
[  165.088748][ T9605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  165.091837][ T9605] Call Trace:
[  165.092952][ T9605]  <TASK>
[  165.093954][ T9605]  dump_stack_lvl+0x16c/0x1f0
[  165.095564][ T9605]  should_fail_ex+0x497/0x5b0
[  165.097153][ T9605]  ? fs_reclaim_acquire+0xae/0x150
[  165.098894][ T9605]  should_failslab+0xc2/0x120
[  165.100500][ T9605]  __kmalloc_noprof+0xce/0x4f0
[  165.102147][ T9605]  ? d_absolute_path+0x137/0x1b0
[  165.103844][ T9605]  ? tomoyo_encode2+0x100/0x3e0
[  165.105494][ T9605]  tomoyo_encode2+0x100/0x3e0
[  165.107201][ T9605]  tomoyo_realpath_from_path+0x1a7/0x710
[  165.109161][ T9605]  tomoyo_path_number_perm+0x248/0x5b0
[  165.111040][ T9605]  ? tomoyo_path_number_perm+0x235/0x5b0
[  165.112960][ T9605]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  165.115160][ T9605]  ? rcu_is_watching+0x12/0xc0
[  165.116858][ T9605]  ? preempt_count_add+0x76/0x150
[  165.118602][ T9605]  ? __pfx_lock_release+0x10/0x10
[  165.120318][ T9605]  ? trace_lock_acquire+0x14e/0x1f0
[  165.122083][ T9605]  ? __fget_files+0x40/0x3a0
[  165.123682][ T9605]  ? lock_acquire+0x2f/0xb0
[  165.125228][ T9605]  ? __fget_files+0x40/0x3a0
[  165.126848][ T9605]  ? __fget_files+0x206/0x3a0
[  165.128452][ T9605]  security_file_ioctl_compat+0x9b/0x240
[  165.130378][ T9605]  __do_compat_sys_ioctl+0x4e/0x2c0
[  165.132161][ T9605]  __do_fast_syscall_32+0x73/0x120
[  165.133910][ T9605]  do_fast_syscall_32+0x32/0x80
[  165.135587][ T9605]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  165.137716][ T9605] RIP: 0023:0xf7f01579
[  165.139116][ T9605] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  165.145563][ T9605] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  165.148393][ T9605] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 000000000000541c
[  165.151105][ T9605] RDX: 0000000020001900 RSI: 0000000000000000 RDI: 0000000000000000
[  165.153766][ T9605] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  165.156427][ T9605] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  165.159083][ T9605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  165.161785][ T9605]  </TASK>
[  165.163176][ T9605] ERROR: Out of memory at tomoyo_realpath_from_path.
[  165.237726][ T9609] netlink: 52 bytes leftover after parsing attributes in process `syz.0.727'.
[  165.531709][ T9615] netlink: 'syz.0.728': attribute type 4 has an invalid length.
[  165.536467][ T9615] netlink: 'syz.0.728': attribute type 4 has an invalid length.
[  165.841304][ T1134] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.152402][ T5932] Bluetooth: hci2: command 0x0406 tx timeout
[  167.345917][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  167.348973][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  167.352670][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  167.355283][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  167.357882][ T5945] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  167.359972][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  167.374340][ T9634] lo speed is unknown, defaulting to 1000
[  167.461590][ T9650] xfrm0: entered allmulticast mode
[  167.504522][ T9653] SET target dimension over the limit!
[  167.531377][ T9634] chnl_net:caif_netlink_parms(): no params data found
[  167.592342][   T30] usb 7-1: new low-speed USB device number 18 using dummy_hcd
[  167.690196][ T1134] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.698608][ T9634] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.701088][ T9634] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.706572][ T9634] bridge_slave_0: entered allmulticast mode
[  167.712909][ T9634] bridge_slave_0: entered promiscuous mode
[  167.715394][ T9634] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.717426][ T9634] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.722720][ T9634] bridge_slave_1: entered allmulticast mode
[  167.724831][ T9634] bridge_slave_1: entered promiscuous mode
[  167.763633][ T1134] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.770849][   T30] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  167.773889][   T30] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  167.777320][ T9634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  167.780759][   T30] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  167.784722][   T30] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  167.787171][ T9634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  167.788137][   T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.795472][ T9638] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  167.800700][   T30] hub 7-1:1.0: bad descriptor, ignoring hub
[  167.805904][   T30] hub 7-1:1.0: probe with driver hub failed with error -5
[  167.811640][   T30] cdc_wdm 7-1:1.0: skipping garbage
[  167.815643][   T30] cdc_wdm 7-1:1.0: skipping garbage
[  167.818123][   T30] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  167.820333][   T30] cdc_wdm 7-1:1.0: Unknown control protocol
[  167.856785][ T1134] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.867302][ T9634] team0: Port device team_slave_0 added
[  167.870509][ T9634] team0: Port device team_slave_1 added
[  167.912973][ T9634] batman_adv: batadv0: Adding interface: batadv_slave_0
[  167.915095][ T9634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.923061][ T9634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  167.928894][ T9634] batman_adv: batadv0: Adding interface: batadv_slave_1
[  167.931050][ T9634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.939807][ T9634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  168.013250][ T1134] bridge_slave_1: left allmulticast mode
[  168.014972][ T1134] bridge_slave_1: left promiscuous mode
[  168.016664][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.022421][ T1134] bridge_slave_0: left allmulticast mode
[  168.025493][ T1134] bridge_slave_0: left promiscuous mode
[  168.027380][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.123158][ T6061] usb 7-1: USB disconnect, device number 18
[  168.165057][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  168.168601][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  168.172640][ T1134] bond0 (unregistering): Released all slaves
[  168.176690][ T9634] hsr_slave_0: entered promiscuous mode
[  168.178755][ T9634] hsr_slave_1: entered promiscuous mode
[  168.180646][ T9634] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  168.182972][ T9634] Cannot create hsr debugfs directory
[  168.468840][ T1134] hsr_slave_0: left promiscuous mode
[  168.470771][ T1134] hsr_slave_1: left promiscuous mode
[  168.473578][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  168.475860][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0
[  168.478266][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  168.480498][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1
[  168.484525][ T1134] veth1_macvtap: left promiscuous mode
[  168.486632][ T1134] veth0_macvtap: left promiscuous mode
[  168.488720][ T1134] veth1_vlan: left promiscuous mode
[  168.490731][ T1134] veth0_vlan: left promiscuous mode
[  168.596366][ T1134] team0 (unregistering): Port device team_slave_1 removed
[  168.606159][ T1134] team0 (unregistering): Port device team_slave_0 removed
[  169.010014][ T9691] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.112645][ T9691] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.216576][ T9691] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.392327][ T5932] Bluetooth: hci1: command tx timeout
[  169.395815][ T9691] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.543612][ T9729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.741'.
[  169.558426][ T9691] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.562941][ T9691] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.566802][ T9691] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.571007][ T9691] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.670664][ T9634] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  169.676214][ T9634] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  169.679173][ T9634] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  169.681988][ T9634] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  169.703022][ T9634] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.708464][ T9634] 8021q: adding VLAN 0 to HW filter on device team0
[  169.712860][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.715004][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.720542][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.723393][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.799376][ T9634] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.816905][ T9634] veth0_vlan: entered promiscuous mode
[  169.820263][ T9634] veth1_vlan: entered promiscuous mode
[  169.828223][ T9634] veth0_macvtap: entered promiscuous mode
[  169.831142][ T9634] veth1_macvtap: entered promiscuous mode
[  169.836696][ T9634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.839680][ T9634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.843468][ T9634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.846496][ T9634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.849653][ T9634] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.853943][ T9634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.856990][ T9634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.859764][ T9634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.863637][ T9634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.872796][ T9634] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.883507][ T9634] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.886013][ T9634] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.888467][ T9634] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.890947][ T9634] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.919676][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.921949][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.931921][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.935100][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.763662][ T9758] sg_write: data in/out 21724/154 bytes for SCSI command 0x0-- guessing data in;
[  170.763662][ T9758]    program syz.0.746 not setting count and/or reply_len properly
[  171.082281][   T30] usb 5-1: new low-speed USB device number 27 using dummy_hcd
[  171.243900][   T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  171.246827][   T30] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  171.249809][   T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  171.253793][   T30] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  171.256639][   T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.260091][ T9761] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  171.262779][   T30] hub 5-1:1.0: bad descriptor, ignoring hub
[  171.264492][   T30] hub 5-1:1.0: probe with driver hub failed with error -5
[  171.266698][   T30] cdc_wdm 5-1:1.0: skipping garbage
[  171.268203][   T30] cdc_wdm 5-1:1.0: skipping garbage
[  171.270843][   T30] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  171.272851][   T30] cdc_wdm 5-1:1.0: Unknown control protocol
[  171.480128][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'.
[  171.652334][ T5994] usb 5-1: USB disconnect, device number 27
[  171.870662][ T9773] input: syz1 as /devices/virtual/input/input25
[  172.605163][ T1134] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.206989][ T9786] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  174.208885][ T9786] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  174.211304][ T9786] vhci_hcd vhci_hcd.0: Device attached
[  174.226207][ T9788] vhci_hcd: connection closed
[  174.226380][   T45] vhci_hcd: stop threads
[  174.229054][   T45] vhci_hcd: release socket
[  174.230922][   T45] vhci_hcd: disconnect device
[  174.423897][ T1134] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.425112][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  174.440173][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  174.445314][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  174.449858][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  174.455560][ T5945] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  174.459300][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  174.515103][ T9801] lo speed is unknown, defaulting to 1000
[  174.572790][ T1134] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.647824][ T1134] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.819132][ T1134] bridge_slave_1: left allmulticast mode
[  174.860299][ T1134] bridge_slave_1: left promiscuous mode
[  174.874104][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.925810][ T1134] bridge_slave_0: left allmulticast mode
[  174.927662][ T1134] bridge_slave_0: left promiscuous mode
[  174.941376][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.247365][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  175.253793][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  175.257782][ T1134] bond0 (unregistering): Released all slaves
[  175.341291][ T9814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  175.348037][ T9801] chnl_net:caif_netlink_parms(): no params data found
[  175.481008][ T9801] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.484561][ T9801] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.488975][ T9801] bridge_slave_0: entered allmulticast mode
[  175.491195][ T9801] bridge_slave_0: entered promiscuous mode
[  175.499067][ T9801] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.503125][ T9801] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.505546][ T9801] bridge_slave_1: entered allmulticast mode
[  175.507904][ T9801] bridge_slave_1: entered promiscuous mode
[  175.544787][ T9801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  175.563001][ T9801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.630478][ T9801] team0: Port device team_slave_0 added
[  175.635125][ T1134] hsr_slave_0: left promiscuous mode
[  175.638565][ T1134] hsr_slave_1: left promiscuous mode
[  175.641270][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.644560][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.647817][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.650496][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.664032][ T1134] veth1_macvtap: left promiscuous mode
[  175.665886][ T1134] veth0_macvtap: left promiscuous mode
[  175.668183][ T1134] veth1_vlan: left promiscuous mode
[  175.670512][ T1134] veth0_vlan: left promiscuous mode
[  175.753184][ T5974] usb 7-1: new low-speed USB device number 19 using dummy_hcd
[  175.768221][ T1134] team0 (unregistering): Port device team_slave_1 removed
[  175.779868][ T1134] team0 (unregistering): Port device team_slave_0 removed
[  175.834213][ T9801] team0: Port device team_slave_1 added
[  175.859622][ T9801] batman_adv: batadv0: Adding interface: batadv_slave_0
[  175.861641][ T9801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.869040][ T9801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  175.872647][ T9801] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.874647][ T9801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.882009][ T9801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.899904][ T9801] hsr_slave_0: entered promiscuous mode
[  175.902062][ T9801] hsr_slave_1: entered promiscuous mode
[  175.907041][ T9801] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  175.910014][ T9801] Cannot create hsr debugfs directory
[  175.917011][ T5974] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.919787][ T5974] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  175.922745][ T5974] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  175.925698][ T5974] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  175.928133][ T5974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.933326][ T9836] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  175.941535][ T5974] hub 7-1:1.0: bad descriptor, ignoring hub
[  175.945676][ T5974] hub 7-1:1.0: probe with driver hub failed with error -5
[  175.947833][ T5974] cdc_wdm 7-1:1.0: skipping garbage
[  175.949349][ T5974] cdc_wdm 7-1:1.0: skipping garbage
[  175.951366][ T5974] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  175.954453][ T5974] cdc_wdm 7-1:1.0: Unknown control protocol
[  176.044536][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.760'.
[  176.332563][ T6061] usb 7-1: USB disconnect, device number 19
[  176.421519][ T9801] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  176.426671][ T9801] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  176.430973][ T9801] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  176.434326][ T9801] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  176.468962][ T9801] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.483679][ T9801] 8021q: adding VLAN 0 to HW filter on device team0
[  176.487902][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.490653][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.496108][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.498196][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.512352][ T5932] Bluetooth: hci1: command tx timeout
[  176.580113][ T9801] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.595839][ T9801] veth0_vlan: entered promiscuous mode
[  176.599362][ T9801] veth1_vlan: entered promiscuous mode
[  176.614687][ T9801] veth0_macvtap: entered promiscuous mode
[  176.619723][ T9801] veth1_macvtap: entered promiscuous mode
[  176.628327][ T9801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.631560][ T9801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.635505][ T9801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.639580][ T9801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.644991][ T9801] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.651480][ T9801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.654970][ T9801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.657794][ T9801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.660827][ T9801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.664422][ T9801] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.670020][ T9801] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.672905][ T9801] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.675453][ T9801] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.677951][ T9801] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.706813][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.713610][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.723435][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.726555][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.809301][ T9914] 9pnet_virtio: no channels available for device syz
[  176.864825][ T9919] 9pnet_virtio: no channels available for device syz
[  179.147920][   T45] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.891295][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  180.893429][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  180.895490][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  180.897644][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  180.900010][ T5945] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  180.903220][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  180.921489][   T45] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.930929][ T9962] lo speed is unknown, defaulting to 1000
[  181.009565][   T45] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.022104][ T9972] overlayfs: failed to resolve './file0': -2
[  181.049881][ T9972] s
z1: rxe_newlink: already configured on lo
[  181.056279][   T45] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.069029][ T9962] chnl_net:caif_netlink_parms(): no params data found
[  181.189769][ T9962] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.191820][ T9962] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.194114][ T9962] bridge_slave_0: entered allmulticast mode
[  181.196518][ T9962] bridge_slave_0: entered promiscuous mode
[  181.199379][ T9962] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.210882][ T9962] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.213169][ T9962] bridge_slave_1: entered allmulticast mode
[  181.215152][ T9962] bridge_slave_1: entered promiscuous mode
[  181.239928][ T9962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.252370][ T9962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.273477][   T45] bridge_slave_1: left allmulticast mode
[  181.275698][   T45] bridge_slave_1: left promiscuous mode
[  181.277952][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.281739][   T45] bridge_slave_0: left allmulticast mode
[  181.284473][   T45] bridge_slave_0: left promiscuous mode
[  181.286754][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.394881][   T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  181.403690][   T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  181.408867][   T45] bond0 (unregistering): Released all slaves
[  181.425675][ T9962] team0: Port device team_slave_0 added
[  181.428666][ T9962] team0: Port device team_slave_1 added
[  181.449174][ T9962] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.451100][ T9962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.459319][ T9962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.465141][ T9962] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.467249][ T9962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.475177][ T9962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  181.503497][ T9962] hsr_slave_0: entered promiscuous mode
[  181.505857][ T9962] hsr_slave_1: entered promiscuous mode
[  181.507804][ T9962] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  181.509937][ T9962] Cannot create hsr debugfs directory
[  181.770734][   T45] hsr_slave_0: left promiscuous mode
[  181.772767][   T45] hsr_slave_1: left promiscuous mode
[  181.775265][   T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.777342][   T45] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.779532][   T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.781534][   T45] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.786413][   T45] veth1_macvtap: left promiscuous mode
[  181.787987][   T45] veth0_macvtap: left promiscuous mode
[  181.789555][   T45] veth1_vlan: left promiscuous mode
[  181.791131][   T45] veth0_vlan: left promiscuous mode
[  181.881457][   T45] team0 (unregistering): Port device team_slave_1 removed
[  181.890485][   T45] team0 (unregistering): Port device team_slave_0 removed
[  182.195532][ T9962] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  182.204360][ T9962] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  182.218966][ T9962] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  182.227515][ T9962] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  182.253132][ T9962] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.258531][ T9962] 8021q: adding VLAN 0 to HW filter on device team0
[  182.261820][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.263857][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.269465][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.271429][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.284054][ T9962] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  182.287007][ T9962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  182.347321][ T9962] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.370699][ T9962] veth0_vlan: entered promiscuous mode
[  182.381538][ T9962] veth1_vlan: entered promiscuous mode
[  182.399279][ T9962] veth0_macvtap: entered promiscuous mode
[  182.401790][ T9962] veth1_macvtap: entered promiscuous mode
[  182.407384][ T9962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.410224][ T9962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.412899][ T9962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.415797][ T9962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.418784][ T9962] batman_adv: batadv0: Interface activated: batadv_slave_0
[  182.422285][ T9962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.425154][ T9962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.427807][ T9962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.430651][ T9962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.433852][ T9962] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.437099][ T9962] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.439509][ T9962] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.441833][ T9962] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.445454][ T9962] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.464775][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.467129][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.476868][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.479157][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.665562][ T1134] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.862990][T10091] overlayfs: failed to resolve './file0': -2
[  184.882366][T10091] rdma_rxe: rxe_newlink: failed to add lo
[  186.405340][ T1134] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.467423][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  186.469614][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  186.471653][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  186.475027][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  186.477557][ T5945] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  186.479927][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  186.488375][T10099] lo speed is unknown, defaulting to 1000
[  186.509455][ T1134] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.564517][ T1134] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.613224][T10099] chnl_net:caif_netlink_parms(): no params data found
[  186.666412][ T1134] bridge_slave_1: left allmulticast mode
[  186.668066][ T1134] bridge_slave_1: left promiscuous mode
[  186.669737][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.672650][ T1134] bridge_slave_0: left allmulticast mode
[  186.674373][ T1134] bridge_slave_0: left promiscuous mode
[  186.676069][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.775321][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  186.779680][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  186.783388][ T1134] bond0 (unregistering): Released all slaves
[  186.801091][T10099] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.805028][T10099] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.807196][T10099] bridge_slave_0: entered allmulticast mode
[  186.809340][T10099] bridge_slave_0: entered promiscuous mode
[  186.811725][T10099] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.813804][T10099] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.815979][T10099] bridge_slave_1: entered allmulticast mode
[  186.817914][T10099] bridge_slave_1: entered promiscuous mode
[  186.835565][T10099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.838867][T10099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.861428][T10099] team0: Port device team_slave_0 added
[  186.865209][T10099] team0: Port device team_slave_1 added
[  186.883640][T10099] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.885674][T10099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.894311][T10099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.897686][T10099] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.899603][T10099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.907210][T10099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.939212][T10099] hsr_slave_0: entered promiscuous mode
[  186.941221][T10099] hsr_slave_1: entered promiscuous mode
[  186.943985][T10099] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  186.946158][T10099] Cannot create hsr debugfs directory
[  187.097710][ T1134] hsr_slave_0: left promiscuous mode
[  187.100285][ T1134] hsr_slave_1: left promiscuous mode
[  187.102656][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.104858][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.107626][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.109708][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.113547][ T1134] veth1_macvtap: left promiscuous mode
[  187.115140][ T1134] veth0_macvtap: left promiscuous mode
[  187.116684][ T1134] veth1_vlan: left promiscuous mode
[  187.118184][ T1134] veth0_vlan: left promiscuous mode
[  187.186613][ T1134] team0 (unregistering): Port device team_slave_1 removed
[  187.191359][ T1134] team0 (unregistering): Port device team_slave_0 removed
[  187.281110][ T5932] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  187.284673][ T5932] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  187.286751][ T5932] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  187.288952][ T5932] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  187.291095][ T5932] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  187.293191][ T5932] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  187.309102][T10148] lo speed is unknown, defaulting to 1000
[  187.360412][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.785'.
[  187.427535][T10148] chnl_net:caif_netlink_parms(): no params data found
[  187.520599][T10148] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.523022][T10148] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.525032][T10148] bridge_slave_0: entered allmulticast mode
[  187.526997][T10148] bridge_slave_0: entered promiscuous mode
[  187.529237][T10148] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.531177][T10148] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.533484][T10148] bridge_slave_1: entered allmulticast mode
[  187.535459][T10148] bridge_slave_1: entered promiscuous mode
[  187.576341][T10148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.581584][T10148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.596447][T10148] team0: Port device team_slave_0 added
[  187.598777][T10148] team0: Port device team_slave_1 added
[  187.621873][T10148] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.624445][T10148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.631630][T10148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.637140][T10148] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.639167][T10148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.646332][T10148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.666095][T10148] hsr_slave_0: entered promiscuous mode
[  187.668324][T10148] hsr_slave_1: entered promiscuous mode
[  187.670495][T10148] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  187.672792][T10148] Cannot create hsr debugfs directory
[  187.721002][T10099] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  187.724144][T10099] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  187.727265][T10099] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  187.735965][T10099] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  187.741268][T10148] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  187.744294][T10148] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  187.747268][T10148] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  187.750112][T10148] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  187.766954][T10148] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.768952][T10148] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.771052][T10148] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.773079][T10148] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.798278][T10148] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.802825][T10099] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.809428][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.811798][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.819268][T10148] 8021q: adding VLAN 0 to HW filter on device team0
[  187.823546][T10099] 8021q: adding VLAN 0 to HW filter on device team0
[  187.827071][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.829470][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.843266][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.845235][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.847872][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.849849][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.852569][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.854585][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.900880][T10099] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.915131][T10099] veth0_vlan: entered promiscuous mode
[  187.920245][T10148] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.923559][T10099] veth1_vlan: entered promiscuous mode
[  187.934276][T10099] veth0_macvtap: entered promiscuous mode
[  187.938148][T10099] veth1_macvtap: entered promiscuous mode
[  187.943069][T10099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.946023][T10099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.948847][T10099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.951773][T10099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.956668][T10099] batman_adv: batadv0: Interface activated: batadv_slave_0
[  187.960493][T10099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.963413][T10099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.966083][T10099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.968994][T10099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.972122][T10099] batman_adv: batadv0: Interface activated: batadv_slave_1
[  187.979096][T10099] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.982751][T10099] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.985655][T10099] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.988627][T10099] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.009281][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.012101][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.021461][   T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.024181][   T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.039434][T10148] veth0_vlan: entered promiscuous mode
[  188.049838][T10148] veth1_vlan: entered promiscuous mode
[  188.059331][T10148] veth0_macvtap: entered promiscuous mode
[  188.063891][T10148] veth1_macvtap: entered promiscuous mode
[  188.068489][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'.
[  188.073785][T10148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.077207][T10148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.080018][T10148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.084706][T10148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.087382][T10148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.090334][T10148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.093660][T10148] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.103337][T10148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  188.108408][T10148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.111219][T10148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  188.114978][T10148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.117823][T10148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  188.120804][T10148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.124467][T10148] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.131119][T10148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.137919][T10148] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.140470][T10148] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.143251][T10148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.177555][   T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.190920][   T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.205648][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.208835][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.401830][ T1146] Bluetooth: hci1: Frame reassembly failed (-84)
[  188.680004][T10226] vivid-007: disconnect
[  188.786151][T10228] 9pnet_virtio: no channels available for device syz
[  188.789978][T10228] overlay: Unknown parameter '/'
[  189.281332][ T3301] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  189.312297][ T5932] Bluetooth: hci4: command tx timeout
[  189.432316][ T3301] usb 9-1: Using ep0 maxpacket: 8
[  189.437841][ T3301] usb 9-1: config 7 has an invalid interface number: 207 but max is 0
[  189.440692][ T3301] usb 9-1: config 7 has no interface number 0
[  189.442669][ T3301] usb 9-1: too many endpoints for config 7 interface 207 altsetting 80: 184, using maximum allowed: 30
[  189.445818][ T3301] usb 9-1: config 7 interface 207 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 184
[  189.449648][ T3301] usb 9-1: config 7 interface 207 has no altsetting 0
[  189.455179][ T3301] usb 9-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=4e.59
[  189.457935][ T3301] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.460253][ T3301] usb 9-1: Product: syz
[  189.461499][ T3301] usb 9-1: Manufacturer: syz
[  189.463242][ T3301] usb 9-1: SerialNumber: syz
[  189.517142][T10225] vivid-007: reconnect
[  189.712841][ T3301] cypress_m8 9-1:7.207: HID->COM RS232 Adapter converter detected
[  189.716965][ T3301] cyphidcom ttyUSB0: required endpoint is missing
[  189.720397][ T3301] usb 9-1: USB disconnect, device number 2
[  189.723080][ T3301] cypress_m8 9-1:7.207: device disconnected
[  190.352387][ T3301] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  190.400412][T10241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.794'.
[  190.403202][T10241] netlink: 5 bytes leftover after parsing attributes in process `syz.2.794'.
[  190.432334][ T5945] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[  190.432363][ T5932] Bluetooth: hci1: command 0xfc11 tx timeout
[  190.503975][ T3301] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.507054][ T3301] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.510373][ T3301] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  190.514217][ T3301] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  190.516755][ T3301] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.521056][ T3301] usb 8-1: config 0 descriptor??
[  190.637230][   T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.931031][ T3301] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  190.933737][ T3301] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  190.938648][ T3301] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  190.953313][ T5354] udevd[5354]: worker [7637] terminated by signal 33 (Unknown signal 33)
[  190.956724][ T5354] udevd[5354]: worker [7637] failed while handling '/devices/platform/dummy_hcd.3/usb8/8-1'
[  191.392288][ T5945] Bluetooth: hci4: command tx timeout
[  192.306187][   T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.366961][   T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.455457][   T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.511198][T10257] 9pnet_virtio: no channels available for device syz
[  192.558459][   T63] bridge_slave_1: left allmulticast mode
[  192.560189][   T63] bridge_slave_1: left promiscuous mode
[  192.561814][   T63] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.566941][   T63] bridge_slave_0: left allmulticast mode
[  192.568549][   T63] bridge_slave_0: left promiscuous mode
[  192.570245][   T63] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.582394][ T5932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  192.585204][ T5932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  192.587248][ T5932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  192.589542][ T5932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  192.595105][ T5932] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  192.597849][ T5932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  192.686194][   T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  192.689646][   T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  192.693264][   T63] bond0 (unregistering): Released all slaves
[  192.700977][T10261] lo speed is unknown, defaulting to 1000
[  192.772291][ T6054] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  192.926750][ T6054] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  192.930241][ T6054] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  192.933615][ T6054] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  192.948874][ T6054] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  192.951657][ T6054] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.964755][ T6054] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  192.975165][ T6054] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2
[  192.986416][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  192.999555][T10261] chnl_net:caif_netlink_parms(): no params data found
[  193.004742][ T5974] usb 8-1: USB disconnect, device number 23
[  193.233758][T10287] input: syz1 as /devices/virtual/input/input26
[  193.468483][T10261] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.474860][T10261] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.475072][ T5945] Bluetooth: hci4: command tx timeout
[  193.481113][T10261] bridge_slave_0: entered allmulticast mode
[  193.492577][T10261] bridge_slave_0: entered promiscuous mode
[  193.500895][T10261] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.505308][T10261] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.509696][T10261] bridge_slave_1: entered allmulticast mode
[  193.522299][T10261] bridge_slave_1: entered promiscuous mode
[  193.566010][   T63] hsr_slave_0: left promiscuous mode
[  193.574998][   T63] hsr_slave_1: left promiscuous mode
[  193.578457][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  193.583317][   T63] batman_adv: batadv0: Removing interface: batadv_slave_0
[  193.586901][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  193.589281][   T63] batman_adv: batadv0: Removing interface: batadv_slave_1
[  193.594106][   T63] veth1_macvtap: left promiscuous mode
[  193.595978][   T63] veth0_macvtap: left promiscuous mode
[  193.597685][   T63] veth1_vlan: left promiscuous mode
[  193.599581][   T63] veth0_vlan: left promiscuous mode
[  193.643721][ T1412] ieee802154 phy0 wpan0: encryption failed: -22
[  193.645529][ T1412] ieee802154 phy1 wpan1: encryption failed: -22
[  193.731956][   T63] team0 (unregistering): Port device team_slave_1 removed
[  193.746274][   T63] team0 (unregistering): Port device team_slave_0 removed
[  193.831304][T10261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.837138][T10261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.891613][T10261] team0: Port device team_slave_0 added
[  193.894373][T10261] team0: Port device team_slave_1 added
[  193.919220][T10261] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.921990][T10261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.931440][T10261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.935066][T10261] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.937006][T10261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.944525][T10261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.974393][T10261] hsr_slave_0: entered promiscuous mode
[  193.977136][T10261] hsr_slave_1: entered promiscuous mode
[  193.979017][T10261] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  193.981219][T10261] Cannot create hsr debugfs directory
[  194.233515][ T2139] usb 7-1: USB disconnect, device number 20
[  194.444700][T10261] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  194.447715][T10261] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  194.454629][T10261] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  194.456885][T10338] overlayfs: failed to resolve './file0': -2
[  194.459345][T10261] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  194.469791][T10261] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.471907][T10261] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.474926][T10338] s
z1: rxe_newlink: already configured on lo
[  194.499613][T10261] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.504649][   T63] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.512833][T10261] 8021q: adding VLAN 0 to HW filter on device team0
[  194.516845][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.518899][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.554740][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.556766][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.567332][T10261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  194.570351][T10261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  194.628844][T10261] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.639851][T10261] veth0_vlan: entered promiscuous mode
[  194.644899][T10261] veth1_vlan: entered promiscuous mode
[  194.652474][T10261] veth0_macvtap: entered promiscuous mode
[  194.655095][T10261] veth1_macvtap: entered promiscuous mode
[  194.659538][T10261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.664704][T10261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.667467][T10261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.670322][T10261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.673651][ T5932] Bluetooth: hci1: command tx timeout
[  194.675303][T10261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.678195][T10261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.681477][T10261] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.687035][T10261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.689939][T10261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.692714][T10261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.695548][T10261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.698321][T10261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.701281][T10261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.705563][T10261] batman_adv: batadv0: Interface activated: batadv_slave_1
[  194.709821][T10261] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.712560][T10261] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.714966][T10261] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.717315][T10261] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.742817][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.745798][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.751583][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.754824][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.271233][T10389] syz.2.807[10389] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  195.271276][T10389] syz.2.807[10389] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  195.275669][T10389] syz.2.807[10389] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  195.342041][T10398] netlink: 'syz.2.810': attribute type 8 has an invalid length.
[  195.347787][T10398] netlink: 163260 bytes leftover after parsing attributes in process `syz.2.810'.
[  195.431508][T10402] sg_write: data in/out 11/10 bytes for SCSI command 0xfd-- guessing data in;
[  195.431508][T10402]    program syz.2.810 not setting count and/or reply_len properly
[  195.452688][ T3301] kernel write not supported for file /snd/seq (pid: 3301 comm: kworker/0:2)
[  195.487610][T10405] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  195.552690][ T5932] Bluetooth: hci4: command tx timeout
[  195.711701][T10413] overlayfs: failed to resolve './file0': -2
[  195.712357][ T5932] Bluetooth: hci3: command 0x0406 tx timeout
[  195.745354][T10413] rdma_rxe: rxe_newlink: failed to add lo
[  196.113537][T10417] bridge0: port 5(hsr_slave_1) entered blocking state
[  196.115609][T10417] bridge0: port 5(hsr_slave_1) entered disabled state
[  196.117602][T10417] hsr_slave_1: entered allmulticast mode
[  196.119570][T10417] hsr_slave_1: left allmulticast mode
[  196.262245][ T5974] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  196.392282][ T5974] usb 9-1: device descriptor read/64, error -71
[  196.632319][ T5974] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  196.762286][ T5974] usb 9-1: device descriptor read/64, error -71
[  196.872555][ T5974] usb usb9-port1: attempt power cycle
[  197.045468][   T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.222336][ T5974] usb 9-1: new full-speed USB device number 5 using dummy_hcd
[  197.243539][ T5974] usb 9-1: device descriptor read/8, error -71
[  197.482359][ T5974] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  197.502781][ T5974] usb 9-1: device descriptor read/8, error -71
[  197.612368][ T5974] usb usb9-port1: unable to enumerate USB device
[  198.914117][   T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.965136][   T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.000360][T10455] 9pnet: Unknown protocol version 9
[  199.014489][   T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.065770][ T5932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  199.068668][ T5932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  199.071412][ T5932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  199.074842][ T5932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  199.078134][ T5932] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  199.081900][ T5932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  199.084820][   T63] bridge_slave_1: left allmulticast mode
[  199.086640][   T63] bridge_slave_1: left promiscuous mode
[  199.089106][   T63] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.094957][   T63] bridge_slave_0: left allmulticast mode
[  199.096654][   T63] bridge_slave_0: left promiscuous mode
[  199.098278][   T63] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.287923][   T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  199.292038][   T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  199.295825][   T63] bond0 (unregistering): Released all slaves
[  199.309310][T10460] lo speed is unknown, defaulting to 1000
[  199.457584][T10460] chnl_net:caif_netlink_parms(): no params data found
[  199.521184][T10460] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.525857][T10460] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.528064][T10460] bridge_slave_0: entered allmulticast mode
[  199.531161][T10460] bridge_slave_0: entered promiscuous mode
[  199.534464][T10460] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.536521][T10460] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.538712][T10460] bridge_slave_1: entered allmulticast mode
[  199.541049][T10460] bridge_slave_1: entered promiscuous mode
[  199.624988][T10460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.632621][T10460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.648893][T10460] team0: Port device team_slave_0 added
[  199.651239][T10460] team0: Port device team_slave_1 added
[  199.675433][T10460] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.677561][T10460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.686492][T10460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.691883][T10460] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.694296][T10460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.701618][T10460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.725126][T10460] hsr_slave_0: entered promiscuous mode
[  199.727284][T10460] hsr_slave_1: entered promiscuous mode
[  199.731808][T10460] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  199.734161][T10460] Cannot create hsr debugfs directory
[  200.042567][T10466] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  200.044253][T10466] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  200.085468][T10466] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  200.113011][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.823'.
[  200.142111][T10466] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  200.278479][T10460] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  200.281998][T10460] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  200.298984][T10460] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  200.311345][T10460] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  200.346002][T10466] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  200.348675][T10466] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  200.382811][T10460] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.391360][T10466] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  200.394301][T10466] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  200.404899][T10460] 8021q: adding VLAN 0 to HW filter on device team0
[  200.412779][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.414845][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.425996][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.428030][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.508200][T10565] overlayfs: failed to resolve './file0': -2
[  200.515618][T10565] rdma_rxe: rxe_newlink: failed to add lo
[  200.568634][T10460] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.617633][T10460] veth0_vlan: entered promiscuous mode
[  200.621834][T10460] veth1_vlan: entered promiscuous mode
[  200.632930][T10460] veth0_macvtap: entered promiscuous mode
[  200.636754][   T63] hsr_slave_0: left promiscuous mode
[  200.639279][   T63] hsr_slave_1: left promiscuous mode
[  200.662970][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.665204][   T63] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.667962][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.670128][   T63] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.673897][   T63] veth1_macvtap: left promiscuous mode
[  200.675557][   T63] veth0_macvtap: left promiscuous mode
[  200.677643][   T63] veth1_vlan: left promiscuous mode
[  200.679652][   T63] veth0_vlan: left promiscuous mode
[  200.802868][   T63] team0 (unregistering): Port device team_slave_1 removed
[  200.830935][   T63] team0 (unregistering): Port device team_slave_0 removed
[  200.927701][T10460] veth1_macvtap: entered promiscuous mode
[  200.938277][T10460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.941216][T10460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.944854][T10460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.948989][T10460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.951699][T10460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.955429][T10460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.960026][T10460] batman_adv: batadv0: Interface activated: batadv_slave_0
[  201.027176][T10460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.033537][T10460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.038518][T10460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.043752][T10460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.047879][T10460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.051689][T10460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.057972][T10460] batman_adv: batadv0: Interface activated: batadv_slave_1
[  201.068962][T10460] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.071640][T10460] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.080398][T10460] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.084454][T10460] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.226310][   T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.237604][   T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.326035][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.328273][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.051652][T10628] hugetlbfs: syz.3.832 (10628): Using mlock ulimits for SHM_HUGETLB is obsolete
[  202.483832][T10669] netlink: 'syz.3.833': attribute type 33 has an invalid length.
[  203.035142][   T45] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.815627][   T45] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.859221][   T45] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.916252][   T45] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.994496][   T45] bridge_slave_1: left allmulticast mode
[  205.001154][   T45] bridge_slave_1: left promiscuous mode
[  205.003350][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.006716][   T45] bridge_slave_0: left allmulticast mode
[  205.008791][   T45] bridge_slave_0: left promiscuous mode
[  205.010941][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.116324][   T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  205.125235][   T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  205.134375][   T45] bond0 (unregistering): Released all slaves
[  205.159379][ T5932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  205.161787][ T5932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  205.164768][ T5932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  205.167657][ T5932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  205.170073][ T5932] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  205.172097][ T5932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  205.192314][T10790] lo speed is unknown, defaulting to 1000
[  205.370666][T10803] overlayfs: failed to resolve './file0': -2
[  205.417910][T10796] s
z1: rxe_newlink: already configured on lo
[  205.456442][T10790] chnl_net:caif_netlink_parms(): no params data found
[  205.515576][T10790] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.531945][T10790] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.534357][T10790] bridge_slave_0: entered allmulticast mode
[  205.538743][T10790] bridge_slave_0: entered promiscuous mode
[  205.541767][T10790] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.545583][T10790] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.548094][T10790] bridge_slave_1: entered allmulticast mode
[  205.552106][T10790] bridge_slave_1: entered promiscuous mode
[  205.613809][T10790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.623979][T10790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.629686][   T45] hsr_slave_0: left promiscuous mode
[  205.632043][   T45] hsr_slave_1: left promiscuous mode
[  205.635755][   T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  205.638626][   T45] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.641346][   T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.644011][   T45] batman_adv: batadv0: Removing interface: batadv_slave_1
[  205.649451][   T45] veth1_macvtap: left promiscuous mode
[  205.651299][   T45] veth0_macvtap: left promiscuous mode
[  205.653360][   T45] veth1_vlan: left promiscuous mode
[  205.654909][   T45] veth0_vlan: left promiscuous mode
[  205.730483][   T45] team0 (unregistering): Port device team_slave_1 removed
[  205.736051][   T45] team0 (unregistering): Port device team_slave_0 removed
[  205.794963][T10790] team0: Port device team_slave_0 added
[  205.800473][T10790] team0: Port device team_slave_1 added
[  205.816850][T10790] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.819011][T10790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.827264][T10790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.831619][T10790] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.835409][T10790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.842462][T10790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.895347][T10790] hsr_slave_0: entered promiscuous mode
[  205.905660][T10790] hsr_slave_1: entered promiscuous mode
[  205.909782][T10790] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  205.912062][T10790] Cannot create hsr debugfs directory
[  205.915874][T10825] bridge0: port 3(hsr_slave_1) entered blocking state
[  205.920851][T10825] bridge0: port 3(hsr_slave_1) entered disabled state
[  205.938211][T10825] hsr_slave_1: entered allmulticast mode
[  205.946295][T10825] hsr_slave_1: left allmulticast mode
[  206.150408][T10843] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.151660][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'.
[  206.394879][T10854] serio: Serial port ptm0
[  206.508891][T10790] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  206.515261][T10790] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  206.519226][T10790] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  206.523193][T10790] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  206.570885][T10790] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.584747][T10790] 8021q: adding VLAN 0 to HW filter on device team0
[  206.595534][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.597597][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  206.614615][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.616595][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.635655][T10790] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  206.638587][T10790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  206.769057][T10790] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.793288][T10790] veth0_vlan: entered promiscuous mode
[  206.799827][T10790] veth1_vlan: entered promiscuous mode
[  206.824964][T10790] veth0_macvtap: entered promiscuous mode
[  206.830300][T10790] veth1_macvtap: entered promiscuous mode
[  206.837492][T10790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.845306][T10790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.849925][T10790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.854629][T10790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.860390][T10891] FAULT_INJECTION: forcing a failure.
[  206.860390][T10891] name failslab, interval 1, probability 0, space 0, times 0
[  206.864060][T10790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.867142][T10790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.870513][T10790] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.872718][T10891] CPU: 2 UID: 0 PID: 10891 Comm: syz.3.849 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0
[  206.875702][T10891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  206.878750][T10891] Call Trace:
[  206.879713][T10891]  <TASK>
[  206.880593][T10891]  dump_stack_lvl+0x16c/0x1f0
[  206.881941][T10891]  should_fail_ex+0x497/0x5b0
[  206.883391][T10891]  ? fs_reclaim_acquire+0xae/0x150
[  206.884850][T10891]  should_failslab+0xc2/0x120
[  206.886203][T10891]  __kmalloc_cache_noprof+0x68/0x420
[  206.887727][T10891]  ? __pfx___folio_start_writeback+0x10/0x10
[  206.889440][T10891]  ? do_raw_spin_lock+0x12d/0x2c0
[  206.890879][T10891]  netfs_buffer_make_space+0x432/0x6b0
[  206.892425][T10891]  netfs_buffer_append_folio+0x298/0x360
[  206.894025][T10891]  netfs_write_folio+0x540/0x1930
[  206.895450][T10891]  netfs_writepages+0x29a/0x8f0
[  206.896833][T10891]  ? __pfx_netfs_writepages+0x10/0x10
[  206.898360][T10891]  ? stack_depot_save_flags+0x28/0x9e0
[  206.899900][T10891]  ? __mod_node_page_state+0xde/0x1d0
[  206.901420][T10891]  ? __pfx_netfs_writepages+0x10/0x10
[  206.902957][T10891]  do_writepages+0x1b3/0x820
[  206.904271][T10891]  ? __pfx_do_writepages+0x10/0x10
[  206.905727][T10891]  ? lock_release+0x4e2/0x6f0
[  206.907072][T10891]  ? wbc_attach_fdatawrite_inode+0x13a/0x190
[  206.908785][T10891]  ? __pfx_lock_release+0x10/0x10
[  206.910216][T10891]  ? do_raw_spin_lock+0x12d/0x2c0
[  206.911639][T10891]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  206.913149][T10891]  ? lock_acquire+0x2f/0xb0
[  206.914421][T10891]  ? wbc_attach_fdatawrite_inode+0x24/0x190
[  206.916084][T10891]  ? do_raw_spin_unlock+0x172/0x230
[  206.917555][T10891]  ? _raw_spin_unlock+0x28/0x50
[  206.918982][T10891]  filemap_fdatawrite_wbc+0x104/0x160
[  206.920496][T10891]  __filemap_fdatawrite_range+0xb3/0xf0
[  206.922071][T10891]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[  206.923819][T10891]  file_write_and_wait_range+0xca/0x140
[  206.925383][T10891]  v9fs_file_fsync+0xdb/0x1c0
[  206.926716][T10891]  ? __pfx_v9fs_file_fsync+0x10/0x10
[  206.928193][T10891]  ? __up_read+0x1fb/0x760
[  206.929488][T10891]  ? __pfx_v9fs_file_fsync+0x10/0x10
[  206.930994][T10891]  vfs_fsync_range+0x136/0x220
[  206.932314][T10891]  netfs_file_write_iter+0x3dd/0x4f0
[  206.933795][T10891]  v9fs_file_write_iter+0x9b/0x100
[  206.935234][T10891]  vfs_write+0x5ae/0x1150
[  206.936456][T10891]  ? __pfx_v9fs_file_write_iter+0x10/0x10
[  206.938027][T10891]  ? __pfx___mutex_lock+0x10/0x10
[  206.939458][T10891]  ? __pfx_vfs_write+0x10/0x10
[  206.940812][T10891]  ksys_write+0x12b/0x250
[  206.942030][T10891]  ? __pfx_ksys_write+0x10/0x10
[  206.943400][T10891]  ? rcu_is_watching+0x12/0xc0
[  206.944761][T10891]  __do_fast_syscall_32+0x73/0x120
[  206.946206][T10891]  do_fast_syscall_32+0x32/0x80
[  206.947561][T10891]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  206.949367][T10891] RIP: 0023:0xf707e579
[  206.950526][T10891] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  206.955852][T10891] RSP: 002b:00000000f507055c EFLAGS: 00000296 ORIG_RAX: 0000000000000004
[  206.958169][T10891] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000600
[  206.960375][T10891] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  206.962589][T10891] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  206.964793][T10891] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  206.966997][T10891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  206.969203][T10891]  </TASK>
[  206.971803][T10790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.974736][T10790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.977712][T10790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.980584][T10790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.983812][T10790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.986700][T10790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.990203][T10790] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.993107][T10891] ------------[ cut here ]------------
[  206.994675][T10891] WARNING: CPU: 2 PID: 10891 at lib/iov_iter.c:255 _copy_from_iter+0x39b/0x1400
[  206.997129][T10891] Modules linked in:
[  206.998506][T10891] CPU: 2 UID: 0 PID: 10891 Comm: syz.3.849 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0
[  207.003154][T10891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  207.006137][T10891] RIP: 0010:_copy_from_iter+0x39b/0x1400
[  207.007753][T10891] Code: 64 fd 0f 01 cb 4c 89 f9 4c 89 f7 48 89 de f3 a4 0f 1f 00 48 89 cb 0f 01 ca 4d 89 fc 49 29 cc e9 1d ff ff ff e8 36 47 02 fd 90 <0f> 0b 90 e9 ae fd ff ff e8 28 47 02 fd 89 de bf 01 00 00 00 e8 bc
[  207.013150][T10891] RSP: 0018:ffffc900037def48 EFLAGS: 00010293
[  207.013166][T10790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.014832][T10891] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff84970858
[  207.017286][T10790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.019530][T10891] RDX: ffff8880225cc880 RSI: ffffffff84970b3a RDI: 0000000000000001
[  207.021973][T10790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.024310][T10891] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[  207.029252][T10891] R10: 0000000000000000 R11: 00000000000a201e R12: ffff88806d05aa60
[  207.031494][T10891] R13: ffff888066cde6c0 R14: ffff88806d05aa60 R15: 0000000000000001
[  207.033813][T10891] FS:  0000000000000000(0000) GS:ffff88802b600000(0063) knlGS:00000000f5070b40
[  207.036335][T10891] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  207.038200][T10891] CR2: 00000000f519e7f0 CR3: 0000000074fcc000 CR4: 0000000000352ef0
[  207.040480][T10891] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  207.042813][T10891] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  207.045059][T10891] Call Trace:
[  207.046000][T10891]  <TASK>
[  207.046852][T10891]  ? __warn+0xea/0x3c0
[  207.048016][T10891]  ? _copy_from_iter+0x39b/0x1400
[  207.049420][T10891]  ? report_bug+0x3c0/0x580
[  207.050694][T10891]  ? handle_bug+0x54/0xa0
[  207.051928][T10891]  ? exc_invalid_op+0x17/0x50
[  207.053337][T10891]  ? asm_exc_invalid_op+0x1a/0x20
[  207.054781][T10891]  ? _copy_from_iter+0xb8/0x1400
[  207.056125][T10891]  ? _copy_from_iter+0x39a/0x1400
[  207.057551][T10891]  ? _copy_from_iter+0x39b/0x1400
[  207.059011][T10891]  ? _copy_from_iter+0x39a/0x1400
[  207.060448][T10891]  ? __pfx_lock_release+0x10/0x10
[  207.060715][T10790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.061886][T10891]  ? trace_lock_acquire+0x14e/0x1f0
[  207.061902][T10891]  ? __virt_addr_valid+0x1a4/0x590
[  207.061915][T10891]  ? __pfx__copy_from_iter+0x10/0x10
[  207.061927][T10891]  ? __virt_addr_valid+0x1a4/0x590
[  207.070478][T10891]  ? __virt_addr_valid+0x5e/0x590
[  207.071941][T10891]  ? __phys_addr_symbol+0x30/0x80
[  207.073502][T10891]  ? __check_object_size+0x488/0x710
[  207.075051][T10891]  p9pdu_vwritef+0x2cb/0x21d0
[  207.076420][T10891]  ? p9pdu_writef+0xc4/0x100
[  207.077804][T10891]  ? __pfx_p9pdu_vwritef+0x10/0x10
[  207.079307][T10891]  ? __pfx_p9_tag_alloc+0x10/0x10
[  207.080757][T10891]  ? kasan_save_stack+0x42/0x60
[  207.082221][T10891]  ? kasan_save_stack+0x33/0x60
[  207.083623][T10891]  ? kasan_save_track+0x14/0x30
[  207.085031][T10891]  p9_client_prepare_req+0x244/0x4d0
[  207.086555][T10891]  ? __pfx_p9_client_prepare_req+0x10/0x10
[  207.088228][T10891]  ? vfs_write+0x5ae/0x1150
[  207.089558][T10891]  ? rcu_is_watching+0x12/0xc0
[  207.090954][T10891]  ? lock_release+0x4e2/0x6f0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  207.092356][T10891]  ? local_lock_release+0x99/0x140
[  207.097499][T10891]  p9_client_rpc+0x1c3/0xc10
[  207.098894][T10891]  ? __pfx_p9_client_rpc+0x10/0x10
[  207.100405][T10891]  ? rcu_is_watching+0x12/0xc0
[  207.101835][T10891]  ? lock_release+0x4e2/0x6f0
[  207.104192][T10891]  ? __pfx_lock_release+0x10/0x10
[  207.105676][T10891]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  207.107267][T10891]  p9_client_write+0x31f/0x680
[  207.108916][T10891]  ? __pfx_p9_client_write+0x10/0x10
[  207.110500][T10891]  ? __pfx_lock_release+0x10/0x10
[  207.112093][T10891]  ? do_raw_spin_lock+0x12d/0x2c0
[  207.113839][T10891]  v9fs_issue_write+0xe4/0x1b0
[  207.115777][T10891]  ? trace_irq_enable.constprop.0+0xea/0x140
[  207.117926][T10891]  ? __pfx_v9fs_issue_write+0x10/0x10
[  207.120319][T10891]  ? netfs_advance_write+0x82e/0xc80
[  207.122428][T10891]  ? rcu_is_watching+0x12/0xc0
[  207.124028][T10891]  netfs_do_issue_write+0x92/0x110
[  207.126136][T10891]  netfs_write_folio+0x82f/0x1930
[  207.128208][T10891]  netfs_writepages+0x29a/0x8f0
[  207.129795][T10891]  ? __pfx_netfs_writepages+0x10/0x10
[  207.131390][T10891]  ? stack_depot_save_flags+0x28/0x9e0
[  207.133076][T10891]  ? __mod_node_page_state+0xde/0x1d0
[  207.135003][T10891]  ? __pfx_netfs_writepages+0x10/0x10
[  207.137133][T10891]  do_writepages+0x1b3/0x820
[  207.138970][T10891]  ? __pfx_do_writepages+0x10/0x10
[  207.140657][T10891]  ? lock_release+0x4e2/0x6f0
[  207.142126][T10891]  ? wbc_attach_fdatawrite_inode+0x13a/0x190
[  207.144158][T10891]  ? __pfx_lock_release+0x10/0x10
[  207.146129][T10891]  ? do_raw_spin_lock+0x12d/0x2c0
[  207.148126][T10891]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  207.150283][T10891]  ? lock_acquire+0x2f/0xb0
[  207.152325][T10891]  ? wbc_attach_fdatawrite_inode+0x24/0x190
[  207.154702][T10891]  ? do_raw_spin_unlock+0x172/0x230
[  207.156770][T10891]  ? _raw_spin_unlock+0x28/0x50
[  207.158716][T10891]  filemap_fdatawrite_wbc+0x104/0x160
[  207.160876][T10891]  __filemap_fdatawrite_range+0xb3/0xf0
[  207.162740][T10891]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[  207.164805][T10891]  file_write_and_wait_range+0xca/0x140
[  207.166426][T10891]  v9fs_file_fsync+0xdb/0x1c0
[  207.167774][T10891]  ? __pfx_v9fs_file_fsync+0x10/0x10
[  207.169292][T10891]  ? __up_read+0x1fb/0x760
[  207.170572][T10891]  ? __pfx_v9fs_file_fsync+0x10/0x10
[  207.172119][T10891]  vfs_fsync_range+0x136/0x220
[  207.173583][T10891]  netfs_file_write_iter+0x3dd/0x4f0
[  207.175187][T10891]  v9fs_file_write_iter+0x9b/0x100
[  207.177180][T10891]  vfs_write+0x5ae/0x1150
[  207.178934][T10891]  ? __pfx_v9fs_file_write_iter+0x10/0x10
[  207.181182][T10891]  ? __pfx___mutex_lock+0x10/0x10
[  207.183613][T10891]  ? __pfx_vfs_write+0x10/0x10
[  207.185522][T10891]  ksys_write+0x12b/0x250
[  207.187267][T10891]  ? __pfx_ksys_write+0x10/0x10
[  207.189212][T10891]  ? rcu_is_watching+0x12/0xc0
[  207.190869][T10891]  __do_fast_syscall_32+0x73/0x120
[  207.192573][T10891]  do_fast_syscall_32+0x32/0x80
[  207.194128][T10891]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  207.195928][T10891] RIP: 0023:0xf707e579
[  207.197081][T10891] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  207.202804][T10891] RSP: 002b:00000000f507055c EFLAGS: 00000296 ORIG_RAX: 0000000000000004
[  207.205742][T10891] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000600
[  207.208150][T10891] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  207.210333][T10891] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  207.212700][T10891] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  207.215660][T10891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  207.218872][T10891]  </TASK>
[  207.220073][T10891] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  207.222895][T10891] CPU: 2 UID: 0 PID: 10891 Comm: syz.3.849 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0
[  207.226032][T10891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  207.228956][T10891] Call Trace:
[  207.229892][T10891]  <TASK>
[  207.230758][T10891]  dump_stack_lvl+0x3d/0x1f0
[  207.232089][T10891]  panic+0x71d/0x800
[  207.233213][T10891]  ? __pfx_panic+0x10/0x10
[  207.234764][T10891]  ? show_trace_log_lvl+0x29d/0x3d0
[  207.236744][T10891]  ? check_panic_on_warn+0x1f/0xb0
[  207.238541][T10891]  ? _copy_from_iter+0x39b/0x1400
[  207.239931][T10891]  check_panic_on_warn+0xab/0xb0
[  207.241305][T10891]  __warn+0xf6/0x3c0
[  207.242411][T10891]  ? _copy_from_iter+0x39b/0x1400
[  207.244032][T10891]  report_bug+0x3c0/0x580
[  207.245759][T10891]  handle_bug+0x54/0xa0
[  207.247307][T10891]  exc_invalid_op+0x17/0x50
[  207.248648][T10891]  asm_exc_invalid_op+0x1a/0x20
[  207.250042][T10891] RIP: 0010:_copy_from_iter+0x39b/0x1400
[  207.251628][T10891] Code: 64 fd 0f 01 cb 4c 89 f9 4c 89 f7 48 89 de f3 a4 0f 1f 00 48 89 cb 0f 01 ca 4d 89 fc 49 29 cc e9 1d ff ff ff e8 36 47 02 fd 90 <0f> 0b 90 e9 ae fd ff ff e8 28 47 02 fd 89 de bf 01 00 00 00 e8 bc
[  207.258460][T10891] RSP: 0018:ffffc900037def48 EFLAGS: 00010293
[  207.260822][T10891] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff84970858
[  207.263910][T10891] RDX: ffff8880225cc880 RSI: ffffffff84970b3a RDI: 0000000000000001
[  207.266314][T10891] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[  207.268735][T10891] R10: 0000000000000000 R11: 00000000000a201e R12: ffff88806d05aa60
[  207.271479][T10891] R13: ffff888066cde6c0 R14: ffff88806d05aa60 R15: 0000000000000001
[  207.274615][T10891]  ? _copy_from_iter+0xb8/0x1400
[  207.276628][T10891]  ? _copy_from_iter+0x39a/0x1400
[  207.278637][T10891]  ? _copy_from_iter+0x39a/0x1400
[  207.280618][T10891]  ? __pfx_lock_release+0x10/0x10
[  207.282594][T10891]  ? trace_lock_acquire+0x14e/0x1f0
[  207.284343][T10891]  ? __virt_addr_valid+0x1a4/0x590
[  207.285781][T10891]  ? __pfx__copy_from_iter+0x10/0x10
[  207.287284][T10891]  ? __virt_addr_valid+0x1a4/0x590
[  207.288736][T10891]  ? __virt_addr_valid+0x5e/0x590
[  207.290230][T10891]  ? __phys_addr_symbol+0x30/0x80
[  207.291676][T10891]  ? __check_object_size+0x488/0x710
[  207.293145][T10891]  p9pdu_vwritef+0x2cb/0x21d0
[  207.294559][T10891]  ? p9pdu_writef+0xc4/0x100
[  207.295893][T10891]  ? __pfx_p9pdu_vwritef+0x10/0x10
[  207.297345][T10891]  ? __pfx_p9_tag_alloc+0x10/0x10
[  207.298777][T10891]  ? kasan_save_stack+0x42/0x60
[  207.300612][T10891]  ? kasan_save_stack+0x33/0x60
[  207.302429][T10891]  ? kasan_save_track+0x14/0x30
[  207.304052][T10891]  p9_client_prepare_req+0x244/0x4d0
[  207.306097][T10891]  ? __pfx_p9_client_prepare_req+0x10/0x10
[  207.308342][T10891]  ? vfs_write+0x5ae/0x1150
[  207.310093][T10891]  ? rcu_is_watching+0x12/0xc0
[  207.311802][T10891]  ? lock_release+0x4e2/0x6f0
[  207.313671][T10891]  ? local_lock_release+0x99/0x140
[  207.315720][T10891]  p9_client_rpc+0x1c3/0xc10
[  207.317571][T10891]  ? __pfx_p9_client_rpc+0x10/0x10
[  207.319587][T10891]  ? rcu_is_watching+0x12/0xc0
[  207.321474][T10891]  ? lock_release+0x4e2/0x6f0
[  207.323342][T10891]  ? __pfx_lock_release+0x10/0x10
[  207.325198][T10891]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  207.326780][T10891]  p9_client_write+0x31f/0x680
[  207.328154][T10891]  ? __pfx_p9_client_write+0x10/0x10
[  207.329665][T10891]  ? __pfx_lock_release+0x10/0x10
[  207.331093][T10891]  ? do_raw_spin_lock+0x12d/0x2c0
[  207.332524][T10891]  v9fs_issue_write+0xe4/0x1b0
[  207.333988][T10891]  ? trace_irq_enable.constprop.0+0xea/0x140
[  207.335719][T10891]  ? __pfx_v9fs_issue_write+0x10/0x10
[  207.337268][T10891]  ? netfs_advance_write+0x82e/0xc80
[  207.338801][T10891]  ? rcu_is_watching+0x12/0xc0
[  207.340197][T10891]  netfs_do_issue_write+0x92/0x110
[  207.341651][T10891]  netfs_write_folio+0x82f/0x1930
[  207.343104][T10891]  netfs_writepages+0x29a/0x8f0
[  207.344638][T10891]  ? __pfx_netfs_writepages+0x10/0x10
[  207.346463][T10891]  ? stack_depot_save_flags+0x28/0x9e0
[  207.348589][T10891]  ? __mod_node_page_state+0xde/0x1d0
[  207.350398][T10891]  ? __pfx_netfs_writepages+0x10/0x10
[  207.351873][T10891]  do_writepages+0x1b3/0x820
[  207.353220][T10891]  ? __pfx_do_writepages+0x10/0x10
[  207.354820][T10891]  ? lock_release+0x4e2/0x6f0
[  207.356285][T10891]  ? wbc_attach_fdatawrite_inode+0x13a/0x190
[  207.358093][T10891]  ? __pfx_lock_release+0x10/0x10
[  207.359548][T10891]  ? do_raw_spin_lock+0x12d/0x2c0
[  207.360990][T10891]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  207.362557][T10891]  ? lock_acquire+0x2f/0xb0
[  207.364154][T10891]  ? wbc_attach_fdatawrite_inode+0x24/0x190
[  207.366550][T10891]  ? do_raw_spin_unlock+0x172/0x230
[  207.368332][T10891]  ? _raw_spin_unlock+0x28/0x50
[  207.369929][T10891]  filemap_fdatawrite_wbc+0x104/0x160
[  207.371507][T10891]  __filemap_fdatawrite_range+0xb3/0xf0
[  207.373213][T10891]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[  207.375030][T10891]  file_write_and_wait_range+0xca/0x140
[  207.376605][T10891]  v9fs_file_fsync+0xdb/0x1c0
[  207.377958][T10891]  ? __pfx_v9fs_file_fsync+0x10/0x10
[  207.379475][T10891]  ? __up_read+0x1fb/0x760
[  207.380704][T10891]  ? __pfx_v9fs_file_fsync+0x10/0x10
[  207.382161][T10891]  vfs_fsync_range+0x136/0x220
[  207.383513][T10891]  netfs_file_write_iter+0x3dd/0x4f0
[  207.385012][T10891]  v9fs_file_write_iter+0x9b/0x100
[  207.386468][T10891]  vfs_write+0x5ae/0x1150
[  207.387694][T10891]  ? __pfx_v9fs_file_write_iter+0x10/0x10
[  207.389331][T10891]  ? __pfx___mutex_lock+0x10/0x10
[  207.390772][T10891]  ? __pfx_vfs_write+0x10/0x10
[  207.392136][T10891]  ksys_write+0x12b/0x250
[  207.393364][T10891]  ? __pfx_ksys_write+0x10/0x10
[  207.394756][T10891]  ? rcu_is_watching+0x12/0xc0
[  207.396123][T10891]  __do_fast_syscall_32+0x73/0x120
[  207.397586][T10891]  do_fast_syscall_32+0x32/0x80
[  207.399001][T10891]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  207.400796][T10891] RIP: 0023:0xf707e579
[  207.402020][T10891] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  207.407453][T10891] RSP: 002b:00000000f507055c EFLAGS: 00000296 ORIG_RAX: 0000000000000004
[  207.409838][T10891] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000600
[  207.412126][T10891] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  207.414378][T10891] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  207.416601][T10891] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  207.418846][T10891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  207.421118][T10891]  </TASK>
[  207.422607][T10891] Kernel Offset: disabled
[  207.423871][T10891] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:09:17  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=ffff88802b437f68 RCX=ffffffff81764849 RDX=0000000000000000
RSI=ffffffff8bb16fc0 RDI=ffffffff8d82fce0 RBP=0000000000000000 RSP=ffffc900009f7220
R8 =0000000000000000 R9 =fffffbfff2039d5a R10=ffffffff901cead7 R11=00000000000806f0
R12=ffffffff8ddbad40 R13=000000000000002b R14=ffff88805b570800 R15=ffff888063514000
RIP=ffffffff817f1c10 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b400000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000002e307ff8 CR3=000000000db7e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2b74fa1d451cb477 1ed969cc89f10a65
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0e5c119c45650978 bdf98509690ed3aa
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 236a8e02bc77b769 34580da5d4a4320b
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2947bc3121fba040 36745abf933b07a2
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000012880
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a1f2c00aaaaaa00 be3faaaaaa000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f579fc007e740a9c 0000000000007e75
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 05b0140000007e74 0000000000007e73
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2876083fa3e05300 aaaaaaaa00000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 622daf7604d2d37f b651b3277974f317
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b0d7bd0eff13f8b4 37f15a2836119604
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000def4b4 RBX=0000000000000001 RCX=ffffffff8b1a6899 RDX=ffffed10056a6fee
RSI=ffffffff8bb16fc0 RDI=ffffffff81702ec9 RBP=ffffed10039dc910 RSP=ffffc9000047fe08
R8 =0000000000000000 R9 =ffffed10056a6fed R10=ffff88802b537f6b R11=0000000000000001
R12=0000000000000001 R13=ffff88801cee4880 R14=ffffffff901cead0 R15=0000000000000000
RIP=ffffffff8b1a7c7f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b500000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000ffd9f8c0 CR3=00000000699b4000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff851449b5 RDI=ffffffff9a668200 RBP=ffffffff9a6681c0 RSP=ffffc900037de8a8
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=73203a6d6d6f4320
R12=0000000000000000 R13=0000000000000036 R14=ffffffff85144950 R15=0000000000000000
RIP=ffffffff851449df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f519e7f0 CR3=0000000074fcc000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=00000000003b94bc RBX=0000000000000003 RCX=ffffffff8b1a6899 RDX=ffffed10056e6fee
RSI=ffffffff8bb16fc0 RDI=ffffffff81702ec9 RBP=ffffed10039df488 RSP=ffffc9000049fe08
R8 =0000000000000000 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000001
R12=0000000000000003 R13=ffff88801cefa440 R14=ffffffff901cead0 R15=0000000000000000
RIP=ffffffff8b1a7c7f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000020e23000 CR3=000000006a854000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000