last executing test programs:

11.667974558s ago: executing program 0 (id=268):
r0 = socket(0x1e, 0x5, 0x0)
connect$tipc(r0, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
openat(0xffffffffffffff9c, 0x0, 0x300, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='fdinfo\x00')
fchdir(r3)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$netlink(0x10, 0x3, 0xc)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000001d00)='net/unix\x00')
r11 = fanotify_init(0x0, 0x1)
fanotify_mark(r11, 0x1, 0x40000011, r10, 0x0)
r12 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
getdents(r12, &(0x7f0000000000)=""/46, 0x2e)
r13 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000100)={0x4})
bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0)
syz_clone(0x4084000, 0x0, 0x0, 0x0, 0x0, 0x0)

11.227099996s ago: executing program 0 (id=271):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000d40)=0xfffffffe, 0x4)
poll(&(0x7f0000000200)=[{r1, 0xe000}], 0x1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000a7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500c7634d2a9a5f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
getsockopt$inet6_mtu(r4, 0x29, 0x17, 0x0, 0x0)
r5 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=<r6=>0x0)
syz_io_uring_setup(0x5e2, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000180)=<r7=>0x0, &(0x7f0000000380))
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000300000000000000005a83692e0b090000008500000029000000850000002a0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000000)='./file0\x00', 0x0)
syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4})
io_uring_enter(r5, 0x381b, 0xa00100, 0x0, 0x0, 0x0)

11.112785904s ago: executing program 0 (id=272):
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0x4ba)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
dup3(r0, r1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYBLOB="da2261875f58323cf5704ca92bdcc7e39a892ad9ce2e9482b397d74faa777043c79850203e844203a9e2442046a6d5429a7a66ed82d75475981032f61c1771fdfdafc95b6573e353000000f910529b7699a932430d0e4e17a0df09ff759ed2c6837b2231ba04d1f12bdc9e7f52e88a686ce74a3aaacbf167a1f3227bbbefbace550fbc41978502da4d3a6fe8"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r8 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r8, &(0x7f0000000540)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44004}, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x0)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES64=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x518, 0x0, 0x18c, 0x203, 0x340, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2f8, 0x340, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x16}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x20}]}}, @common=@hl={{0x24}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x574)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)

10.278160622s ago: executing program 0 (id=278):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
pipe2(&(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x0)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
splice(r3, 0x0, r4, 0x0, 0x7, 0x8)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r5=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="a31244d579", @ANYRES16=r2, @ANYBLOB="0500000000000000000001000000740008803000008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff06000500000000003c00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b14000400020000000000000000000000000000000400008008000100", @ANYRES32=r5, @ANYBLOB="24000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843"], 0xb4}}, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
rt_sigqueueinfo(r6, 0x3d, &(0x7f0000000ac0)={0x0, 0xc4, 0xff7ffffe})
ptrace$peeksig(0x4209, r6, &(0x7f0000000040)={0x0, 0x1, 0x1}, &(0x7f00000001c0)=[{}])
setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file2/file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0)

10.186698917s ago: executing program 0 (id=279):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4, @local}}, 0x24)
sendmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="100000001001000001"], 0x10, 0xe000}, 0x5}], 0x1, 0x0)
read(r0, &(0x7f0000000840)=""/212, 0xd4)
syz_emit_ethernet(0xbe, &(0x7f0000000480)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d", "6a7710ebcf02000000000000002e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e4d90000009e5126806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r1, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000000)={0xb}, 0x20)
socket(0x2000000000000021, 0x2, 0x10000000000002) (async)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4, @local}}, 0x24) (async)
sendmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="100000001001000001"], 0x10, 0xe000}, 0x5}], 0x1, 0x0) (async)
read(r0, &(0x7f0000000840)=""/212, 0xd4) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000480)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d", "6a7710ebcf02000000000000002e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e4d90000009e5126806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async)
mount_setattr(r1, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000000)={0xb}, 0x20) (async)

9.928122159s ago: executing program 0 (id=280):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x6}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid() (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async, rerun: 32)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="220020220000000000000600", @ANYRES32=r0, @ANYBLOB="04002928da28"], 0x22) (async, rerun: 32)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r4, 0x63) (async)
read$FUSE(r4, &(0x7f00000030c0)={0x2020}, 0x2020) (async, rerun: 32)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async, rerun: 32)
r5 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]}) (async, rerun: 64)
r6 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x0, 0x0) (rerun: 64)
ioctl$SNDCTL_SEQ_NRMIDIS(r6, 0xc0045103, &(0x7f0000000040)) (async, rerun: 64)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x2001, 0x0) (async)
keyctl$restrict_keyring(0x3, 0x0, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)

9.89851554s ago: executing program 32 (id=280):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x6}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid() (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async, rerun: 32)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="220020220000000000000600", @ANYRES32=r0, @ANYBLOB="04002928da28"], 0x22) (async, rerun: 32)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r4, 0x63) (async)
read$FUSE(r4, &(0x7f00000030c0)={0x2020}, 0x2020) (async, rerun: 32)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async, rerun: 32)
r5 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]}) (async, rerun: 64)
r6 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x0, 0x0) (rerun: 64)
ioctl$SNDCTL_SEQ_NRMIDIS(r6, 0xc0045103, &(0x7f0000000040)) (async, rerun: 64)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x2001, 0x0) (async)
keyctl$restrict_keyring(0x3, 0x0, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)

3.678181813s ago: executing program 3 (id=351):
unshare(0x62040200)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000fc0)={'filter\x00', 0x1002, 0x4, 0x3ac, 0x1ec, 0x0, 0x1ec, 0x2cc, 0x2cc, 0x2cc, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xff000000, 0xe, 0x4, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@random="b8d75668cd6a", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x9, 0xfff0, 0x8, 0x6, 0x4, 0xfff7, 'veth1_to_hsr\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x0, 0x52}, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x1ec}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="0afc0f6e6adf", @mac=@multicast, @rand_addr=0x64010102, @rand_addr=0x64010101, 0x4, 0xfe030000}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00', 0x0, {0xfff9}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3f8)

3.677780219s ago: executing program 3 (id=352):
r0 = dup(0xffffffffffffffff)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010ac05418200000000000109022400010000000009040000010300000009210000000122050009058103009667f1f483faf300000000"], 0x0)
io_uring_setup(0xa10, &(0x7f0000000040)={0x0, 0x2c1, 0x800, 0x1, 0x307})
openat$null(0xffffffffffffff9c, &(0x7f0000002500), 0x1, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f0000000180), 0x0, 0x80200)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000240)=@gcm_128={{0x304}, "fe25d89e6b465d95", "f8e5be8d19a577509835c9fcf7ebe145", "3db44775", "623e7ade8f80638b"}, 0x28)
syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1a002)
openat$kvm(0xffffff9c, &(0x7f0000000200), 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800103afffe80000000bbff020000000000f700000000000000018600908a7db66700000000000000000000000000000000fc0000641bfdaed1b26f5487b6d92523bb85b6978823f4698321859eb0ba72a104481f17bf2da4f4fd52a767613d3ce47dcc53b6bf6c7b84c232c7da975809ad8c6ac6ec48f63948423f4e7a488bff89f203dd71116858a2bfec978a86036bdf191647a4da108b759d6eb1f31e93f947a19450"], 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0)
ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r4}, 0x10)
lsm_get_self_attr(0x64, 0x0, &(0x7f0000000080)=0x6c, 0x0)
ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000000)=0x3)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)

1.337435456s ago: executing program 2 (id=381):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000740)='./bus\x00', 0x141c62, 0x145)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', <r3=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400208024000100000000000100000000000000fdffff0100000080ffffffffffffff00000000001400040003000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080060001000a0000001400020020010000000000000000000000000001050003000000000088000080060001000a0000001400020020010000000000000000000000000002050003000000001003800080060001008c0e000008000200ac1414aa05000300000000001c000080060001000200000008000200ac1414bb0500030000000000200004000e00000000000000fe800000000000000000000000000000000000009c0000802400020073961633df6dc9cb418b15afd0bae7b90f1e6cfed8bb423cf9285c474163154908000a00010000002400010000000000000000000000000000000000000000000000000000000000000000004800098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300000000001c000080060001000200000008000200000000000500030000000000080005000100000008000100", @ANYRES32=r3], 0x22c}}, 0x0)

1.337072089s ago: executing program 4 (id=383):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x7a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400403a00fe800000000000000000feb9ffff00bbff020000000000000000000000000001"], 0x0)

1.336796897s ago: executing program 2 (id=384):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x14, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0x0}, 0x0) (async)
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003007bbcc60000202505a8a440000102030109021b000101016006090400050207010180090501024000"], &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x2, 0xb, 0x7, 0x40, 0x2}, 0xc, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x9, 0xc0d}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x804}}]})
syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x9, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0xfb, 0x3, 0x2, 0x6, 0x0, 0xa, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x9, 0x4, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x80, 0xe8, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xea, 0x6, 0x1}}}}}]}}]}}, 0x0) (async)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000002840)={0xff}, &(0x7f0000002880)={0x0, 0x989680}, 0x0)

1.336666952s ago: executing program 1 (id=385):
socket$nl_route(0x10, 0x3, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x81, 0x101000)
ioctl$AUTOFS_IOC_PROTOVER(r1, 0x9204, 0x0)
r2 = dup(r0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @local}}, [0x80, 0x104, 0x20000000000005, 0x1, 0x5, 0xe, 0x8f8, 0x7, 0x5, 0xfff1, 0x44, 0x0, 0x93c1, 0x36, 0x5]}, &(0x7f00000003c0)=0xfc)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(&(0x7f0000000140)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='minix\x00', 0x221005d, 0x0)
r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000040)=0xb)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0x6804, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r5, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r6, 0x0, 0x80)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet(0x2b, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000400000022bf000000000000", @ANYRES32, @ANYBLOB="0000000000000000000003000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001800"/21], 0x48)
close(0x3)
r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r8 = dup(r7)
write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c)

1.335178668s ago: executing program 4 (id=386):
connect(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000)
socket$xdp(0x2c, 0x3, 0x0)
syz_open_procfs(0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = gettid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10, 0x0, @scatter={0xffb1, 0x0, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0x10, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900})

1.188079269s ago: executing program 3 (id=387):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10)
r1 = socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="7fff00002a00000108000a00", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2, @ANYBLOB="140012800b0001006d6163736563"], 0x44}}, 0x0)

1.115693798s ago: executing program 3 (id=388):
syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x40102) (async)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) (async)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) (async)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
syz_open_dev$sg(0x0, 0x0, 0x5)
mq_timedsend(r1, &(0x7f0000000000)="d35b", 0x2, 0x80, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) (async)
sendmmsg$unix(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="dafafbb5f43eb90ee1bfd7867a0a2b444ca43fe28315de7f67a832a08d6e38d9d0165e6eadd426ab7bd0f28c33caa80a16524cfeaa422af42ebb5398a2", 0x3d}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000000180)="f5440479bb670530b094d6f58e0874a1e507d57342504c2e4ffb309a699198344b90c51e8c825c89451e7f36408e6b74da7497007a33b582866cb228115d77f13ee06ea821744f67a7bd5de99910a02fb8c3", 0x52}, {&(0x7f0000000200)="a9f794f09d", 0x5}], 0x5, 0x0, 0x0, 0x20000000}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000280)="c5ca7c40f5c33804d8001236ad14aa4bb7d8ac2a8b30cc8cebf956767d39db3698a402f830a1834c2899f900172f79b05c0eb9b55a8d13c2320cee79077db7cfabb91247e4476bff1125938bc9c35345bd", 0x51}, {&(0x7f0000000340)="b704e6cf9d7b1203ff8e895dc49270f398a1cd82a30f07ba8e75a9a33461ccfa4fd60cf33bd963e23b528f992d3fb4d0776245754495a7292e22c796b290bfb1817ae869", 0x44}, {&(0x7f00000003c0)="944a16480065fa7c214df6c333df016ca996b6f7972ca910200c1da7597582ee50e9792393a0400bc3d7373ba2af7f43ca72d5efdea6af561b86c4ea8bd71c320dada0b9bcd79ceee2ab203b440762ade7e7d01a2e92a23970ef4efc75ea93de5bc0981421a1d5512c9a584e4c1d2e8290b7f711de6a0675669fdbbc4d3c7fc05a2e2d8fd6bd2e2d402176006b8651cb4a85246245bd02b0109bd122f9c679d5dee472120a637f94a85c655b9209c5a18f90973d546025da717495f167c1cdcbbb27b5e10a7b474f5330399cc3553cd21a4a54", 0xd3}, {&(0x7f00000004c0)="1d3cf8dcee0f9a7bba4dc4657fb16bb7bcb066914e73291d456a8814a8f9e4ae89cea6c6b59cd4848cee517c8ca784db442714dd8395dfff8f98c76ab4ce8e769cf30f15a4847f63e5b3403644d675be160f5f1d10a035dddd0060b06301713c80d694353b750e46034814113fb958c89b740f3d5649ee9526303b763cb05ae8a1524b28328d8d3a4c6727a24fd64ade26792efff8c39e5af169519e11e543709c06eb962cf18397adf4a11d3a549b238885aba62d473127b017c1d462e2125d2ae055527feef1a967c0746bf974ca", 0xcf}, {&(0x7f00000005c0)="9aaaac7152b18ab83fe38d6aa7fa01b1fa4a4d249984c4ce492ea2e8021edc66cf34ac99c968d40379cfd20098e22871db83fdc587bcabb25054268aad54d2156d9a603b373374ba64f4df2f0e7970720bf4a410a6350cbf7206cb78a49ec1d1", 0x60}, {&(0x7f0000000640)="b4adf91717b815d0d164f43988df19c453325b11939755f3129220e78f8bb0e326278f6aa042b5dfe80bd68a115e362904db", 0x32}, {&(0x7f0000000740)="3bb340fd2eb0f1504ef67ab0b9a4ed2c7636d9d56ce9884cf58925bf877269ba7b51be3d165564c39f42ec656c8ea7f5fdde9ae602f4ef46864ca7523920494153cbc1a485847c60dd22d1cea002db7866760c18fb4a7aa30c7091b81e4e5abec5628e1ebaae4b0d8b758dc4f653574ea7458527066d25eb50e9a6215be690e679d8f8ae0b7d4b2d4b53999942c7075485413f805308944305abf0fad548292e32a75fa8bec70f69935183684cd988f53775b76b48b005e3b13ebd5901b10952", 0xc0}, {&(0x7f0000000680)="ea938e0d19ce70", 0x7}, {&(0x7f00000006c0)="6cd79b50094320d8ca78324548df99767ac5d23f6df6da4dab", 0x19}], 0x9, 0x0, 0x0, 0x4008015}}], 0x2, 0x40040) (async)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

936.300754ms ago: executing program 3 (id=389):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
ioprio_set$pid(0x3, 0x0, 0x4004)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
socket$inet6(0xa, 0x1, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2dc, 0x1b4, 0x0, 0x148, 0x1b4, 0x148, 0x248, 0x240, 0x240, 0x248, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x11e, 0x10, 0x2, 0x0, 'syz1\x00'}}, @common=@addrtype={{0x2c}, {0x0, 0x0, 0x0, 0x240}}]}, @common=@inet=@SYNPROXY={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x338)

803.926226ms ago: executing program 1 (id=390):
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socket$nl_generic(0x11, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xfd9c, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x100, 0xe000000, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee000000fffff000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0)
socket$kcm(0x21, 0x2, 0x2)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0)

727.797389ms ago: executing program 1 (id=391):
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8)
r0 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f00000001c0)=""/58)
r1 = gettid()
timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000))
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0)
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mknodat(r2, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
chmod(&(0x7f0000000080)='./file1\x00', 0x0)
linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0)
unlink(&(0x7f0000000040)='./file0/file0\x00')
geteuid()
unlink(&(0x7f0000000180)='./file1\x00')
r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mknodat$loop(r4, &(0x7f0000000100)='./bus\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000300)='.\x00', 0x10000, 0x0)
renameat2(r5, &(0x7f00000004c0)='./bus\x00', r3, &(0x7f0000000500)='./file0\x00', 0x0)

657.908708ms ago: executing program 1 (id=392):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000005"], 0x0, 0x26, 0x0, 0xa, 0xefff, 0x0, @void, @value}, 0x20)

657.532539ms ago: executing program 2 (id=393):
r0 = socket(0x1e, 0x5, 0x0)
connect$tipc(r0, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
openat(0xffffffffffffff9c, 0x0, 0x300, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='fdinfo\x00')
fchdir(r3)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$netlink(0x10, 0x3, 0xc)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000001d00)='net/unix\x00')
r11 = fanotify_init(0x0, 0x1)
fanotify_mark(r11, 0x1, 0x40000011, r10, 0x0)
r12 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
getdents(r12, &(0x7f0000000000)=""/46, 0x2e)
r13 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000100)={0x4})
bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0)
syz_clone(0x4084000, 0x0, 0x0, 0x0, 0x0, 0x0)

557.769563ms ago: executing program 1 (id=394):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
listen(r2, 0x3)
r5 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
bind$inet(r5, &(0x7f0000000180)={0x2, 0xce20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10)
listen(r5, 0x6)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e0001006900010000000000000000000000000000000000526dc27aa34ecd23540a6011bbc02f058f55eadaa9609da35ad9a16119adaef38ec07d79fe73a477ad6c11b26e66df2f17922ec108eae3031e86c33898bb44c58c7a3fc0d83ed2287fce1616574d9de0fc0baeaa1f2ea935126fca44c333824359ae3159e9e4756c8e0b000000208d9fb6cc1033a038a2f96535de007fe4d912d41e0d58dbd15d5f4c156e792d6e98cb2c", @ANYRES32=r6, @ANYRESHEX=0x0], 0x48}, 0x1, 0x0, 0x0, 0x80d0}, 0x4002000)

506.873724ms ago: executing program 1 (id=395):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f0000000280)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5)
ioctl$UI_DEV_CREATE(r3, 0x5501)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000030850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

441.225433ms ago: executing program 4 (id=396):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0001"], 0x1c}}, 0x0)
sync_file_range(r1, 0xfffffffc, 0x80, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = socket$isdn(0x22, 0x3, 0x23)
setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000080), 0x4)

358.069831ms ago: executing program 4 (id=397):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x100000, 0x9, 0x0, 0x0, {0x0, 0x0, 0x3e}, {0x0, 0x0, 0x800000}, {}, {0x0, 0xfffff90d, 0x1}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x9, 0x200000, 0xe, 0x1, 0x0, 0x3, 0x1})

357.506847ms ago: executing program 4 (id=398):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x1, 0x8, 0x100, 0x1400, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000001c0)={'syztnl2\x00', <r2=>0x0, 0x8, 0x8000, 0x2, 0x5, {{0xc, 0x4, 0x2, 0x20, 0x30, 0x64, 0x0, 0xc, 0x2f, 0x0, @multicast2, @multicast1, {[@ssrr={0x89, 0x1b, 0xe, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x1a}, @multicast1, @dev={0xac, 0x14, 0x14, 0x25}]}]}}}}})
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x3, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xe, 0x4}, {0xc, 0x1}]}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x6, 0x3}]}, @var={0xd, 0x0, 0x0, 0xe, 0x4}, @ptr={0x4, 0x0, 0x0, 0x2, 0x2}, @fwd={0x10}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x61]}}, &(0x7f0000000300)=""/236, 0x8b, 0xec, 0x0, 0xd, 0x10000, @value}, 0x28)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="84010000", @ANYRES16=r5, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="08007d80040002000600eb00fcff0000d4007d8053000200a53b3277c8f0413dec14dd9815d653ec35781c51f89229db8affaa69c77923c23c83225eb5e2f0e524d3c4f54da105a6dc0741cc2b8b9ea497c5301aa6903c81e4f7411c8bfadea1f1357a4b34940a0040000200d18e5bf63dd3de4e00eed03f9f1ce6099b602b"], 0x184}}, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00')
preadv(r7, &(0x7f0000000280)=[{&(0x7f0000000380)=""/218, 0xda}, {0x0, 0xf5ff}], 0x2, 0x14a, 0x0)
ioctl$SG_SET_KEEP_ORPHAN(r7, 0x2287, &(0x7f0000000740)=0x48c)
sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x20, r5, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffff6, 0x59}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8095}, 0x48040)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x81, 0x0, r1, 0x65dc421c, '\x00', r2, r3, 0x2, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r8=>r3, {0x1}}, './file0\x00'})
r9 = socket$alg(0x26, 0x5, 0x0)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00')
read$FUSE(r10, &(0x7f00000102c0)={0x2020}, 0x2020)
bind$alg(r10, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r11 = accept4(r9, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r11)
sendmsg$DEVLINK_CMD_RATE_SET(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000008c80)={0x128, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe9, 0xa8, @random="8c5b7b9105de84c9a02641c4d524d739ea922e1fc8506b87be909556bda7ccaad32941be05152527d7c739f78f8c11bec93e379322ac7b02439882229397f87850aa49e5668226fb1f1789a900562494a744f8b2c3cd07dcb18ee1500b997eee658ad4bdd9887254c08db7583fa662eab8ee2ea07e114196f4470e6712c94e8d8ed4ffeefb72fbf100021eba62bcf0a2f3d95b86edd74eb29a80d2e1f2cd71d1c98dda123e9d00b221233eeda0142bcaa986cbc030eeb64dfc37c042093774ebc4c4e65975c614dc193efaf4cfa82ea5e8939b68923915b2ddfc35f38d7105410a9391df02"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xf5}, @handle=@pci={{0x8}, {0x11}}]}, 0xfd51}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, &(0x7f00000005c0)={0x2, @sdr={0x39b19552401fca01, 0x619}})
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000030a00000000000000000000000000000900010073797a30000000000900030073797a30000000006c000000060a000000000000000000000000000008000b4000000000440004802c0001800a0001006c696d69740000001c0002800c00014000005300000000000c0002400000000000000000140001800b0001006c6f6f6b75700000040002800900010073797a300000000014000000110001"], 0xe0}}, 0x0)
sendmsg$NFT_BATCH(r12, &(0x7f0000000600)={0x0, 0xfffffffffffffdc1, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}, 0x1, 0x0, 0x0, 0x44}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}}, 0x0)

247.960014ms ago: executing program 4 (id=399):
socket$nl_route(0x10, 0x3, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x81, 0x101000)
ioctl$AUTOFS_IOC_PROTOVER(r1, 0x9204, 0x0)
r2 = dup(r0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @local}}, [0x80, 0x104, 0x20000000000005, 0x1, 0x5, 0xe, 0x8f8, 0x7, 0x5, 0xfff1, 0x44, 0x0, 0x93c1, 0x36, 0x5]}, &(0x7f00000003c0)=0xfc)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(&(0x7f0000000140)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='minix\x00', 0x221005d, 0x0)
r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000040)=0xb)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0x6804, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r5, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r6, 0x0, 0x80)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet(0x2b, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000400000022bf000000000000", @ANYRES32, @ANYBLOB="0000000000000000000003000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001800"/21], 0x48)
close(0x3)
r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r8 = dup(r7)
write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c)

107.985407ms ago: executing program 2 (id=400):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = socket$inet(0xa, 0x801, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c000500ff000000000000000c0002000000020000000097040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r3, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r0], 0x90}}, 0x0)

4.024139ms ago: executing program 2 (id=401):
unshare(0x62040200)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000fc0)={'filter\x00', 0x1002, 0x4, 0x3ac, 0x1ec, 0x0, 0x1ec, 0x2cc, 0x2cc, 0x2cc, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xff000000, 0xe, 0x4, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@random="b8d75668cd6a", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x9, 0xfff0, 0x8, 0x6, 0x4, 0xfff7, 'veth1_to_hsr\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x0, 0x52}, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x1ec}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="0afc0f6e6adf", @mac=@multicast, @rand_addr=0x64010102, @rand_addr=0x64010101, 0x4, 0xff030000}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00', 0x0, {0xfff9}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3f8)

1.246854ms ago: executing program 3 (id=402):
socket(0x10, 0x3, 0x0)
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0x6805, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000000080), 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7ff, 0x81, 0xd, 0x4005, 0x2})
ioctl$BLKTRACESTART(r4, 0x1274, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000000a0a0101000000eaffffff00020000080c0010400000030800064000000000080007400000003a08000440000000020900020073797a3000000000300011800d00010073796e70726f7879400000001c000280060001400001000005000200ff000000050002000a"], 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x200000d0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000100)=0x2, 0x4)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c)
socket(0x10, 0x3, 0x0)
openat$vim2m(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)

0s ago: executing program 2 (id=403):
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socket$nl_generic(0x11, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xfd9c, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x100, 0xe000000, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000001000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0)
socket$kcm(0x21, 0x2, 0x2)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:26614' (ED25519) to the list of known hosts.
[   41.014781][ T5926] cgroup: Unknown subsys name 'net'
[   41.122447][ T5926] cgroup: Unknown subsys name 'cpuset'
[   41.125676][ T5926] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   41.929539][ T5926] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   43.740603][   T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   43.750981][ T5943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   43.752694][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   43.753705][ T5943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   43.756406][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   43.757848][ T5943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   43.759930][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   43.762005][ T5943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   43.764275][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   43.766230][ T5943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   43.767780][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   43.770104][ T5943] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   43.772215][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   43.773877][ T5943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   43.775956][ T5944] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   43.777220][ T5951] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   43.777606][ T5951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   43.782637][ T5943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   43.785130][ T5951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   43.787825][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   43.790795][ T5951] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   43.794675][ T5943] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   43.794822][ T5951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   43.796963][ T5943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   43.922093][ T5938] chnl_net:caif_netlink_parms(): no params data found
[   43.959273][ T5941] chnl_net:caif_netlink_parms(): no params data found
[   43.963890][ T5945] chnl_net:caif_netlink_parms(): no params data found
[   44.076477][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.079007][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.081486][ T5938] bridge_slave_0: entered allmulticast mode
[   44.083741][ T5938] bridge_slave_0: entered promiscuous mode
[   44.088879][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.091248][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.093315][ T5938] bridge_slave_1: entered allmulticast mode
[   44.095739][ T5938] bridge_slave_1: entered promiscuous mode
[   44.106922][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.108986][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.111322][ T5945] bridge_slave_0: entered allmulticast mode
[   44.113460][ T5945] bridge_slave_0: entered promiscuous mode
[   44.116428][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.118473][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.121707][ T5941] bridge_slave_0: entered allmulticast mode
[   44.123828][ T5941] bridge_slave_0: entered promiscuous mode
[   44.126249][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.128395][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.130553][ T5941] bridge_slave_1: entered allmulticast mode
[   44.132695][ T5941] bridge_slave_1: entered promiscuous mode
[   44.153974][ T5948] chnl_net:caif_netlink_parms(): no params data found
[   44.158841][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.162191][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.164959][ T5945] bridge_slave_1: entered allmulticast mode
[   44.168367][ T5945] bridge_slave_1: entered promiscuous mode
[   44.191008][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.215612][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.229602][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.234287][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.237778][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.257449][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.296882][ T5938] team0: Port device team_slave_0 added
[   44.307455][ T5941] team0: Port device team_slave_0 added
[   44.312325][ T5941] team0: Port device team_slave_1 added
[   44.314648][ T5938] team0: Port device team_slave_1 added
[   44.318149][ T5945] team0: Port device team_slave_0 added
[   44.365517][ T5945] team0: Port device team_slave_1 added
[   44.367893][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.371342][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.381829][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.400965][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.403005][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.405037][ T5948] bridge_slave_0: entered allmulticast mode
[   44.407170][ T5948] bridge_slave_0: entered promiscuous mode
[   44.410244][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.412885][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.422626][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.457078][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.459073][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.466538][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.471391][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.474042][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.476422][ T5948] bridge_slave_1: entered allmulticast mode
[   44.478542][ T5948] bridge_slave_1: entered promiscuous mode
[   44.481090][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.483077][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.490875][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.494475][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.496491][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.504006][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.536422][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.538957][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.548493][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.558151][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.581521][ T5941] hsr_slave_0: entered promiscuous mode
[   44.584602][ T5941] hsr_slave_1: entered promiscuous mode
[   44.596329][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.617756][ T5945] hsr_slave_0: entered promiscuous mode
[   44.619808][ T5945] hsr_slave_1: entered promiscuous mode
[   44.621854][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   44.624167][ T5945] Cannot create hsr debugfs directory
[   44.651976][ T5938] hsr_slave_0: entered promiscuous mode
[   44.653949][ T5938] hsr_slave_1: entered promiscuous mode
[   44.655787][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   44.657978][ T5938] Cannot create hsr debugfs directory
[   44.668521][ T5948] team0: Port device team_slave_0 added
[   44.671331][ T5948] team0: Port device team_slave_1 added
[   44.731464][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.733982][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.743171][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.760233][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.763021][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.772527][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.819310][ T5948] hsr_slave_0: entered promiscuous mode
[   44.821434][ T5948] hsr_slave_1: entered promiscuous mode
[   44.823370][ T5948] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   44.825547][ T5948] Cannot create hsr debugfs directory
[   44.961244][ T5945] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   44.967476][ T5945] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   44.976835][ T5945] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   44.982708][ T5945] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   44.995971][ T5941] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   44.999871][ T5941] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   45.005783][ T5941] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   45.010654][ T5941] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   45.031817][ T5938] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   45.035254][ T5938] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   45.038702][ T5938] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   45.042127][ T5938] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   45.065028][ T5948] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   45.071869][ T5948] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   45.076628][ T5948] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   45.082275][ T5948] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   45.117136][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.143653][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.146510][ T5945] 8021q: adding VLAN 0 to HW filter on device team0
[   45.160178][ T5941] 8021q: adding VLAN 0 to HW filter on device team0
[   45.170389][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.172975][ T1226] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.185776][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.188012][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.191200][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.193219][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.198315][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.202260][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.204593][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.215223][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.224106][ T5948] 8021q: adding VLAN 0 to HW filter on device team0
[   45.233985][ T5938] 8021q: adding VLAN 0 to HW filter on device team0
[   45.239045][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.241878][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.253949][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.256126][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.264695][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.266795][ T1226] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.282051][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.284150][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.312034][ T5948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   45.389768][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.397648][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.408245][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.424225][ T5945] veth0_vlan: entered promiscuous mode
[   45.434324][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.439597][ T5945] veth1_vlan: entered promiscuous mode
[   45.449522][ T5941] veth0_vlan: entered promiscuous mode
[   45.467622][ T5941] veth1_vlan: entered promiscuous mode
[   45.474737][ T5945] veth0_macvtap: entered promiscuous mode
[   45.480726][ T5938] veth0_vlan: entered promiscuous mode
[   45.487099][ T5945] veth1_macvtap: entered promiscuous mode
[   45.493623][ T5948] veth0_vlan: entered promiscuous mode
[   45.497978][ T5948] veth1_vlan: entered promiscuous mode
[   45.507489][ T5938] veth1_vlan: entered promiscuous mode
[   45.520503][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.523437][ T5941] veth0_macvtap: entered promiscuous mode
[   45.528541][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.533738][ T5941] veth1_macvtap: entered promiscuous mode
[   45.539786][ T5945] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.542648][ T5945] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.545136][ T5945] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.547635][ T5945] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.555393][ T5948] veth0_macvtap: entered promiscuous mode
[   45.563586][ T5948] veth1_macvtap: entered promiscuous mode
[   45.571184][ T5938] veth0_macvtap: entered promiscuous mode
[   45.583272][ T5938] veth1_macvtap: entered promiscuous mode
[   45.585696][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.589626][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.594294][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.605242][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.608335][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.613813][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.616889][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.619854][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.623670][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.626619][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.629928][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.635810][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.638771][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.641981][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.645007][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.648235][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.653537][ T5941] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.656178][ T5941] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.659100][ T5941] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.662778][ T5941] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.675273][ T5948] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.677810][ T5948] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.681195][ T5948] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.684443][ T5948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.701618][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.704699][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.707535][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.711315][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.715221][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.719199][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.724663][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.732559][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.735606][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.739465][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.743613][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.747187][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.751164][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.754590][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.758188][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.762033][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.766988][ T5938] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.769486][ T5938] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.772276][ T5938] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.774814][ T5938] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.790501][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.793428][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.804023][ T5943] Bluetooth: hci2: command tx timeout
[   45.804027][ T5939] Bluetooth: hci0: command tx timeout
[   45.830066][ T5945] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   45.830139][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.837661][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.846658][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.848917][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.862899][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.865772][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.873097][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.875946][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.880170][ T5943] Bluetooth: hci3: command tx timeout
[   45.890258][ T5943] Bluetooth: hci1: command tx timeout
[   45.898470][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.902984][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.904699][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.909238][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.018258][ T6008] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   46.036081][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   46.101116][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   46.104457][ T6008] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3'.
[   46.173541][ T5943] block nbd0: Receive control failed (result -107)
[   46.410628][ T6008] nbd0: detected capacity change from 0 to 139635829244160
[   46.417153][ T5933] block nbd0: Dead connection, failed to find a fallback
[   46.419307][ T5933] block nbd0: shutting down sockets
[   46.507249][ T5933] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   46.518141][ T5933] Buffer I/O error on dev nbd0, logical block 0, async page read
[   46.540995][ T5933] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   46.550857][ T5933] Buffer I/O error on dev nbd0, logical block 0, async page read
[   46.553227][ T5933] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   46.555931][ T5933] Buffer I/O error on dev nbd0, logical block 0, async page read
[   46.559016][ T5933] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   46.562766][ T5933] Buffer I/O error on dev nbd0, logical block 0, async page read
[   46.565280][ T5933] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   46.568469][ T5933] Buffer I/O error on dev nbd0, logical block 0, async page read
[   46.571268][ T5933] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   46.574201][ T5933] Buffer I/O error on dev nbd0, logical block 0, async page read
[   46.576643][ T5933] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   46.579295][ T5933] Buffer I/O error on dev nbd0, logical block 0, async page read
[   46.582764][ T5933] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   46.585454][ T5933] Buffer I/O error on dev nbd0, logical block 0, async page read
[   46.587749][ T5933] ldm_validate_partition_table(): Disk read failed.
[   46.589922][ T5933] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   46.593739][ T5933] Buffer I/O error on dev nbd0, logical block 0, async page read
[   46.596100][ T5933] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   46.598953][ T5933] Buffer I/O error on dev nbd0, logical block 0, async page read
[   46.605440][ T5933] Dev nbd0: unable to read RDB block 0
[   46.607528][ T5933]  nbd0: unable to read partition table
[   46.611155][ T5933] ldm_validate_partition_table(): Disk read failed.
[   46.613300][ T5933] Dev nbd0: unable to read RDB block 0
[   46.615439][ T5933]  nbd0: unable to read partition table
[   46.900585][ T6027] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[   46.903199][ T6027] overlayfs: missing 'lowerdir'
[   47.880423][ T5943] Bluetooth: hci2: command tx timeout
[   47.890098][ T5943] Bluetooth: hci0: command tx timeout
[   47.960161][ T5943] Bluetooth: hci1: command tx timeout
[   47.960207][ T5939] Bluetooth: hci3: command tx timeout
[   48.411089][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   48.415284][ T6057] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[   48.417424][ T6057] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   48.420844][ T6057] vhci_hcd vhci_hcd.0: Device attached
[   48.610795][ T5978] vhci_hcd: vhci_device speed not set
[   48.670491][ T5978] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[   48.680560][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'.
[   48.784815][ T6068] netlink: 'syz.0.15': attribute type 1 has an invalid length.
[   48.896438][ T6068] vlan2: entered promiscuous mode
[   48.930040][ T6073] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17'.
[   48.961683][ T6073] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   48.965816][ T6073] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   48.970343][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   48.972773][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   48.973084][ T6073] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   48.975173][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   48.980550][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   48.982956][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   48.985324][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   48.987733][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   48.990188][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   48.992581][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   49.113970][ T6082] pimreg: entered allmulticast mode
[   49.517869][ T6095] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   49.532297][ T6095] evm: overlay not supported
[   49.934301][ T6060] vhci_hcd: connection reset by peer
[   49.943953][   T83] vhci_hcd: stop threads
[   49.945470][   T83] vhci_hcd: release socket
[   49.947578][   T83] vhci_hcd: disconnect device
[   49.975931][ T5943] Bluetooth: hci0: command tx timeout
[   49.977318][ T5947] Bluetooth: hci2: command tx timeout
[   50.042800][ T5947] Bluetooth: hci3: command tx timeout
[   50.042882][ T5943] Bluetooth: hci1: command tx timeout
[   50.366384][ T6103] vlan2: entered promiscuous mode
[   50.367955][ T6103] vlan2: entered allmulticast mode
[   50.659211][ T6112] tmpfs: Bad value for 'mpol'
[   51.063471][ T6119] netlink: 48 bytes leftover after parsing attributes in process `syz.0.25'.
[   51.195247][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'.
[   51.247667][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27'.
[   51.252794][ T6123] netlink: 32 bytes leftover after parsing attributes in process `syz.3.27'.
[   51.334216][ T5943] block nbd1: Receive control failed (result -107)
[   51.420347][ T6123] nbd1: detected capacity change from 0 to 1649267441920
[   51.424811][ T5933] block nbd1: Dead connection, failed to find a fallback
[   51.426298][ T6130] syz.2.30 uses obsolete (PF_INET,SOCK_PACKET)
[   51.427821][ T5933] block nbd1: shutting down sockets
[   51.433464][ T5933] ldm_validate_partition_table(): Disk read failed.
[   51.437546][ T5933] Dev nbd1: unable to read RDB block 0
[   51.439326][ T5933]  nbd1: unable to read partition table
[   51.446642][ T5933] ldm_validate_partition_table(): Disk read failed.
[   51.448713][ T5933] Dev nbd1: unable to read RDB block 0
[   51.450704][ T5933]  nbd1: unable to read partition table
[   52.040264][ T5947] Bluetooth: hci0: command tx timeout
[   52.042903][ T5943] Bluetooth: hci2: command tx timeout
[   52.121116][ T5947] Bluetooth: hci1: command tx timeout
[   52.123413][ T5943] Bluetooth: hci3: command 0x0419 tx timeout
[   52.165987][ T6134] netlink: 48 bytes leftover after parsing attributes in process `syz.3.32'.
[   52.172480][ T6134] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   52.176590][ T6134] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   52.224637][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34'.
[   52.300880][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'.
[   52.309279][ T6138] netlink: 32 bytes leftover after parsing attributes in process `syz.3.34'.
[   52.352397][ T5943] block nbd2: Receive control failed (result -107)
[   52.397745][ T6143] netlink: 20 bytes leftover after parsing attributes in process `syz.0.36'.
[   52.420674][ T6138] nbd2: detected capacity change from 0 to 140731045904640
[   52.426526][ T5933] block nbd2: Dead connection, failed to find a fallback
[   52.428574][ T5933] block nbd2: shutting down sockets
[   52.430126][ T5933] blk_print_req_error: 58 callbacks suppressed
[   52.430134][ T5933] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.434412][ T5933] buffer_io_error: 56 callbacks suppressed
[   52.434418][ T5933] Buffer I/O error on dev nbd2, logical block 0, async page read
[   52.438447][ T5933] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.441249][ T5933] Buffer I/O error on dev nbd2, logical block 0, async page read
[   52.443809][ T5933] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.446331][ T5933] Buffer I/O error on dev nbd2, logical block 0, async page read
[   52.448544][ T5933] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.451229][ T5933] Buffer I/O error on dev nbd2, logical block 0, async page read
[   52.453465][ T5933] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.456009][ T5933] Buffer I/O error on dev nbd2, logical block 0, async page read
[   52.458227][ T5933] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.460832][ T5933] Buffer I/O error on dev nbd2, logical block 0, async page read
[   52.463059][ T5933] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.465624][ T5933] Buffer I/O error on dev nbd2, logical block 0, async page read
[   52.467831][ T5933] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.470434][ T5933] Buffer I/O error on dev nbd2, logical block 0, async page read
[   52.472646][ T5933] ldm_validate_partition_table(): Disk read failed.
[   52.474551][ T5933] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.477100][ T5933] Buffer I/O error on dev nbd2, logical block 0, async page read
[   52.479342][ T5933] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.482030][ T5933] Buffer I/O error on dev nbd2, logical block 0, async page read
[   52.484311][ T5933] Dev nbd2: unable to read RDB block 0
[   52.486038][ T5933]  nbd2: unable to read partition table
[   52.489496][ T5933] ldm_validate_partition_table(): Disk read failed.
[   52.491718][ T5933] Dev nbd2: unable to read RDB block 0
[   52.493453][ T5933]  nbd2: unable to read partition table
[   52.877268][ T6158] bridge0: port 3(syz_tun) entered blocking state
[   52.879593][ T6158] bridge0: port 3(syz_tun) entered disabled state
[   52.882439][ T6158] syz_tun: entered allmulticast mode
[   52.887516][ T6158] syz_tun: entered promiscuous mode
[   52.890117][ T6158] bridge0: port 3(syz_tun) entered blocking state
[   52.892118][ T6158] bridge0: port 3(syz_tun) entered forwarding state
[   53.149177][ T6162] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[   53.151101][ T6162] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   53.154645][ T6162] vhci_hcd vhci_hcd.0: Device attached
[   53.158046][ T6162] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9)
[   53.160682][ T6162] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   53.166056][ T6162] vhci_hcd vhci_hcd.0: Device attached
[   53.168684][ T6162] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   53.173888][ T6162] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(14)
[   53.175873][ T6162] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   53.178701][ T6162] vhci_hcd vhci_hcd.0: Device attached
[   53.182017][ T6162] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(16)
[   53.183987][ T6162] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   53.186211][ T6162] vhci_hcd vhci_hcd.0: Device attached
[   53.189227][ T6162] syz.2.41[6162] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   53.189284][ T6162] syz.2.41[6162] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   53.278102][ T6175] netdevsim netdevsim1: Firmware load for './cgroup/../file0' refused, path contains '..' component
[   53.606753][ T6187] netlink: 'syz.3.46': attribute type 1 has an invalid length.
[   53.608940][ T6187] netlink: 224 bytes leftover after parsing attributes in process `syz.3.46'.
[   53.615110][ T6190] trusted_key: syz.1.44 sent an empty control message without MSG_MORE.
[   53.973671][ T6169] vhci_hcd: connection closed
[   53.974584][   T45] vhci_hcd: stop threads
[   53.974992][ T6165] vhci_hcd: connection closed
[   53.976595][   T45] vhci_hcd: release socket
[   53.978781][ T6167] vhci_hcd: connection closed
[   53.981752][ T6163] vhci_hcd: connection reset by peer
[   53.981914][   T45] vhci_hcd: disconnect device
[   53.988275][   T45] vhci_hcd: stop threads
[   53.993882][   T45] vhci_hcd: release socket
[   53.996370][   T45] vhci_hcd: disconnect device
[   54.001528][   T45] vhci_hcd: stop threads
[   54.004993][   T45] vhci_hcd: release socket
[   54.008910][   T45] vhci_hcd: disconnect device
[   54.018676][   T45] vhci_hcd: stop threads
[   54.023361][   T45] vhci_hcd: release socket
[   54.028113][   T45] vhci_hcd: disconnect device
[   54.090115][ T5978] vhci_hcd: vhci_device speed not set
[   54.200097][ T5943] Bluetooth: hci3: command 0x0419 tx timeout
[   54.664792][ T6238] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.836409][ T6238] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.942997][ T6238] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.074662][ T6238] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.247664][ T6238] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.254911][ T6238] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.260300][ T6238] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.265600][ T6238] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.828465][ T6277] netlink: 'syz.2.77': attribute type 1 has an invalid length.
[   55.970167][ T1334] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   55.999924][ T6282] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   56.068326][ T6285] loop7: detected capacity change from 0 to 16384
[   56.123166][ T1334] usb 6-1: config 0 has an invalid interface number: 57 but max is 0
[   56.125953][ T1334] usb 6-1: config 0 has no interface number 0
[   56.127780][ T1334] usb 6-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63
[   56.130476][ T1334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.135820][ T1334] usb 6-1: config 0 descriptor??
[   56.143120][ T1334] gspca_main: mr97310a-2.14.0 probing 093a:010f
[   56.145080][ T1334] gspca_mr97310a: reg write [21] error -22
[   56.147185][ T1334] mr97310a 6-1:0.57: probe with driver mr97310a failed with error -22
[   56.386210][ T6294] Zero length message leads to an empty skb
[   56.388381][ T6294] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[   56.392812][ T6294] __nla_validate_parse: 8 callbacks suppressed
[   56.392820][ T6294] netlink: 24 bytes leftover after parsing attributes in process `syz.0.81'.
[   56.463048][   T35] usb 6-1: USB disconnect, device number 2
[   56.962523][ T6301] netlink: 76 bytes leftover after parsing attributes in process `syz.3.83'.
[   57.215337][ T6307] netlink: 'syz.1.86': attribute type 39 has an invalid length.
[   57.284018][ T6308] block device autoloading is deprecated and will be removed.
[   57.443221][ T6317] netlink: 24 bytes leftover after parsing attributes in process `syz.1.88'.
[   57.691991][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'.
[   57.696948][ T6329] bridge0: port 3(macsec1) entered blocking state
[   57.699738][ T6329] bridge0: port 3(macsec1) entered disabled state
[   57.704284][ T6329] macsec1: entered allmulticast mode
[   57.707072][ T6329] macsec1: left allmulticast mode
[   57.967327][   T30] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   58.100072][   T30] usb 5-1: device descriptor read/64, error -71
[   58.350065][   T30] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   58.480248][   T30] usb 5-1: device descriptor read/64, error -71
[   58.590566][   T30] usb usb5-port1: attempt power cycle
[   58.930122][   T30] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   58.952786][   T30] usb 5-1: device descriptor read/8, error -71
[   59.168176][ T6354] netlink: 56 bytes leftover after parsing attributes in process `syz.2.100'.
[   59.190045][   T30] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   59.215814][ T6349] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.221054][   T30] usb 5-1: device descriptor read/8, error -71
[   59.340716][   T30] usb usb5-port1: unable to enumerate USB device
[   59.777990][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'.
[   59.861674][ T6380] hsr_slave_1 (unregistering): left promiscuous mode
[   60.300747][ T6394] Driver unsupported XDP return value 0 on prog  (id 16) dev N/A, expect packet loss!
[   60.627207][ T6411] netlink: 32 bytes leftover after parsing attributes in process `syz.0.120'.
[   60.990495][ T6419] netlink: 48 bytes leftover after parsing attributes in process `syz.3.119'.
[   61.056915][ T6423] netlink: 132 bytes leftover after parsing attributes in process `syz.2.123'.
[   61.066089][ T6423] bond0: option arp_validate: invalid value (18446744073277182465)
[   61.074362][ T6423] netlink: 'syz.2.123': attribute type 10 has an invalid length.
[   61.083444][ T6423] syz_tun: entered promiscuous mode
[   61.099985][ T6423] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   62.016103][ T6462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.138'.
[   62.028169][ T6448] netlink: 48 bytes leftover after parsing attributes in process `syz.1.131'.
[   62.095632][ T6469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'.
[   62.101847][ T6469] bridge0: port 3(macsec1) entered blocking state
[   62.103835][ T6469] bridge0: port 3(macsec1) entered disabled state
[   62.105795][ T6469] macsec1: entered allmulticast mode
[   62.108389][ T6469] macsec1: left allmulticast mode
[   62.329310][ T6479] netlink: 'syz.0.145': attribute type 1 has an invalid length.
[   62.333317][ T6479] netlink: 224 bytes leftover after parsing attributes in process `syz.0.145'.
[   62.563476][ T6487] netlink: 184 bytes leftover after parsing attributes in process `syz.3.147'.
[   62.670047][   T35] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[   62.747314][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'.
[   62.764986][ T6508] vivid-001: disconnect
[   62.800970][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'.
[   62.803683][ T6510] netlink: 32 bytes leftover after parsing attributes in process `syz.3.154'.
[   62.832068][   T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.837697][   T35] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   62.841819][   T35] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.00
[   62.844961][   T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.848549][   T35] usb 6-1: config 0 descriptor??
[   62.873367][ T5943] block nbd3: Receive control failed (result -107)
[   62.930139][ T6510] nbd3: detected capacity change from 0 to 985162418487552
[   62.934918][ T6204] block nbd3: Dead connection, failed to find a fallback
[   62.937254][ T6204] block nbd3: shutting down sockets
[   62.940124][ T6204] blk_print_req_error: 24 callbacks suppressed
[   62.940134][ T6204] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.944282][ T6204] buffer_io_error: 23 callbacks suppressed
[   62.944289][ T6204] Buffer I/O error on dev nbd3, logical block 0, async page read
[   62.958180][ T6204] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.962461][ T6204] Buffer I/O error on dev nbd3, logical block 0, async page read
[   62.965279][ T6204] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.968035][ T6204] Buffer I/O error on dev nbd3, logical block 0, async page read
[   62.972887][ T6204] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.975517][ T6204] Buffer I/O error on dev nbd3, logical block 0, async page read
[   62.978061][ T6204] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.981990][ T6204] Buffer I/O error on dev nbd3, logical block 0, async page read
[   62.984333][ T6204] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.986910][ T6204] Buffer I/O error on dev nbd3, logical block 0, async page read
[   62.989182][ T6204] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.996797][ T6204] Buffer I/O error on dev nbd3, logical block 0, async page read
[   62.998991][ T6204] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   63.002385][ T6204] Buffer I/O error on dev nbd3, logical block 0, async page read
[   63.005316][ T6204] ldm_validate_partition_table(): Disk read failed.
[   63.007440][ T6204] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   63.011684][ T6204] Buffer I/O error on dev nbd3, logical block 0, async page read
[   63.014163][ T6204] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   63.016932][ T6204] Buffer I/O error on dev nbd3, logical block 0, async page read
[   63.019453][ T6204] Dev nbd3: unable to read RDB block 0
[   63.022545][ T6204]  nbd3: unable to read partition table
[   63.026305][ T6204] ldm_validate_partition_table(): Disk read failed.
[   63.028462][ T6204] Dev nbd3: unable to read RDB block 0
[   63.032180][ T6204]  nbd3: unable to read partition table
[   63.157681][ T6492] vivid-001: reconnect
[   63.380989][ T6558] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   63.382941][ T6559] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9
[   63.421430][ T6564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.164'.
[   63.424138][ T6564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.164'.
[   63.698119][ T6583] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.701543][ T6583] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   63.744115][ T6581] fuse: root generation should be zero
[   64.432248][ T6594] netlink: 'syz.3.173': attribute type 1 has an invalid length.
[   64.551289][ T6606] gretap1: entered allmulticast mode
[   64.554084][ T6606] bridge0: port 3(gretap1) entered blocking state
[   64.556016][ T6606] bridge0: port 3(gretap1) entered disabled state
[   64.558303][ T6606] gretap1: entered promiscuous mode
[   64.573995][ T6606] bridge0: port 3(gretap1) entered blocking state
[   64.576031][ T6606] bridge0: port 3(gretap1) entered forwarding state
[   64.601050][    C1] bridge0: received packet on gretap1 with own address as source address (addr:2e:ab:df:5d:db:3c, vlan:0)
[   65.078120][ T6644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   65.098310][ T6647] FAULT_INJECTION: forcing a failure.
[   65.098310][ T6647] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   65.101056][    C0] bridge0: received packet on gretap1 with own address as source address (addr:2e:ab:df:5d:db:3c, vlan:0)
[   65.102476][ T6647] CPU: 2 UID: 0 PID: 6647 Comm: syz.3.192 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0
[   65.108430][ T6647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   65.111383][ T6647] Call Trace:
[   65.112316][ T6647]  <TASK>
[   65.113145][ T6647]  dump_stack_lvl+0x16c/0x1f0
[   65.114502][ T6647]  should_fail_ex+0x497/0x5b0
[   65.115785][ T6647]  _copy_to_user+0x32/0xd0
[   65.117130][ T6647]  simple_read_from_buffer+0xd0/0x160
[   65.118713][ T6647]  proc_fail_nth_read+0x198/0x270
[   65.120149][ T6647]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   65.121766][ T6647]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   65.123352][ T6647]  vfs_read+0x1df/0xbe0
[   65.124563][ T6647]  ? __fget_files+0x1fc/0x3a0
[   65.125957][ T6647]  ? __pfx___mutex_lock+0x10/0x10
[   65.127466][ T6647]  ? __pfx_vfs_read+0x10/0x10
[   65.128895][ T6647]  ? __fget_files+0x206/0x3a0
[   65.130321][ T6647]  ksys_read+0x12b/0x250
[   65.131586][ T6647]  ? __pfx_ksys_read+0x10/0x10
[   65.132996][ T6647]  __do_fast_syscall_32+0x73/0x120
[   65.134564][ T6647]  do_fast_syscall_32+0x32/0x80
[   65.136021][ T6647]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   65.138348][ T6647] RIP: 0023:0xf70ce579
[   65.139724][ T6647] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   65.146439][ T6647] RSP: 002b:00000000f50c0590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[   65.149678][ T6647] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f50c0620
[   65.150325][    C1] bridge0: received packet on gretap1 with own address as source address (addr:2e:ab:df:5d:db:3c, vlan:0)
[   65.152814][ T6647] RDX: 000000000000000f RSI: 00000000f7403ff4 RDI: 0000000000000000
[   65.152829][ T6647] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[   65.152840][ T6647] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[   65.163012][ T6647] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   65.165334][ T6647]  </TASK>
[   65.465558][   T35] usbhid 6-1:0.0: can't add hid device: -71
[   65.467402][   T35] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[   65.471482][   T35] usb 6-1: USB disconnect, device number 3
[   65.492857][ T6658] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   65.495873][ T6658] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   65.746341][ T6676] bridge0: port 4(macsec1) entered blocking state
[   65.748571][ T6676] bridge0: port 4(macsec1) entered disabled state
[   65.750875][ T6676] macsec1: entered allmulticast mode
[   65.753655][ T6676] macsec1: left allmulticast mode
[   65.949298][ T6683] netlink: 'syz.3.203': attribute type 1 has an invalid length.
[   66.120652][    C0] bridge0: received packet on gretap1 with own address as source address (addr:2e:ab:df:5d:db:3c, vlan:0)
[   66.124961][    C0] bridge0: received packet on gretap1 with own address as source address (addr:2e:ab:df:5d:db:3c, vlan:0)
[   66.690707][    C0] bridge0: received packet on gretap1 with own address as source address (addr:2e:ab:df:5d:db:3c, vlan:0)
[   66.723176][ T6714] 9pnet_virtio: no channels available for device syz
[   66.831308][ T5943] block nbd4: Receive control failed (result -107)
[   66.843459][ T6717] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.847177][ T6717] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   66.890174][ T6713] nbd4: detected capacity change from 0 to 422212465066240
[   66.895373][ T6565] block nbd4: Dead connection, failed to find a fallback
[   66.897409][ T6565] block nbd4: shutting down sockets
[   66.913852][ T6565] ldm_validate_partition_table(): Disk read failed.
[   66.916049][ T6565] Dev nbd4: unable to read RDB block 0
[   66.918103][ T6565]  nbd4: unable to read partition table
[   66.921357][ T6565] ldm_validate_partition_table(): Disk read failed.
[   66.923518][ T6565] Dev nbd4: unable to read RDB block 0
[   66.925357][ T6565]  nbd4: unable to read partition table
[   67.212636][ T6732] __nla_validate_parse: 18 callbacks suppressed
[   67.212647][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.218'.
[   67.430308][ T6750] netlink: 'syz.3.228': attribute type 1 has an invalid length.
[   67.432600][ T6750] netlink: 224 bytes leftover after parsing attributes in process `syz.3.228'.
[   67.567856][   T39] audit: type=1804 audit(1737242314.956:2): pid=6758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.227" name="/newroot/60/file0/cgroup.controllers" dev="9p" ino=37618307 res=1 errno=0
[   67.569500][ T6758] »»»»»»: renamed from lo (while UP)
[   68.612022][ T6779] netlink: 48 bytes leftover after parsing attributes in process `syz.1.234'.
[   68.951783][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'.
[   69.057594][ T6798] ata3.00: invalid multi_count 1 ignored
[   69.124818][ T6805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.242'.
[   69.320742][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.246'.
[   70.183118][ T6875] netlink: 20 bytes leftover after parsing attributes in process `syz.1.261'.
[   70.186102][ T6875] netlink: 112 bytes leftover after parsing attributes in process `syz.1.261'.
[   70.238674][ T6876] netlink: 'syz.2.259': attribute type 10 has an invalid length.
[   70.520330][    C0] net_ratelimit: 4 callbacks suppressed
[   70.520341][    C0] bridge0: received packet on gretap1 with own address as source address (addr:2e:ab:df:5d:db:3c, vlan:0)
[   70.775031][ T1412] ieee802154 phy1 wpan1: encryption failed: -22
[   70.807780][ T6875] netlink: 20 bytes leftover after parsing attributes in process `syz.1.261'.
[   70.812884][ T6876] bridge0: port 3(gretap1) entered disabled state
[   70.816302][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.818405][ T6876] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.822570][ T6876] bridge0: port 3(gretap1) entered blocking state
[   70.824695][ T6876] bridge0: port 3(gretap1) entered forwarding state
[   70.826829][ T6876] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.828800][ T6876] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.830944][ T6876] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.833195][ T6876] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.837523][ T6876] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   70.860769][    C1] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[   70.865366][    C1] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[   70.885255][ T6878] netlink: 'syz.1.262': attribute type 1 has an invalid length.
[   70.887454][ T6878] netlink: 224 bytes leftover after parsing attributes in process `syz.1.262'.
[   70.907622][ T6884] bridge0: port 4(macsec1) entered blocking state
[   70.910342][ T6884] bridge0: port 4(macsec1) entered disabled state
[   70.912935][ T6884] macsec1: entered allmulticast mode
[   70.916206][ T6884] macsec1: left allmulticast mode
[   71.070731][    C1] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[   71.701990][ T6910] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   71.719988][ T6910] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   71.800557][    C1] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[   72.070607][ T6920] netlink: 'syz.3.275': attribute type 1 has an invalid length.
[   72.362011][ T6926] __nla_validate_parse: 6 callbacks suppressed
[   72.362022][ T6926] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.277'.
[   72.576184][ T6928] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   72.600243][ T5979] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   72.752233][ T5979] usb 6-1: config 9 has an invalid interface number: 205 but max is 0
[   72.754548][ T5979] usb 6-1: config 9 has an invalid interface number: 127 but max is 0
[   72.756910][ T5979] usb 6-1: config 9 has 2 interfaces, different from the descriptor's value: 1
[   72.759532][ T5979] usb 6-1: config 9 has no interface number 0
[   72.761496][ T5979] usb 6-1: config 9 has no interface number 1
[   72.763216][ T5979] usb 6-1: config 9 interface 205 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64
[   72.766221][ T5979] usb 6-1: config 9 interface 205 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[   72.770207][ T5979] usb 6-1: config 9 interface 205 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 10
[   72.773919][ T5979] usb 6-1: too many endpoints for config 9 interface 127 altsetting 131: 211, using maximum allowed: 30
[   72.777210][ T5979] usb 6-1: config 9 interface 127 altsetting 131 has a duplicate endpoint with address 0x8, skipping
[   72.781247][ T5979] usb 6-1: config 9 interface 127 altsetting 131 has an invalid descriptor for endpoint zero, skipping
[   72.784946][ T5979] usb 6-1: config 9 interface 127 altsetting 131 has a duplicate endpoint with address 0x6, skipping
[   72.787915][ T5979] usb 6-1: config 9 interface 127 altsetting 131 endpoint 0x84 has invalid maxpacket 1023, setting to 64
[   72.791327][ T5979] usb 6-1: config 9 interface 127 altsetting 131 has an invalid descriptor for endpoint zero, skipping
[   72.794323][ T5979] usb 6-1: config 9 interface 127 altsetting 131 has 6 endpoint descriptors, different from the interface descriptor's value: 211
[   72.797925][ T5979] usb 6-1: config 9 interface 127 has no altsetting 0
[   72.802603][ T5979] usb 6-1: Dual-Role OTG device on HNP port
[   72.804460][ T5979] usb 6-1: New USB device found, idVendor=19d2, idProduct=000d, bcdDevice=32.d8
[   72.806957][ T5979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.809224][ T5979] usb 6-1: Manufacturer: <鰈霅춈뢛�섊ቡ⡶냣Ⰲ㮆�᫤ꧠ⩠鄒蹒Ϧ�㲡쯠G
[   72.812380][ T5979] usb 6-1: SerialNumber: syz
[   73.025055][ T6926] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   73.027897][ T6926] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   73.032002][ T6926] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   73.034502][ T6926] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   73.037217][ T6926] geneve2: entered allmulticast mode
[   73.043861][ T5979] option 6-1:9.205: GSM modem (1-port) converter detected
[   73.052301][ T5979] usb 6-1: USB disconnect, device number 4
[   73.055761][ T5979] option 6-1:9.205: device disconnected
[   73.080916][ T5939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   73.084486][ T5939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   73.087026][ T5939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   73.092597][ T5939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   73.094991][ T5939] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   73.097173][ T5939] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   73.163386][ T6934] chnl_net:caif_netlink_parms(): no params data found
[   73.225783][ T6946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.284'.
[   73.228429][ T6946] netlink: 112 bytes leftover after parsing attributes in process `syz.2.284'.
[   73.242415][ T6946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.284'.
[   73.246306][ T6934] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.250151][ T6934] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.252274][ T6934] bridge_slave_0: entered allmulticast mode
[   73.257380][ T6934] bridge_slave_0: entered promiscuous mode
[   73.261278][ T6934] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.263720][ T6934] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.266405][ T6934] bridge_slave_1: entered allmulticast mode
[   73.269242][ T6934] bridge_slave_1: entered promiscuous mode
[   73.293383][ T6934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.298882][ T6934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.303940][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'.
[   73.327584][ T6934] team0: Port device team_slave_0 added
[   73.338852][ T6934] team0: Port device team_slave_1 added
[   73.374786][ T6952] capability: warning: `syz.2.286' uses deprecated v2 capabilities in a way that may be insecure
[   73.376248][ T6934] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.381160][ T6934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.390705][ T6934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.396067][ T6934] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.398849][ T6934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.407954][ T6934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.432826][ T6934] hsr_slave_0: entered promiscuous mode
[   73.434894][ T6934] hsr_slave_1: entered promiscuous mode
[   73.436806][ T6934] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.439368][ T6934] Cannot create hsr debugfs directory
[   73.494831][ T6961] overlayfs: missing 'lowerdir'
[   73.533129][ T6955] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   73.533696][ T6934] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   73.539282][ T6934] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   73.545027][ T6955] kvm: pic: level sensitive irq not supported
[   73.545557][ T6955] kvm: pic: non byte read
[   73.551546][ T6934] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   73.564612][ T6934] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   73.584616][ T6934] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.587539][ T6934] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.591225][ T6934] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.594094][ T6934] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.598967][ T5980] IPVS: starting estimator thread 0...
[   73.679052][ T6934] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.688022][ T1226] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.690065][ T6967] IPVS: using max 37 ests per chain, 88800 per kthread
[   73.693297][ T1226] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.708893][ T6934] 8021q: adding VLAN 0 to HW filter on device team0
[   73.715404][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.717364][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.730132][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.732159][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.798201][ T6934] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   73.801427][ T6934] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.854071][ T6934] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.908765][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.295'.
[   73.913781][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.295'.
[   74.059769][ T6934] veth0_vlan: entered promiscuous mode
[   74.066674][ T6934] veth1_vlan: entered promiscuous mode
[   74.095895][ T6934] veth0_macvtap: entered promiscuous mode
[   74.105186][ T6934] veth1_macvtap: entered promiscuous mode
[   74.117003][ T6934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.120200][ T6934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.123035][ T6934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.125917][ T6934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.128658][ T6934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.132456][ T6934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.135263][ T6934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.138140][ T6934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.143260][ T6934] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.151919][ T6934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.154935][ T6934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.157627][ T6934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.160982][ T6934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.163815][ T6934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.166905][ T6934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.169561][ T6934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.172624][ T6934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.175938][ T6934] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.180904][ T6934] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.183968][ T6934] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.186359][ T6934] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.188847][ T6934] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.226113][   T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.229155][   T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.251467][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.253886][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.022375][ T7018] netlink: 'syz.3.303': attribute type 1 has an invalid length.
[   75.024662][ T7018] netlink: 224 bytes leftover after parsing attributes in process `syz.3.303'.
[   75.167459][ T7023] Process accounting resumed
[   75.170056][ T5939] Bluetooth: hci2: command tx timeout
[   75.265047][ T7034] netlink: 'syz.3.305': attribute type 21 has an invalid length.
[   75.267341][ T7034] netlink: 'syz.3.305': attribute type 20 has an invalid length.
[   75.269583][ T7034] IPv6: NLM_F_CREATE should be specified when creating new route
[   75.891837][ T2289] cfg80211: failed to load regulatory.db
[   75.987962][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'.
[   76.016539][ T7047] netlink: 48 bytes leftover after parsing attributes in process `syz.4.309'.
[   76.193039][ T7073] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.203176][ T7073] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   77.210169][ T5979] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   77.241394][ T5939] Bluetooth: hci2: command tx timeout
[   77.360060][ T5979] usb 9-1: Using ep0 maxpacket: 8
[   77.362180][ T5979] usb 9-1: no configurations
[   77.365072][ T5979] usb 9-1: can't read configurations, error -22
[   77.368445][ T7105] netlink: 'syz.3.330': attribute type 1 has an invalid length.
[   77.371606][ T7105] __nla_validate_parse: 3 callbacks suppressed
[   77.371617][ T7105] netlink: 224 bytes leftover after parsing attributes in process `syz.3.330'.
[   77.500082][ T5979] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   77.502518][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.333'.
[   77.579527][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'.
[   77.650049][ T5979] usb 9-1: Using ep0 maxpacket: 8
[   77.652171][ T5979] usb 9-1: no configurations
[   77.653510][ T5979] usb 9-1: can't read configurations, error -22
[   77.655420][ T5979] usb usb9-port1: attempt power cycle
[   77.836102][ T7130] No such timeout policy "syz1"
[   77.878518][ T7132] geneve2: entered promiscuous mode
[   77.880389][ T7132] geneve2: entered allmulticast mode
[   77.883818][ T7132] batman_adv: batadv0: Adding interface: geneve2
[   77.885810][ T7132] batman_adv: batadv0: Interface activated: geneve2
[   78.010094][ T5979] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[   78.030517][ T5979] usb 9-1: Using ep0 maxpacket: 8
[   78.038532][ T5979] usb 9-1: no configurations
[   78.040954][ T5979] usb 9-1: can't read configurations, error -22
[   78.157585][ T7138] team0 (unregistering): Port device team_slave_0 removed
[   78.165117][ T7138] team0 (unregistering): Port device team_slave_1 removed
[   78.180154][ T5979] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[   78.211640][ T5979] usb 9-1: Using ep0 maxpacket: 8
[   78.213725][ T5979] usb 9-1: no configurations
[   78.215111][ T5979] usb 9-1: can't read configurations, error -22
[   78.217112][ T5979] usb usb9-port1: unable to enumerate USB device
[   78.241499][ T7148] 9pnet_fd: Insufficient options for proto=fd
[   79.080272][    C0] bridge0: received packet on gretap1 with own address as source address (addr:2e:ab:df:5d:db:3c, vlan:0)
[   79.330413][ T5939] Bluetooth: hci2: command tx timeout
[   79.462253][ T5998] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   79.469140][ T7178] netlink: 48 bytes leftover after parsing attributes in process `syz.2.354'.
[   79.474900][ T7178] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.478976][ T7178] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   79.514960][ T7180] sp0: Synchronizing with TNC
[   79.547757][ T7180] MTD: Attempt to mount non-MTD device "/dev/sr0"
[   79.620030][ T5998] usb 8-1: Using ep0 maxpacket: 16
[   79.622907][ T5998] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10
[   79.626143][ T5998] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34304, setting to 1024
[   79.629376][ T5998] usb 8-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[   79.632387][ T5998] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.637981][ T5998] usb 8-1: config 0 descriptor??
[   79.641578][ T7171] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   79.661669][ T7180] /dev/sr0: Can't open blockdev
[   79.915367][ T7198] netlink: 24 bytes leftover after parsing attributes in process `syz.2.360'.
[   79.948366][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'.
[   79.951475][ T7203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.362'.
[   80.063559][ T5998] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:05AC:8241.0002/input/input14
[   80.155508][ T5998] appleir 0003:05AC:8241.0002: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0
[   80.402029][ T7234] netlink: 'syz.2.373': attribute type 1 has an invalid length.
[   80.404237][ T7234] netlink: 224 bytes leftover after parsing attributes in process `syz.2.373'.
[   80.910221][ T7251] netlink: 48 bytes leftover after parsing attributes in process `syz.1.376'.
[   81.342022][ T7255] 9pnet_fd: Insufficient options for proto=fd
[   81.400211][ T5939] Bluetooth: hci2: command tx timeout
[   81.467707][ T7261] xt_NFQUEUE: number of queues (257) out of range (got 65786)
[   81.515542][ T7270] netlink: 20 bytes leftover after parsing attributes in process `syz.1.382'.
[   81.623061][ T7278] =======================================================
[   81.623061][ T7278] WARNING: The mand mount option has been deprecated and
[   81.623061][ T7278]          and is ignored by this kernel. Remove the mand
[   81.623061][ T7278]          option from the mount to silence this warning.
[   81.623061][ T7278] =======================================================
[   81.653181][ T7278] MINIX-fs: blocksize too small for device
[   81.680876][ T7280] bridge0: port 4(macsec1) entered blocking state
[   81.684305][ T7280] bridge0: port 4(macsec1) entered disabled state
[   81.687031][ T7280] macsec1: entered allmulticast mode
[   81.691414][ T7280] macsec1: left allmulticast mode
[   81.790280][ T2289] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   81.863363][ T5998] usb 8-1: USB disconnect, device number 2
[   81.944610][ T2289] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.947814][ T2289] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.950995][ T2289] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   81.957626][ T2289] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   81.974086][ T2289] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.980288][ T2289] usb 7-1: config 0 descriptor??
[   82.184982][ T7296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   82.190294][ T7296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   82.193186][ T7295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   82.195668][ T7295] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   82.210284][ T2289] usbhid 7-1:0.0: can't add hid device: -71
[   82.213575][ T2289] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[   82.218375][ T2289] usb 7-1: USB disconnect, device number 2
[   82.400079][ T7307] __nla_validate_parse: 3 callbacks suppressed
[   82.400089][ T7307] netlink: 48 bytes leftover after parsing attributes in process `syz.2.393'.
[   82.557244][ T7316] netlink: 132 bytes leftover after parsing attributes in process `syz.4.398'.
[   82.684933][ T7320] MINIX-fs: blocksize too small for device
[   82.736728][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'.
[   82.931528][ T7326] 
[   82.932277][ T7326] ======================================================
[   82.934286][ T7326] WARNING: possible circular locking dependency detected
[   82.936288][ T7326] 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 Not tainted
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   82.939648][ T7326] ------------------------------------------------------
[   82.941673][ T7326] syz.3.402/7326 is trying to acquire lock:
[   82.943519][ T7326] ffff88804b74cfe0 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xe3/0x190
[   82.946167][ T7326] 
[   82.946167][ T7326] but task is already holding lock:
[   82.948225][ T7326] ffff888021d50918 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x33/0x70
[   82.950861][ T7326] 
[   82.950861][ T7326] which lock already depends on the new lock.
[   82.950861][ T7326] 
[   82.953778][ T7326] 
[   82.953778][ T7326] the existing dependency chain (in reverse order) is:
[   82.956321][ T7326] 
[   82.956321][ T7326] -> #5 (&q->debugfs_mutex){+.+.}-{4:4}:
[   82.958549][ T7326]        __mutex_lock+0x19b/0xa60
[   82.960001][ T7326]        blk_mq_init_sched+0x42b/0x640
[   82.961560][ T7326]        elevator_init_mq+0x2cd/0x420
[   82.963094][ T7326]        add_disk_fwnode+0x113/0x1300
[   82.964637][ T7326]        sd_probe+0xa66/0xfa0
[   82.966118][ T7326]        really_probe+0x23e/0xa90
[   82.967565][ T7326]        __driver_probe_device+0x1de/0x440
[   82.969226][ T7326]        driver_probe_device+0x4c/0x1b0
[   82.970810][ T7326]        __device_attach_driver+0x1df/0x310
[   82.972506][ T7326]        bus_for_each_drv+0x157/0x1e0
[   82.974042][ T7326]        __device_attach_async_helper+0x1d3/0x290
[   82.975879][ T7326]        async_run_entry_fn+0x9c/0x530
[   82.977443][ T7326]        process_one_work+0x958/0x1b30
[   82.979009][ T7326]        worker_thread+0x6c8/0xf00
[   82.980486][ T7326]        kthread+0x2c1/0x3a0
[   82.981821][ T7326]        ret_from_fork+0x45/0x80
[   82.983268][ T7326]        ret_from_fork_asm+0x1a/0x30
[   82.984795][ T7326] 
[   82.984795][ T7326] -> #4 (&q->q_usage_counter(queue)#51){++++}-{0:0}:
[   82.987327][ T7326]        blk_queue_enter+0x50f/0x640
[   82.988847][ T7326]        blk_mq_alloc_request+0x59b/0x950
[   82.990488][ T7326]        scsi_execute_cmd+0x20a/0xf30
[   82.992025][ T7326]        read_capacity_16+0x21a/0xe20
[   82.993591][ T7326]        sd_revalidate_disk.isra.0+0x1a06/0xa8d0
[   82.995399][ T7326]        sd_probe+0x8ee/0xfa0
[   82.996752][ T7326]        really_probe+0x23e/0xa90
[   82.998201][ T7326]        __driver_probe_device+0x1de/0x440
[   82.999877][ T7326]        driver_probe_device+0x4c/0x1b0
[   83.001462][ T7326]        __device_attach_driver+0x1df/0x310
[   83.003161][ T7326]        bus_for_each_drv+0x157/0x1e0
[   83.004699][ T7326]        __device_attach_async_helper+0x1d3/0x290
[   83.006551][ T7326]        async_run_entry_fn+0x9c/0x530
[   83.008115][ T7326]        process_one_work+0x958/0x1b30
[   83.009650][ T7326]        worker_thread+0x6c8/0xf00
[   83.011128][ T7326]        kthread+0x2c1/0x3a0
[   83.012461][ T7326]        ret_from_fork+0x45/0x80
[   83.013888][ T7326]        ret_from_fork_asm+0x1a/0x30
[   83.015418][ T7326] 
[   83.015418][ T7326] -> #3 (&q->limits_lock){+.+.}-{4:4}:
[   83.017596][ T7326]        __mutex_lock+0x19b/0xa60
[   83.019052][ T7326]        __nbd_set_size+0x2c0/0x730
[   83.020550][ T7326]        nbd_start_device+0x8fd/0xd70
[   83.022102][ T7326]        nbd_genl_connect+0x1204/0x1c00
[   83.023759][ T7326]        genl_family_rcv_msg_doit+0x202/0x2f0
[   83.025511][ T7326]        genl_rcv_msg+0x565/0x800
[   83.026987][ T7326]        netlink_rcv_skb+0x165/0x410
[   83.028511][ T7326]        genl_rcv+0x28/0x40
[   83.029826][ T7326]        netlink_unicast+0x53c/0x7f0
[   83.031359][ T7326]        netlink_sendmsg+0x8b8/0xd70
[   83.032889][ T7326]        ____sys_sendmsg+0x9ae/0xb40
[   83.034449][ T7326]        ___sys_sendmsg+0x135/0x1e0
[   83.035946][ T7326]        __sys_sendmsg+0x16e/0x220
[   83.037422][ T7326]        __do_fast_syscall_32+0x73/0x120
[   83.039033][ T7326]        do_fast_syscall_32+0x32/0x80
[   83.040570][ T7326]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   83.042522][ T7326] 
[   83.042522][ T7326] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[   83.045017][ T7326]        blk_mq_submit_bio+0x1fb6/0x24c0
[   83.046627][ T7326]        __submit_bio+0x384/0x540
[   83.048070][ T7326]        submit_bio_noacct_nocheck+0x698/0xd70
[   83.049826][ T7326]        submit_bio_noacct+0x93a/0x1e20
[   83.051412][ T7326]        mpage_readahead+0x41d/0x590
[   83.052930][ T7326]        read_pages+0x1a8/0xdc0
[   83.054393][ T7326]        page_cache_ra_unbounded+0x3dc/0x750
[   83.056105][ T7326]        force_page_cache_ra+0x24b/0x340
[   83.057707][ T7326]        page_cache_sync_ra+0x110/0x9c0
[   83.059299][ T7326]        filemap_get_pages+0xd7b/0x1be0
[   83.060888][ T7326]        filemap_read+0x3ca/0xd70
[   83.062340][ T7326]        blkdev_read_iter+0x187/0x480
[   83.063894][ T7326]        vfs_read+0x87f/0xbe0
[   83.065253][ T7326]        ksys_read+0x12b/0x250
[   83.066641][ T7326]        do_syscall_64+0xcd/0x250
[   83.068087][ T7326]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.069919][ T7326] 
[   83.069919][ T7326] -> #1 (mapping.invalidate_lock#2){.+.+}-{4:4}:
[   83.072337][ T7326]        down_read+0x9a/0x330
[   83.073709][ T7326]        filemap_fault+0x62c/0x2820
[   83.075224][ T7326]        __do_fault+0x10a/0x490
[   83.076623][ T7326]        do_pte_missing+0xebd/0x3e00
[   83.078131][ T7326]        __handle_mm_fault+0x103c/0x2a40
[   83.079743][ T7326]        handle_mm_fault+0x3fa/0xaa0
[   83.081251][ T7326]        do_user_addr_fault+0x7a3/0x13f0
[   83.082851][ T7326]        exc_page_fault+0x5c/0xc0
[   83.084337][ T7326]        asm_exc_page_fault+0x26/0x30
[   83.085882][ T7326]        _copy_from_iter+0x37f/0x1400
[   83.087429][ T7326]        tipc_msg_build+0x2f7/0x10d0
[   83.088937][ T7326]        __tipc_sendstream+0x6fa/0x1190
[   83.090523][ T7326]        tipc_sendstream+0x4f/0x70
[   83.091983][ T7326]        sock_write_iter+0x4fe/0x5b0
[   83.093507][ T7326]        vfs_write+0x5ae/0x1150
[   83.094910][ T7326]        ksys_write+0x207/0x250
[   83.096320][ T7326]        __do_fast_syscall_32+0x73/0x120
[   83.097927][ T7326]        do_fast_syscall_32+0x32/0x80
[   83.099473][ T7326]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   83.101425][ T7326] 
[   83.101425][ T7326] -> #0 (&mm->mmap_lock){++++}-{4:4}:
[   83.103627][ T7326]        __lock_acquire+0x249e/0x3c40
[   83.105185][ T7326]        lock_acquire.part.0+0x11b/0x380
[   83.106801][ T7326]        __might_fault+0x11b/0x190
[   83.108286][ T7326]        _copy_from_user+0x29/0xd0
[   83.109751][ T7326]        __blk_trace_setup+0xa8/0x180
[   83.111302][ T7326]        blk_trace_setup+0x47/0x70
[   83.112777][ T7326]        sg_ioctl+0x7a3/0x26b0
[   83.114159][ T7326]        compat_ptr_ioctl+0x6b/0xa0
[   83.115665][ T7326]        __do_compat_sys_ioctl+0x1cb/0x2c0
[   83.117343][ T7326]        __do_fast_syscall_32+0x73/0x120
[   83.118963][ T7326]        do_fast_syscall_32+0x32/0x80
[   83.120507][ T7326]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   83.122461][ T7326] 
[   83.122461][ T7326] other info that might help us debug this:
[   83.122461][ T7326] 
[   83.125375][ T7326] Chain exists of:
[   83.125375][ T7326]   &mm->mmap_lock --> &q->q_usage_counter(queue)#51 --> &q->debugfs_mutex
[   83.125375][ T7326] 
[   83.129421][ T7326]  Possible unsafe locking scenario:
[   83.129421][ T7326] 
[   83.131536][ T7326]        CPU0                    CPU1
[   83.133072][ T7326]        ----                    ----
[   83.134615][ T7326]   lock(&q->debugfs_mutex);
[   83.135938][ T7326]                                lock(&q->q_usage_counter(queue)#51);
[   83.138261][ T7326]                                lock(&q->debugfs_mutex);
[   83.140288][ T7326]   rlock(&mm->mmap_lock);
[   83.141576][ T7326] 
[   83.141576][ T7326]  *** DEADLOCK ***
[   83.141576][ T7326] 
[   83.143872][ T7326] 1 lock held by syz.3.402/7326:
[   83.145297][ T7326]  #0: ffff888021d50918 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x33/0x70
[   83.148035][ T7326] 
[   83.148035][ T7326] stack backtrace:
[   83.149713][ T7326] CPU: 1 UID: 0 PID: 7326 Comm: syz.3.402 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0
[   83.152696][ T7326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   83.155745][ T7326] Call Trace:
[   83.156708][ T7326]  <TASK>
[   83.157564][ T7326]  dump_stack_lvl+0x116/0x1f0
[   83.158928][ T7326]  print_circular_bug+0x41c/0x610
[   83.160384][ T7326]  check_noncircular+0x31a/0x400
[   83.161809][ T7326]  ? __pfx_check_noncircular+0x10/0x10
[   83.163425][ T7326]  ? lockdep_lock+0xc6/0x200
[   83.164777][ T7326]  ? __pfx_lockdep_lock+0x10/0x10
[   83.166236][ T7326]  __lock_acquire+0x249e/0x3c40
[   83.167655][ T7326]  ? __pfx___lock_acquire+0x10/0x10
[   83.169146][ T7326]  ? __pfx_mark_lock+0x10/0x10
[   83.170548][ T7326]  lock_acquire.part.0+0x11b/0x380
[   83.172017][ T7326]  ? __might_fault+0xe3/0x190
[   83.173414][ T7326]  ? __pfx_lock_acquire.part.0+0x10/0x10
[   83.175028][ T7326]  ? rcu_is_watching+0x12/0xc0
[   83.176414][ T7326]  ? trace_lock_acquire+0x14e/0x1f0
[   83.177905][ T7326]  ? blk_trace_setup+0x33/0x70
[   83.179299][ T7326]  ? __might_fault+0xe3/0x190
[   83.180657][ T7326]  ? lock_acquire+0x2f/0xb0
[   83.181956][ T7326]  ? __might_fault+0xe3/0x190
[   83.183341][ T7326]  ? __might_fault+0xe3/0x190
[   83.184701][ T7326]  __might_fault+0x11b/0x190
[   83.186051][ T7326]  ? __might_fault+0xe3/0x190
[   83.187431][ T7326]  _copy_from_user+0x29/0xd0
[   83.188776][ T7326]  __blk_trace_setup+0xa8/0x180
[   83.190179][ T7326]  ? __pfx___blk_trace_setup+0x10/0x10
[   83.191754][ T7326]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   83.193502][ T7326]  blk_trace_setup+0x47/0x70
[   83.194847][ T7326]  sg_ioctl+0x7a3/0x26b0
[   83.196082][ T7326]  ? __pfx_sg_ioctl+0x10/0x10
[   83.197447][ T7326]  ? __pfx_lock_release+0x10/0x10
[   83.198898][ T7326]  ? trace_lock_acquire+0x14e/0x1f0
[   83.200393][ T7326]  ? __fget_files+0x206/0x3a0
[   83.201749][ T7326]  ? __pfx_sg_ioctl+0x10/0x10
[   83.203115][ T7326]  compat_ptr_ioctl+0x6b/0xa0
[   83.204479][ T7326]  ? __pfx_compat_ptr_ioctl+0x10/0x10
[   83.206035][ T7326]  __do_compat_sys_ioctl+0x1cb/0x2c0
[   83.207556][ T7326]  __do_fast_syscall_32+0x73/0x120
[   83.209039][ T7326]  do_fast_syscall_32+0x32/0x80
[   83.210457][ T7326]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   83.212283][ T7326] RIP: 0023:0xf70ce579
[   83.213473][ T7326] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   83.218860][ T7326] RSP: 002b:00000000f50c055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[   83.221238][ T7326] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c0481273
[   83.223535][ T7326] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000
[   83.225776][ T7326] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   83.228041][ T7326] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[   83.230311][ T7326] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   83.232573][ T7326]  </TASK>
[   83.337431][ T7326] bridge0: port 3(syz_tun) entered disabled state
[   83.389363][ T7326] syz_tun (unregistering): left allmulticast mode
[   83.391519][ T7326] syz_tun (unregistering): left promiscuous mode
[   83.393353][ T7326] bridge0: port 3(syz_tun) entered disabled state
[   83.413658][ T6104] bond0: (slave syz_tun): Releasing backup interface
[   83.663435][ T1133] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.666527][ T1133] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   83.732310][ T1133] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.735338][ T1133] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   83.793136][ T1133] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.796132][ T1133] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   83.863187][ T1133] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.866418][ T1133] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   83.936580][ T1133] bridge_slave_1: left allmulticast mode
[   83.938560][ T1133] bridge_slave_1: left promiscuous mode
[   83.940360][ T1133] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.943235][ T1133] bridge_slave_0: left allmulticast mode
[   83.945408][ T1133] bridge_slave_0: left promiscuous mode
[   83.947109][ T1133] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.114392][ T1133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   84.117743][ T1133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   84.121051][ T1133] bond0 (unregistering): Released all slaves
[   84.124445][ T5999] infiniband syz1: ib_query_port failed (-19)
[   84.414403][ T1133] hsr_slave_0: left promiscuous mode
[   84.416191][ T1133] hsr_slave_1: left promiscuous mode
[   84.417943][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.420100][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.422387][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.424503][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.427673][ T1133] veth1_macvtap: left promiscuous mode
[   84.429398][ T1133] veth0_macvtap: left promiscuous mode
[   84.431811][ T1133] veth1_vlan: left promiscuous mode
[   84.433975][ T1133] veth0_vlan: left promiscuous mode
[   84.568790][ T1133] team0 (unregistering): Port device team_slave_1 removed
[   84.599604][ T1133] team0 (unregistering): Port device team_slave_0 removed
[   85.067421][ T1133] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.132541][ T1133] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.193366][ T1133] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.252436][ T1133] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.319361][ T1133] bridge_slave_1: left allmulticast mode
[   85.321245][ T1133] bridge_slave_1: left promiscuous mode
[   85.323581][ T1133] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.327831][ T1133] bridge_slave_0: left allmulticast mode
[   85.330254][ T1133] bridge_slave_0: left promiscuous mode
[   85.332469][ T1133] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.385261][ T1133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   85.388493][ T1133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   85.391881][ T1133] bond0 (unregistering): Released all slaves
[   85.633294][ T1133] hsr_slave_0: left promiscuous mode
[   85.635340][ T1133] hsr_slave_1: left promiscuous mode
[   85.637280][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.639454][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.642126][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.644295][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.647550][ T1133] veth1_macvtap: left promiscuous mode
[   85.649480][ T1133] veth0_macvtap: left promiscuous mode
[   85.651725][ T1133] veth1_vlan: left promiscuous mode
[   85.653679][ T1133] veth0_vlan: left promiscuous mode
[   85.795399][ T1133] team0 (unregistering): Port device team_slave_1 removed
[   85.825954][ T1133] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
23:18:50  Registers:
info registers vcpu 0

CPU#0
RAX=00000000000f6334 RBX=0000000000000000 RCX=ffffffff8b1a9889 RDX=ffffed1005686fee
RSI=ffffffff8bb17300 RDI=ffffffff81703079 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20
R8 =0000000000000000 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000001
R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901cfcd0 R15=0000000000000000
RIP=ffffffff8b1aac6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b400000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7436188 CR3=00000000607c6000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85146355 RDI=ffffffff9a66a200 RBP=ffffffff9a66a1c0 RSP=ffffc90007507310
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e33312e36
R12=0000000000000000 R13=0000000000000033 R14=ffffffff851462f0 R15=0000000000000000
RIP=ffffffff8514637f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000020b40000 CR3=0000000068236000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=1ffff92000775eff RCX=ffffffff814a8524 RDX=ffff888021dd0000
RSI=ffffffff814a852e RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc90003baf7f0
R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000
R12=ffff888021462000 R13=ffffc90003baf9a8 R14=0000000000000000 R15=ffffc90003bafcb8
RIP=ffffffff81994e81 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7f26e40 CR3=000000000db7e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73c3ff4
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=00000000000ca084 RBX=0000000000000003 RCX=ffffffff8b1a9889 RDX=ffffed10056e6fee
RSI=ffffffff8bb17300 RDI=ffffffff81703079 RBP=ffffed10039df488 RSP=ffffc9000049fe08
R8 =0000000000000000 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000001
R12=0000000000000003 R13=ffff88801cefa440 R14=ffffffff901cfcd0 R15=0000000000000000
RIP=ffffffff8b1aac6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000000c391389 CR3=0000000068950000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000