last executing test programs:

5m35.922809691s ago: executing program 1 (id=156):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)}}, 0x3c)
openat$dsp(0xffffffffffffff9c, 0x0, 0x101, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
creat(&(0x7f0000000140)='./file0\x00', 0x50)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x1f}, {}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x80000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {0x10000000}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

5m35.595925645s ago: executing program 1 (id=161):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = fanotify_init(0x200, 0x0)
fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0)
open(&(0x7f0000000000)='.\x00', 0x4000000, 0x0)

5m35.523126453s ago: executing program 1 (id=162):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0)

5m35.452796724s ago: executing program 1 (id=163):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
write$cgroup_int(r1, 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2000000000000376, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x800005d, 0x4810)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
socket$rxrpc(0x21, 0x2, 0xa)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
set_mempolicy(0x0, &(0x7f0000000080)=0x20000000000200, 0x2)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
shutdown(r0, 0x1)

5m34.521482682s ago: executing program 1 (id=167):
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={<r4=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={r4, 0xde52, 0xfff3}, &(0x7f0000000040)=0x8)
r5 = getpgid(0xffffffffffffffff)
sched_setaffinity(r5, 0x8, &(0x7f0000000280)=0x2)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, @none, 0x9}, 0xa)
getpeername(r6, 0x0, &(0x7f00000014c0))
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_VOICE(r8, 0x112, 0x10, 0x0, 0x0)
r9 = socket(0x2b, 0x80801, 0x3)
connect$inet6(r9, &(0x7f0000000000)={0xa, 0x8, 0x1, @empty}, 0x1c)
listen(r9, 0xf)
getsockopt$bt_sco_SCO_OPTIONS(r7, 0x11, 0x2, 0x0, 0x0)

5m33.593351237s ago: executing program 1 (id=173):
syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff17043a73dbde0800450000680064200000019078ac1e0001ac1414aa05009078e00000e0430000000000000000110000ac1414aa00000000070300443400030a010102000100006401010000000000ac1414aa00000000ac1414bb000000000000000000000000ac1414bb0000020000"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f00000001c0)={@my=0x0, 0x1})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, 0x0)
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001780)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
lseek(r4, 0xfffffffe, 0x3)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f00000002c0)={0x0, &(0x7f00000000c0)})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}, 0x1, 0x0, 0x0, 0x400008a}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x70bd2b, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0)
ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0xfffc, 0x1}, {0x7, 0x7}]})

5m18.55231562s ago: executing program 32 (id=173):
syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff17043a73dbde0800450000680064200000019078ac1e0001ac1414aa05009078e00000e0430000000000000000110000ac1414aa00000000070300443400030a010102000100006401010000000000ac1414aa00000000ac1414bb000000000000000000000000ac1414bb0000020000"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f00000001c0)={@my=0x0, 0x1})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, 0x0)
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001780)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
lseek(r4, 0xfffffffe, 0x3)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f00000002c0)={0x0, &(0x7f00000000c0)})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}, 0x1, 0x0, 0x0, 0x400008a}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x70bd2b, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0)
ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0xfffc, 0x1}, {0x7, 0x7}]})

2m7.451163753s ago: executing program 3 (id=1814):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x23a, 0x0, &(0x7f0000000180), &(0x7f0000000540))
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
unshare(0xc000080)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044850}, 0xf942d3a5c2bc9c4f)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x181)
fcntl$setlease(r4, 0x400, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000040)={<r6=>0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r7=>0x0})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10201}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="020027bd7000fbdbdf25010000000c000180080006001000000020000680140004000000000000000000000000000000000008000300ac1e010108000400000000004000018014000400fe88000000000000000000000000010108000700", @ANYRES32=r7, @ANYBLOB="06000100020000000854e438b4be50f3457dc81913117c7900060002000000060005004e22000008"], 0x90}, 0x1, 0x0, 0x0, 0x44800}, 0x4000001)
r8 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$apparmor_exec(r8, &(0x7f0000000080)=ANY=[], 0xb1)
close_range(r6, 0xffffffffffffffff, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
socket(0x25, 0x3, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x4, 0x328402)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001a00010000000000000000008180"], 0x30}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r10 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})

2m7.130221943s ago: executing program 3 (id=1815):
r0 = openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
r1 = openat$uinput(0xffffff9c, 0x0, 0x802, 0x0)
ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f00000000c0)=0x5)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r2=>0x0})
sendto(0xffffffffffffffff, &(0x7f0000000100)="2bd4167d45fb56b268bd8d87d35fb728f49cb558a64c9ae185a352b5ca35a3aacb62d7938aa775737780b2d085ac4fa66bd72e247f5f05b96f06847e407144920125bb46c3db84fc86c358d035b9c7d675ecbd8593b7b7533bdc08394b3f", 0x5e, 0x40084, &(0x7f00000001c0)=@ll={0x11, 0x2, r2, 0x1, 0x5, 0x6, @multicast}, 0x80)
r3 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x6e, 0x0)
sendto(r3, &(0x7f00000002c0)="328d21f55c26f1bac4a0a93958589fc5dffce6ff4256766ac3dd26f84084f4f1b368f2da17750125f28b902ff0b4bc2bafea8c9564bef3d6def14e2f01ebe661145597ab2d4549e3a4be606189f86314", 0x50, 0x48000, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x3, 0x1, {0xa, 0x4e21, 0xfffffffa, @empty}}}, 0x80)
r5 = syz_socket_connect_nvme_tcp()
r6 = openat$rtc(0xffffff9c, &(0x7f00000004c0), 0x26002, 0x0)
r7 = openat$adsp1(0xffffff9c, &(0x7f0000000500), 0x400000, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000580)={0x5, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r5, r0, r3, r6, r7, r3, r4, r1]}, 0x9)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
r9 = signalfd4(r8, &(0x7f00000005c0)={[0xfffffffc, 0x4]}, 0x8, 0x80000)
openat$sysfs(0xffffff9c, &(0x7f0000000600)='/sys/kernel/crash_elfcorehdr_size', 0x40, 0x0)
ioctl$SNDCTL_SEQ_GETINCOUNT(r9, 0x80045105, &(0x7f0000000640))
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000680))
r10 = openat$cgroup_ro(r9, &(0x7f00000006c0)='memory.swap.events\x00', 0x0, 0x0)
ioctl$VT_DISALLOCATE(r10, 0x5608)
r11 = getpgid(0xffffffffffffffff)
syz_open_procfs(r11, &(0x7f0000000700)='net/arp\x00')
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000740)=0x8)
r12 = socket$rds(0x15, 0x5, 0x0)
r13 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$RDS_GET_MR_FOR_DEST(r12, 0x114, 0x7, &(0x7f00000008c0)={@pppol2tpv3in6={0x18, 0x1, {0x0, r13, 0x0, 0x4, 0x4, 0x2, {0xa, 0x4e24, 0x7fffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}}, {&(0x7f0000000780)=""/255, 0xff}, &(0x7f0000000880)}, 0xa0)
socket$inet6_udplite(0xa, 0x2, 0x88)

2m7.129906784s ago: executing program 3 (id=1816):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2}, 0x6)
write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="012dfb69fa5645aedd4b7f66521712ec"], 0x7)

2m7.129079124s ago: executing program 3 (id=1818):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0)

2m7.050759984s ago: executing program 3 (id=1819):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0)
read$FUSE(r1, &(0x7f000001aa80)={0x2020}, 0x2020)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20)
mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r2, 0x6f000)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000280), 0x1c4e2, 0x0)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r4=>r0, {0x2}}, './cgroup/file0\x00'})
ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000240))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYRES16=r3, @ANYBLOB="ee275c99b77b18e2636031033c334c2e89fdf46d433027b7b88862fd269b1fcba327a4fdb0aa222cc612396b929579005062ef7eb4bab945e0c7ccf1f713e846d73061515552ad986a6c9321e8646f45038b3ba0d5c6b19e48cfe2b200ae69f80f1982016815e481414fb0d2c33c4468151a96864efa18a3a697e0f4cb6cea4294d8bc37822ffe77e20c3f931c62b5ffd819d95a591d118ce544727ba5cad77be79f16f0b543159ac45e3ffe4f89ce6bf220f4a821720b6dd86e45cfcd1d2cb4aa37126ac3cffb6b358dee3565b832562a1ca088c85c0bb7", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETLED(r6, 0x4b32, 0x9)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1)
mlock2(&(0x7f0000049000/0x1000)=nil, 0x1000, 0x0)
r7 = openat$ppp(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)=0x2)
ioctl$PPPIOCSACTIVE(r7, 0x40087446, &(0x7f00000000c0)={0x1fffffffffffffe4, &(0x7f0000000080)})
mount$binderfs(0x0, &(0x7f0000000180)='./binderfs2\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6d61783d3030303030302c000000000008ae067f118b75b96f91805143148ec453fa3ae34334f46688011d5921b5ac7276cb92ed0ccf4ab45ab105874885b052d0d58903f31a9ac7135ccbf6e812e0fa6527d865993985d55ed0c96af784a0a493f354a8df0e19016f559af0bbc7de41c02ed217b969e41f68e98b9471122c4f62d3e8179f9b14875eb4a088e7e43aad49c3c168e293bbb44a90b76587c49527e3df310eb1bf59de02fda0394f0c4c"])
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f00000000c0)='./cgroup\x00', 0x0, 0x8, r1}, 0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "a51b69ae9597407dc5518eada89d"}}]}, 0x30}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000f14010000003d00000000000c00450069625f7372707400"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)

2m6.94787558s ago: executing program 3 (id=1820):
r0 = fsmount(0xffffffffffffffff, 0x0, 0x81)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
write(r1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xd5}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
socket(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

1m51.960470613s ago: executing program 33 (id=1820):
r0 = fsmount(0xffffffffffffffff, 0x0, 0x81)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
write(r1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xd5}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
socket(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

3.229733457s ago: executing program 4 (id=2769):
openat$vicodec0(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = memfd_secret(0x0)
ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f00000003c0)={0x7fff, "6133f531a5b5d9045bad81bb9c1b3a51009c2dd4cd883d5dc486369de7a9f778", 0x2, 0x200, 0x4, 0x401, 0x1, 0x4, 0x4, 0x8})
ioprio_get$uid(0x3, 0xee00)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x11)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x82, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b4000000000020006111cca5ff4d1f8676cacb000000020000008500000008000000970000000000000000000000000000000000c8ed95905963112ceac61ce9fa3d2964ef74f17a4a9b82d99b2d15a6955d80d3573c0d07c382e7b944a0f61a6333dd3ca9e28e41dbfd1d5e5bab1beaa5adaace23c32852c41b84616a48ab9326963b257d92ea0f399a2fe3cabe7a"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x3000000)

2.449394467s ago: executing program 5 (id=2774):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f0000000180)=0x3, 0x12)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
r5 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r6 = syz_open_dev$vim2m(0x0, 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0cc5605, &(0x7f0000000180)={0x1, @pix_mp={0x8, 0xd, 0x30323953, 0x6, 0x0, [{0x4, 0xcfd2fc5e}, {0x2, 0x6}, {0x40, 0x4}, {0x1, 0x5}, {0x5, 0x7fffffff}, {0x7, 0x10}, {0x4b, 0x7}, {0x10}], 0xff, 0x5, 0xd, 0x1, 0x3}})
sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000086082bb69827c186dd60cb3e0200303a00fc020000000000000000000000000000ff02000000000000000000000000000104009078000000006097436700001100fe8800000000"], 0x0)
ioctl$PPPIOCSACTIVE(r0, 0x40087446, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x1, 0x7}]})
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)

2.311632374s ago: executing program 4 (id=2777):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0)

2.239517527s ago: executing program 4 (id=2779):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xbcf0, 0x10100, 0x0, 0x307, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r5, &(0x7f0000006840)={0x2020}, 0x2020)
syz_fuse_handle_req(r5, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r10}]}, 0x20}}, 0x0)
r11 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r11, 0xc008640a, 0x0)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x24, 0x68, 0x1, 0x3, 0x80000004, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0xfa}]}]}, 0x24}}, 0x4000)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0)
open(0x0, 0x1800, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

1.689484037s ago: executing program 4 (id=2783):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000000))
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000005580)={0x23, 0x7, 0x6, 0x79}, 0x10)
r2 = dup(0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r2, 0x0, 0x40080)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$hidraw(0x0, 0x0, 0x4a141)
r3 = syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0)
ioctl$HIDIOCGRAWNAME(r3, 0x80404804, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x16)
r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000100)=r2, 0x1)
io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4)
sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x3e, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote}, 0x1c)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x8854)
openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r8, 0x80015b1a, 0x0)
write$char_usb(r8, &(0x7f0000000000)="35f5bf4360f5c03cdc9620c5ea", 0xd)

1.509422282s ago: executing program 2 (id=2784):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4)

1.509140446s ago: executing program 5 (id=2785):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = epoll_create1(0x80000)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
splice(r2, &(0x7f0000000200)=0x401, r0, &(0x7f0000000300)=0xa, 0x6, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x1})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'gretap0\x00', <r3=>0x0, 0x7, 0x40, 0x0, 0x9, {{0x11, 0x4, 0x2, 0x3f, 0x44, 0x65, 0x0, 0xf0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x30, 0xffffffffffffffff, [{0x0, 0x10, "2c775744f87e7315dd52e5ec99a0"}, {0x2, 0x11, "8b1e4f47c87c08f8554cf6d7c8e7dc"}, {0x2, 0x9, "6dc793b0651b27"}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', r3, 0x29, 0xd, 0x4, 0x400, 0x1, @loopback, @mcast1, 0x0, 0x80, 0x5, 0x100}})
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000000701030000000000000000020007fdffdd5fab3435907fcac718abf69c758d70cd1c42bfc02a1c09694d6c390934f099ea2615f0078a222880a82f5b3194b1"], 0x14}}, 0x0)

1.507573262s ago: executing program 2 (id=2786):
r0 = fsmount(0xffffffffffffffff, 0x0, 0x81)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r0}, 0x10)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0xd5}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf200000000000002600020007ffffffbd0310000000000095002000000000006916000000000000bf670090ffffff0004070000b964b01a4607feff00200000540700000ee61e00bf150000000000000f5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f1d5af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916fcecc8158f0200000000c8fb735fd552bdc268694aeb0743e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3738270b315d362ed834f2af97787f696649a462e7e090000000000000045eac1f2014f720e83b7838e3eede14308d582685e1becd6f35154bcb4000000000000000000000000000000bc3af2b170ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbf909a2cabf5b8ea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f4a2575fbe943a6c40000000000000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca68c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233bff7f0000000000009fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c1ba322fd4d6fbf19e617d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be691c334ea35bae71e76e160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7bcf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da04647aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ced4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b874c9a0c6c04b96360d6f499d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b257b5a786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc1364640250136729ba4f763ff25c33e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a5628878040000000000000017b68afd95d4abf7920de9ebe1c89661f4adc3d83d72b1b778e30c2bf2efbbcd054cf51f4205ebf9a98a0d9f18135cb1d8d567c3436fa697b72c3b0200000000000079c0b3339debc78352b2e65299223d7ef2bd540e78167b3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586360c3663531eb5995d228f011a10ffc8b17d716b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22d9669560d296287c13c92070000ee7553eb2df17839542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c8c0130187081c8d320642389f5f0c42dba0ff68e84d7b130906f17f6aa075a257310f2d92cb1d1e16468949f5675262ee318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0fde97a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1ff01000000000000bdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee807fc081e004ffb7d3104af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5e8bac16e79da9c2444420900000000000000f888a94365b99b72796fca1b922fc9aefaf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837beeedba483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c794846e403950bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be05a40fde69c350e59f11f1d26a4d04d8c8b2c4a4d23ec931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f64705f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680f346ff0ffbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705116b2f4fc20d4e93882bdd6ccea97f3a08d3565b0000000000000000000000000000d35fb97c2d7a9374294dcec3da3df9a13c4fc63b00426682534d894caee0b963a3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

1.259509249s ago: executing program 0 (id=2788):
r0 = openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0)
r1 = openat$uinput(0xffffff9c, 0x0, 0x800, 0x0)
ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f00000000c0)=0x5)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r2=>0x0})
sendto(0xffffffffffffffff, &(0x7f0000000100)="2bd4167d45fb56b268bd8d87d35fb728f49cb558a64c9ae185a352b5ca35a3aacb62d7938aa775737780b2d085ac4fa66bd72e247f5f05b96f06847e407144920125bb46c3db84fc86c358d035b9c7d675ecbd8593b7b7533bdc08394b3f", 0x5e, 0x40084, &(0x7f00000001c0)=@ll={0x11, 0x2, r2, 0x1, 0x5, 0x6, @multicast}, 0x80)
r3 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x301100, 0x54e147d56789ff5a, 0x2}, 0x18)
r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0)
sendto(r3, &(0x7f00000002c0)="328d56f7f936545b21f55c26f1bac4a0e93958589fc5dffce6ff4256766ac3dd26f84084d49e7e76ce7c7af4f1b368f2da64bef3d6def14e2f01ebe661145597ab2d4549e3a4be", 0x47, 0x48000, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x6, 0x0, 0x3, 0x1, {0xa, 0x4e21, 0xfffffffa, @empty}}}, 0x80)
r5 = syz_socket_connect_nvme_tcp()
r6 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x5db003, 0x0)
r7 = openat$adsp1(0xffffff9c, &(0x7f0000000500), 0x400000, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000580)={0x5, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r5, r0, r3, r6, r7, r3, r4, r1]}, 0x9)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
r9 = signalfd4(r8, &(0x7f00000005c0)={[0xfffffffc, 0x4]}, 0x8, 0x80000)
openat$sysfs(0xffffff9c, &(0x7f0000000600)='/sys/kernel/crash_elfcorehdr_size', 0x40, 0x0)
ioctl$SNDCTL_SEQ_GETINCOUNT(r9, 0x80045105, &(0x7f0000000640))
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000680))
r10 = openat$cgroup_ro(r9, &(0x7f00000006c0)='memory.swap.events\x00', 0x0, 0x0)
ioctl$VT_DISALLOCATE(r10, 0x5608)
r11 = getpgid(0xffffffffffffffff)
syz_open_procfs(r11, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000740)=0x8)
socket$rds(0x15, 0x5, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)

1.259189931s ago: executing program 0 (id=2789):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0)

1.189555801s ago: executing program 0 (id=2790):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$tipc(0x1e, 0x5, 0x0)
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, r0, 0x1, 0x0, 0x25dfdbfd}, 0x14}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = syz_io_uring_setup(0x6440, &(0x7f0000000240)={0x0, 0x49ca, 0x200, 0x1, 0x193}, &(0x7f0000000300)=<r3=>0x0, &(0x7f0000000540)=<r4=>0x0)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0xa80, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000040)=0x10000)
read$dsp(r5, &(0x7f00000002c0)=""/108, 0x6c)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000500), 0x4)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, &(0x7f0000000780)=""/230, &(0x7f00000005c0)=0xe6)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, <r9=>0x0}, &(0x7f0000000280)=0x5)
setuid(r9)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000480)={'syztnl2\x00', <r10=>0x0, 0x2f, 0x8, 0x9, 0xd3, 0x44, @mcast2, @loopback, 0x701, 0x1, 0x7, 0x3}})
sendmsg$nl_route(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=@can_delroute={0x180, 0x19, 0x3fe, 0x70bd2c, 0x25dfdbfc, {}, [@CGW_SRC_IF={0x8, 0x9, r10}, @CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "096c7b010a0abe56"}, 0x4}}, @CGW_MOD_AND={0x15, 0x1, {{{0x4, 0x1, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "9a36d45761adde6e"}, 0x5}}, @CGW_MOD_UID={0x8, 0xe, r9}, @CGW_CS_CRC8={0x11e, 0x6, {0x54, 0x71, 0x19, 0x8, 0xda, "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", 0x0, "851b5006ccb64edc980c92ec4364f0c6aca6aab2"}}, @CGW_FILTER={0xc, 0xb, {{0x4, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x44004090}, 0x40400c1)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r7)
sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000700)={0x6c, r11, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20000004)
setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0x3, &(0x7f0000000100)=0x80000001, 0x4)
write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1.187927926s ago: executing program 4 (id=2798):
r0 = fsmount(0xffffffffffffffff, 0x0, 0x81)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
write(r1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xd5}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
socket(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf200000000000002600020007ffffffbd0310000000000095002000000000006916000000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee61e00bf15000080ffffff0f5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f1d5af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916fcecc8158f0200000000c8fb735fd552bdc268694aeb0743e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3738270b315d362ed834f2af97787f696649a462e7e090000000000000045eac1f2014f720e83b7838e3eede14308d582685e1becd6f35154bcb4000000000000000000000000000000bc3af2b170ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbf909a2cabf5b8ea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f4a2575fbe943a6c40000000000000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca68c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233bff7f0000000000009fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c1ba322fd4d6fbf19e617d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be691c334ea35bae71e76e160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7bcf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da04647aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ced4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b874c9a0c6c04b96360d6f499d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b257b5a786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc1364640250136729ba4f763ff25c33e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a5628878040000000000000017b68afd95d4abf7920de9ebe1c89661f4adc3d83d72b1b778e30c2bf2efbbcd054cf51f4205ebf9a98a0d9f18135cb1d8d567c3436fa697b72c3b0200000000000079c0b3339debc78352b2e65299223d7ef2bd540e78167b3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586360c3663531eb5995d228f011a10ffc8b17d716b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22d9669560d296287c13c92070000ee7553eb2df17839542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c8c0130187081c8d320642389f5f0c42dba0ff68e84d7b130906f17f6aa075a257310f2d92cb1d1e16468949f5675262ee318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0fde97a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1ff01000000000000bdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee807fc081e004ffb7d3104af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5e8bac16e79da9c2444420900000000000000f888a94365b99b72796fca1b922fc9aefaf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837beeedba483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c794846e403950bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be05a40fde69c350e59f11f1d26a4d04d8c8b2c4a4d23ec931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f64705f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680f346ff0ffbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705116b2f4fc20d4e93882bdd6ccea97f3a08d3565b0000000000000000000000000000d35fb97c2d7a9374294dcec3da3df9a13c4fc63b00426682534d894caee0b963a3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

1.12806846s ago: executing program 0 (id=2791):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xbcf0, 0x10100, 0x0, 0x307, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r5, &(0x7f0000006840)={0x2020}, 0x2020)
syz_fuse_handle_req(r5, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r10}]}, 0x20}}, 0x0)
r11 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r11, 0xc008640a, 0x0)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x24, 0x68, 0x1, 0x3, 0x80000004, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0xfa}]}]}, 0x24}}, 0x4000)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0)
open(0x0, 0x1800, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

629.589925ms ago: executing program 5 (id=2792):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)=0x101, 0x4)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x3a)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = dup(0xffffffffffffffff)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x2000}, 0x4)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0)

590.506508ms ago: executing program 2 (id=2793):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x12, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x405}, {}, {}, [@alu={0x4, 0x1, 0x6, 0x2, 0x0, 0x30, 0x8}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async, rerun: 64)
syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7402f8ed7ca62f2bc83f74a833985f857aea120980634d28db59881240ddcdb80ae6800e45e6120", 0x9d, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a660bb38d58430a051059c1c370b570890937d18b73fe9e420f4cbc3542c63678") (async)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async, rerun: 32)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async, rerun: 32)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) (async, rerun: 32)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000001180)=0x2000000) (async)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)) (async)
ioctl$SNDCTL_DSP_GETOPTR(r5, 0x5008, 0x0) (async)
ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbfc0000000000000000000000000000002001000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000100000000000000000001ffffffff00000000000000000000000000000000000000000a00e1ff"], 0x178}}, 0x0) (async)
ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f00000000c0)) (async, rerun: 32)
r8 = socket$unix(0x1, 0x5, 0x0) (rerun: 32)
r9 = dup2(r8, r3)
close_range(r9, 0xffffffffffffffff, 0x0)

587.678324ms ago: executing program 5 (id=2794):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)}}, 0x3c)
openat$dsp(0xffffffffffffff9c, 0x0, 0x101, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
creat(&(0x7f0000000140)='./file0\x00', 0x50)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x80000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {0x10000000}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

503.745377ms ago: executing program 2 (id=2795):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x40044103, &(0x7f0000000080)) (async)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000005e0001000000000000000000080000000100000092"], 0x1c}], 0x1}, 0x0) (async)
syz_emit_ethernet(0x42, &(0x7f0000000440)={@random="03b701ba935b", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00\f\x00', 0xc, 0x11, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {0x4e21, 0x4e21, 0x7, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "f5422e83bf3f95"}}}}}}}, 0x0) (async, rerun: 64)
sendmsg(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="48db", 0x2}], 0x1}, 0xc000) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async, rerun: 32)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (rerun: 32)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000c00)=ANY=[@ANYBLOB="06000000000000fd72000040"]) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0}) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x20000, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}]]}, 0x2c}}, 0x0) (async)
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x0, 0x0, 0x1c00, 0x4, 0x0, 0x7}, &(0x7f0000000600)=0x9c) (async, rerun: 64)
setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) (rerun: 64)

503.600944ms ago: executing program 2 (id=2796):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x1, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4040004)
socket$xdp(0x2c, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private0, @in6=@remote}, {@in6=@loopback, 0x0, 0x6c}}, 0x4}}, 0xf8}}, 0x0)

269.498584ms ago: executing program 5 (id=2797):
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0), 0x10)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

269.024322ms ago: executing program 4 (id=2799):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000000))
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000005580)={0x23, 0x7, 0x6, 0x79}, 0x10)
r2 = dup(0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r2, 0x0, 0x40080)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$hidraw(0x0, 0x0, 0x4a141)
r3 = syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0)
ioctl$HIDIOCGRAWNAME(r3, 0x80404804, &(0x7f0000000680))
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x16)
r4 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000100)=r2, 0x1)
io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4)
sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x3e, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote}, 0x1c)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x8854)
openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r8, 0x80015b1a, 0x0)
write$char_usb(r8, &(0x7f0000000000)="35f5bf4360f5c03cdc9620c5ea", 0xd)

226.491677ms ago: executing program 0 (id=2800):
inotify_init1(0x800)
r0 = syz_io_uring_setup(0x7932, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x2000, 0x36d}, &(0x7f00000000c0), &(0x7f0000000000)=<r1=>0x0)
syz_io_uring_setup(0x1c24, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x0, 0x2}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080))
syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x4c, 0x6e6a9ace1e35a607})
io_uring_enter(r0, 0xec4, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0x2, 0x3, 0xff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4)
sendmsg$NFC_CMD_DEV_DOWN(r4, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002abd7000fbdb4c6e"], 0x1c}, 0x1, 0x0, 0x0, 0x2400c044}, 0x40000)
getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0xe, 0x0, &(0x7f00000002c0))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000102010300000000000000000a000000440001802c0001801b7e633ee37adf0900000000000000000000000014000400ff010000000000000000000000000001ceae82f6b288a1ae0c0002800500010000000000"], 0x58}}, 0x0)

137.74497ms ago: executing program 0 (id=2801):
socket$inet6(0xa, 0x6, 0x0)
r0 = socket$kcm(0x10, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xc0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r1 = syz_init_net_socket$ax25(0x3, 0x0, 0x0)
setsockopt$ax25_int(r1, 0x101, 0x1, 0x0, 0x0)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @address_reply={0x12, 0x0, 0x0, 0x100}}}}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, &(0x7f0000000100), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20)
r4 = socket$kcm(0x29, 0x2, 0x0)
write$binfmt_script(r4, &(0x7f0000000100), 0xfdef)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r5, 0x0, r7, 0x0, 0x39000, 0x0)
write$binfmt_elf64(r6, &(0x7f0000000400)=ANY=[], 0xfffffe3e)

137.468808ms ago: executing program 5 (id=2802):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x40100)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r1 = syz_socket_connect_nvme_tcp()
recvmsg$inet_nvme(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/197, 0xc5}, {&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f0000000080)=""/124, 0x7c}], 0x3, &(0x7f00000006c0)=""/4096, 0x1000}, 0x10040)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r3, 0x65, 0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffe, 0x6, 0xd, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666e920db", 0x0, 0xfffffff6, 0x39, 0x0, 0x0})
ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000180))
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000140)={0x6})

0s ago: executing program 2 (id=2803):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=r1], 0x38}}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$dri(0x0, 0x1, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002024207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_io_uring_setup(0x55fb, &(0x7f0000000180)={0x0, 0x2fb4, 0xc6, 0x6, 0xe2}, 0x0, 0x0)
mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil)
r6 = socket$caif_seqpacket(0x25, 0x5, 0x0)
recvmmsg(r6, &(0x7f000001b540), 0x0, 0x1, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r7, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x77)
ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431)
open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x0)
ftruncate(r0, 0x0)

kernel console output (not intermixed with test programs):

  T62] usb 10-1: USB disconnect, device number 2
[  304.929541][T14081] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0
[  304.934257][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1961'.
[  304.936869][T14080] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1961'.
[  305.319184][ T5944] Bluetooth: hci2: command tx timeout
[  305.368050][T14098] FAULT_INJECTION: forcing a failure.
[  305.368050][T14098] name failslab, interval 1, probability 0, space 0, times 0
[  305.372546][T14098] CPU: 3 UID: 0 PID: 14098 Comm: syz.4.1967 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  305.376715][T14098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  305.380446][T14098] Call Trace:
[  305.381631][T14098]  <TASK>
[  305.382516][T14098]  dump_stack_lvl+0x16c/0x1f0
[  305.383923][T14098]  should_fail_ex+0x497/0x5b0
[  305.385325][T14098]  ? fs_reclaim_acquire+0xae/0x150
[  305.387260][T14098]  should_failslab+0xc2/0x120
[  305.389075][T14098]  kmem_cache_alloc_noprof+0x6e/0x3b0
[  305.391113][T14098]  ? __kernfs_new_node+0xd3/0x890
[  305.392944][T14098]  __kernfs_new_node+0xd3/0x890
[  305.394768][T14098]  ? __pfx___kernfs_new_node+0x10/0x10
[  305.396721][T14098]  ? __pfx_lock_release+0x10/0x10
[  305.398172][T14098]  ? kernfs_add_one+0x39d/0x520
[  305.399637][T14098]  ? up_write+0x1b2/0x520
[  305.401057][T14098]  kernfs_new_node+0x186/0x240
[  305.402593][T14098]  __kernfs_create_file+0x53/0x350
[  305.404115][T14098]  sysfs_add_file_mode_ns+0x1ff/0x3b0
[  305.405695][T14098]  internal_create_group+0x56c/0xf10
[  305.407382][T14098]  ? __pfx_internal_create_group+0x10/0x10
[  305.409569][T14098]  ? kernfs_create_link+0x1bd/0x240
[  305.411298][T14098]  internal_create_groups+0x9d/0x150
[  305.412810][T14098]  device_add+0x781/0x1a70
[  305.414104][T14098]  ? __pfx_device_add+0x10/0x10
[  305.415636][T14098]  ? __init_waitqueue_head+0xca/0x150
[  305.417684][T14098]  netdev_register_kobject+0x183/0x3a0
[  305.419742][T14098]  register_netdevice+0x1473/0x1e20
[  305.421724][T14098]  ? __pfx_register_netdevice+0x10/0x10
[  305.423825][T14098]  ? __pfx_br_dev_newlink+0x10/0x10
[  305.425785][T14098]  br_dev_newlink+0x27/0x110
[  305.427491][T14098]  ? __pfx_br_dev_newlink+0x10/0x10
[  305.429513][T14098]  rtnl_newlink+0xbae/0x1d70
[  305.431211][T14098]  ? __pfx_rtnl_newlink+0x10/0x10
[  305.433016][T14098]  ? __pfx___lock_acquire+0x10/0x10
[  305.434952][T14098]  ? kmem_cache_free+0x152/0x4c0
[  305.436797][T14098]  ? aa_get_newest_label+0x376/0x680
[  305.438725][T14098]  ? find_held_lock+0x2d/0x110
[  305.440476][T14098]  ? find_held_lock+0x2d/0x110
[  305.442281][T14098]  ? rtnetlink_rcv_msg+0x93a/0xea0
[  305.444197][T14098]  ? __pfx_lock_release+0x10/0x10
[  305.446022][T14098]  ? trace_lock_acquire+0x14e/0x1f0
[  305.447949][T14098]  ? __pfx_rtnl_newlink+0x10/0x10
[  305.449829][T14098]  rtnetlink_rcv_msg+0x95b/0xea0
[  305.451665][T14098]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  305.453705][T14098]  ? __pfx___dev_queue_xmit+0x10/0x10
[  305.455710][T14098]  netlink_rcv_skb+0x165/0x410
[  305.457506][T14098]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  305.459518][T14098]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  305.461515][T14098]  ? netlink_deliver_tap+0x1ae/0xca0
[  305.463503][T14098]  netlink_unicast+0x53c/0x7f0
[  305.465328][T14098]  ? __pfx_netlink_unicast+0x10/0x10
[  305.467315][T14098]  ? __phys_addr_symbol+0x30/0x80
[  305.469133][T14098]  ? __check_object_size+0x488/0x710
[  305.471051][T14098]  netlink_sendmsg+0x8b8/0xd70
[  305.472825][T14098]  ? __pfx_netlink_sendmsg+0x10/0x10
[  305.474814][T14098]  ____sys_sendmsg+0x9ae/0xb40
[  305.476616][T14098]  ? __pfx_____sys_sendmsg+0x10/0x10
[  305.478615][T14098]  ? get_compat_msghdr+0x11b/0x170
[  305.480544][T14098]  ___sys_sendmsg+0x135/0x1e0
[  305.482324][T14098]  ? __pfx____sys_sendmsg+0x10/0x10
[  305.484283][T14098]  ? __pfx_lock_release+0x10/0x10
[  305.486162][T14098]  ? trace_lock_acquire+0x14e/0x1f0
[  305.488124][T14098]  ? __fget_files+0x206/0x3a0
[  305.489945][T14098]  __sys_sendmsg+0x16e/0x220
[  305.491628][T14098]  ? __pfx___sys_sendmsg+0x10/0x10
[  305.493540][T14098]  __do_fast_syscall_32+0x73/0x120
[  305.495406][T14098]  do_fast_syscall_32+0x32/0x80
[  305.497245][T14098]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  305.499615][T14098] RIP: 0023:0xf7fd4579
[  305.501103][T14098] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  305.508237][T14098] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  305.511334][T14098] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280
[  305.514231][T14098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  305.517179][T14098] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  305.520105][T14098] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  305.523056][T14098] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  305.526023][T14098]  </TASK>
[  305.633671][T14105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1970'.
[  305.637958][   T30] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  305.787998][   T30] usb 7-1: Using ep0 maxpacket: 8
[  305.791263][   T30] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  305.793724][   T30] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  305.796629][   T30] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  305.799733][   T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  305.805634][   T30] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  305.809915][   T30] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  305.812679][   T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.817533][   T30] usbtmc 7-1:16.0: bulk endpoints not found
[  306.557347][T14118] IPVS: length: 230 != 24
[  306.558617][T14120] syz_tun: entered allmulticast mode
[  306.572114][T14123] syz_tun: left allmulticast mode
[  306.828662][   T35] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  306.977907][   T35] usb 5-1: Using ep0 maxpacket: 16
[  306.981136][   T35] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  306.984880][   T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  306.989697][   T35] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  306.992511][   T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.994801][   T35] usb 5-1: Product: syz
[  306.996007][   T35] usb 5-1: Manufacturer: syz
[  306.997532][   T35] usb 5-1: SerialNumber: syz
[  307.000207][   T35] usb 5-1: config 0 descriptor??
[  307.088300][T14140] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1979'.
[  307.258034][   T35] appledisplay 5-1:0.0: Error while getting initial brightness: -110
[  307.260924][   T35] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110
[  307.268246][   T35] usb 5-1: USB disconnect, device number 19
[  307.337949][   T30] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  307.488269][   T30] usb 10-1: Using ep0 maxpacket: 8
[  307.491187][   T30] usb 10-1: config 167 has too many interfaces: 202, using maximum allowed: 32
[  307.493751][   T30] usb 10-1: config 167 has 1 interface, different from the descriptor's value: 202
[  307.498012][   T30] usb 10-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29
[  307.500682][   T30] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.502984][   T30] usb 10-1: Product: syz
[  307.504463][   T30] usb 10-1: Manufacturer: syz
[  307.505862][   T30] usb 10-1: SerialNumber: syz
[  307.509565][   T30] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state.
[  307.513083][   T30] dvb-usb: bulk message failed: -22 (3/0)
[  307.533204][   T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  307.536273][   T30] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author)
[  307.540036][   T30] usb 10-1: media controller created
[  307.547651][   T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  307.557070][   T30] dvb-usb: bulk message failed: -22 (6/0)
[  307.559139][   T30] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author'
[  307.564932][   T30] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input25
[  307.572055][   T30] dvb-usb: schedule remote query interval to 150 msecs.
[  307.574353][   T30] dvb-usb: bulk message failed: -22 (3/0)
[  307.587935][   T30] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected.
[  307.666465][T14165] IPVS: length: 230 != 24
[  307.729274][   T30] dvb-usb: bulk message failed: -22 (1/0)
[  307.731910][   T30] dvb-usb: error while querying for an remote control event.
[  307.734977][ T5984] usb 10-1: USB disconnect, device number 3
[  307.756120][ T5984] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected.
[  307.990342][T14180] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  307.993759][T14180] Error validating options; rc = [-22]
[  308.184746][T14191] bridge8: entered allmulticast mode
[  308.411019][    T8] usb 7-1: USB disconnect, device number 20
[  308.712144][T14213] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  309.453494][T14229] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2003'.
[  309.505799][T14238] openvswitch: netlink: VXLAN extension 15883 out of range max 1
[  309.505869][T14236] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.2006'.
[  309.512306][T14236] openvswitch: netlink: Message has 12 unknown bytes.
[  309.541599][T14240] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2008'.
[  309.544392][T14240] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2008'.
[  309.723064][T14250] IPVS: length: 230 != 24
[  309.763942][T14252] bridge2: entered allmulticast mode
[  310.357983][ T5944] Bluetooth: hci2: command tx timeout
[  310.511217][    T8] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  310.605429][T14292] FAULT_INJECTION: forcing a failure.
[  310.605429][T14292] name failslab, interval 1, probability 0, space 0, times 0
[  310.609492][T14292] CPU: 3 UID: 0 PID: 14292 Comm: syz.0.2023 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  310.612591][T14292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  310.615667][T14292] Call Trace:
[  310.616643][T14292]  <TASK>
[  310.617525][T14292]  dump_stack_lvl+0x16c/0x1f0
[  310.618908][T14292]  should_fail_ex+0x497/0x5b0
[  310.620286][T14292]  ? fs_reclaim_acquire+0xae/0x150
[  310.621781][T14292]  should_failslab+0xc2/0x120
[  310.623184][T14292]  kmem_cache_alloc_lru_noprof+0x73/0x3b0
[  310.624840][T14292]  ? __d_alloc+0x35/0x8c0
[  310.626117][T14292]  __d_alloc+0x35/0x8c0
[  310.627333][T14292]  d_alloc+0x4a/0x1e0
[  310.628505][T14292]  d_alloc_parallel+0xe9/0x12b0
[  310.629932][T14292]  ? __pfx_d_alloc_parallel+0x10/0x10
[  310.631489][T14292]  ? lockdep_init_map_type+0x16d/0x7d0
[  310.633069][T14292]  ? lockdep_init_map_type+0x16d/0x7d0
[  310.634675][T14292]  __lookup_slow+0x194/0x460
[  310.636026][T14292]  ? __pfx___lookup_slow+0x10/0x10
[  310.637541][T14292]  ? __pfx_lock_release+0x10/0x10
[  310.639010][T14292]  ? d_lookup+0xe9/0x180
[  310.640255][T14292]  lookup_one_len+0x181/0x1b0
[  310.641650][T14292]  ? __pfx_lookup_one_len+0x10/0x10
[  310.643173][T14292]  ? mntput+0x10/0x90
[  310.644351][T14292]  start_creating.part.0+0x12f/0x3a0
[  310.645904][T14292]  __debugfs_create_file+0xa5/0x660
[  310.647417][T14292]  debugfs_create_file_full+0x6d/0xa0
[  310.649044][T14292]  kvm_dev_ioctl+0x14b6/0x1aa0
[  310.650474][T14292]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  310.651976][T14292]  ? __fget_files+0x206/0x3a0
[  310.653354][T14292]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  310.654849][T14292]  __do_compat_sys_ioctl+0x1cb/0x2c0
[  310.656384][T14292]  __do_fast_syscall_32+0x73/0x120
[  310.657889][T14292]  do_fast_syscall_32+0x32/0x80
[  310.659301][T14292]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  310.661143][T14292] RIP: 0023:0xf7fe8579
[  310.662340][T14292] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  310.667877][T14292] RSP: 002b:00000000f511555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  310.670286][T14292] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  310.672571][T14292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  310.674861][T14292] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  310.677179][T14292] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  310.679458][T14292] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  310.681732][T14292]  </TASK>
[  310.697915][    T8] usb 7-1: Using ep0 maxpacket: 8
[  310.700599][    T8] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  310.702980][    T8] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  310.705791][    T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  310.708661][    T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  310.711474][    T8] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  310.715158][    T8] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  310.717744][    T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.836704][T14299] netlink: 'syz.5.2025': attribute type 10 has an invalid length.
[  310.839456][T14299] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2025'.
[  310.842319][T14299] team0: entered promiscuous mode
[  310.843856][T14299] team_slave_0: entered promiscuous mode
[  310.845621][T14299] team_slave_1: entered promiscuous mode
[  310.847309][T14299] team0: entered allmulticast mode
[  310.849234][T14299] team_slave_0: entered allmulticast mode
[  310.850990][T14299] team_slave_1: entered allmulticast mode
[  310.853054][T14299] bridge0: port 3(team0) entered blocking state
[  310.854923][T14299] bridge0: port 3(team0) entered disabled state
[  310.857767][T14299] bridge0: port 3(team0) entered blocking state
[  310.859710][T14299] bridge0: port 3(team0) entered forwarding state
[  310.926192][T14300] overlayfs: missing 'workdir'
[  311.265241][    T8] usb 7-1: usb_control_msg returned -32
[  311.271956][    T8] usbtmc 7-1:16.0: can't read capabilities
[  311.347516][T14309] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2028'.
[  311.352207][T14309] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2028'.
[  311.569534][T14328] can0: slcan on ttyS3.
[  311.704307][T14333] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore
[  311.706885][T14333] overlayfs: missing 'lowerdir'
[  312.298493][T14310] can0 (unregistered): slcan off ttyS3.
[  312.438388][ T5944] Bluetooth: hci2: command tx timeout
[  312.497327][    T8] usb 7-1: USB disconnect, device number 21
[  312.534804][   T39] audit: type=1326 audit(1736845848.832:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14373 comm="syz.0.2039" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x0
[  312.793977][T14398] FAULT_INJECTION: forcing a failure.
[  312.793977][T14398] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  312.802221][T14398] CPU: 1 UID: 0 PID: 14398 Comm: syz.4.2044 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  312.806079][T14398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  312.810496][T14398] Call Trace:
[  312.811835][T14398]  <TASK>
[  312.813032][T14398]  dump_stack_lvl+0x16c/0x1f0
[  312.814937][T14398]  should_fail_ex+0x497/0x5b0
[  312.816837][T14398]  _copy_to_user+0x32/0xd0
[  312.818659][T14398]  simple_read_from_buffer+0xd0/0x160
[  312.820830][T14398]  proc_fail_nth_read+0x198/0x270
[  312.822843][T14398]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  312.824909][T14398]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  312.827130][T14398]  vfs_read+0x1df/0xbe0
[  312.828808][T14398]  ? __fget_files+0x1fc/0x3a0
[  312.830719][T14398]  ? __pfx___mutex_lock+0x10/0x10
[  312.832749][T14398]  ? __pfx_vfs_read+0x10/0x10
[  312.834647][T14398]  ? __fget_files+0x206/0x3a0
[  312.836549][T14398]  ksys_read+0x12b/0x250
[  312.838281][T14398]  ? __pfx_ksys_read+0x10/0x10
[  312.840238][T14398]  __do_fast_syscall_32+0x73/0x120
[  312.842045][T14398]  do_fast_syscall_32+0x32/0x80
[  312.843412][T14398]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  312.845246][T14398] RIP: 0023:0xf7fd4579
[  312.846417][T14398] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  312.852314][T14398] RSP: 002b:00000000f5126590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  312.854675][T14398] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5126620
[  312.856908][T14398] RDX: 000000000000000f RSI: 00000000f7463ff4 RDI: 0000000000000000
[  312.859495][T14398] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  312.861754][T14398] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  312.863989][T14398] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  312.866248][T14398]  </TASK>
[  313.097255][T14409] FAULT_INJECTION: forcing a failure.
[  313.097255][T14409] name failslab, interval 1, probability 0, space 0, times 0
[  313.101462][T14409] CPU: 3 UID: 0 PID: 14409 Comm: syz.0.2046 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  313.104438][T14409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  313.107530][T14409] Call Trace:
[  313.108548][T14409]  <TASK>
[  313.109380][T14409]  dump_stack_lvl+0x16c/0x1f0
[  313.110730][T14409]  should_fail_ex+0x497/0x5b0
[  313.112098][T14409]  ? fs_reclaim_acquire+0xae/0x150
[  313.113565][T14409]  should_failslab+0xc2/0x120
[  313.114918][T14409]  kmem_cache_alloc_noprof+0x6e/0x3b0
[  313.116457][T14409]  ? lockdep_init_map_type+0x16d/0x7d0
[  313.118054][T14409]  ? security_inode_alloc+0x3b/0x2b0
[  313.119609][T14409]  security_inode_alloc+0x3b/0x2b0
[  313.121103][T14409]  inode_init_always_gfp+0xce4/0x1030
[  313.122641][T14409]  alloc_inode+0x82/0x230
[  313.123900][T14409]  new_inode+0x22/0x210
[  313.125102][T14409]  ? start_creating.part.0+0x25d/0x3a0
[  313.126659][T14409]  __debugfs_create_file+0x11a/0x660
[  313.128219][T14409]  debugfs_create_file_full+0x6d/0xa0
[  313.129759][T14409]  kvm_dev_ioctl+0x14b6/0x1aa0
[  313.131155][T14409]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  313.132620][T14409]  ? __fget_files+0x206/0x3a0
[  313.134002][T14409]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  313.135462][T14409]  __do_compat_sys_ioctl+0x1cb/0x2c0
[  313.136976][T14409]  __do_fast_syscall_32+0x73/0x120
[  313.138447][T14409]  do_fast_syscall_32+0x32/0x80
[  313.139842][T14409]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  313.141664][T14409] RIP: 0023:0xf7fe8579
[  313.142840][T14409] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  313.148306][T14409] RSP: 002b:00000000f511555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  313.150690][T14409] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  313.152951][T14409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  313.155194][T14409] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  313.157441][T14409] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  313.159786][T14409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  313.162032][T14409]  </TASK>
[  313.185454][T14409] debugfs: out of free dentries, can not create file 'mmu_cache_miss'
[  313.207674][T14415] can0: slcan on ttyS3.
[  313.747930][ T5982] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  313.848738][T14399] can0 (unregistered): slcan off ttyS3.
[  313.921882][ T5982] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  313.925396][ T5982] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  313.931166][ T5982] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  313.935079][ T5982] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  313.941409][ T5982] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  313.947399][ T5982] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  313.948476][T14464] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2053'.
[  313.951067][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  313.956697][ T5982] usb 5-1: Product: syz
[  313.962209][ T5982] usb 5-1: Manufacturer: syz
[  313.966295][ T5982] cdc_wdm 5-1:1.0: skipping garbage
[  313.968029][ T5982] cdc_wdm 5-1:1.0: skipping garbage
[  313.971211][ T5982] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  313.973617][ T5982] cdc_wdm 5-1:1.0: Unknown control protocol
[  314.168606][ T5982] usb 5-1: USB disconnect, device number 20
[  314.180979][T14471] syz.4.2055 (14471): drop_caches: 2
[  314.430862][T14482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2057'.
[  314.518021][ T5944] Bluetooth: hci2: command tx timeout
[  314.837938][    T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  315.002981][    T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  315.005518][    T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  315.008728][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  315.011294][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  315.014400][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  315.038809][    T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  315.041419][    T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  315.043690][    T9] usb 5-1: Product: syz
[  315.044901][    T9] usb 5-1: Manufacturer: syz
[  315.051624][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  315.053156][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  315.055215][    T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  315.057088][    T9] cdc_wdm 5-1:1.0: Unknown control protocol
[  315.416027][T14504] can0: slcan on ttyS3.
[  315.821213][    T9] IPVS: starting estimator thread 0...
[  315.925199][T14519] IPVS: length: 230 != 24
[  315.928033][T14517] IPVS: using max 39 ests per chain, 93600 per kthread
[  315.990703][T14522] 9pnet_fd: p9_fd_create_tcp (14522): problem connecting socket to 127.0.0.1
[  316.228140][T14495] can0 (unregistered): slcan off ttyS3.
[  316.415495][T14552] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2074'.
[  316.471000][T14552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2074'.
[  316.520444][ T1410] ieee802154 phy1 wpan1: encryption failed: -22
[  316.553105][   T30] usb 5-1: USB disconnect, device number 21
[  316.607986][ T5944] Bluetooth: hci2: command tx timeout
[  316.648829][T14558] IPVS: length: 230 != 24
[  316.704918][T14559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2075'.
[  316.711905][T14564] Process accounting resumed
[  316.755251][T14564] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2077'.
[  316.812981][T14569] syzkaller0: entered promiscuous mode
[  316.814627][T14569] syzkaller0: entered allmulticast mode
[  317.517579][T14586] can0: slcan on ttyS3.
[  317.733704][T14597] IPVS: length: 230 != 24
[  318.126375][T14605] overlayfs: failed to resolve './file0': -2
[  318.138684][ T5984] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  318.229442][T14574] can0 (unregistered): slcan off ttyS3.
[  318.505327][T14630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2089'.
[  318.677978][ T5944] Bluetooth: hci2: command tx timeout
[  318.990478][T14642] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  319.219100][T14629] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  319.223309][T14629] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  319.227026][T14629] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  319.229652][T14629] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  319.273621][T14647] IPVS: length: 230 != 24
[  319.324407][T14629] Process accounting resumed
[  319.463625][T14654] 9pnet_virtio: no channels available for device syz
[  320.048041][    C3] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  320.374589][T14664] sp0: Synchronizing with TNC
[  320.404465][T14660] [U] �
[  320.597942][ T5944] Bluetooth: hci3: command 0x040f tx timeout
[  320.631180][T14675] IPVS: length: 230 != 24
[  320.827666][T14686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2104'.
[  321.238038][ T5944] Bluetooth: hci2: command 0xfb2d tx timeout
[  321.239161][   T64] Bluetooth: hci4: command 0x0405 tx timeout
[  321.440677][T14692] 9pnet_virtio: no channels available for device syz
[  321.447609][T14692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2110'.
[  321.451538][T14693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2110'.
[  321.988319][T14702] FAULT_INJECTION: forcing a failure.
[  321.988319][T14702] name failslab, interval 1, probability 0, space 0, times 0
[  321.991988][T14702] CPU: 0 UID: 0 PID: 14702 Comm: syz.4.2113 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  321.995071][T14702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  321.998173][T14702] Call Trace:
[  321.999152][T14702]  <TASK>
[  322.000146][T14702]  dump_stack_lvl+0x16c/0x1f0
[  322.001416][T14702]  should_fail_ex+0x497/0x5b0
[  322.002745][T14702]  ? fs_reclaim_acquire+0xae/0x150
[  322.004241][T14702]  should_failslab+0xc2/0x120
[  322.005615][T14702]  kmem_cache_alloc_noprof+0x6e/0x3b0
[  322.007186][T14702]  ? lockdep_init_map_type+0x16d/0x7d0
[  322.008760][T14702]  ? security_inode_alloc+0x3b/0x2b0
[  322.010302][T14702]  security_inode_alloc+0x3b/0x2b0
[  322.011783][T14702]  inode_init_always_gfp+0xce4/0x1030
[  322.013341][T14702]  alloc_inode+0x82/0x230
[  322.014597][T14702]  new_inode+0x22/0x210
[  322.015805][T14702]  ? start_creating.part.0+0x25d/0x3a0
[  322.017404][T14702]  __debugfs_create_file+0x11a/0x660
[  322.018936][T14702]  debugfs_create_file_full+0x6d/0xa0
[  322.020493][T14702]  kvm_dev_ioctl+0x14b6/0x1aa0
[  322.021893][T14702]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  322.023369][T14702]  ? __fget_files+0x206/0x3a0
[  322.024736][T14702]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  322.026239][T14702]  __do_compat_sys_ioctl+0x1cb/0x2c0
[  322.027777][T14702]  __do_fast_syscall_32+0x73/0x120
[  322.029268][T14702]  do_fast_syscall_32+0x32/0x80
[  322.030678][T14702]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  322.032501][T14702] RIP: 0023:0xf7fd4579
[  322.033685][T14702] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  322.039427][T14702] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  322.042485][T14702] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  322.045133][T14702] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  322.047483][T14702] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  322.049763][T14702] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  322.052415][T14702] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  322.055282][T14702]  </TASK>
[  322.058396][T14702] debugfs: out of free dentries, can not create file 'mmu_unsync'
[  322.208864][T14715] IPVS: length: 230 != 24
[  322.381673][T14720] serio: Serial port ptm0
[  322.503447][T14725] netlink: 'syz.4.2118': attribute type 10 has an invalid length.
[  322.507056][T14725] bridge0: port 3(gretap1) entered disabled state
[  322.509092][T14725] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.514206][T14725] bridge0: port 3(gretap1) entered blocking state
[  322.516124][T14725] bridge0: port 3(gretap1) entered forwarding state
[  322.518148][T14725] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.520151][T14725] bridge0: port 2(bridge_slave_1) entered forwarding state
[  322.527678][T14725] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  322.548579][    C3] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[  322.552439][    C3] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[  322.688324][    C3] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[  322.829522][    C3] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[  322.899028][T14734] can0: slcan on ttyS3.
[  322.901353][T14735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2120'.
[  322.911527][T14733] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  323.327964][   T64] Bluetooth: hci2: command 0xfb2d tx timeout
[  323.638739][T14728] can0 (unregistered): slcan off ttyS3.
[  323.705079][T14752] FAULT_INJECTION: forcing a failure.
[  323.705079][T14752] name failslab, interval 1, probability 0, space 0, times 0
[  323.709607][T14752] CPU: 3 UID: 0 PID: 14752 Comm: syz.2.2124 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  323.713763][T14752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  323.717928][T14752] Call Trace:
[  323.719251][T14752]  <TASK>
[  323.720455][T14752]  dump_stack_lvl+0x16c/0x1f0
[  323.722380][T14752]  should_fail_ex+0x497/0x5b0
[  323.724095][T14752]  ? fs_reclaim_acquire+0xae/0x150
[  323.726033][T14752]  should_failslab+0xc2/0x120
[  323.727496][T14752]  kmem_cache_alloc_lru_noprof+0x73/0x3b0
[  323.729439][T14752]  ? alloc_inode+0xbf/0x230
[  323.731250][T14752]  alloc_inode+0xbf/0x230
[  323.732998][T14752]  new_inode+0x22/0x210
[  323.734392][T14752]  ? start_creating.part.0+0x25d/0x3a0
[  323.735964][T14752]  __debugfs_create_file+0x11a/0x660
[  323.737668][T14752]  debugfs_create_file_full+0x6d/0xa0
[  323.739715][T14752]  kvm_dev_ioctl+0x14b6/0x1aa0
[  323.741449][T14752]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  323.743502][T14752]  ? __fget_files+0x206/0x3a0
[  323.745391][T14752]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  323.747418][T14752]  __do_compat_sys_ioctl+0x1cb/0x2c0
[  323.749241][T14752]  __do_fast_syscall_32+0x73/0x120
[  323.750758][T14752]  do_fast_syscall_32+0x32/0x80
[  323.751541][T14754] IPVS: length: 230 != 24
[  323.752177][T14752]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  323.752197][T14752] RIP: 0023:0xf7fd1579
[  323.752207][T14752] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  323.752217][T14752] RSP: 002b:00000000f510555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  323.752229][T14752] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  323.767197][T14752] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  323.769533][T14752] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  323.771865][T14752] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  323.774122][T14752] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  323.776316][T14752]  </TASK>
[  323.779105][T14752] debugfs: out of free dentries, can not create file 'pages_4k'
[  323.819982][T14761] syz.0.2127[14761] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  323.820035][T14761] syz.0.2127[14761] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  323.824128][T14761] syz.0.2127[14761] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  323.830904][T14762] ntfs3(nbd0): try to read out of volume at offset 0x0
[  323.957907][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  325.147992][ T1013] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  325.307943][ T1013] usb 7-1: Using ep0 maxpacket: 8
[  325.313357][ T1013] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  325.315748][ T1013] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  325.320623][ T1013] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  325.323379][ T1013] usb 7-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  325.326366][ T1013] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  325.329992][ T1013] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  325.332460][ T1013] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.332911][T14790] IPVS: length: 230 != 24
[  325.336494][ T1013] usbtmc 7-1:16.0: bulk endpoints not found
[  325.397929][   T64] Bluetooth: hci2: command 0xfb2d tx timeout
[  326.625969][T14819] IPVS: length: 230 != 24
[  326.876943][T14829] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  327.518053][   T64] Bluetooth: hci2: command 0xfb2d tx timeout
[  327.958749][    T9] usb 7-1: USB disconnect, device number 22
[  328.050991][T14842] netlink: 'syz.4.2152': attribute type 1 has an invalid length.
[  328.067960][T14842] bond1: entered promiscuous mode
[  328.069663][T14842] 8021q: adding VLAN 0 to HW filter on device bond1
[  328.150797][T14842] 8021q: adding VLAN 0 to HW filter on device bond2
[  328.154282][T14842] bond1: (slave bond2): making interface the new active one
[  328.156483][T14842] bond2: entered promiscuous mode
[  328.159299][T14842] bond1: (slave bond2): Enslaving as an active interface with an up link
[  328.162027][T14856] IPVS: length: 230 != 24
[  328.198998][T14842] netlink: 'syz.4.2152': attribute type 2 has an invalid length.
[  328.224022][T14859] bridge3: entered allmulticast mode
[  329.017988][   T62] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  329.035049][T14879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2163'.
[  329.143355][T14893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2167'.
[  329.146449][T14893] netlink: 173 bytes leftover after parsing attributes in process `syz.4.2167'.
[  329.177901][   T62] usb 5-1: Using ep0 maxpacket: 8
[  329.180549][   T62] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  329.182864][   T62] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  329.185567][   T62] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  329.189079][   T62] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  329.192137][   T62] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  329.195813][   T62] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  329.198666][   T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.203090][   T62] usbtmc 5-1:16.0: bulk endpoints not found
[  329.474389][T14898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2169'.
[  329.543859][T14899] vlan3: entered allmulticast mode
[  329.545442][T14899] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode
[  329.552759][T14899] mac80211_hwsim hwsim15 wlan1: left allmulticast mode
[  329.558156][   T64] Bluetooth: hci2: command 0xfb2d tx timeout
[  329.901319][T14886] ceph: No mds server is up or the cluster is laggy
[  330.650983][T14932] program syz.4.2178 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  330.699974][T14935] bridge9: entered allmulticast mode
[  330.809965][T14938] can0: slcan on ttyS3.
[  331.478801][T14927] can0 (unregistered): slcan off ttyS3.
[  331.599070][T14970] bio_check_eod: 2 callbacks suppressed
[  331.599081][T14970] syz.4.2186: attempt to access beyond end of device
[  331.599081][T14970] nbd4: rw=4096, sector=2, nr_sectors = 2 limit=0
[  331.604475][T14970] EXT4-fs (nbd4): unable to read superblock
[  331.647987][   T64] Bluetooth: hci2: command 0xfb2d tx timeout
[  331.808979][ T5984] usb 5-1: USB disconnect, device number 22
[  332.090032][T14992] can0: slcan on ttyS3.
[  332.505092][T15006] netlink: 1256 bytes leftover after parsing attributes in process `syz.5.2195'.
[  332.507771][T15006] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  333.128848][T14982] can0 (unregistered): slcan off ttyS3.
[  333.138021][ T5984] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  333.297961][ T5984] usb 10-1: Using ep0 maxpacket: 8
[  333.302167][ T5984] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  333.304703][ T5984] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  333.307563][ T5984] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  333.310559][ T5984] usb 10-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  333.313681][ T5984] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  333.317516][ T5984] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  333.320783][ T5984] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.328706][ T5984] usbtmc 10-1:16.0: bulk endpoints not found
[  333.416511][   T64] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  333.718809][   T64] Bluetooth: hci2: command 0xfb2d tx timeout
[  333.797269][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  333.808183][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  333.813364][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  333.816676][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  333.820256][ T5944] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  333.822939][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  333.930358][T15054] chnl_net:caif_netlink_parms(): no params data found
[  334.010672][T15066] IPVS: length: 230 != 24
[  334.012823][T15054] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.014859][T15054] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.017030][T15054] bridge_slave_0: entered allmulticast mode
[  334.019542][T15054] bridge_slave_0: entered promiscuous mode
[  334.022237][T15054] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.024388][T15054] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.026453][T15054] bridge_slave_1: entered allmulticast mode
[  334.029066][T15054] bridge_slave_1: entered promiscuous mode
[  334.049561][T15054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  334.055125][T15054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  334.060484][T15069] FAULT_INJECTION: forcing a failure.
[  334.060484][T15069] name failslab, interval 1, probability 0, space 0, times 0
[  334.065082][T15069] CPU: 2 UID: 0 PID: 15069 Comm: syz.2.2208 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  334.069062][T15069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  334.072001][T15069] Call Trace:
[  334.072971][T15069]  <TASK>
[  334.073826][T15069]  dump_stack_lvl+0x16c/0x1f0
[  334.075207][T15069]  should_fail_ex+0x497/0x5b0
[  334.076621][T15069]  ? fs_reclaim_acquire+0xae/0x150
[  334.078090][T15069]  should_failslab+0xc2/0x120
[  334.079433][T15069]  kmem_cache_alloc_lru_noprof+0x73/0x3b0
[  334.081021][T15069]  ? __d_alloc+0x35/0x8c0
[  334.082261][T15069]  __d_alloc+0x35/0x8c0
[  334.083482][T15069]  d_alloc+0x4a/0x1e0
[  334.084608][T15069]  d_alloc_parallel+0xe9/0x12b0
[  334.085985][T15069]  ? __pfx_d_alloc_parallel+0x10/0x10
[  334.087479][T15069]  ? lockdep_init_map_type+0x16d/0x7d0
[  334.088996][T15069]  ? lockdep_init_map_type+0x16d/0x7d0
[  334.090490][T15069]  __lookup_slow+0x194/0x460
[  334.091797][T15069]  ? __pfx___lookup_slow+0x10/0x10
[  334.093228][T15069]  ? __pfx_lock_release+0x10/0x10
[  334.094634][T15069]  ? d_lookup+0xe9/0x180
[  334.095826][T15069]  lookup_one_len+0x181/0x1b0
[  334.097141][T15069]  ? __pfx_lookup_one_len+0x10/0x10
[  334.098588][T15069]  ? mntput+0x10/0x90
[  334.099711][T15069]  start_creating.part.0+0x12f/0x3a0
[  334.101200][T15069]  __debugfs_create_file+0xa5/0x660
[  334.102676][T15069]  debugfs_create_file_full+0x6d/0xa0
[  334.104202][T15069]  kvm_dev_ioctl+0x14b6/0x1aa0
[  334.105549][T15069]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  334.107008][T15069]  ? __fget_files+0x206/0x3a0
[  334.108323][T15069]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  334.109766][T15069]  __do_compat_sys_ioctl+0x1cb/0x2c0
[  334.111244][T15069]  __do_fast_syscall_32+0x73/0x120
[  334.112657][T15069]  do_fast_syscall_32+0x32/0x80
[  334.114016][T15069]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  334.115781][T15069] RIP: 0023:0xf7fd1579
[  334.116952][T15069] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  334.122200][T15069] RSP: 002b:00000000f510555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  334.124572][T15069] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  334.126751][T15069] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  334.128921][T15069] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  334.131091][T15069] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  334.133301][T15069] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  334.135474][T15069]  </TASK>
[  334.157026][T15054] team0: Port device team_slave_0 added
[  334.160368][T15054] team0: Port device team_slave_1 added
[  334.178215][T15054] batman_adv: batadv0: Adding interface: batadv_slave_0
[  334.180191][T15054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  334.187195][T15054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  334.190956][T15054] batman_adv: batadv0: Adding interface: batadv_slave_1
[  334.192935][T15054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  334.200545][T15054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  334.225275][T15054] hsr_slave_0: entered promiscuous mode
[  334.227289][T15054] hsr_slave_1: entered promiscuous mode
[  334.229817][T15054] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  334.232785][T15054] Cannot create hsr debugfs directory
[  334.299222][T15054] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.393627][T15054] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.494270][T15054] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.552243][T15054] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.645966][T15054] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  334.651329][T15054] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  334.655010][T15054] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  334.666233][T15054] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  334.677523][T15054] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.680196][T15054] bridge0: port 2(bridge_slave_1) entered forwarding state
[  334.682297][T15089] netlink: 'syz.2.2215': attribute type 9 has an invalid length.
[  334.683060][T15054] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.687697][T15054] bridge0: port 1(bridge_slave_0) entered forwarding state
[  334.734689][T15054] 8021q: adding VLAN 0 to HW filter on device bond0
[  334.742125][T14154] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.746633][T14154] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.762999][T15054] 8021q: adding VLAN 0 to HW filter on device team0
[  334.776705][T14155] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.778843][T14155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  334.784003][T14154] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.786067][T14154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  334.869989][T15054] 8021q: adding VLAN 0 to HW filter on device batadv0
[  334.884998][T15054] veth0_vlan: entered promiscuous mode
[  334.890460][T15054] veth1_vlan: entered promiscuous mode
[  334.902387][T15054] veth0_macvtap: entered promiscuous mode
[  334.907017][T15054] veth1_macvtap: entered promiscuous mode
[  334.914313][T15054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  334.917360][T15054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.920393][T15054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  334.924209][T15054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.927669][T15054] batman_adv: batadv0: Interface activated: batadv_slave_0
[  334.932919][T15054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.935881][T15054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.939433][T15054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.942476][T15054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.945685][T15054] batman_adv: batadv0: Interface activated: batadv_slave_1
[  334.950356][T15054] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  334.952809][T15054] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  334.955243][T15054] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  334.957647][T15054] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  334.979901][T14155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  334.985343][T14155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.002425][T14154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.006077][T14154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.060160][T15099] input: syz1 as /devices/virtual/input/input27
[  335.061876][T15099] input: failed to attach handler leds to device input27, error: -6
[  335.091564][T15101] IPVS: length: 230 != 24
[  335.100906][T15104] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[  335.377943][   T35] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  335.429575][T15113] FAULT_INJECTION: forcing a failure.
[  335.429575][T15113] name failslab, interval 1, probability 0, space 0, times 0
[  335.434253][T15113] CPU: 1 UID: 0 PID: 15113 Comm: syz.4.2221 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  335.438154][T15113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  335.442362][T15113] Call Trace:
[  335.443588][T15113]  <TASK>
[  335.444679][T15113]  dump_stack_lvl+0x16c/0x1f0
[  335.446417][T15113]  should_fail_ex+0x497/0x5b0
[  335.448209][T15113]  ? fs_reclaim_acquire+0xae/0x150
[  335.450122][T15113]  should_failslab+0xc2/0x120
[  335.451875][T15113]  kmem_cache_alloc_lru_noprof+0x73/0x3b0
[  335.453927][T15113]  ? alloc_inode+0xbf/0x230
[  335.455601][T15113]  alloc_inode+0xbf/0x230
[  335.457221][T15113]  new_inode+0x22/0x210
[  335.458874][T15113]  ? start_creating.part.0+0x25d/0x3a0
[  335.460960][T15113]  __debugfs_create_file+0x11a/0x660
[  335.463083][T15113]  debugfs_create_file_full+0x6d/0xa0
[  335.465259][T15113]  kvm_dev_ioctl+0x14b6/0x1aa0
[  335.467212][T15113]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  335.469272][T15113]  ? __fget_files+0x206/0x3a0
[  335.471140][T15113]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  335.473163][T15113]  __do_compat_sys_ioctl+0x1cb/0x2c0
[  335.475210][T15113]  __do_fast_syscall_32+0x73/0x120
[  335.477158][T15113]  do_fast_syscall_32+0x32/0x80
[  335.478936][T15113]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  335.481226][T15113] RIP: 0023:0xf7fd4579
[  335.482718][T15113] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  335.488807][T15113] RSP: 002b:00000000f510555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  335.491111][T15113] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  335.493309][T15113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  335.495513][T15113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  335.497712][T15113] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  335.499899][T15113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  335.502124][T15113]  </TASK>
[  335.504059][T15113] debugfs: out of free dentries, can not create file 'pages_1g'
[  335.527966][   T35] usb 5-1: Using ep0 maxpacket: 32
[  335.530926][   T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12320, setting to 1024
[  335.534009][   T35] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  335.539649][   T35] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  335.542254][   T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.544908][   T35] usb 5-1: Product: syz
[  335.546298][   T35] usb 5-1: Manufacturer: syz
[  335.547953][   T35] usb 5-1: SerialNumber: syz
[  335.550279][   T35] usb 5-1: config 0 descriptor??
[  335.552260][T15107] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  335.557081][   T35] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  335.629301][T15118] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  335.756941][   T35] usb 5-1: USB disconnect, device number 23
[  335.798131][   T64] Bluetooth: hci2: command 0xfb2d tx timeout
[  335.820305][ T5984] usb 10-1: USB disconnect, device number 4
[  336.226175][T15131] IPVS: length: 230 != 24
[  336.602128][T15160] IPVS: length: 230 != 24
[  336.647930][   T35] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  336.686695][T15163] can0: slcan on ttyS3.
[  336.693380][T15163] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2235'.
[  336.817931][   T35] usb 5-1: Using ep0 maxpacket: 8
[  336.821325][   T35] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  336.823926][   T35] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  336.826713][   T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  336.829565][   T35] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  336.832273][   T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  336.834987][   T35] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  336.838872][   T35] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  336.841517][   T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.847714][   T35] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22
[  337.160212][   T64] Bluetooth: hci1: command tx timeout
[  337.338865][T15149] can0 (unregistered): slcan off ttyS3.
[  337.940552][   T64] Bluetooth: hci2: command 0xfb2d tx timeout
[  338.155421][T15210] IPVS: length: 230 != 24
[  338.401196][T15217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2249'.
[  338.403814][T15217] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2249'.
[  338.531959][T15230] warn_alloc: 3 callbacks suppressed
[  338.531971][T15230] syz.4.2254: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1
[  338.540223][T15230] CPU: 2 UID: 0 PID: 15230 Comm: syz.4.2254 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  338.543550][T15230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  338.547363][T15230] Call Trace:
[  338.548322][T15230]  <TASK>
[  338.549162][T15230]  dump_stack_lvl+0x16c/0x1f0
[  338.550512][T15230]  warn_alloc+0x24d/0x3a0
[  338.551721][T15230]  ? __pfx_warn_alloc+0x10/0x10
[  338.553099][T15230]  ? __get_vm_area_node+0x1b0/0x2f0
[  338.554568][T15230]  ? __get_vm_area_node+0x1dc/0x2f0
[  338.556061][T15230]  __vmalloc_node_range_noprof+0x1105/0x1530
[  338.557733][T15230]  ? xskq_create+0xfb/0x1d0
[  338.559010][T15230]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  338.561170][T15230]  ? xskq_create+0xfb/0x1d0
[  338.562998][T15230]  vmalloc_user_noprof+0x6b/0x90
[  338.564511][T15230]  ? xskq_create+0xfb/0x1d0
[  338.566114][T15230]  xskq_create+0xfb/0x1d0
[  338.567630][T15230]  xsk_setsockopt+0x8b0/0xac0
[  338.569163][T15230]  ? __pfx_xsk_setsockopt+0x10/0x10
[  338.571084][T15230]  ? find_held_lock+0x2d/0x110
[  338.573005][T15230]  ? __pfx_xsk_setsockopt+0x10/0x10
[  338.575125][T15230]  do_sock_setsockopt+0x222/0x480
[  338.576868][T15230]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  338.578708][T15230]  ? lock_acquire+0x2f/0xb0
[  338.580314][T15230]  __sys_setsockopt+0x1a0/0x230
[  338.582153][T15230]  __ia32_sys_setsockopt+0xbc/0x160
[  338.583644][T15230]  ? lockdep_hardirqs_on+0x7c/0x110
[  338.585108][T15230]  ? syscall_enter_from_user_mode_prepare+0x68/0xe0
[  338.586980][T15230]  __do_fast_syscall_32+0x73/0x120
[  338.588420][T15230]  do_fast_syscall_32+0x32/0x80
[  338.589803][T15230]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  338.591584][T15230] RIP: 0023:0xf7fd4579
[  338.592714][T15230] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  338.598197][T15230] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e
[  338.600681][T15230] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b
[  338.602847][T15230] RDX: 0000000000000003 RSI: 00000000200001c0 RDI: 0000000000000004
[  338.605762][T15230] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  338.608143][T15230] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  338.610351][T15230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  338.612529][T15230]  </TASK>
[  338.617612][T15230] Mem-Info:
[  338.622300][T15230] active_anon:12995 inactive_anon:274 isolated_anon:0
[  338.622300][T15230]  active_file:7356 inactive_file:19056 isolated_file:0
[  338.622300][T15230]  unevictable:1768 dirty:130 writeback:0
[  338.622300][T15230]  slab_reclaimable:6850 slab_unreclaimable:68711
[  338.622300][T15230]  mapped:29823 shmem:8233 pagetables:1275
[  338.622300][T15230]  sec_pagetables:313 bounce:0
[  338.622300][T15230]  kernel_misc_reclaimable:0
[  338.622300][T15230]  free:47500 free_pcp:7934 free_cma:0
[  338.641070][T15230] Node 0 active_anon:5040kB inactive_anon:964kB active_file:700kB inactive_file:6916kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:4480kB dirty:24kB writeback:0kB shmem:5024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9616kB pagetables:908kB sec_pagetables:1148kB all_unreclaimable? yes
[  338.677617][T15230] Node 1 active_anon:46864kB inactive_anon:132kB active_file:28724kB inactive_file:69308kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:114820kB dirty:500kB writeback:0kB shmem:27908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4260kB pagetables:4268kB sec_pagetables:104kB all_unreclaimable? no
[  338.688268][T15230] Node 0 DMA free:2980kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:376kB inactive_anon:164kB active_file:56kB inactive_file:16kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:424kB local_pcp:100kB free_cma:0kB
[  338.699991][T15230] lowmem_reserve[]: 0 273 0 0 0
[  338.702571][T15230] Node 0 DMA32 free:20836kB boost:2048kB min:15952kB low:19428kB high:22904kB reserved_highatomic:4096KB active_anon:4664kB inactive_anon:800kB active_file:644kB inactive_file:6900kB unevictable:3536kB writepending:24kB present:1032196kB managed:306308kB mlocked:0kB bounce:0kB free_pcp:4460kB local_pcp:172kB free_cma:0kB
[  338.713702][T15230] lowmem_reserve[]: 0 0 0 0 0
[  338.715109][T15230] Node 1 DMA32 free:177892kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:47064kB inactive_anon:132kB active_file:28724kB inactive_file:69308kB unevictable:3536kB writepending:500kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:15516kB local_pcp:6136kB free_cma:0kB
[  338.728112][T15230] lowmem_reserve[]: 0 0 0 0 0
[  338.730076][T15230] Node 0 DMA: 87*4kB (UME) 33*8kB (UME) 14*16kB (UME) 35*32kB (UME) 14*64kB (UME) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2980kB
[  338.736003][T15230] Node 0 DMA32: 179*4kB (UH) 43*8kB (UEH) 18*16kB (UEH) 101*32kB (UMEH) 40*64kB (UMEH) 23*128kB (UEH) 14*256kB (UE) 6*512kB (UM) 2*1024kB (M) 1*2048kB (M) 0*4096kB = 20836kB
[  338.742855][T15230] Node 1 DMA32: 677*4kB (UME) 886*8kB (UME) 95*16kB (UME) 53*32kB (UME) 123*64kB (UME) 93*128kB (UME) 44*256kB (UME) 36*512kB (UM) 28*1024kB (UM) 19*2048kB (UM) 13*4096kB (UME) = 183316kB
[  338.749368][T15230] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  338.752248][T15230] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  338.753855][T15239] can0: slcan on ttyS3.
[  338.755064][T15230] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  338.766228][T15230] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  338.770595][T15230] 34645 total pagecache pages
[  338.772275][T15230] 0 pages in swap cache
[  338.772833][T15239] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2253'.
[  338.775364][T15230] Free swap  = 123948kB
[  338.777260][T15230] Total swap = 124996kB
[  338.779350][T15230] 524155 pages RAM
[  338.782014][T15230] 0 pages HighMem/MovableOnly
[  338.783370][T15230] 206675 pages reserved
[  338.784518][T15230] 0 pages cma reserved
[  338.928263][T15250] FAULT_INJECTION: forcing a failure.
[  338.928263][T15250] name failslab, interval 1, probability 0, space 0, times 0
[  338.931832][T15250] CPU: 3 UID: 0 PID: 15250 Comm: syz.4.2256 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  338.934871][T15250] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  338.937959][T15250] Call Trace:
[  338.938937][T15250]  <TASK>
[  338.940243][T15250]  dump_stack_lvl+0x16c/0x1f0
[  338.941810][T15250]  should_fail_ex+0x497/0x5b0
[  338.943204][T15250]  ? fs_reclaim_acquire+0xae/0x150
[  338.944738][T15250]  should_failslab+0xc2/0x120
[  338.946091][T15250]  kmem_cache_alloc_lru_noprof+0x73/0x3b0
[  338.947727][T15250]  ? __d_alloc+0x35/0x8c0
[  338.948989][T15250]  __d_alloc+0x35/0x8c0
[  338.950174][T15250]  d_alloc+0x4a/0x1e0
[  338.951314][T15250]  d_alloc_parallel+0xe9/0x12b0
[  338.952704][T15250]  ? __pfx_d_alloc_parallel+0x10/0x10
[  338.954809][T15250]  ? lockdep_init_map_type+0x16d/0x7d0
[  338.956953][T15250]  ? lockdep_init_map_type+0x16d/0x7d0
[  338.958531][T15250]  __lookup_slow+0x194/0x460
[  338.959869][T15250]  ? __pfx___lookup_slow+0x10/0x10
[  338.961354][T15250]  ? __pfx_lock_release+0x10/0x10
[  338.962794][T15250]  ? d_lookup+0xe9/0x180
[  338.964025][T15250]  lookup_one_len+0x181/0x1b0
[  338.965389][T15250]  ? __pfx_lookup_one_len+0x10/0x10
[  338.966933][T15250]  ? mntput+0x10/0x90
[  338.968072][T15250]  start_creating.part.0+0x12f/0x3a0
[  338.969593][T15250]  __debugfs_create_file+0xa5/0x660
[  338.971238][T15250]  debugfs_create_file_full+0x6d/0xa0
[  338.972768][T15250]  kvm_dev_ioctl+0x14b6/0x1aa0
[  338.974502][T15250]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  338.975990][T15250]  ? __fget_files+0x206/0x3a0
[  338.977393][T15250]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  338.978869][T15250]  __do_compat_sys_ioctl+0x1cb/0x2c0
[  338.980382][T15250]  __do_fast_syscall_32+0x73/0x120
[  338.982402][T15250]  do_fast_syscall_32+0x32/0x80
[  338.984245][T15250]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  338.986080][T15250] RIP: 0023:0xf7fd4579
[  338.987284][T15250] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  338.992723][T15250] RSP: 002b:00000000f510555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  338.995092][T15250] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  338.997324][T15250] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  338.999535][T15250] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  339.001919][T15250] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  339.004136][T15250] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  339.006374][T15250]  </TASK>
[  339.231212][T15259] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2258'.
[  339.247984][   T64] Bluetooth: hci1: command tx timeout
[  339.388875][T15227] can0 (unregistered): slcan off ttyS3.
[  339.433713][   T35] usb 5-1: USB disconnect, device number 24
[  340.068067][ T3223] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  340.128032][   T64] Bluetooth: hci2: command 0xfb2d tx timeout
[  340.153004][T15306] FAULT_INJECTION: forcing a failure.
[  340.153004][T15306] name failslab, interval 1, probability 0, space 0, times 0
[  340.156810][T15306] CPU: 3 UID: 0 PID: 15306 Comm: syz.4.2265 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  340.159944][T15306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  340.162958][T15306] Call Trace:
[  340.163955][T15306]  <TASK>
[  340.164837][T15306]  dump_stack_lvl+0x16c/0x1f0
[  340.166228][T15306]  should_fail_ex+0x497/0x5b0
[  340.167635][T15306]  ? fs_reclaim_acquire+0xae/0x150
[  340.169149][T15306]  should_failslab+0xc2/0x120
[  340.170539][T15306]  kmem_cache_alloc_noprof+0x6e/0x3b0
[  340.172110][T15306]  ? lockdep_init_map_type+0x16d/0x7d0
[  340.173711][T15306]  ? security_inode_alloc+0x3b/0x2b0
[  340.175260][T15306]  security_inode_alloc+0x3b/0x2b0
[  340.176774][T15306]  inode_init_always_gfp+0xce4/0x1030
[  340.178375][T15306]  alloc_inode+0x82/0x230
[  340.179766][T15306]  new_inode+0x22/0x210
[  340.180990][T15306]  ? start_creating.part.0+0x25d/0x3a0
[  340.182577][T15306]  __debugfs_create_file+0x11a/0x660
[  340.184120][T15306]  debugfs_create_file_full+0x6d/0xa0
[  340.185694][T15306]  kvm_dev_ioctl+0x14b6/0x1aa0
[  340.187108][T15306]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  340.188617][T15306]  ? __fget_files+0x206/0x3a0
[  340.190003][T15306]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  340.191485][T15306]  __do_compat_sys_ioctl+0x1cb/0x2c0
[  340.193116][T15306]  __do_fast_syscall_32+0x73/0x120
[  340.194586][T15306]  do_fast_syscall_32+0x32/0x80
[  340.195959][T15306]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  340.197778][T15306] RIP: 0023:0xf7fd4579
[  340.198967][T15306] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  340.204470][T15306] RSP: 002b:00000000f510555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  340.206835][T15306] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  340.209141][T15306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  340.211414][T15306] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  340.213696][T15306] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  340.215957][T15306] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  340.218259][T15306]  </TASK>
[  340.223409][T15306] debugfs: out of free dentries, can not create file 'nx_lpage_splits'
[  340.229552][ T3223] usb 10-1: config 0 has no interfaces?
[  340.232083][ T3223] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  340.234723][ T3223] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  340.237080][ T3223] usb 10-1: Manufacturer: syz
[  340.240714][ T3223] usb 10-1: config 0 descriptor??
[  340.628892][   T35] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  340.652389][T15326] can0: slcan on ttyS3.
[  340.655763][T15326] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2272'.
[  340.780378][   T35] usb 5-1: Using ep0 maxpacket: 8
[  340.784647][   T35] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  340.789307][   T35] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  340.795345][   T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  340.801878][   T35] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  340.807258][   T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  340.810538][   T35] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  340.814286][   T35] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  340.816923][   T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.821854][   T35] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22
[  341.318349][   T64] Bluetooth: hci1: command tx timeout
[  341.348296][T15320] can0 (unregistered): slcan off ttyS3.
[  341.627656][T15357] tipc: Started in network mode
[  341.629271][T15357] tipc: Node identity c2dbc73fd139, cluster identity 4711
[  341.631656][T15357] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  341.636486][T15357] tipc: Resetting bearer <eth:syzkaller0>
[  341.993637][T15368] FAULT_INJECTION: forcing a failure.
[  341.993637][T15368] name failslab, interval 1, probability 0, space 0, times 0
[  341.998984][T15368] CPU: 2 UID: 0 PID: 15368 Comm: syz.2.2280 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  342.003012][T15368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  342.006508][T15368] Call Trace:
[  342.008020][T15368]  <TASK>
[  342.009201][T15368]  dump_stack_lvl+0x16c/0x1f0
[  342.011076][T15368]  should_fail_ex+0x497/0x5b0
[  342.012950][T15368]  ? fs_reclaim_acquire+0xae/0x150
[  342.014763][T15368]  should_failslab+0xc2/0x120
[  342.016668][T15368]  kmem_cache_alloc_noprof+0x6e/0x3b0
[  342.018849][T15368]  ? lockdep_init_map_type+0x16d/0x7d0
[  342.021022][T15368]  ? security_inode_alloc+0x3b/0x2b0
[  342.023138][T15368]  security_inode_alloc+0x3b/0x2b0
[  342.025228][T15368]  inode_init_always_gfp+0xce4/0x1030
[  342.027378][T15368]  alloc_inode+0x82/0x230
[  342.029139][T15368]  new_inode+0x22/0x210
[  342.030817][T15368]  ? start_creating.part.0+0x25d/0x3a0
[  342.033337][T15368]  __debugfs_create_file+0x11a/0x660
[  342.035457][T15368]  debugfs_create_file_full+0x6d/0xa0
[  342.037287][T15368]  kvm_dev_ioctl+0x14b6/0x1aa0
[  342.039139][T15368]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  342.041001][T15368]  ? __fget_files+0x206/0x3a0
[  342.042467][T15368]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  342.044287][T15368]  __do_compat_sys_ioctl+0x1cb/0x2c0
[  342.046393][T15368]  __do_fast_syscall_32+0x73/0x120
[  342.048453][T15368]  do_fast_syscall_32+0x32/0x80
[  342.050255][T15368]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  342.052063][T15368] RIP: 0023:0xf7fd1579
[  342.053259][T15368] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  342.059596][T15368] RSP: 002b:00000000f510555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  342.062759][T15368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  342.065603][T15368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  342.068591][T15368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  342.071505][T15368] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  342.073881][T15368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  342.076750][T15368]  </TASK>
[  342.078760][T15368] debugfs: out of free dentries, can not create file 'nx_lpage_splits'
[  342.198281][   T64] Bluetooth: hci2: command 0xfb2d tx timeout
[  342.397209][T15374] can0: slcan on ttyS3.
[  342.405290][T15374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2281'.
[  342.698673][ T3223] usb 10-1: USB disconnect, device number 5
[  342.768140][ T5986] tipc: Node number set to 333629247
[  343.088938][T15371] can0 (unregistered): slcan off ttyS3.
[  343.263831][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  343.274061][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  343.277173][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  343.284049][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  343.287880][ T5944] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  343.294254][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  343.389341][T15399] chnl_net:caif_netlink_parms(): no params data found
[  343.429947][ T3223] usb 5-1: USB disconnect, device number 25
[  343.472362][T15399] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.478055][T15399] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.481150][T15399] bridge_slave_0: entered allmulticast mode
[  343.484451][T15399] bridge_slave_0: entered promiscuous mode
[  343.488491][T15399] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.491568][T15399] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.494494][T15399] bridge_slave_1: entered allmulticast mode
[  343.497409][T15399] bridge_slave_1: entered promiscuous mode
[  343.526973][T15399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  343.531017][T15399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  343.562010][T15399] team0: Port device team_slave_0 added
[  343.565163][T15399] team0: Port device team_slave_1 added
[  343.610726][T15399] batman_adv: batadv0: Adding interface: batadv_slave_0
[  343.613267][T15399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.621589][T15399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  343.625670][T15399] batman_adv: batadv0: Adding interface: batadv_slave_1
[  343.629796][T15399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.638742][T15399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  343.639678][T15412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2286'.
[  343.645651][T15412] openvswitch: netlink: Flow actions attr not present in new flow.
[  343.682881][T15399] hsr_slave_0: entered promiscuous mode
[  343.705427][T15399] hsr_slave_1: entered promiscuous mode
[  343.707431][T15399] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  343.711801][T15399] Cannot create hsr debugfs directory
[  343.813431][T15399] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.816452][T15399] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.891906][T15399] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.894789][T15399] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.950160][T15399] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.953326][T15399] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.034569][T15399] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  344.037692][T15399] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.139724][T15399] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  344.144854][T15399] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  344.150184][T15399] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  344.155205][T15399] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  344.205188][T15399] 8021q: adding VLAN 0 to HW filter on device bond0
[  344.212773][T15399] 8021q: adding VLAN 0 to HW filter on device team0
[  344.217593][T14153] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.219722][T14153] bridge0: port 1(bridge_slave_0) entered forwarding state
[  344.224566][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.226778][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  344.281844][   T64] Bluetooth: hci2: command 0xfb2d tx timeout
[  344.315709][T15399] 8021q: adding VLAN 0 to HW filter on device batadv0
[  344.335621][T15399] veth0_vlan: entered promiscuous mode
[  344.339794][T15399] veth1_vlan: entered promiscuous mode
[  344.355986][T15399] veth0_macvtap: entered promiscuous mode
[  344.364418][T15399] veth1_macvtap: entered promiscuous mode
[  344.371530][T15399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.374589][T15399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.377815][T15399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.381895][T15399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.385495][T15399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.388561][T15399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.391959][T15399] batman_adv: batadv0: Interface activated: batadv_slave_0
[  344.396312][T15399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.399449][T15399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.402226][T15399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.405216][T15399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.408161][T15399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.411122][T15399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.414909][T15399] batman_adv: batadv0: Interface activated: batadv_slave_1
[  344.419572][T15399] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  344.422272][T15399] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  344.424781][T15399] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  344.427267][T15399] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  344.512864][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.517633][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.552390][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.554715][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.570853][T15425] 9pnet_virtio: no channels available for device 127.0.0.1
[  344.630835][T15439] netlink: 'syz.2.2283': attribute type 9 has an invalid length.
[  344.633097][T15439] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2283'.
[  344.886160][T15450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2294'.
[  344.890079][T15450] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2294'.
[  345.192534][T15464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2300'.
[  345.196371][T15464] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2300'.
[  345.223742][T15466] veth0_to_bridge: entered promiscuous mode
[  345.231516][T15465] veth0_to_bridge: left promiscuous mode
[  345.318068][   T64] Bluetooth: hci0: command tx timeout
[  345.383435][T15478] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2299'.
[  346.015230][T15489] bridge6: entered allmulticast mode
[  346.156304][T15494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2310'.
[  346.161621][T15494] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2310'.
[  346.563650][T15499] netlink: 'syz.5.2312': attribute type 178 has an invalid length.
[  346.964871][T15509] can0: slcan on ttyS3.
[  347.411933][ T5944] Bluetooth: hci0: command tx timeout
[  347.458150][T15505] can0 (unregistered): slcan off ttyS3.
[  348.496131][T15558] FAULT_INJECTION: forcing a failure.
[  348.496131][T15558] name failslab, interval 1, probability 0, space 0, times 0
[  348.500922][T15558] CPU: 3 UID: 0 PID: 15558 Comm: syz.2.2324 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  348.504080][T15558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  348.507192][T15558] Call Trace:
[  348.508169][T15558]  <TASK>
[  348.509051][T15558]  dump_stack_lvl+0x16c/0x1f0
[  348.510470][T15558]  should_fail_ex+0x497/0x5b0
[  348.511845][T15558]  ? fs_reclaim_acquire+0xae/0x150
[  348.513347][T15558]  should_failslab+0xc2/0x120
[  348.514724][T15558]  kmem_cache_alloc_lru_noprof+0x73/0x3b0
[  348.516374][T15558]  ? __d_alloc+0x35/0x8c0
[  348.517699][T15558]  __d_alloc+0x35/0x8c0
[  348.518914][T15558]  d_alloc+0x4a/0x1e0
[  348.520087][T15558]  d_alloc_parallel+0xe9/0x12b0
[  348.521626][T15558]  ? __pfx_d_alloc_parallel+0x10/0x10
[  348.523173][T15558]  ? lockdep_init_map_type+0x16d/0x7d0
[  348.524800][T15558]  ? lockdep_init_map_type+0x16d/0x7d0
[  348.526384][T15558]  __lookup_slow+0x194/0x460
[  348.527790][T15558]  ? __pfx___lookup_slow+0x10/0x10
[  348.529370][T15558]  ? __pfx_lock_release+0x10/0x10
[  348.530846][T15558]  ? d_lookup+0xe9/0x180
[  348.532083][T15558]  lookup_one_len+0x181/0x1b0
[  348.533464][T15558]  ? __pfx_lookup_one_len+0x10/0x10
[  348.534973][T15558]  ? mntput+0x10/0x90
[  348.536144][T15558]  start_creating.part.0+0x12f/0x3a0
[  348.537681][T15558]  __debugfs_create_file+0xa5/0x660
[  348.539190][T15558]  debugfs_create_file_full+0x6d/0xa0
[  348.540757][T15558]  kvm_dev_ioctl+0x14b6/0x1aa0
[  348.542168][T15558]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  348.543838][T15558]  ? __fget_files+0x206/0x3a0
[  348.545224][T15558]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  348.546722][T15558]  __do_compat_sys_ioctl+0x1cb/0x2c0
[  348.548240][T15558]  __do_fast_syscall_32+0x73/0x120
[  348.549764][T15558]  do_fast_syscall_32+0x32/0x80
[  348.551175][T15558]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  348.553012][T15558] RIP: 0023:0xf7fbf579
[  348.554191][T15558] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  348.559698][T15558] RSP: 002b:00000000f50f555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  348.562106][T15558] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  348.564379][T15558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  348.566656][T15558] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  348.569061][T15558] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  348.571322][T15558] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  348.573604][T15558]  </TASK>
[  349.478679][ T5944] Bluetooth: hci0: command tx timeout
[  349.512376][T15574] __nla_validate_parse: 3 callbacks suppressed
[  349.512392][T15574] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2329'.
[  349.516941][T15574] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2329'.
[  349.585860][T15579] IPVS: length: 230 != 24
[  350.176646][T15599] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2333'.
[  350.216813][T15600] can0: slcan on ttyS3.
[  350.219428][T15600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2335'.
[  350.785342][T15624] IPVS: length: 230 != 24
[  350.831184][T15621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2341'.
[  350.928237][T15589] can0 (unregistered): slcan off ttyS3.
[  351.557945][ T5944] Bluetooth: hci0: command tx timeout
[  351.786135][T15655] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2351'.
[  351.789824][T15655] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2351'.
[  352.763301][T15683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2355'.
[  352.772513][T15682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2360'.
[  352.774475][T15685] dccp_invalid_packet: pskb_may_pull failed
[  352.775056][T15682] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2360'.
[  352.919268][T15688] can0: slcan on ttyS3.
[  353.539121][T15669] can0 (unregistered): slcan off ttyS3.
[  353.731788][T15725] ������: renamed from lo (while UP)
[  354.319417][T15730] FAULT_INJECTION: forcing a failure.
[  354.319417][T15730] name failslab, interval 1, probability 0, space 0, times 0
[  354.322782][T15730] CPU: 1 UID: 0 PID: 15730 Comm: syz.0.2366 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  354.325592][T15730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  354.328933][T15730] Call Trace:
[  354.329832][T15730]  <TASK>
[  354.330624][T15730]  dump_stack_lvl+0x16c/0x1f0
[  354.331880][T15730]  should_fail_ex+0x497/0x5b0
[  354.333118][T15730]  ? fs_reclaim_acquire+0xae/0x150
[  354.334447][T15730]  should_failslab+0xc2/0x120
[  354.335757][T15730]  kmem_cache_alloc_noprof+0x6e/0x3b0
[  354.337526][T15730]  ? lockdep_init_map_type+0x16d/0x7d0
[  354.339420][T15730]  ? security_inode_alloc+0x3b/0x2b0
[  354.341288][T15730]  security_inode_alloc+0x3b/0x2b0
[  354.343068][T15730]  inode_init_always_gfp+0xce4/0x1030
[  354.344579][T15730]  alloc_inode+0x82/0x230
[  354.345733][T15730]  new_inode+0x22/0x210
[  354.346969][T15730]  ? start_creating.part.0+0x25d/0x3a0
[  354.348436][T15730]  __debugfs_create_file+0x11a/0x660
[  354.349781][T15730]  debugfs_create_file_full+0x6d/0xa0
[  354.351133][T15730]  kvm_dev_ioctl+0x14b6/0x1aa0
[  354.352348][T15730]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  354.353647][T15730]  ? __fget_files+0x206/0x3a0
[  354.354830][T15730]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  354.356128][T15730]  __do_compat_sys_ioctl+0x1cb/0x2c0
[  354.357677][T15730]  __do_fast_syscall_32+0x73/0x120
[  354.359007][T15730]  do_fast_syscall_32+0x32/0x80
[  354.360654][T15730]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  354.362913][T15730] RIP: 0023:0xf7f11579
[  354.364361][T15730] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  354.370991][T15730] RSP: 002b:00000000f504555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  354.373872][T15730] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  354.376423][T15730] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  354.378613][T15730] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  354.380609][T15730] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  354.382614][T15730] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  354.384619][T15730]  </TASK>
[  354.398004][T15730] debugfs: out of free dentries, can not create file 'max_mmu_page_hash_collisions'
[  354.554953][T15740] __nla_validate_parse: 2 callbacks suppressed
[  354.554968][T15740] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2370'.
[  354.562375][T15740] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2370'.
[  355.037532][T15762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2379'.
[  355.731109][T15773] ������: renamed from lo (while UP)
[  355.978046][T15775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2384'.
[  355.981894][T15775] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2384'.
[  356.560426][T15792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2389'.
[  356.565702][T15792] bridge10: entered allmulticast mode
[  356.698191][T15799] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  356.840466][T15806] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2394'.
[  356.843132][T15806] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2394'.
[  357.285038][T15816] loop7: detected capacity change from 0 to 16384
[  357.288061][T15816] netlink: 'syz.0.2397': attribute type 21 has an invalid length.
[  357.291158][T15816] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2397'.
[  357.439744][T15817] loop7: detected capacity change from 16384 to 16383
[  357.458088][T15817] blk_print_req_error: 7 callbacks suppressed
[  357.458100][T15817] I/O error, dev loop7, sector 6656 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  357.459270][T15816] I/O error, dev loop7, sector 9728 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0
[  357.460306][T15817] buffer_io_error: 7 callbacks suppressed
[  357.460320][T15817] Buffer I/O error on dev loop7, logical block 832, lost async page write
[  357.465070][T15816] I/O error, dev loop7, sector 9728 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  357.477663][T15816] Buffer I/O error on dev loop7, logical block 1216, async page read
[  357.489639][T15817] Buffer I/O error on dev loop7, logical block 833, lost async page write
[  357.493052][T15817] Buffer I/O error on dev loop7, logical block 834, lost async page write
[  357.498682][T15817] Buffer I/O error on dev loop7, logical block 835, lost async page write
[  357.503891][T15817] Buffer I/O error on dev loop7, logical block 836, lost async page write
[  357.507403][T15817] Buffer I/O error on dev loop7, logical block 837, lost async page write
[  357.518241][T15817] Buffer I/O error on dev loop7, logical block 838, lost async page write
[  357.521653][T15817] Buffer I/O error on dev loop7, logical block 839, lost async page write
[  357.525044][T15817] Buffer I/O error on dev loop7, logical block 840, lost async page write
[  357.544553][T15817] I/O error, dev loop7, sector 7680 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  357.556772][T15817] I/O error, dev loop7, sector 8704 op 0x1:(WRITE) flags 0x800 phys_seg 128 prio class 0
[  357.583394][T15823] bridge11: entered allmulticast mode
[  357.819609][T15831] can0: slcan on ttyS3.
[  357.828818][T15831] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2398'.
[  358.278310][    T8] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  358.438434][    T8] usb 5-1: Using ep0 maxpacket: 8
[  358.444917][    T8] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  358.447139][    T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  358.453061][    T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  358.455731][    T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  358.458452][T15820] can0 (unregistered): slcan off ttyS3.
[  358.458732][    T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  358.463553][    T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  358.466080][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.673307][    T8] usb 5-1: usb_control_msg returned -32
[  358.674967][    T8] usbtmc 5-1:16.0: can't read capabilities
[  359.144505][T15872] usbtmc 5-1:16.0: stb usb_control_msg returned -32
[  359.152575][    T8] usb 5-1: USB disconnect, device number 26
[  359.399008][T15878] netlink: 'syz.2.2409': attribute type 10 has an invalid length.
[  359.403270][T15878] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.405415][T15878] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.410752][T15878] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.412811][T15878] bridge0: port 2(bridge_slave_1) entered forwarding state
[  359.414944][T15878] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.417005][T15878] bridge0: port 1(bridge_slave_0) entered forwarding state
[  359.420395][T15878] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  359.575110][T15882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2410'.
[  359.582859][T15882] bridge12: entered allmulticast mode
[  360.318963][T15903] dccp_invalid_packet: pskb_may_pull failed
[  361.176099][T15921] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2422'.
[  361.725044][T15940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2430'.
[  361.727902][T15940] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2430'.
[  362.213390][T15955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2435'.
[  362.215981][T15955] bridge: RTM_NEWNEIGH with invalid state 0x0
[  362.221053][T15955] netlink: 'syz.0.2435': attribute type 41 has an invalid length.
[  362.222472][ T3223] libceph: connect (1)[c::]:6789 error -101
[  362.225985][ T3223] libceph: mon0 (1)[c::]:6789 connect error
[  362.499471][ T3223] libceph: connect (1)[c::]:6789 error -101
[  362.501911][ T3223] libceph: mon0 (1)[c::]:6789 connect error
[  362.725429][T15970] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2439'.
[  362.728852][T15970] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2439'.
[  362.764996][T15972] IPVS: length: 230 != 24
[  362.796285][T15956] ceph: No mds server is up or the cluster is laggy
[  363.385669][T15987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2442'.
[  363.406482][T15989] netlink: 'syz.5.2445': attribute type 4 has an invalid length.
[  363.574565][T15994] FAULT_INJECTION: forcing a failure.
[  363.574565][T15994] name failslab, interval 1, probability 0, space 0, times 0
[  363.578676][T15994] CPU: 2 UID: 0 PID: 15994 Comm: syz.5.2447 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  363.582728][T15994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  363.586831][T15994] Call Trace:
[  363.588125][T15994]  <TASK>
[  363.589289][T15994]  dump_stack_lvl+0x16c/0x1f0
[  363.591143][T15994]  should_fail_ex+0x497/0x5b0
[  363.592994][T15994]  ? fs_reclaim_acquire+0xae/0x150
[  363.594950][T15994]  should_failslab+0xc2/0x120
[  363.596782][T15994]  __kmalloc_cache_noprof+0x68/0x420
[  363.598808][T15994]  ? debugfs_create_file_full+0x75/0xa0
[  363.600932][T15994]  kvm_dev_ioctl+0x1576/0x1aa0
[  363.602786][T15994]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  363.604824][T15994]  ? __fget_files+0x206/0x3a0
[  363.606839][T15994]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  363.608963][T15994]  __do_compat_sys_ioctl+0x1cb/0x2c0
[  363.611057][T15994]  __do_fast_syscall_32+0x73/0x120
[  363.613051][T15994]  do_fast_syscall_32+0x32/0x80
[  363.614438][T15994]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  363.616260][T15994] RIP: 0023:0xf709e579
[  363.617719][T15994] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  363.624470][T15994] RSP: 002b:00000000f506f55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  363.627480][T15994] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  363.629800][T15994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  363.632050][T15994] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  363.634315][T15994] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  363.636596][T15994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  363.638869][T15994]  </TASK>
[  363.667528][T15997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2448'.
[  363.787006][T15999] IPVS: length: 230 != 24
[  364.058458][T16007] can0: slcan on ttyS3.
[  364.060871][T16007] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2450'.
[  364.739154][T16000] can0 (unregistered): slcan off ttyS3.
[  365.159529][ T5944] Bluetooth: hci1: command tx timeout
[  365.187979][   T35] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  365.322085][T16045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2457'.
[  365.348045][   T35] usb 10-1: Using ep0 maxpacket: 8
[  365.351571][   T35] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  365.354797][   T35] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  365.357731][   T35] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  365.360879][   T35] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  365.363966][   T35] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  365.367964][   T35] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  365.371708][   T35] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.580361][   T35] usb 10-1: usb_control_msg returned -32
[  365.582165][   T35] usbtmc 10-1:16.0: can't read capabilities
[  365.975097][T16051] FAULT_INJECTION: forcing a failure.
[  365.975097][T16051] name failslab, interval 1, probability 0, space 0, times 0
[  365.979633][T16051] CPU: 1 UID: 0 PID: 16051 Comm: syz.0.2459 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  365.983711][T16051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  365.987765][T16051] Call Trace:
[  365.989139][T16051]  <TASK>
[  365.990254][T16051]  dump_stack_lvl+0x16c/0x1f0
[  365.992036][T16051]  should_fail_ex+0x497/0x5b0
[  365.993822][T16051]  ? fs_reclaim_acquire+0xae/0x150
[  365.995745][T16051]  should_failslab+0xc2/0x120
[  365.997534][T16051]  __kmalloc_cache_noprof+0x68/0x420
[  365.999699][T16051]  ? debugfs_create_file_full+0x75/0xa0
[  366.001926][T16051]  kvm_dev_ioctl+0x1576/0x1aa0
[  366.003650][T16051]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  366.005490][T16051]  ? __fget_files+0x206/0x3a0
[  366.007171][T16051]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  366.008996][T16051]  __do_compat_sys_ioctl+0x1cb/0x2c0
[  366.010874][T16051]  __do_fast_syscall_32+0x73/0x120
[  366.012460][T16051]  do_fast_syscall_32+0x32/0x80
[  366.013902][T16051]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  366.015750][T16051] RIP: 0023:0xf7f11579
[  366.017185][T16051] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  366.022929][T16051] RSP: 002b:00000000f504555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  366.025474][T16051] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  366.028505][T16051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  366.031665][T16051] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  366.034800][T16051] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  366.037464][T16051] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  366.039886][T16051]  </TASK>
[  366.046611][T16050] usbtmc 10-1:16.0: stb usb_control_msg returned -32
[  366.065843][   T62] usb 10-1: USB disconnect, device number 6
[  366.853553][T16069] can0: slcan on ttyS3.
[  366.855862][T16069] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2462'.
[  366.977805][T16074] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2465'.
[  366.980483][T16074] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2465'.
[  367.318681][T16092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2468'.
[  367.370884][T16094] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  367.548966][T16063] can0 (unregistered): slcan off ttyS3.
[  367.599446][T16109] IPVS: length: 230 != 24
[  367.778157][ T5986] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  367.869707][T16126] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2475'.
[  367.872686][T16126] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2475'.
[  367.936486][T16130] bridge13: entered allmulticast mode
[  367.937936][ T5986] usb 5-1: Using ep0 maxpacket: 8
[  367.941894][ T5986] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  367.945067][ T5986] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  367.947802][ T5986] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  367.957490][ T5986] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  367.965540][ T5986] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  367.972917][ T5986] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  367.975342][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.062021][T16136] IPVS: length: 230 != 24
[  368.206969][ T5986] usb 5-1: usb_control_msg returned -32
[  368.208846][ T5986] usbtmc 5-1:16.0: can't read capabilities
[  368.337386][T16147] trusted_key: syz.4.2483 sent an empty control message without MSG_MORE.
[  368.351313][T16152] can0: slcan on ttyS3.
[  368.355634][T16152] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2482'.
[  368.619668][T16155] usbtmc 5-1:16.0: stb usb_control_msg returned -32
[  368.623828][   T62] usb 5-1: USB disconnect, device number 27
[  369.001696][T16139] can0 (unregistered): slcan off ttyS3.
[  369.056742][T16175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2485'.
[  369.059425][T16175] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2485'.
[  369.113568][T16187] IPVS: length: 230 != 24
[  370.022683][T16215] IPVS: length: 230 != 24
[  370.026936][T16216] netlink: 'syz.2.2497': attribute type 10 has an invalid length.
[  370.030504][T16216] team0: entered promiscuous mode
[  370.032094][T16216] team_slave_0: entered promiscuous mode
[  370.033882][T16216] team_slave_1: entered promiscuous mode
[  370.035640][T16216] team0: entered allmulticast mode
[  370.037224][T16216] team_slave_0: entered allmulticast mode
[  370.040246][T16216] team_slave_1: entered allmulticast mode
[  370.042488][T16216] bridge0: port 3(team0) entered blocking state
[  370.044432][T16216] bridge0: port 3(team0) entered disabled state
[  370.047216][T16216] bridge0: port 3(team0) entered blocking state
[  370.049095][T16216] bridge0: port 3(team0) entered forwarding state
[  370.142630][T16222] overlayfs: missing 'workdir'
[  370.485660][T16232] FAULT_INJECTION: forcing a failure.
[  370.485660][T16232] name failslab, interval 1, probability 0, space 0, times 0
[  370.493924][T16232] CPU: 1 UID: 0 PID: 16232 Comm: syz.2.2503 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  370.497835][T16232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  370.501531][T16234] bridge1: entered allmulticast mode
[  370.503106][T16232] Call Trace:
[  370.504068][T16232]  <TASK>
[  370.504938][T16232]  dump_stack_lvl+0x16c/0x1f0
[  370.506300][T16232]  should_fail_ex+0x497/0x5b0
[  370.507679][T16232]  ? fs_reclaim_acquire+0xae/0x150
[  370.509479][T16232]  should_failslab+0xc2/0x120
[  370.510843][T16232]  __kmalloc_cache_noprof+0x68/0x420
[  370.512410][T16232]  ? debugfs_create_file_full+0x75/0xa0
[  370.514048][T16232]  kvm_dev_ioctl+0x1576/0x1aa0
[  370.515426][T16232]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  370.516926][T16232]  ? __fget_files+0x206/0x3a0
[  370.518211][T16232]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  370.519599][T16232]  __do_compat_sys_ioctl+0x1cb/0x2c0
[  370.521025][T16232]  __do_fast_syscall_32+0x73/0x120
[  370.522490][T16232]  do_fast_syscall_32+0x32/0x80
[  370.523959][T16232]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  370.525800][T16232] RIP: 0023:0xf7fbf579
[  370.526987][T16232] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  370.533068][T16232] RSP: 002b:00000000f50f555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  370.535505][T16232] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  370.537790][T16232] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  370.540005][T16232] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  370.542520][T16232] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  370.545497][T16232] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  370.548128][T16232]  </TASK>
[  370.680929][T16240] dccp_invalid_packet: pskb_may_pull failed
[  370.808171][T16247] IPVS: length: 230 != 24
[  370.908307][T16251] IPVS: set_ctl: invalid protocol: 119 255.255.255.255:20004
[  370.976094][T16252] __nla_validate_parse: 4 callbacks suppressed
[  370.976302][T16252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2508'.
[  371.002719][T16255] dccp_invalid_packet: pskb_may_pull failed
[  372.029842][T16280] IPVS: length: 230 != 24
[  372.275370][T16286] dccp_invalid_packet: pskb_may_pull failed
[  372.783450][T16291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2522'.
[  372.965220][T16294] IPVS: length: 230 != 24
[  373.059318][T16302] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2526'.
[  373.062000][T16302] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2526'.
[  373.155997][T16307] IPVS: length: 230 != 24
[  373.247065][T16311] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2529'.
[  373.282240][T16311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2529'.
[  373.448425][T16317] sp0: Synchronizing with TNC
[  373.541492][   T39] audit: type=1326 audit(1736845909.842:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.0.2533" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000
[  373.556408][T16326] loop8: detected capacity change from 0 to 7
[  373.556721][   T39] audit: type=1326 audit(1736845909.842:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.0.2533" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000
[  373.556744][   T39] audit: type=1326 audit(1736845909.852:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.0.2533" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f11579 code=0x7ffc0000
[  373.556760][   T39] audit: type=1326 audit(1736845909.852:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.0.2533" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f11579 code=0x7ffc0000
[  373.556776][   T39] audit: type=1326 audit(1736845909.852:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.0.2533" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f11579 code=0x7ffc0000
[  373.556792][   T39] audit: type=1326 audit(1736845909.852:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.0.2533" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f11579 code=0x7ffc0000
[  373.556808][   T39] audit: type=1326 audit(1736845909.852:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.0.2533" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f11579 code=0x7ffc0000
[  373.556824][   T39] audit: type=1326 audit(1736845909.852:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.0.2533" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000
[  373.556840][   T39] audit: type=1326 audit(1736845909.852:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.0.2533" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000
[  373.556856][   T39] audit: type=1326 audit(1736845909.852:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.0.2533" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f11579 code=0x7ffc0000
[  373.560309][T16326] Dev loop8: unable to read RDB block 7
[  373.647977][T16326]  loop8: unable to read partition table
[  373.650386][T16326] loop8: partition table beyond EOD, truncated
[  373.652327][T16326] loop_reread_partitions: partition scan of loop8 (�被x������ڬ��dƤ����ݡ�����
[  373.652327][T16326] 
) failed (rc=-5)
[  374.030093][T16310] [U] �
[  374.229320][T16336] dccp_invalid_packet: pskb_may_pull failed
[  376.411184][T16351] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2542'.
[  377.390623][T16355] can0: slcan on ttyS3.
[  377.392753][T16355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2543'.
[  377.768986][T16363] sp0: Synchronizing with TNC
[  377.845633][T16352] can0 (unregistered): slcan off ttyS3.
[  377.866748][T16380] bridge7: entered allmulticast mode
[  377.927936][T16387] dccp_invalid_packet: pskb_may_pull failed
[  377.961774][ T1410] ieee802154 phy1 wpan1: encryption failed: -22
[  378.035872][T16361] [U] �
[  378.172489][T16398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2551'.
[  378.204252][T16400] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2552'.
[  378.206851][T16400] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2552'.
[  378.248082][   T62] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  378.412206][   T62] usb 5-1: Using ep0 maxpacket: 8
[  378.415774][   T62] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  378.436673][T16410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2554'.
[  378.446533][   T62] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  378.449613][   T62] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  378.452516][   T62] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  378.456008][   T62] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  378.461446][   T62] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  378.464583][   T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.990850][   T62] usb 5-1: usb_control_msg returned -32
[  378.992657][   T62] usbtmc 5-1:16.0: can't read capabilities
[  379.884881][T16439] dccp_invalid_packet: pskb_may_pull failed
[  380.326776][ T6002] usb 5-1: USB disconnect, device number 28
[  380.733211][T16446] dccp_invalid_packet: pskb_may_pull failed
[  380.822463][T16448] veth0_to_bridge: entered promiscuous mode
[  380.828385][T16447] veth0_to_bridge: left promiscuous mode
[  380.981502][T16455] serio: Serial port ptm0
[  381.106019][T16457] netlink: 'syz.0.2566': attribute type 10 has an invalid length.
[  381.111222][T16457] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.113717][T16457] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.119167][T16457] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.121213][T16457] bridge0: port 2(bridge_slave_1) entered forwarding state
[  381.123362][T16457] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.125384][T16457] bridge0: port 1(bridge_slave_0) entered forwarding state
[  381.131858][T16457] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  381.617169][T16461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2569'.
[  381.620214][T16461] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2569'.
[  381.965932][T16469] overlayfs: missing 'lowerdir'
[  382.048071][ T5944] Bluetooth: hci2: command 0xfb2d tx timeout
[  382.741266][T16482] dccp_invalid_packet: pskb_may_pull failed
[  383.524810][T16488] can0: slcan on ttyS3.
[  383.538484][T16488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2578'.
[  383.648130][T16493] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2579'.
[  383.650986][T16493] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2579'.
[  383.680163][T16495] IPVS: set_ctl: invalid protocol: 119 255.255.255.255:20004
[  384.368476][T16485] can0 (unregistered): slcan off ttyS3.
[  384.839941][T16531] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2583'.
[  385.238362][T16537] dccp_invalid_packet: pskb_may_pull failed
[  385.782304][T16547] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  385.816150][T16549] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  386.111574][T16553] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2592'.
[  386.146264][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2592'.
[  386.206405][T16557] IPVS: length: 230 != 24
[  386.388542][T16564] can0: slcan on ttyS3.
[  386.391646][T16564] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2593'.
[  386.716689][T16576] bridge2: entered allmulticast mode
[  386.998014][ T5944] Bluetooth: hci0: command tx timeout
[  387.019155][T16551] can0 (unregistered): slcan off ttyS3.
[  387.352220][T16607] dccp_invalid_packet: pskb_may_pull failed
[  387.399519][T16609] IPVS: length: 230 != 24
[  387.462363][T16612] dccp_invalid_packet: pskb_may_pull failed
[  388.628467][T16632] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2609'.
[  388.640345][T16634] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2611'.
[  388.659717][T16637] IPVS: length: 230 != 24
[  388.694958][T16641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2611'.
[  388.800440][T16651] dccp_invalid_packet: pskb_may_pull failed
[  389.259995][T16664] IPVS: length: 230 != 24
[  389.695925][T16677] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2625'.
[  389.700027][T16677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2625'.
[  389.956268][T16688] can0: slcan on ttyS3.
[  389.958762][T16688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2627'.
[  390.057760][T16691] IPVS: length: 230 != 24
[  390.249629][T16694] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2632'.
[  390.286781][T16706] bridge8: entered allmulticast mode
[  390.336433][T16712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2636'.
[  390.363168][T16712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2636'.
[  390.492747][T16722] IPVS: length: 230 != 24
[  390.535909][T16726] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2642'.
[  390.628334][T16679] can0 (unregistered): slcan off ttyS3.
[  390.706210][T16740] bond0: (slave bridge0): Releasing backup interface
[  390.711544][T16740] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.713679][T16740] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.725674][T16740] bridge_slave_0: left allmulticast mode
[  390.727402][T16740] bridge_slave_0: left promiscuous mode
[  390.732247][T16740] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.745712][T16740] bridge_slave_1: left allmulticast mode
[  390.747296][T16740] bridge_slave_1: left promiscuous mode
[  390.751999][T16740] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.760215][T16740] bond0: (slave bond_slave_0): Releasing backup interface
[  390.773548][T16740] bond0: (slave bond_slave_1): Releasing backup interface
[  390.808934][T16740] team0: Port device team_slave_0 removed
[  390.834000][T16740] team0: Port device team_slave_1 removed
[  390.838634][T16740] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  390.840736][T16740] batman_adv: batadv0: Removing interface: batadv_slave_0
[  390.845068][T16740] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  390.847253][T16740] batman_adv: batadv0: Removing interface: batadv_slave_1
[  390.854158][T16742] team0: Mode changed to "random"
[  390.866442][T16746] vlan0: entered promiscuous mode
[  390.873069][T16746] team0: Port device vlan0 added
[  390.881899][T16740] tipc: Started in network mode
[  390.883572][T16740] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  390.885857][T16740] tipc: Enabled bearer <eth:team0>, priority 0
[  391.722047][T16767] IPVS: length: 230 != 24
[  391.898047][   T74] tipc: Node number set to 11578026
[  391.915955][T16774] Process accounting resumed
[  392.026395][T16774] syz.0.2654 (16774): drop_caches: 2
[  392.338544][T16792] IPVS: length: 230 != 24
[  393.495515][T16825] bridge14: entered allmulticast mode
[  393.641325][T16828] can0: slcan on ttyS3.
[  393.644172][T16828] __nla_validate_parse: 6 callbacks suppressed
[  393.644180][T16828] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2669'.
[  393.913124][T16838] can0 (unregistered): slcan off ttyS3.
[  393.922533][T16841] can0: slcan on ttyS3.
[  393.970860][T16838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2672'.
[  394.392472][T16864] netlink: 'syz.5.2675': attribute type 10 has an invalid length.
[  394.417166][T16864] 8021q: adding VLAN 0 to HW filter on device batadv0
[  394.420366][T16864] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  394.729420][T16826] can0 (unregistered): slcan off ttyS3.
[  395.142828][T16895] dccp_invalid_packet: pskb_may_pull failed
[  396.257393][T16920] can0: slcan on ttyS3.
[  396.259722][T16920] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2684'.
[  396.333782][T16922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2686'.
[  397.010780][T16912] can0 (unregistered): slcan off ttyS3.
[  397.087282][T16949] dccp_invalid_packet: pskb_may_pull failed
[  397.197627][T16960] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2694'.
[  397.903999][T16981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2698'.
[  398.134517][T16994] FAULT_INJECTION: forcing a failure.
[  398.134517][T16994] name failslab, interval 1, probability 0, space 0, times 0
[  398.138333][T16994] CPU: 3 UID: 0 PID: 16994 Comm: syz.5.2703 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  398.141471][T16994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  398.144474][T16994] Call Trace:
[  398.145458][T16994]  <TASK>
[  398.146331][T16994]  dump_stack_lvl+0x16c/0x1f0
[  398.147724][T16994]  should_fail_ex+0x497/0x5b0
[  398.149133][T16994]  ? fs_reclaim_acquire+0xae/0x150
[  398.150622][T16994]  should_failslab+0xc2/0x120
[  398.152004][T16994]  __kmalloc_noprof+0xce/0x4f0
[  398.153421][T16994]  ? d_absolute_path+0x137/0x1b0
[  398.154868][T16994]  ? tomoyo_encode2+0x100/0x3e0
[  398.156319][T16994]  tomoyo_encode2+0x100/0x3e0
[  398.157705][T16994]  tomoyo_realpath_from_path+0x1a7/0x710
[  398.159344][T16994]  tomoyo_path_number_perm+0x248/0x5b0
[  398.160944][T16994]  ? tomoyo_path_number_perm+0x235/0x5b0
[  398.162588][T16994]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  398.164372][T16994]  ? __pfx_lock_release+0x10/0x10
[  398.166011][T16994]  ? trace_lock_acquire+0x14e/0x1f0
[  398.167590][T16994]  ? lock_acquire+0x2f/0xb0
[  398.169009][T16994]  ? __fget_files+0x40/0x3a0
[  398.170376][T16994]  ? __fget_files+0x206/0x3a0
[  398.171764][T16994]  security_file_ioctl_compat+0x9b/0x240
[  398.173422][T16994]  __do_compat_sys_ioctl+0x4e/0x2c0
[  398.174958][T16994]  __do_fast_syscall_32+0x73/0x120
[  398.176436][T16994]  do_fast_syscall_32+0x32/0x80
[  398.177861][T16994]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  398.180343][T16994] RIP: 0023:0xf709e579
[  398.182003][T16994] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  398.188600][T16995] can0: slcan on ttyS3.
[  398.189112][T16994] RSP: 002b:00000000f509055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  398.192696][T16994] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004004510f
[  398.195306][T16994] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000
[  398.195789][T16995] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2702'.
[  398.198238][T16994] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  398.198255][T16994] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  398.198267][T16994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  398.198294][T16994]  </TASK>
[  398.208987][T16994] ERROR: Out of memory at tomoyo_realpath_from_path.
[  398.292141][T17003] IPVS: length: 230 != 24
[  398.331814][T17010] dccp_invalid_packet: pskb_may_pull failed
[  398.878130][T16989] can0 (unregistered): slcan off ttyS3.
[  399.175713][T17044] bridge15: entered allmulticast mode
[  399.192570][T17046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2715'.
[  399.195229][T17046] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2715'.
[  399.223119][T17050] IPVS: length: 230 != 24
[  399.414548][T17063] random: crng reseeded on system resumption
[  399.536850][T17065] ebtables: wrong size: *len 120, entries_size 48, replsz 48
[  399.727760][T17070] dccp_invalid_packet: pskb_may_pull failed
[  400.424657][T17105] can0: slcan on ttyS3.
[  400.429285][T17105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2723'.
[  400.505693][   T39] kauditd_printk_skb: 37 callbacks suppressed
[  400.505808][   T39] audit: type=1326 audit(1736845936.802:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17103 comm="syz.2.2724" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x7fc00000
[  400.548477][   T39] audit: type=1326 audit(1736845936.822:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17103 comm="syz.2.2724" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fbf579 code=0x7fc00000
[  400.823558][T17126] IPVS: length: 230 != 24
[  400.962190][T17144] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2730'.
[  401.063270][T17148] syz.5.2729 (17148): drop_caches: 2
[  401.160060][T17089] can0 (unregistered): slcan off ttyS3.
[  401.281332][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2732'.
[  401.387564][T17178] IPVS: length: 230 != 24
[  402.007313][T17200] dccp_invalid_packet: pskb_may_pull failed
[  403.031233][T17216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2743'.
[  403.074841][T17217] can0: slcan on ttyS3.
[  403.078899][T17217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2742'.
[  403.095459][T17219] binder_alloc: 17218: binder_alloc_buf, no vma
[  403.266520][T17227] IPVS: length: 230 != 24
[  403.361239][T17235] dccp_invalid_packet: pskb_may_pull failed
[  403.416898][   T39] audit: type=1326 audit(1736845939.712:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17103 comm="syz.2.2724" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x7fc00000
[  403.457050][T17238] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2749'.
[  403.460512][T17238] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2749'.
[  403.758459][T17212] can0 (unregistered): slcan off ttyS3.
[  404.545862][T17273] IPVS: length: 230 != 24
[  404.907950][   T30] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  404.914279][T17284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2762'.
[  405.057981][   T30] usb 7-1: Using ep0 maxpacket: 8
[  405.062998][   T30] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  405.065369][   T30] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  405.069312][T17290] can0: slcan on ttyS3.
[  405.072154][   T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  405.074964][   T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  405.077786][   T30] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  405.081831][T17290] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2761'.
[  405.085422][   T30] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  405.090242][   T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.310160][   T30] usb 7-1: usb_control_msg returned -32
[  405.311777][   T30] usbtmc 7-1:16.0: can't read capabilities
[  405.329317][T17307] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2767'.
[  405.333599][T17307] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2767'.
[  405.727985][T17314] usbtmc 7-1:16.0: control status returned 0
[  405.767981][T17281] can0 (unregistered): slcan off ttyS3.
[  405.929528][   T78] usb 7-1: USB disconnect, device number 23
[  406.502799][T17344] dccp_invalid_packet: pskb_may_pull failed
[  406.621571][T17361] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2780'.
[  406.624223][T17361] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2780'.
[  406.803927][T17349] bridge0: port 3(gretap1) entered disabled state
[  406.806633][T17349] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.909044][T17349] veth1_vlan: left allmulticast mode
[  406.931600][T17349] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  406.934346][T17349] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  406.936814][T17349] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  406.939566][T17349] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  407.613490][T17390] IPVS: length: 230 != 24
[  407.803596][T17400] tipc: Resetting bearer <eth:team0>
[  407.941782][T17400] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  407.944618][T17400] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  407.947358][T17400] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  407.950665][T17400] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  408.363534][T17423] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.376880][T17424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2796'.
[  408.456627][T17423] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.568885][T17423] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.616795][T17431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2800'.
[  408.620010][T17431] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2800'.
[  408.641701][T17423] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.735422][T17423] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  408.742147][T17423] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  408.747395][T17423] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  408.753190][T17423] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  408.795427][T17439] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2803'.
[  408.813942][   T78] 
[  408.814972][   T78] ======================================================
[  408.817795][   T78] WARNING: possible circular locking dependency detected
[  408.820519][   T78] 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 Not tainted
[  408.823876][   T78] ------------------------------------------------------
[  408.827128][   T78] kworker/3:2/78 is trying to acquire lock:
[  408.829486][   T78] ffff888043e62800 (&q->q_usage_counter(queue)#51){++++}-{0:0}, at: blk_mq_alloc_request+0x59b/0x950
[  408.833780][   T78] 
[  408.833780][   T78] but task is already holding lock:
[  408.836690][   T78] ffff888043e62e18 (&q->limits_lock){+.+.}-{4:4}, at: sd_revalidate_disk.isra.0+0x52c/0xa8d0
[  408.840384][   T78] 
[  408.840384][   T78] which lock already depends on the new lock.
[  408.840384][   T78] 
[  408.844435][   T78] 
[  408.844435][   T78] the existing dependency chain (in reverse order) is:
[  408.847987][   T78] 
[  408.847987][   T78] -> #5 (&q->limits_lock){+.+.}-{4:4}:
[  408.850812][   T78]        __mutex_lock+0x19b/0xa60
[  408.852277][   T78]        __nbd_set_size+0x2c0/0x730
[  408.853777][   T78]        nbd_start_device+0x8fd/0xd70
[  408.855293][   T78]        nbd_ioctl+0x21a/0xfd0
[  408.856688][   T78]        compat_blkdev_ioctl+0x2f7/0x750
[  408.858457][   T78]        __do_compat_sys_ioctl+0x1cb/0x2c0
[  408.860801][   T78]        __do_fast_syscall_32+0x73/0x120
[  408.863063][   T78]        do_fast_syscall_32+0x32/0x80
[  408.865252][   T78]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  408.867949][   T78] 
[  408.867949][   T78] -> #4 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  408.871389][   T78]        blk_mq_submit_bio+0x1fb6/0x24c0
[  408.873648][   T78]        __submit_bio+0x384/0x540
[  408.875668][   T78]        submit_bio_noacct_nocheck+0x698/0xd70
[  408.878133][   T78]        submit_bio_noacct+0x93a/0x1e20
[  408.880344][   T78]        block_read_full_folio+0x812/0xa50
[  408.882670][   T78]        filemap_read_folio+0xc6/0x2a0
[  408.884829][   T78]        filemap_get_pages+0x155f/0x1be0
[  408.887106][   T78]        filemap_read+0x3ca/0xd70
[  408.889148][   T78]        blkdev_read_iter+0x187/0x480
[  408.891205][   T78]        vfs_read+0x87f/0xbe0
[  408.893100][   T78]        ksys_read+0x12b/0x250
[  408.895030][   T78]        do_syscall_64+0xcd/0x250
[  408.897115][   T78]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.899759][   T78] 
[  408.899759][   T78] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}:
[  408.903164][   T78]        down_read+0x9a/0x330
[  408.905068][   T78]        filemap_fault+0x62c/0x2820
[  408.907175][   T78]        __do_fault+0x10a/0x490
[  408.909134][   T78]        do_pte_missing+0xebd/0x3e00
[  408.911288][   T78]        __handle_mm_fault+0x103c/0x2a40
[  408.913545][   T78]        handle_mm_fault+0x3fa/0xaa0
[  408.915694][   T78]        do_user_addr_fault+0x7a3/0x13f0
[  408.917942][   T78]        exc_page_fault+0x5c/0xc0
[  408.919982][   T78]        asm_exc_page_fault+0x26/0x30
[  408.922194][   T78]        _copy_from_iter+0x37f/0x1400
[  408.924360][   T78]        tipc_msg_build+0x2f7/0x10d0
[  408.926512][   T78]        __tipc_sendstream+0x6fa/0x1190
[  408.928734][   T78]        tipc_sendstream+0x4f/0x70
[  408.930797][   T78]        sock_write_iter+0x4fe/0x5b0
[  408.932938][   T78]        vfs_write+0x5ae/0x1150
[  408.934888][   T78]        ksys_write+0x207/0x250
[  408.936863][   T78]        __do_fast_syscall_32+0x73/0x120
[  408.939110][   T78]        do_fast_syscall_32+0x32/0x80
[  408.941256][   T78]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  408.943986][   T78] 
[  408.943986][   T78] -> #2 (&mm->mmap_lock){++++}-{4:4}:
[  408.947027][   T78]        __might_fault+0x11b/0x190
[  408.949097][   T78]        _copy_from_user+0x29/0xd0
[  408.951011][   T78]        __blk_trace_setup+0xa8/0x180
[  408.952627][   T78]        blk_trace_setup+0x47/0x70
[  408.954144][   T78]        sg_ioctl+0x7a3/0x26b0
[  408.955549][   T78]        compat_ptr_ioctl+0x6b/0xa0
[  408.957126][   T78]        __do_compat_sys_ioctl+0x1cb/0x2c0
[  408.958827][   T78]        __do_fast_syscall_32+0x73/0x120
[  408.960519][   T78]        do_fast_syscall_32+0x32/0x80
[  408.962082][   T78]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  408.964105][   T78] 
[  408.964105][   T78] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}:
[  408.966400][   T78]        __mutex_lock+0x19b/0xa60
[  408.967875][   T78]        blk_mq_init_sched+0x42b/0x640
[  408.969725][   T78]        elevator_init_mq+0x2cd/0x420
[  408.971351][   T78]        add_disk_fwnode+0x113/0x1300
[  408.972963][   T78]        sd_probe+0xa66/0xfa0
[  408.974345][   T78]        really_probe+0x23e/0xa90
[  408.975793][   T78]        __driver_probe_device+0x1de/0x440
[  408.977494][   T78]        driver_probe_device+0x4c/0x1b0
[  408.979088][   T78]        __device_attach_driver+0x1df/0x310
[  408.980796][   T78]        bus_for_each_drv+0x157/0x1e0
[  408.982345][   T78]        __device_attach_async_helper+0x1d3/0x290
[  408.984193][   T78]        async_run_entry_fn+0x9c/0x530
[  408.985755][   T78]        process_one_work+0x958/0x1b30
[  408.987315][   T78]        worker_thread+0x6c8/0xf00
[  408.988797][   T78]        kthread+0x2c1/0x3a0
[  408.990120][   T78]        ret_from_fork+0x45/0x80
[  408.991540][   T78]        ret_from_fork_asm+0x1a/0x30
[  408.993062][   T78] 
[  408.993062][   T78] -> #0 (&q->q_usage_counter(queue)#51){++++}-{0:0}:
[  408.995591][   T78]        __lock_acquire+0x249e/0x3c40
[  408.997175][   T78]        lock_acquire.part.0+0x11b/0x380
[  408.998797][   T78]        blk_queue_enter+0x50f/0x640
[  409.000330][   T78]        blk_mq_alloc_request+0x59b/0x950
[  409.001968][   T78]        scsi_execute_cmd+0x1f1/0xff0
[  409.003528][   T78]        read_capacity_16+0x21a/0xe20
[  409.005076][   T78]        sd_revalidate_disk.isra.0+0x1a06/0xa8d0
[  409.006897][   T78]        scsi_rescan_device+0x243/0x340
[  409.008514][   T78]        ata_scsi_dev_rescan+0x1cb/0x470
[  409.010124][   T78]        process_one_work+0x958/0x1b30
[  409.011688][   T78]        worker_thread+0x6c8/0xf00
[  409.013170][   T78]        kthread+0x2c1/0x3a0
[  409.014506][   T78]        ret_from_fork+0x45/0x80
[  409.015929][   T78]        ret_from_fork_asm+0x1a/0x30
[  409.017478][   T78] 
[  409.017478][   T78] other info that might help us debug this:
[  409.017478][   T78] 
[  409.020296][   T78] Chain exists of:
[  409.020296][   T78]   &q->q_usage_counter(queue)#51 --> &q->q_usage_counter(io)#50 --> &q->limits_lock
[  409.020296][   T78] 
[  409.024494][   T78]  Possible unsafe locking scenario:
[  409.024494][   T78] 
[  409.026607][   T78]        CPU0                    CPU1
[  409.028139][   T78]        ----                    ----
[  409.029733][   T78]   lock(&q->limits_lock);
[  409.031126][   T78]                                lock(&q->q_usage_counter(io)#50);
[  409.033377][   T78]                                lock(&q->limits_lock);
[  409.035328][   T78]   rlock(&q->q_usage_counter(queue)#51);
[  409.037011][   T78] 
[  409.037011][   T78]  *** DEADLOCK ***
[  409.037011][   T78] 
[  409.039298][   T78] 5 locks held by kworker/3:2/78:
[  409.040735][   T78]  #0: ffff88801ac88948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12cd/0x1b30
[  409.043694][   T78]  #1: ffffc9000102fd80 ((work_completion)(&(&ap->scsi_rescan_task)->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30
[  409.047341][   T78]  #2: ffff888024b14358 (&ap->scsi_scan_mutex){+.+.}-{4:4}, at: ata_scsi_dev_rescan+0x3e/0x470
[  409.050289][   T78]  #3: ffff888021336378 (&dev->mutex){....}-{4:4}, at: scsi_rescan_device+0x27/0x340
[  409.052970][   T78]  #4: ffff888043e62e18 (&q->limits_lock){+.+.}-{4:4}, at: sd_revalidate_disk.isra.0+0x52c/0xa8d0
[  409.055962][   T78] 
[  409.055962][   T78] stack backtrace:
[  409.057671][   T78] CPU: 3 UID: 0 PID: 78 Comm: kworker/3:2 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  409.060672][   T78] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  409.063714][   T78] Workqueue: events ata_scsi_dev_rescan
[  409.065303][   T78] Call Trace:
[  409.066282][   T78]  <TASK>
[  409.067137][   T78]  dump_stack_lvl+0x116/0x1f0
[  409.068519][   T78]  print_circular_bug+0x41c/0x610
[  409.069962][   T78]  check_noncircular+0x31a/0x400
[  409.071386][   T78]  ? __pfx_check_noncircular+0x10/0x10
[  409.073190][   T78]  ? lockdep_lock+0xc6/0x200
[  409.074996][   T78]  ? __pfx_lockdep_lock+0x10/0x10
[  409.076828][   T78]  __lock_acquire+0x249e/0x3c40
[  409.078091][   T78]  ? __pfx___lock_acquire+0x10/0x10
[  409.079443][   T78]  lock_acquire.part.0+0x11b/0x380
[  409.080775][   T78]  ? blk_mq_alloc_request+0x59b/0x950
[  409.082169][   T78]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  409.083608][   T78]  ? rcu_is_watching+0x12/0xc0
[  409.084857][   T78]  ? trace_lock_acquire+0x14e/0x1f0
[  409.086214][   T78]  ? blk_mq_alloc_request+0x59b/0x950
[  409.087606][   T78]  ? lock_acquire+0x2f/0xb0
[  409.088781][   T78]  ? blk_mq_alloc_request+0x59b/0x950
[  409.090165][   T78]  blk_queue_enter+0x50f/0x640
[  409.091395][   T78]  ? blk_mq_alloc_request+0x59b/0x950
[  409.092770][   T78]  ? __pfx_blk_queue_enter+0x10/0x10
[  409.094055][   T78]  ? save_trace+0x42/0xa10
[  409.095181][   T78]  ? add_lock_to_list+0x17d/0x390
[  409.096508][   T78]  blk_mq_alloc_request+0x59b/0x950
[  409.097836][   T78]  ? __pfx_blk_mq_alloc_request+0x10/0x10
[  409.099288][   T78]  ? __pfx___lock_acquire+0x10/0x10
[  409.100627][   T78]  ? find_held_lock+0x2d/0x110
[  409.101856][   T78]  scsi_execute_cmd+0x1f1/0xff0
[  409.103113][   T78]  ? lock_acquire.part.0+0x11b/0x380
[  409.104464][   T78]  ? __pfx_scsi_execute_cmd+0x10/0x10
[  409.105839][   T78]  ? sd_revalidate_disk.isra.0+0x52c/0xa8d0
[  409.107362][   T78]  ? rcu_is_watching+0x12/0xc0
[  409.108591][   T78]  read_capacity_16+0x21a/0xe20
[  409.109851][   T78]  ? __pfx_read_capacity_16+0x10/0x10
[  409.111189][   T78]  ? __pfx___mutex_lock+0x10/0x10
[  409.112466][   T78]  ? __pfx_scsi_execute_cmd+0x10/0x10
[  409.113836][   T78]  sd_revalidate_disk.isra.0+0x1a06/0xa8d0
[  409.115315][   T78]  ? find_held_lock+0x2d/0x110
[  409.116569][   T78]  ? mark_held_locks+0x9f/0xe0
[  409.117796][   T78]  ? __pfx_sd_revalidate_disk.isra.0+0x10/0x10
[  409.119368][   T78]  ? kasan_save_stack+0x42/0x60
[  409.120625][   T78]  ? kasan_save_stack+0x33/0x60
[  409.121870][   T78]  ? kasan_save_track+0x14/0x30
[  409.123123][   T78]  ? kasan_save_free_info+0x3b/0x60
[  409.124457][   T78]  ? __kasan_slab_free+0x51/0x70
[  409.125742][   T78]  ? kfree+0x14f/0x4b0
[  409.126771][   T78]  ? scsi_attach_vpd+0x4dc/0x580
[  409.128101][   T78]  ? scsi_rescan_device+0xf5/0x340
[  409.129442][   T78]  ? ata_scsi_dev_rescan+0x1cb/0x470
[  409.130796][   T78]  ? process_one_work+0x958/0x1b30
[  409.132108][   T78]  ? worker_thread+0x6c8/0xf00
[  409.133378][   T78]  ? hlock_class+0x4e/0x130
[  409.134552][   T78]  ? mark_lock+0xb5/0xc60
[  409.135650][   T78]  ? mark_held_locks+0x9f/0xe0
[  409.136903][   T78]  ? kasan_quarantine_put+0x10a/0x240
[  409.138287][   T78]  ? lockdep_hardirqs_on+0x7c/0x110
[  409.139619][   T78]  ? kfree+0x14f/0x4b0
[  409.140683][   T78]  ? lockdep_hardirqs_on+0x7c/0x110
[  409.142026][   T78]  ? scsi_attach_vpd+0x4dc/0x580
[  409.143317][   T78]  ? scsi_attach_vpd+0x4dc/0x580
[  409.144604][   T78]  ? __pfx_sd_rescan+0x10/0x10
[  409.145840][   T78]  scsi_rescan_device+0x243/0x340
[  409.147165][   T78]  ata_scsi_dev_rescan+0x1cb/0x470
[  409.148496][   T78]  process_one_work+0x958/0x1b30
[  409.149789][   T78]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  409.151236][   T78]  ? __pfx_process_one_work+0x10/0x10
[  409.152614][   T78]  ? rcu_is_watching+0x12/0xc0
[  409.153850][   T78]  ? assign_work+0x1a0/0x250
[  409.155060][   T78]  worker_thread+0x6c8/0xf00
[  409.156281][   T78]  ? __kthread_parkme+0x148/0x220
[  409.157576][   T78]  ? __pfx_worker_thread+0x10/0x10
[  409.158910][   T78]  kthread+0x2c1/0x3a0
[  409.159975][   T78]  ? _raw_spin_unlock_irq+0x23/0x50
[  409.161308][   T78]  ? __pfx_kthread+0x10/0x10
[  409.162494][   T78]  ret_from_fork+0x45/0x80
[  409.163644][   T78]  ? __pfx_kthread+0x10/0x10
[  409.164853][   T78]  ret_from_fork_asm+0x1a/0x30
[  409.166108][   T78]  </TASK>
[  409.446407][T17438] caif:caif_disconnect_client(): nothing to disconnect

VM DIAGNOSIS:
08:04:10  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=00000000201b2000 RCX=0000000000001000 RDX=0000000000000000
RSI=00000000201b2000 RDI=ffff888070846000 RBP=0000000000001000 RSP=ffffc900267a7b18
R8 =0000000000000001 R9 =ffffed100e108dff R10=ffff888070846fff R11=0000000000000000
R12=0000000000000000 R13=ffff888070846000 R14=ffff888070846000 R15=00000000201b2000
RIP=ffffffff8498dbe5 RFL=00050246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000201b2000 CR3=0000000070866000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006800000000 0000000200000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000c2736c RBX=0000000000000001 RCX=ffffffff8b1a8889 RDX=ffffed10056a6fee
RSI=ffffffff8bb17240 RDI=ffffffff81703079 RBP=ffffed10039db910 RSP=ffffc9000047fe08
R8 =0000000000000000 R9 =ffffed10056a6fed R10=ffff88802b537f6b R11=0000000000000001
R12=0000000000000001 R13=ffff88801cedc880 R14=ffffffff901cf6d0 R15=0000000000000000
RIP=ffffffff8b1a9c6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b500000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00005586ef7aa000 CR3=000000004cb16000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7463ff4
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000007 RBX=ffff888023119bc0 RCX=1ffffffff203a53a RDX=0000000000000000
RSI=ffffffff8bb17240 RDI=0000000000000001 RBP=ffff888023119fc0 RSP=ffffc9000d007cb8
R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff901cf6d7 R11=0000000000000000
R12=0000000000000000 R13=0000000000000021 R14=0000000000000400 R15=ffff888023119bc0
RIP=ffffffff8b2014b0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0003 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000020035000 CR3=000000005b1f6000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85145da5 RDI=ffffffff9a66a200 RBP=ffffffff9a66a1c0 RSP=ffffc9000102ea60
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d
R12=0000000000000000 R13=0000000000000036 R14=ffffffff85145d40 R15=0000000000000000
RIP=ffffffff85145dcf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f508fcc0 CR3=000000005b1f6000 CR4=00352ef0
DR0=0000000000000003 DR1=0000000000000004 DR2=0000000100000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cfaaaa4e96d8a9d4 5ef3fec4ca7ded3b
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 972821b8ff21629a 6d5cdb8a932e4368
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e21d8631e0fc3cfb d8ec3199e0afd783
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a93575e2a42bf1e 19cf64c87453cb2c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002700
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000001000000 870a008001000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00f89ecf00f89ed7 00f89edf01000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 563c008000f89ed3 010000001c020080
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00f89edbc4e60080 d30e008000f89ecb
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cd697f81f65fffe2 1d023b506d83adb7
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f6c56f57f7f34994 8124a46e6f07b25c
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000