last executing test programs:

31.551942116s ago: executing program 2 (id=418):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2027)
syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x5, {0x3, 0x1, 0x0, 0x400000000000000, 0xfffffffd, 0x0, {0x1, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x7, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x1001a}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x8000000000000, 0x28dc, 0x0, 0x440000, 0xfffffffe, {0x1, 0xfffffffffffffffd, 0x0, 0x1000, 0xfffffffffffffffc, 0x100, 0x0, 0x0, 0x4, 0xc000, 0x0, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000005c0)='./file0/../file0/file0\x00') (fail_nth: 14)

31.186991781s ago: executing program 2 (id=424):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bind$bt_rfcomm(r1, 0x0, 0x0)
connect$bt_rfcomm(r0, 0x0, 0x0)
r2 = gettid()
rt_sigqueueinfo(r2, 0x0, 0x0)
r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/8, 0x8}], 0x1, 0x0, 0x2000000)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
write(r4, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYRES8], 0x18}, 0x1, 0x0, 0x0, 0x24010851}, 0x40008)

31.095909878s ago: executing program 2 (id=426):
r0 = socket(0x200000000000011, 0x2, 0x0)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, &(0x7f0000000080))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x5)
unshare(0xc040400)
fcntl$notify(r2, 0x402, 0x8000003d)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000240)=""/191, 0xbf}], 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[], 0x17)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, <r5=>0xffffffffffffffff}, 0x4)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r6)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r7, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10)
r10 = syz_open_dev$sg(0x0, 0x2, 0x650023)
ioctl$SG_IO(r10, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x0, 0x2, @scatter={0x0, 0xcc, 0x0}, 0x0, 0x0, 0x800004, 0x10030, 0x0, 0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
dup(r9)
r11 = dup(0xffffffffffffffff)
syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe5, 0x87, 0x6e, 0x40, 0x2040, 0x1605, 0xa94, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x58, 0x83, 0xb2, 0x0, [], [{{0x9, 0x5, 0x85, 0x1, 0x40}}]}}]}}]}}, 0x0)
write$6lowpan_enable(r11, &(0x7f0000000000)='0', 0xfffffd2c)
socket(0x2a, 0x4, 0x0)
socket(0x1e, 0x2, 0x0)

28.016249747s ago: executing program 2 (id=452):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@mcast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x14, 0xc}})
r1 = openat$vim2m(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc04c5609, &(0x7f00000000c0)={0x9, 0xb, 0x4, 0x2, 0x3, {0x77359400}, {0x3, 0x0, 0x7, 0x0, 0x5, 0xf7, "b691734f"}, 0x7fff, 0x4, {<r2=>0xffffffffffffffff}, 0x8})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r3=>r0, {0xee01, 0xee00}}, './file0\x00'})
ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc04c5609, &(0x7f0000000200)=@multiplanar_fd={0x0, 0x2, 0x4, 0x100, 0x1, {0x77359400}, {0x2, 0x2, 0x7, 0x2, 0x5, 0x6, "fc2f3c64"}, 0x2, 0x4, {&(0x7f0000000140)=[{0xb4, 0x9, {}, 0x7}, {0xd, 0x7f, {r2}, 0x4}]}, 0x9, 0x0, r3})
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = accept4$phonet_pipe(r3, 0x0, &(0x7f0000000280), 0x80000)
ioctl$SIOCPNADDRESOURCE(r4, 0x89e0, &(0x7f00000002c0)=0x9131)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x140d, 0x100, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0xc}, 0x20040800)
landlock_restrict_self(r3, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'pimreg1\x00', <r5=>0x0})
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000440))
mkdir(&(0x7f0000000480)='./file0\x00', 0x21)
r6 = open(&(0x7f00000004c0)='./file0\x00', 0x600, 0x100)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000500)={0x0, 0x4, 0xf, 0x1})
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000900)={r6}, 0x8)
ioctl$BTRFS_IOC_SEND(r1, 0x40449426, &(0x7f0000000980)={{r4}, 0x5, &(0x7f0000000940)=[0x6, 0x8, 0xffffffffffffff81, 0x400, 0x3], 0x6})
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), r3)
sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, r8, 0xc00, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}}, 0x800)
r9 = dup(0xffffffffffffffff)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000b40)={0x6})
write$nbd(r9, &(0x7f0000000b80)={0x67446698, 0x0, 0x0, 0x0, 0x4, "14e6f0e555460f2fce82688aa4a0e5f8366f0c9abbfeebeb4097e74e13e9c9dc5167e2de3b57c1c955c43497a1a6feba7b2cf4618882db6a458c6b15291e2efb904c474c2c3e1e91e8b27b58e97f55ff6b046cf4bca73d49e99758338003b54f2cc85a1e1d4a14e93be415e708f01a64e26035742946ae60"}, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_elf64(r3, &(0x7f0000000c40)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x8, 0x3, 0x2, 0x332, 0x3, 0x6, 0xa95d, 0x1cb, 0x40, 0x179, 0x5, 0x5, 0x38, 0x2, 0x26, 0x0, 0xa}, [{0x4, 0xffff, 0xe54d, 0x7, 0x5, 0x9, 0x6, 0x3}, {0x6, 0x0, 0x9, 0x9, 0x8, 0x3, 0xe7, 0x7fff}], "ef9b930da54ee4672064bc4990a32a09a9c646e5efcf36cfea66ad5a0d8a34bd49", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6d1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{r9, <r10=>0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)=r3}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x11, 0x19, &(0x7f0000001400)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, r7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x8, 0x2, 0x0, r10}], &(0x7f0000001500)='syzkaller\x00', 0x1, 0x6b, &(0x7f0000001540)=""/107, 0x41100, 0x20, '\x00', r5, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0)={0x3, 0x8, 0x5, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001600)=[r9], &(0x7f0000001640)=[{0x5, 0x1, 0x5}, {0x0, 0x2, 0x3, 0x4}], 0x10, 0x7f9d, @void, @value}, 0x94)
r11 = bpf$ITER_CREATE(0x21, &(0x7f0000001740)={r9}, 0x8)
setsockopt$netlink_NETLINK_PKTINFO(r11, 0x10e, 0x3, &(0x7f0000001780)=0x6, 0x4)
write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000001a40)={0x13, 0x10, 0xfa00, {&(0x7f00000017c0), 0xffffffffffffffff, 0x3}}, 0x18)

27.966823635s ago: executing program 2 (id=453):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000084)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="02074008020000002cb01ea794d59683da33460dbd7000fbdbdf25"], 0x10}}, 0x800)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
socket$key(0xf, 0x3, 0x2)

26.585460033s ago: executing program 2 (id=462):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000480)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x33, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3e}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0x7)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_x_nat_t_type={0x1}]}, 0x80}, 0x1, 0x7}, 0x0)
io_setup(0x4082, &(0x7f0000000380))
unshare(0x400)
ioperm(0x0, 0x6e, 0xe)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r4, 0x400448c9, 0x0)
fstat(r4, &(0x7f0000000300))
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)

11.15221118s ago: executing program 32 (id=462):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000480)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x33, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3e}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0x7)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_x_nat_t_type={0x1}]}, 0x80}, 0x1, 0x7}, 0x0)
io_setup(0x4082, &(0x7f0000000380))
unshare(0x400)
ioperm(0x0, 0x6e, 0xe)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r4, 0x400448c9, 0x0)
fstat(r4, &(0x7f0000000300))
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)

7.440338103s ago: executing program 3 (id=572):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
shutdown(r1, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x4, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r5, 0x104, 0x3, &(0x7f0000000000), 0x4)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x7fffffffffffef9, 0x40000002, 0x0)
syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280), 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x7101})
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r7, &(0x7f0000000400)="001d71d52a3879c9c7649475728f8a25a071a59c20c131e0364e8828e50cfb69d0561b1bf87522000e42847c81695082fb23c905f5713aa8cadb181f50020730a3af1cb5a2ec28f6a78f19956ad27fa369f8adf71664f8eaffe5", 0x5a, 0x4044000, 0x0, 0x0)

7.015656595s ago: executing program 0 (id=573):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
fsopen(&(0x7f0000000000)='proc\x00', 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480)=@proc={0x10, 0x0, 0x25dfdbfd, 0x2000000}, 0xc, &(0x7f0000000540)=[{0x0}], 0x1, 0x0, 0x0, 0x4080}, 0x4008000)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)

4.201200583s ago: executing program 0 (id=581):
prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000080000000000c2a7b71e93e0a4dd9b498988555f18c867e888d6cd38bcbe7771c53b104c724a43f39c9717cdca5f798acbe5297804815d2f7db5278f5e67f5aee8400c8d40dd90ea68a6adc7e67517dc304a65919cf8e019c1b97a1b9c52335a1b4dfc52eb589e928eb6f7c286f4409ada948ee51d8be69ec783d9127600c561ff565883f594eb630e6259b7f39d1eb5d037201aaceb6a733d6bcfabb637be6ca07a07d032c38e54c1ce5c558bed4a78c9cfefffffff61f94596d37b005ab81e001c5cc75fa8a15ddcdadcf70e3ecd4424ebd47d77212bd3177237336786bbfe17ad36e379c5bbaf2f9c03cfb03baa61489517a80b25d6da8360b1fcf00f56bdc299d8938cff3625f415c31b8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x50)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e21, 0xffffffff, @remote, 0x4}, 0x1c)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000000), 0x4)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f00000002c0)={&(0x7f0000000c80)=[0x5, 0x7fff, 0x9, 0x1ff, 0x40000000, 0xfffffffc, 0x3, 0xd, 0x0, 0x1, 0x1ff, 0x8, 0xd, 0x2316, 0x9, 0x1, 0x7fff, 0x9, 0x60000000, 0x80000000, 0xfffffaf5, 0x4, 0x5, 0xf3e, 0x1000, 0xf, 0x10, 0x3, 0x0, 0x2, 0xe, 0x2, 0x0, 0x101, 0x9, 0x3, 0x240, 0x87, 0x0, 0xfffffffa, 0x2, 0xeb, 0x7, 0x9e6, 0x9, 0x81, 0x7, 0x5, 0x5, 0xffff7fff, 0xa58, 0xffffff01, 0x1, 0x3, 0x1, 0x2, 0xf6, 0x7fff, 0x2, 0x0, 0x8001, 0x4, 0xffff, 0x3ff, 0x1, 0x6, 0xfff, 0x6, 0xffff8000, 0x2, 0x0, 0x146, 0xf5, 0x8, 0x80000001, 0x7f, 0x1ea462ee, 0x5, 0x7, 0x81, 0x3, 0xf, 0xf3, 0x5, 0x7, 0x8, 0x8, 0x3, 0x5, 0x4, 0x8, 0x10001, 0xa5, 0x9, 0xe682, 0x2, 0x6, 0x2, 0xa, 0x8, 0xcf8, 0x6, 0x5, 0x1, 0x5, 0x10001, 0xd, 0x5, 0x5, 0x5, 0x7, 0x7, 0xfffffff9, 0x80, 0x3ad6, 0xc, 0x5, 0xffff, 0x2, 0xfffffffa, 0x6, 0xa3a, 0x9, 0x801, 0x4, 0xb74, 0x4, 0x8000002, 0xffffffff, 0x40, 0x2, 0x4, 0x3, 0x8, 0x80000001, 0x5, 0x2, 0x7, 0x8e1, 0x0, 0x9, 0x2, 0x9, 0x2, 0x9, 0x4, 0x2, 0x9, 0x0, 0x3, 0x6, 0x6fd2, 0x1, 0x2, 0xe2e1, 0x46, 0x6, 0x800, 0x2, 0x8000, 0x3, 0x4, 0x83c, 0x80000000, 0xfe, 0x6, 0x8001, 0x0, 0x8, 0x6, 0x4, 0x4, 0x5, 0x30, 0x7fff, 0xc, 0x1, 0x7f, 0x0, 0x5, 0x3, 0x8001, 0x8, 0x507a, 0x5e13, 0x2, 0x2, 0x40, 0x0, 0x8, 0x9149, 0x8, 0x400, 0xcb58, 0x573f, 0x80, 0x0, 0x0, 0xf, 0xd, 0x8, 0x1000, 0x6, 0xabb, 0x1, 0xe39, 0x46aa, 0x3, 0x7ff, 0x9, 0x1, 0x4651, 0x3, 0xffffffff, 0x7, 0x3, 0x4ca6, 0x3, 0x51, 0x9, 0x4, 0x2, 0x2, 0x897, 0x6, 0x7, 0x9, 0x81, 0x7, 0xffffff24, 0xc682, 0x8, 0x1b20, 0x0, 0x10003, 0x4, 0xaa13, 0x5, 0x1, 0xf, 0x0, 0x9, 0x5, 0x1, 0x3fc, 0x7ff, 0xa034, 0x3, 0x1, 0x6, 0x5, 0x7f, 0x10001, 0x3, 0x4000005, 0x8000, 0x456, 0x2, 0x6, 0x9, 0x400, 0x4, 0x1, 0x9, 0x2, 0x0, 0x8, 0x5, 0x200, 0x0, 0x7, 0x4c66, 0x5, 0x6, 0xdd, 0x6, 0x6, 0x1ff, 0x80, 0x0, 0x7, 0x5, 0x10, 0x675, 0x1, 0x1, 0xb, 0x10001, 0x2, 0x80000001, 0x7fffffff, 0x7, 0x4, 0x786, 0x7, 0xd0000, 0x4, 0x401, 0x9, 0xffff8000, 0x47, 0xd9, 0x75, 0x6, 0xffffe4ac, 0x0, 0x1, 0x10001, 0x7, 0x1ff, 0x2, 0x8, 0xfffff6fc, 0xb08f, 0x8001, 0x800000, 0x800, 0x0, 0x6, 0x7f, 0x5, 0x8000, 0x8, 0xff, 0x4, 0x9, 0x7, 0xfffffffc, 0x2, 0x8, 0x38000000, 0x9, 0xe, 0xfffffff7, 0x800, 0x1fb, 0x4, 0xfffff3d6, 0x8000000, 0x9b8a, 0x80000001, 0xfffffffe, 0xffff, 0x8, 0x8, 0x7, 0x3af, 0x5, 0x1, 0x401, 0x5, 0x3, 0xfffffff9, 0x9, 0x171a4a75, 0x80000000, 0xa, 0xb12, 0x40, 0x1000, 0x8474, 0x14000, 0x0, 0x29, 0xe6d7, 0x4, 0x400, 0x8, 0xb, 0x7, 0x101, 0x6, 0x4, 0x3, 0x101, 0x6, 0x1, 0x0, 0x2b, 0x3, 0x2, 0x3, 0x81, 0x8, 0x4, 0x1, 0x200, 0x4, 0x3, 0x7, 0xa2f, 0xe83, 0x80000000, 0x3, 0x1, 0x9, 0x4, 0x4, 0x5, 0x0, 0xfff, 0x23, 0x6, 0x0, 0x4, 0x401, 0xbf0, 0x80, 0x7, 0xffff, 0xb, 0x5, 0x5, 0x7, 0x2, 0x974, 0x0, 0x5, 0x1, 0xd2, 0x3, 0x3446, 0x6d, 0x1, 0x64a1df92, 0x1, 0x7f, 0x8, 0xffffffff, 0x0, 0x478, 0x7fffffff, 0x4, 0x5, 0x4, 0xfff, 0xe, 0x3, 0x3, 0x4, 0x5, 0x5, 0x52c, 0xfffffff8, 0x0, 0x164d, 0x9, 0xef5e, 0x81, 0x5, 0x7, 0x8, 0x1, 0x10000, 0xfffffff9, 0x0, 0x1, 0xffff, 0x3, 0xfffffffe, 0x2e, 0x9, 0x1, 0x3, 0x7, 0x4e, 0xff, 0xa536, 0xaf, 0x8, 0x7ff, 0x80000001, 0x7fffffff, 0x3029, 0x7f, 0x6, 0x3, 0x3, 0x5, 0x8, 0x5, 0xffffaba9, 0x10001, 0x0, 0x15, 0x1, 0x800, 0xf, 0xe091, 0x3, 0x6, 0xf, 0x7, 0x6, 0x30000, 0x2, 0xf, 0x80, 0x1c, 0x80, 0x0, 0x3, 0x79f, 0x3, 0x103, 0x400, 0xe1, 0x74, 0x6, 0x7, 0x6, 0x8000, 0x2, 0x0, 0x1, 0xa, 0x1, 0x4, 0x5, 0x2, 0x6, 0x100, 0x7, 0x1ff, 0x13, 0xfff, 0x1444e4c3, 0xeb, 0xb, 0xaa, 0x1ff, 0x2, 0x5, 0x7, 0xffffd570, 0xd8f, 0xc7ca, 0x2, 0x6, 0xfffffffc, 0xba4, 0xe, 0x0, 0x77, 0x80000000, 0x1, 0x10000, 0x5564, 0x9, 0x3, 0x2, 0xffff0000, 0x5, 0xf307, 0x1, 0x7, 0x1ff, 0x3, 0x2, 0x199d, 0x8001, 0x7fffffff, 0x0, 0xa, 0x2, 0x7, 0x0, 0x8, 0x6, 0x3, 0x4, 0xa, 0x2, 0x82, 0x2000, 0x69f, 0x8, 0x85, 0x3, 0xffffffff, 0x5, 0x5, 0x3, 0x7, 0x1bee, 0xf21, 0x400, 0xbc, 0x8, 0x1, 0x9, 0x2, 0x0, 0x88, 0x101, 0x8, 0x5, 0x80, 0xfffffff7, 0x5, 0x5, 0x5, 0x9, 0x1, 0xe, 0x3, 0x4, 0x6, 0xfffff31a, 0x140, 0x7, 0x4, 0x0, 0x8, 0x1, 0x7, 0xc, 0x9, 0x7, 0x7, 0x4, 0x2, 0x7b, 0x2, 0x1, 0x1, 0x6, 0x400, 0x101, 0x3, 0x1, 0xca0, 0x20cb, 0x0, 0x8000000, 0xe8, 0x5, 0x0, 0x4, 0x1, 0xd7, 0x9, 0xfffffffe, 0x5, 0x99e, 0x617, 0x3e, 0x6, 0x6, 0x6, 0x6, 0x10001, 0x0, 0x0, 0xd, 0x7, 0xfff, 0xfffffff8, 0x4, 0x9, 0x400, 0x100, 0xffffff10, 0x2, 0x976, 0x10001, 0x9, 0xfffff7fe, 0xd, 0x1, 0x1, 0xff, 0x0, 0x401, 0x3, 0x3, 0x5, 0x3, 0x6, 0xaa88, 0xffffffff, 0x0, 0x9, 0x1, 0xc2, 0x5, 0x9, 0x8, 0x4, 0x8000, 0x1000, 0x5, 0x717, 0x2, 0x0, 0x9, 0x8, 0x0, 0x7, 0x2, 0x2, 0x2, 0x4, 0x6, 0x5, 0x1, 0x1, 0x7f, 0x2, 0x80000001, 0xaaf, 0x5, 0xb7, 0xfffc, 0x8, 0x7fffffff, 0x10000, 0x2, 0x4, 0x3, 0x9, 0x8, 0x8, 0x1, 0x2, 0x6, 0x2, 0x80000001, 0x6, 0xb, 0x7, 0x1, 0x3ff, 0x8, 0x40, 0xcf6, 0x52, 0x101, 0x8, 0x101, 0x4, 0x0, 0xc5, 0x20000, 0x5, 0x4, 0x4, 0x7, 0xf, 0x3, 0x4, 0x1f, 0x0, 0x8b1, 0x4bb30cf7, 0x6, 0x8000, 0x7, 0x7, 0x7, 0x9, 0x97, 0x2, 0x9, 0x1a, 0x1, 0x7, 0x1, 0x5, 0x3, 0x9, 0x81, 0x4, 0xfffffff7, 0x9, 0xf47, 0x9, 0x7, 0x3, 0xd, 0x7, 0x8, 0x44, 0x2, 0x0, 0xa0a, 0xe2a, 0x5, 0x4, 0x2, 0x200, 0x80000000, 0x200, 0xf8000000, 0x10000, 0xe, 0x80000001, 0x9, 0x1, 0x5, 0xfffffb51, 0xffffffff, 0x2, 0x5, 0x5, 0x4, 0x100, 0x2, 0x7, 0x80000001, 0x80000000, 0x6, 0x9b8, 0x1, 0x8, 0x2, 0x87, 0x7, 0xec4a, 0x9bb2, 0x7, 0x8, 0x8, 0x4f, 0x5, 0x1000, 0x7, 0x200040, 0x80000001, 0x1, 0x9, 0x5, 0x6, 0x77c, 0xbf0, 0x1, 0x8, 0x6, 0x6, 0xa, 0x6, 0x80000001, 0x1, 0x5, 0x1, 0x2, 0x9, 0x0, 0x65, 0xdf4d, 0x22, 0x7, 0x8, 0x5, 0xe942, 0x80, 0x3, 0x6, 0xb, 0x3, 0x9, 0x425, 0x5, 0x2, 0x21c4, 0x80000000, 0x6, 0xaa, 0x3, 0xfffffe00, 0xfe, 0x5d, 0x6, 0x101, 0x7, 0x4, 0x3, 0xc, 0x4, 0x0, 0x0, 0xfffffffa, 0x4, 0x6, 0xee, 0xf577, 0x4, 0x7, 0xc, 0xc309, 0x40000000, 0x4, 0xc7, 0x0, 0x7, 0x7, 0x5, 0x4, 0x4, 0x8, 0x1, 0xff, 0x5, 0x1, 0x8, 0x5, 0x6, 0x1, 0x0, 0x8, 0x80000001, 0x0, 0x80000001, 0x8, 0x2, 0x800, 0x86b4, 0x7fff, 0x2, 0x4, 0x101, 0x9, 0x51, 0x2, 0x0, 0x9, 0x1, 0x6, 0x9, 0xff, 0x6, 0x8, 0x80000000, 0xfffffff6, 0x7a1, 0x0, 0x6, 0x3ff, 0xfffffffb, 0x5, 0xd97, 0x7fffffff, 0x7, 0x4, 0x494, 0xb, 0xb51c, 0x6e08, 0x5, 0xe6f, 0x100, 0x3, 0x9, 0x7, 0x3, 0x2, 0x6, 0x1000, 0x1e, 0x0, 0x328e, 0x6, 0x2, 0x0, 0x4, 0x3, 0x0, 0x10, 0x94fb, 0x80000000, 0x80000001, 0x10000, 0x8, 0x29, 0xca1, 0x40, 0xff, 0x400, 0x1, 0x9, 0x0, 0x62, 0x5, 0x2, 0x7, 0x3, 0x9, 0x8000, 0x2, 0x3, 0x40, 0x1, 0x2, 0x0, 0x2, 0x0, 0x7ff, 0x7f, 0xf, 0x50, 0x4, 0x4, 0xde1, 0x7fff, 0xfff, 0x8c, 0x5, 0x10, 0xfffffffe, 0x89, 0x80000000, 0x5, 0x10, 0xc1f4, 0xfffffffd, 0x9, 0xffffffff, 0x80, 0x0, 0x4, 0x0, 0xaa6, 0x80000000, 0x1], 0x1, 0x400})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f030000", @ANYRES32=0x0, @ANYBLOB="34000100", @ANYRES32=0x0, @ANYBLOB="00010100ffffffff00"/24], 0x38}}, 0x0)
close(r1)
bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58)
r4 = accept4(r0, 0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="87924f130d4850aa3bb0fddd5eb1c8fda5e3eaef67022eebe88fd088f944888dadb7a4835fb6eb934b67752f6565d50265ab69d5f1a85e74962e313034ed4580d020aebe336fd889b30eca1d60220cbd4852783ab280729cc2787ee52eb9c16d554960fdf681daa477c10fcd4cc6bef16a1b82d584d14d95d38b487c2e25ff75ac077443698906f2757e8fd7014bd5dfb8fd6de8b1d14968977e4b18164b66154d6c2f229651d785f6985f9f87bbd61c63cab7b2491e78335af8fb1c00cd6d7b935d17b1556e9c28f0ca4a0b4293de80d8cb", 0xd2)
fcntl$setlease(r5, 0x400, 0x1)
r6 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=<r7=>0x0, &(0x7f0000000340))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
io_uring_enter(r6, 0x6e2, 0x3900, 0x1, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r6, 0x12, 0x0, 0x0)
fremovexattr(r5, &(0x7f0000000040)=@known='trusted.overlay.origin\x00')
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x20001091}, 0x2004e804)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000200), 0x4000, &(0x7f0000000500)=ANY=[])
rmdir(0x0)

3.731705896s ago: executing program 1 (id=583):
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), 0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0, 0x0, 0x4}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
mq_open(&(0x7f0000000400)='+\'\x00', 0x40, 0x9, &(0x7f0000000440)={0x2000000020, 0x8001, 0x500947db, 0x5})
r4 = creat(&(0x7f00000004c0)='./bus\x00', 0x40)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r6}, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x0, 0x25dfdbfb, {{0x2}, {@void, @void}}}, 0x14}}, 0x0)
write$cgroup_int(r4, &(0x7f00000003c0)=0xd9d, 0x12)
setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000380)=@ng={0x4, 0x11}, 0x2, 0x0)

3.356416674s ago: executing program 3 (id=584):
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0)
write$dsp(0xffffffffffffffff, &(0x7f0000002000)='`', 0x88020)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24000040)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000002040)=ANY=[@ANYBLOB='P&\x00', @ANYBLOB="000229bd7000fddbdf25830000", @ANYRES32=0x0, @ANYBLOB="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"], 0x2650}, 0x1, 0x0, 0x0, 0x4}, 0x4810)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r7}, 0x3d)

3.331562635s ago: executing program 0 (id=585):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x800)

3.245960773s ago: executing program 0 (id=586):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x800)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004", @ANYBLOB], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
tkill(0x0, 0x36)
socket$inet_udp(0x2, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x769})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ppoll(&(0x7f0000000180)=[{r4, 0x4047, 0x700}], 0x1, 0x0, 0x0, 0x0)
close(r4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0)

2.796303883s ago: executing program 1 (id=587):
pwritev2(0xffffffffffffffff, &(0x7f0000001b00)=[{0x0}], 0x1, 0x0, 0x0, 0x0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x100000, {}, [{0x90, 0x1, [@m_ct={0x44, 0x19, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffe, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffff", 0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x5, 0x6, 0x0, 0x5, 0x0})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040), 0x6)
socket$netlink(0x10, 0x3, 0x12)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = openat$sequencer(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNDCTL_MIDI_PRETIME(r5, 0xc0046d00, &(0x7f0000000180)=0x3)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
connect(r6, &(0x7f0000000200)=@ll={0x27, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80) (fail_nth: 1)

2.795876636s ago: executing program 4 (id=588):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000040))

2.746371314s ago: executing program 4 (id=589):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0)
ioctl$I2C_PEC(r1, 0x708, 0x7)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000580)={0x1, 0x0, 0x7, &(0x7f0000000540)={0x1c, "584fc4dfae9a34fb1ffbb539b436cc843759a57bf235d2f60200"}})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x10400, 0x4, 0x10}, 0x18)

2.745827784s ago: executing program 4 (id=590):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000180)={'macvlan0\x00', 0xfffc})
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r7, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x6, 0xfff2}, {0x480bd72125a0c189, 0x5}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4808}, 0x880)
connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r8, 0x4068aea3, &(0x7f0000000180)={0xa4, 0x0, 0x1})
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}, @exit, @exit]}, &(0x7f0000000640)='syzkaller\x00', 0xfffffff6, 0x71, &(0x7f0000000680)=""/113, 0x41100, 0x20, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x9, 0x2a211361, 0x2}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000007c0)=[{0x4, 0x1, 0x10, 0x9}, {0x0, 0x5, 0x3, 0x3}, {0x3, 0x1, 0xf, 0x4}, {0x2, 0x2, 0x3, 0x1}, {0x1, 0x4, 0xc, 0x4}], 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, r9}, 0x10)

2.245627344s ago: executing program 3 (id=591):
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xc55f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000140)="070800ff34ffba100008000086dd", 0xe, 0x4044011, &(0x7f0000000040)={0x11, 0x1b, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14)
socket$kcm(0x21, 0x2, 0x2)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x48802, 0x0)
ioctl$SG_IO(r6, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffc, 0x5, 0x0, @buffer={0x29, 0x0, 0x0}, &(0x7f0000000140)="8536b60bfa", 0x0, 0x9, 0x10000, 0x1, 0x0})
r7 = getpid()
r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
dup(r2)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r7, @ANYBLOB="7ad2b382017ce307008d1ac7bc36732bc285dfebfcf139bcb251e5ccae363f39abfc61f275f33860f3978d86f632d2f538de2943e7061a140315a65a031f443041bd35e587637c6c8b988881c4"], 0x3c}, 0x1, 0x0, 0x0, 0x300}, 0x0)

1.794275518s ago: executing program 0 (id=592):
pwritev2(0xffffffffffffffff, &(0x7f0000001b00)=[{0x0}], 0x1, 0x0, 0x0, 0x0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0)
r0 = socket(0x28, 0x1, 0x0)
getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@deltfilter={0x2c, 0x2d, 0x8, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x1, 0x7}, {0x2, 0x7}, {0xfff0, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xe, 0xe}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mlockall(0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x3)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffff", 0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100006}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402)
ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x5, 0x6, 0x0, 0x5, 0x0})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000040), 0x6)
socket$netlink(0x10, 0x3, 0x12)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = openat$sequencer(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNDCTL_MIDI_PRETIME(r7, 0xc0046d00, &(0x7f0000000180)=0x3)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
connect(r8, &(0x7f0000000200)=@ll={0x27, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80)

1.684998101s ago: executing program 4 (id=593):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0xffffffffffffffff}, 0x13)
readlinkat(r4, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000430007010000000000000000047c0000080001"], 0x1c}}, 0x48844)
rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x7, 0x3, 0x5}}, 0x20, 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"})
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000280))
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r6, 0x4068aea3, &(0x7f0000000300)={0xed, 0x0, 0x7})
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000380)=@req3={0xa, 0xb, 0xfffffffb, 0x4, 0xe3, 0x200, 0xb}, 0xfffffffffffffd85)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000000104050000000700000000000700000305000100010000000a00020000000003a7"], 0x48}, 0x1, 0x0, 0x0, 0x20040024}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x2)

1.546329545s ago: executing program 1 (id=594):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x800)

1.496636263s ago: executing program 4 (id=595):
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), 0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0, 0x0, 0x4}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
mq_open(&(0x7f0000000400)='+\'\x00', 0x40, 0x9, &(0x7f0000000440)={0x2000000020, 0x8001, 0x500947db, 0x5})
r4 = creat(&(0x7f00000004c0)='./bus\x00', 0x40)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r6}, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x0, 0x25dfdbfb, {{0x2}, {@void, @void}}}, 0x14}}, 0x0)
write$cgroup_int(r4, &(0x7f00000003c0)=0xd9d, 0x12)
setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000380)=@ng={0x4, 0x11}, 0x2, 0x0)

1.491147595s ago: executing program 1 (id=596):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000006740)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="bd", 0x1}], 0x1}}], 0x2, 0x2004c048)
syz_emit_ethernet(0x7a, &(0x7f0000000b40)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, '?{r', 0x44, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x0, {{0x8, 0x1, 0x9, 0x0, 0x0, 0x3, 0x7, 0x8}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x3, 0x2, 0x1, 0x2, 0x7}, 0x2, {0x2, 0x8, 0x3, 0x10, 0x0, 0x0, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0)
sendto$inet(r0, &(0x7f0000000140)="e9", 0xfdef, 0x700, 0x0, 0x0)

1.426277752s ago: executing program 1 (id=597):
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0)
write$dsp(0xffffffffffffffff, &(0x7f0000002000)='`', 0x88020)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24000040)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000002040)=ANY=[@ANYBLOB='P&\x00', @ANYBLOB="000229bd7000fddbdf25830000", @ANYRES32=0x0, @ANYBLOB="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"], 0x2650}, 0x1, 0x0, 0x0, 0x4}, 0x4810)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r7}, 0x3d)

992.312713ms ago: executing program 3 (id=598):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000040))

926.637007ms ago: executing program 3 (id=599):
r0 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72fa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x3fd}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xd, 0x4, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xf8, 0x40, 0x8}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x8, 0x5, 0xf, 0xff, 0xd0}, 0x5c, &(0x7f00000010c0)=ANY=[@ANYBLOB="050f5c00e81310040006e09a968dcc19f491a7ad44888a21d3000000000000e2a7cddc99ced1bcf4ae186769172f1f782618d4277bd9dd7c5fee3aae1c1003dbd9c552c061bbf95980d47067aba21fc6f4723968a81b26339880f6fc52066e9ad16b84a3bf84fc07ecea40"], 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x443}}, {0xea, &(0x7f0000000200)=@string={0xea, 0x3, "01d458b3e83edd4d79ccaa83ff54296dede908d528483726885f4fe3e8174e5445024fadc14638de33e1688fafe10ab91682b74dc2e8b55b94375396e46d6bdf6e5667812d14a21532dc30019b6ea135328bfc89c59f3d076ce91f74e8617a5128e699ee59698d6131e9099b8132d076a9ce2354d0eb41de33ab713a9b56c9b217c4afa211e06126b821c4359798d733e62556d2b9db2d33f4baebd9d5ca9c059c35ee6c2b29efd499a94af10e8fd68c70677b7f2261e28f792969d72b8a86e902cc2491140b8d0ceb78c9f0923d791878410a84a2ae2697bf4b97468b959780d0837ce1a6cd6c26"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x420}}]})
syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x14, &(0x7f0000001140)={0xd4f6fe2f38449bb2, 0x6, 0xfc, {0xfc, 0xb, "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"}}, &(0x7f0000001280)=ANY=[@ANYBLOB="0003d0000000d00304be1d59f020ad6e97633205a046d2c967a80e04d6802ab03869018a798e9197423058150fa65b14e237a52b886bbf111405c941409a6867532d13f8a8458c188ee849b3004284f63e57a325ec385611830532d0b11eb43ff2811d17787a17fba2918380fa8f97491cb526e5ce639571c5db313a4d38f1eaaaf0f7e576ffaf194f38d9f9e15410b7d95f12db2289e13dba49261ce982d17ebefeefc50b539684f64a4a8e274201cd94dee1b726383914f4744b0ab1cc0aecad705a8c89427d98e0ef0a196543967af8312b336540d96e8cd816ff1ceb45"], &(0x7f0000000540)={0x0, 0x22, 0x12, {[@global=@item_012={0x1, 0x1, 0x7, "b0"}, @local=@item_012={0x0, 0x2, 0x7}, @main=@item_4={0x3, 0x0, 0x9, "a168507e"}, @local=@item_4={0x3, 0x2, 0x9, '.\"!\r'}, @main=@item_4={0x3, 0x0, 0xb, '\b\x00'}]}}, &(0x7f0000000580)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8000, 0x8, 0x1, {0x22, 0xb2a}}}}, &(0x7f0000000840)={0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="12310500000088bacc259e"], &(0x7f0000000500)={0x0, 0xa, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000700)={0x20, 0x1, 0xea, "0d4bd8ab8efa0b451410a5c3c6f955cf74d250991d4c119997f0cd615a54c8f8f0e719fae0a35f19ba1b9ce90b218187ab5ba47ddf88b7fb864a50522eb16b1c0a1ebe8902742827da72d9115d14f15b39bf0dcb996708e955e80818a266db0dc500593e206c8765edc9a099721fd5989e5541a90aeada8962c25c47b6f3fb9fa7826bc60ed0afb2f7ce5c4de906822e86a09b8ac246d75a00acfdc681009e6a8bd247e630207e57bae918c809dc201c4e240766c70cd23f9cf7bc1bf1318e5630f645581c953621dbad201aeb43daf679ba718e2b434c16bb484e0ed7d576c0c9ae5dd96ad5587e3782"}, &(0x7f0000000800)={0x20, 0x3, 0x1, 0x5}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x8031, 0xffffffffffffffff, 0x339b000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0xf9, 0x0, 0x0, 0x70bd28, 0x3502}]}, 0x20}}, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000200)={0x800, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
r6 = accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000c80))
recvmmsg(r6, 0x0, 0x0, 0x2160, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
rseq(0x0, 0xc8, 0x0, 0x0)
socket(0x1d, 0x2, 0x6)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="20314f0000004f0516c2c8ab8e4cf0a2f2a7cfb074749b52c2a933829ee241792e54be3a6b259bc57581b7c88551d77bae6330a0c6ea3016878196c8527299cdcb8d15fc007fcf3de12a0cd1ceebe084705d2100d9aed0725349a6cecad6e1e8937a84453b85c765d46089463833abeb09fc224bc7a78c7db8b89cb09ef0789f7c9bced68ab152795538b474d32fd6f391255db0c0a61c99a39331e8b1160b970a223c58a4dbd941f4374263b670f60fe2ef587b69a25b82a5147c6243b1f966bd04f591558d9a68cc21b4b100659614b76ec28e0d87d6ce215235ca4c568c32f533b019e4b5f2dbf85e15106ebfdae291453b04aa76e23cac91799f2da384e50f7398ec7d359a2e1f56b7080bf6a2b5251380cab0b20a06728f90c993b6fb40f7333471add987042d1a7d53f5aee2fc652c3cfa9d99be61df4be6c2588654f82a"], &(0x7f0000000900)={0x0, 0x3, 0x48, @string={0x48, 0x3, "d844c15c251b13a355cb174e27947cd6e140406f721e15e7df936cae41f054af1a5bdad59a07b5bff03f48a9b4559f119dcc8e60a8c040b12e3e386c944310c4f2175ba262e0"}}, &(0x7f0000000980)={0x0, 0xf, 0xf2, {0x5, 0xf, 0xf2, 0x4, [@generic={0xd8, 0x10, 0x4, "181cd0a07523c82cb7da9b8619c0e1d5ef64b1af561d12de2ab673d8ae16173f5ef3eb6a244b3bda9b974b9350c15c01142d45a297528d76b2aa4fca90bbbfd6b5f0e18c31bc1c753317172d286077bbc087b70313815929ae67d9fbdf437e076b9b563f7ce1b189dbcdd73fcbf3795a3872e284f97519d29883a0454c3cbb12272002e247158ea6e1caae68702397258dfd7babc2db763890208f746e37c1103c6271f6b63c27307c98ea16ac9b31c62a58de19c48c126b686615e9237f17b56ea8b894adbf3960b4ef63081b89efd19fda302788"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xc, 0xd, 0xa79}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4a, 0x4, 0x5, 0x7f, 0x87}]}}, &(0x7f0000000a80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x5, 0x1, "0b3bfe9a", "590b894d"}}, &(0x7f0000000ac0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1d, 0x0, 0x54, 0x10, 0x5, 0xe}}}, &(0x7f0000001040)={0x44, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x7c}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000d40)={0x20, 0x0, 0x8, {0x10, 0x44, [0x0]}}, &(0x7f0000000d80)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000dc0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000e00)={0x40, 0xb, 0x2, "044d"}, &(0x7f0000000e40)={0x40, 0xf, 0x2, 0x7ff}, &(0x7f0000000e80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000ec0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000f00)={0x40, 0x19, 0x2, 'A\b'}, &(0x7f0000000f40)={0x40, 0x1a, 0x2, 0x101}, &(0x7f0000000f80)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000fc0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001000)={0x40, 0x21, 0x1, 0x8}})
syz_usb_connect(0x0, 0x36, 0x0, 0x0)

668.17451ms ago: executing program 0 (id=600):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000084)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, 0x0, 0x800)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
socket$key(0xf, 0x3, 0x2)

475.773903ms ago: executing program 4 (id=601):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000180)={'macvlan0\x00', 0xfffc})
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r7, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x6, 0xfff2}, {0x480bd72125a0c189, 0x5}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4808}, 0x880)
connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r8, 0x4068aea3, &(0x7f0000000180)={0xa4, 0x0, 0x1})
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}, @exit, @exit]}, &(0x7f0000000640)='syzkaller\x00', 0xfffffff6, 0x71, &(0x7f0000000680)=""/113, 0x41100, 0x20, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x9, 0x2a211361, 0x2}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000007c0)=[{0x4, 0x1, 0x10, 0x9}, {0x0, 0x5, 0x3, 0x3}, {0x3, 0x1, 0xf, 0x4}, {0x2, 0x2, 0x3, 0x1}, {0x1, 0x4, 0xc, 0x4}], 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, r9}, 0x10)

316.737236ms ago: executing program 1 (id=602):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt(r2, 0x3, 0xfff, 0x0, 0x0)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000080000000000000000000008500000022000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000d4448d49850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r8 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
getsockopt$ax25_int(r8, 0x101, 0x5, &(0x7f0000000080), &(0x7f0000000040)=0x4)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001240)={0x2c, r0, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) (fail_nth: 5)

0s ago: executing program 3 (id=603):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181ec2, 0x0)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@delchain={0x94, 0x65, 0x0, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xc}, {0x3, 0xb}, {0xfff1, 0xfff1}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x400, 0x5, 0x5, 0xfffffffd}, {0x7, 0xef, 0x4, 0xb8}, {0x7ff, 0x7, 0x80, 0x5}, {0x9, 0xa, 0xa5, 0xc6}, {0xfff9, 0x6, 0x3, 0x1}, {0x120, 0x0, 0x0, 0x2}, {0xad6, 0x4, 0x10, 0xfffffffb}]}}]}}, @TCA_RATE={0x6, 0x5, {0x4c, 0x4}}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0xc010)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c)
bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @private1, 0x1}, 0x1c)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x20008090)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x0, 0x7ffc1ffb}]})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r5, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a124, 0x60, {0x0, 0x100}})
socket(0x2, 0x80805, 0x0)
r6 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40)
write$sequencer(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="67753ac500000000"], 0x8)
openat$apparmor_thread_current(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x20080004}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:36545' (ED25519) to the list of known hosts.
[   41.255148][ T5926] cgroup: Unknown subsys name 'net'
[   41.426499][ T5926] cgroup: Unknown subsys name 'cpuset'
[   41.430349][ T5926] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.304853][ T5926] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.791233][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.794035][ T5952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.796350][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.798930][ T5952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.801311][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.803887][ T5952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.807608][ T5962] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   45.810791][ T5962] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   45.813073][ T5962] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.816193][ T5962] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   45.818807][ T5962] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.821446][ T5962] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   45.821623][ T5961] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.825214][   T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   45.828360][   T67] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.831197][ T5961] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.835026][   T67] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.838454][ T5952] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.848816][ T5965] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.854234][ T5965] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.173202][ T5949] chnl_net:caif_netlink_parms(): no params data found
[   46.229639][ T5948] chnl_net:caif_netlink_parms(): no params data found
[   46.279957][ T5963] chnl_net:caif_netlink_parms(): no params data found
[   46.332548][ T5956] chnl_net:caif_netlink_parms(): no params data found
[   46.509830][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.512091][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.515052][ T5949] bridge_slave_0: entered allmulticast mode
[   46.517743][ T5949] bridge_slave_0: entered promiscuous mode
[   46.541096][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.543744][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.546170][ T5948] bridge_slave_0: entered allmulticast mode
[   46.548700][ T5948] bridge_slave_0: entered promiscuous mode
[   46.551402][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.553875][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.556194][ T5949] bridge_slave_1: entered allmulticast mode
[   46.558889][ T5949] bridge_slave_1: entered promiscuous mode
[   46.580088][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.582294][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.584750][ T5948] bridge_slave_1: entered allmulticast mode
[   46.587273][ T5948] bridge_slave_1: entered promiscuous mode
[   46.666610][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.668795][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.670961][ T5963] bridge_slave_0: entered allmulticast mode
[   46.673470][ T5963] bridge_slave_0: entered promiscuous mode
[   46.706137][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.708314][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.710557][ T5956] bridge_slave_0: entered allmulticast mode
[   46.713459][ T5956] bridge_slave_0: entered promiscuous mode
[   46.716243][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.718458][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.720612][ T5963] bridge_slave_1: entered allmulticast mode
[   46.723151][ T5963] bridge_slave_1: entered promiscuous mode
[   46.727116][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.731252][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.735107][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.737361][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.739545][ T5956] bridge_slave_1: entered allmulticast mode
[   46.742095][ T5956] bridge_slave_1: entered promiscuous mode
[   46.771690][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.776027][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.803926][ T5963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.867008][ T5963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.907073][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.935443][ T5948] team0: Port device team_slave_0 added
[   46.938851][ T5949] team0: Port device team_slave_0 added
[   46.943129][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.961351][ T5948] team0: Port device team_slave_1 added
[   46.964819][ T5949] team0: Port device team_slave_1 added
[   46.984843][ T5963] team0: Port device team_slave_0 added
[   47.049826][ T5963] team0: Port device team_slave_1 added
[   47.065952][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.068288][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.076403][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.082588][ T5956] team0: Port device team_slave_0 added
[   47.102471][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.104647][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.112395][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.116154][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.118497][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.127316][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.132582][ T5956] team0: Port device team_slave_1 added
[   47.149665][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.151692][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.159361][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.207494][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.209659][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.219621][ T5963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.226492][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.228639][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.237819][ T5963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.288621][ T5949] hsr_slave_0: entered promiscuous mode
[   47.290766][ T5949] hsr_slave_1: entered promiscuous mode
[   47.293395][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.295686][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.303294][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.324249][ T5948] hsr_slave_0: entered promiscuous mode
[   47.326423][ T5948] hsr_slave_1: entered promiscuous mode
[   47.328424][ T5948] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.330767][ T5948] Cannot create hsr debugfs directory
[   47.345854][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.348556][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.356637][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.452908][ T5963] hsr_slave_0: entered promiscuous mode
[   47.455660][ T5963] hsr_slave_1: entered promiscuous mode
[   47.457727][ T5963] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.460007][ T5963] Cannot create hsr debugfs directory
[   47.509730][ T5956] hsr_slave_0: entered promiscuous mode
[   47.511874][ T5956] hsr_slave_1: entered promiscuous mode
[   47.514329][ T5956] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.516589][ T5956] Cannot create hsr debugfs directory
[   47.789790][ T5949] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.796322][ T5949] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.800594][ T5949] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.809162][ T5949] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.831728][ T5948] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   47.836283][ T5948] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   47.840222][ T5948] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   47.847336][ T5948] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   47.853996][ T5305] Bluetooth: hci0: command tx timeout
[   47.854171][ T5965] Bluetooth: hci3: command tx timeout
[   47.889611][ T5963] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.893959][ T5963] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.903143][ T5963] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.908750][ T5963] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.934007][ T5965] Bluetooth: hci1: command tx timeout
[   47.935829][ T5965] Bluetooth: hci2: command tx timeout
[   47.959798][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.963248][ T5956] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.968118][ T5956] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.972372][ T5956] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.977140][ T5956] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.014244][ T5949] 8021q: adding VLAN 0 to HW filter on device team0
[   48.028746][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.031031][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.041601][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.052406][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.054708][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.072930][ T5948] 8021q: adding VLAN 0 to HW filter on device team0
[   48.089927][ T5963] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.106770][ T1220] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.109022][ T1220] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.114368][ T1220] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.116660][ T1220] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.159368][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.163098][ T5963] 8021q: adding VLAN 0 to HW filter on device team0
[   48.186491][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.188751][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.192003][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.194325][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.208316][ T5956] 8021q: adding VLAN 0 to HW filter on device team0
[   48.217166][ T1220] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.220014][ T1220] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.231892][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.234816][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.284365][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.289704][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.326760][ T5949] veth0_vlan: entered promiscuous mode
[   48.331102][ T5948] veth0_vlan: entered promiscuous mode
[   48.341548][ T5949] veth1_vlan: entered promiscuous mode
[   48.347471][ T5948] veth1_vlan: entered promiscuous mode
[   48.361424][ T5963] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.381020][ T5948] veth0_macvtap: entered promiscuous mode
[   48.387372][ T5949] veth0_macvtap: entered promiscuous mode
[   48.395763][ T5948] veth1_macvtap: entered promiscuous mode
[   48.399192][ T5949] veth1_macvtap: entered promiscuous mode
[   48.419823][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.430322][ T5963] veth0_vlan: entered promiscuous mode
[   48.436016][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.440271][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.445466][ T5948] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.448207][ T5948] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.450826][ T5948] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.453506][ T5948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.458148][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.462558][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.468724][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.478869][ T5963] veth1_vlan: entered promiscuous mode
[   48.485210][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.489028][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.495314][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.504847][ T5949] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.507612][ T5949] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.510254][ T5949] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.513200][ T5949] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.559096][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.559231][ T5963] veth0_macvtap: entered promiscuous mode
[   48.561604][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.565454][ T5963] veth1_macvtap: entered promiscuous mode
[   48.581342][ T5963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.584976][ T5963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.587980][ T5963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.591115][ T5963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.595042][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.614878][ T5963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.618086][ T5963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.621110][ T5963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.626180][ T5963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.629884][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.632214][ T5956] veth0_vlan: entered promiscuous mode
[   48.639170][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.642696][ T5956] veth1_vlan: entered promiscuous mode
[   48.643169][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.647640][ T5963] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.650356][ T5963] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.653039][ T5963] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.656400][ T5963] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.674286][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.676853][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.709808][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.712227][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.718275][ T5948] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.721333][ T5956] veth0_macvtap: entered promiscuous mode
[   48.727456][ T5956] veth1_macvtap: entered promiscuous mode
[   48.748679][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.754981][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.758055][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.761140][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.765005][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.768201][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.771915][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.784702][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.787266][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.795190][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.798477][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.801487][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.805622][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.808679][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.811856][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.817171][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.829110][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.831492][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.836082][ T5956] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.838800][ T5956] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.840297][ T6010] IPVS: starting estimator thread 0...
[   48.841503][ T5956] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.846874][ T5956] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.933759][ T6018] IPVS: using max 46 ests per chain, 110400 per kthread
[   49.008664][ T5957] IPVS: starting estimator thread 0...
[   49.012386][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.016198][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.038616][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.041145][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.093678][ T6025] IPVS: using max 46 ests per chain, 110400 per kthread
[   49.934651][ T5965] Bluetooth: hci0: command tx timeout
[   49.943711][ T5965] Bluetooth: hci3: command tx timeout
[   50.013786][ T5965] Bluetooth: hci2: command tx timeout
[   50.013799][ T5305] Bluetooth: hci1: command tx timeout
[   50.044980][   T34] IPVS: starting estimator thread 0...
[   50.143665][ T6036] IPVS: using max 46 ests per chain, 110400 per kthread
[   50.232287][ T6039] No control pipe specified
[   50.235386][ T6039] netlink: 'syz.3.6': attribute type 1 has an invalid length.
[   51.431606][ T6073] evm: overlay not supported
[   51.669731][ T6075] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14'.
[   51.673653][ T6075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14'.
[   51.714930][ T6077] can0: slcan on ttyS3.
[   51.794776][ T6077] can0 (unregistered): slcan off ttyS3.
[   51.853843][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   51.919430][ T6085] autofs: Unknown parameter '0x0000000000000000'
[   52.023852][ T5305] Bluetooth: hci3: command tx timeout
[   52.023956][ T5965] Bluetooth: hci0: command tx timeout
[   52.064875][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   52.113116][ T5305] Bluetooth: hci2: command tx timeout
[   52.113711][ T5955] Bluetooth: hci1: command tx timeout
[   52.226386][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   52.361795][  T834] IPVS: starting estimator thread 0...
[   52.454649][ T6106] IPVS: using max 46 ests per chain, 110400 per kthread
[   52.623337][ T6113] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   52.871330][ T6113] wireguard0: entered promiscuous mode
[   52.873317][ T6113] wireguard0: entered allmulticast mode
[   54.095297][ T5955] Bluetooth: hci0: command tx timeout
[   54.104293][ T5955] Bluetooth: hci3: command tx timeout
[   54.173785][ T5955] Bluetooth: hci1: command tx timeout
[   54.174094][ T5305] Bluetooth: hci2: command tx timeout
[   54.237185][ T6150] syz.2.28 uses obsolete (PF_INET,SOCK_PACKET)
[   55.408498][ T6193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.35'.
[   55.414376][ T6193] netlink: 'syz.0.35': attribute type 1 has an invalid length.
[   55.730777][ T6197] wireguard0: entered promiscuous mode
[   55.732590][ T6197] wireguard0: entered allmulticast mode
[   56.134224][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   56.173694][ T5305] Bluetooth: hci3: command 0x0405 tx timeout
[   56.174487][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   56.179837][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   56.189512][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   56.314189][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   56.593917][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   57.109483][ T6263] netlink: 'syz.0.42': attribute type 9 has an invalid length.
[   58.003814][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   58.659575][ T6292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.51'.
[   58.663669][ T6009] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   58.890190][ T6009] usb 7-1: Using ep0 maxpacket: 8
[   58.916931][ T6009] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   58.920379][ T6009] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   58.923727][ T6009] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.929850][ T6009] usb 7-1: config 0 descriptor??
[   59.682503][ T6009] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[   59.770411][ T6299] wireguard0: entered promiscuous mode
[   59.772224][ T6299] wireguard0: entered allmulticast mode
[   60.777353][ T6325] netlink: 'syz.1.61': attribute type 2 has an invalid length.
[   61.466371][ T5957] usb 7-1: USB disconnect, device number 2
[   62.106875][ T6368] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   62.282155][ T6378] 9pnet: Could not find request transport: rdme6rt=0x0000000000004
[   62.404378][ T6381] overlayfs: conflicting options: userxattr,metacopy=on
[   62.633551][ T6387] 9pnet_fd: Insufficient options for proto=fd
[   62.903668][ T5305] Bluetooth: hci3: command 0x0405 tx timeout
[   63.413342][ T6406] autofs: Unknown parameter '0x0000000000000000'
[   63.416739][ T6406] netlink: 'syz.0.76': attribute type 1 has an invalid length.
[   64.414353][   T34] usb 7-1: new low-speed USB device number 3 using dummy_hcd
[   64.795677][   T34] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   64.798861][   T34] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[   64.802045][   T34] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[   64.805867][   T34] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   64.808866][   T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.816934][ T6425] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   64.821114][   T34] hub 7-1:1.0: bad descriptor, ignoring hub
[   64.823093][   T34] hub 7-1:1.0: probe with driver hub failed with error -5
[   64.825932][   T34] cdc_wdm 7-1:1.0: skipping garbage
[   64.827590][   T34] cdc_wdm 7-1:1.0: skipping garbage
[   64.831343][   T34] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[   64.833237][   T34] cdc_wdm 7-1:1.0: Unknown control protocol
[   65.096516][    C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   65.099238][    C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   65.192980][ T6443] netlink: 'syz.3.85': attribute type 1 has an invalid length.
[   65.345940][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   65.348039][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   65.350004][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   65.352006][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   65.354143][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   65.356145][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   65.358251][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   65.360293][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   65.362355][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   65.364505][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   65.366571][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   65.368626][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   65.370658][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   65.372665][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   65.374973][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   65.377026][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   65.379094][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   65.381103][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   67.139675][    T9] usb 7-1: USB disconnect, device number 3
[   67.275981][ T6492] netlink: 'syz.2.96': attribute type 1 has an invalid length.
[   67.479899][ T6496] xt_CT: No such helper "pptp"
[   68.103758][ T5305] Bluetooth: hci3: command 0x0405 tx timeout
[   68.147817][ T6512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.99'.
[   68.150866][ T6512] netlink: 'syz.1.99': attribute type 1 has an invalid length.
[   68.257331][ T6507] netlink: 32 bytes leftover after parsing attributes in process `syz.1.99'.
[   68.261357][ T6507] netlink: 6 bytes leftover after parsing attributes in process `syz.1.99'.
[   68.271216][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'.
[   69.491319][ T6531] netlink: 'syz.3.105': attribute type 1 has an invalid length.
[   69.945673][ T6545] netlink: 16 bytes leftover after parsing attributes in process `syz.3.106'.
[   69.980497][   T40] audit: type=1326 audit(1745315997.844:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.1.109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000
[   69.992869][   T40] audit: type=1326 audit(1745315997.844:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.1.109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000
[   70.001520][   T40] audit: type=1326 audit(1745315997.844:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.1.109" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ae579 code=0x7ffc0000
[   70.008639][   T40] audit: type=1326 audit(1745315997.844:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.1.109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000
[   70.016214][   T40] audit: type=1326 audit(1745315997.844:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.1.109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000
[   70.023709][   T40] audit: type=1326 audit(1745315997.854:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.1.109" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf70ae579 code=0x7ffc0000
[   70.187372][ T5305] Bluetooth: hci3: unexpected Set CIG Parameters response data
[   70.189960][ T5305] Bluetooth: hci3: unexpected event for opcode 0x2062
[   70.232713][ T6552] warning: `syz.1.110' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.398197][ T6563] netlink: 'syz.1.114': attribute type 1 has an invalid length.
[   70.542376][ T6574] Zero length message leads to an empty skb
[   70.817706][ T1417] ieee802154 phy0 wpan0: encryption failed: -22
[   70.819795][ T1417] ieee802154 phy1 wpan1: encryption failed: -22
[   70.893244][ T6581] process 'syz.1.117' launched './file0' with NULL argv: empty string added
[   71.161983][ T6577] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[   72.028343][ T6607] netlink: 'syz.0.124': attribute type 1 has an invalid length.
[   72.973691][ T5991] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   73.233684][ T5991] usb 5-1: Using ep0 maxpacket: 8
[   73.237248][ T5991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   73.241266][ T5991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   73.245574][ T5991] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   73.248981][ T5991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.255498][ T5991] usb 5-1: config 0 descriptor??
[   73.682156][ T5991] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[   74.254165][ T5305] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[   74.257137][ T5305] Bluetooth: hci3: Injecting HCI hardware error event
[   74.259667][ T5305] Bluetooth: hci3: hardware error 0x00
[   75.961116][ T5990] usb 5-1: USB disconnect, device number 2
[   76.343795][ T5305] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[   76.569262][ T6699] wireguard0: entered promiscuous mode
[   76.571075][ T6699] wireguard0: entered allmulticast mode
[   77.617409][ T6718] overlayfs: conflicting options: userxattr,metacopy=on
[   77.933886][ T6727] netlink: 40 bytes leftover after parsing attributes in process `syz.1.156'.
[   78.061673][ T6732] bridge0: port 3(netdevsim0) entered blocking state
[   78.064611][ T6732] bridge0: port 3(netdevsim0) entered disabled state
[   78.068356][ T6732] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[   78.076335][ T6732] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[   78.079591][ T6732] bridge0: port 3(netdevsim0) entered blocking state
[   78.081795][ T6732] bridge0: port 3(netdevsim0) entered forwarding state
[   78.087781][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'.
[   78.157922][ T6734] syz_tun: entered allmulticast mode
[   78.160695][ T6733] syz_tun: left allmulticast mode
[   78.204600][ T6009] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   78.233664][ T6742] sch_fq: defrate 0 ignored.
[   78.378440][ T6750] capability: warning: `syz.0.161' uses 32-bit capabilities (legacy support in use)
[   78.390493][ T6009] usb 6-1: config 0 has no interfaces?
[   78.435484][ T6009] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[   78.438273][ T6009] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.440714][ T6009] usb 6-1: Product: syz
[   78.442020][ T6009] usb 6-1: Manufacturer: syz
[   78.443453][ T6009] usb 6-1: SerialNumber: syz
[   78.451587][ T6009] usb 6-1: config 0 descriptor??
[   78.586272][ T6754] netlink: 'syz.3.164': attribute type 1 has an invalid length.
[   78.728075][ T1340] usb 6-1: USB disconnect, device number 2
[   79.237156][ T6769] fuse: Bad value for 'fd'
[   79.272923][ T6771] random: crng reseeded on system resumption
[   79.354902][ T6775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.168'.
[   79.818561][ T6788] FAULT_INJECTION: forcing a failure.
[   79.818561][ T6788] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   79.822652][ T6788] CPU: 0 UID: 0 PID: 6788 Comm: syz.3.172 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) 
[   79.822676][ T6788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   79.822694][ T6788] Call Trace:
[   79.822699][ T6788]  <TASK>
[   79.822702][ T6788]  dump_stack_lvl+0x16c/0x1f0
[   79.822721][ T6788]  should_fail_ex+0x512/0x640
[   79.822736][ T6788]  _copy_to_user+0x32/0xd0
[   79.822751][ T6788]  bpf_test_finish.isra.0+0x484/0x690
[   79.822765][ T6788]  ? irqentry_exit+0x3b/0x90
[   79.822778][ T6788]  ? lockdep_hardirqs_on+0x7c/0x110
[   79.822792][ T6788]  ? __pfx_bpf_test_finish.isra.0+0x10/0x10
[   79.822809][ T6788]  ? _copy_from_user+0x93/0xd0
[   79.822823][ T6788]  bpf_prog_test_run_xdp+0xa0d/0x1540
[   79.822842][ T6788]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   79.822857][ T6788]  ? __might_fault+0x30/0x190
[   79.822872][ T6788]  ? fput+0x70/0xf0
[   79.822885][ T6788]  ? __bpf_prog_get+0xa0/0x290
[   79.822898][ T6788]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   79.822911][ T6788]  __sys_bpf+0x1485/0x4d80
[   79.822938][ T6788]  ? __pfx___sys_bpf+0x10/0x10
[   79.822956][ T6788]  ? ksys_write+0x190/0x240
[   79.822968][ T6788]  ? __mutex_unlock_slowpath+0x161/0x6a0
[   79.822990][ T6788]  ? fput+0x70/0xf0
[   79.823002][ T6788]  ? ksys_write+0x1b9/0x240
[   79.823012][ T6788]  ? __pfx_ksys_write+0x10/0x10
[   79.823024][ T6788]  __ia32_sys_bpf+0x76/0xe0
[   79.823033][ T6788]  __do_fast_syscall_32+0x73/0x120
[   79.823049][ T6788]  do_fast_syscall_32+0x32/0x80
[   79.823064][ T6788]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   79.823077][ T6788] RIP: 0023:0xf7f62579
[   79.823085][ T6788] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   79.823095][ T6788] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165
[   79.823104][ T6788] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000600
[   79.823110][ T6788] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000
[   79.823116][ T6788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   79.823121][ T6788] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   79.823127][ T6788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   79.823139][ T6788]  </TASK>
[   79.917871][ T6790] netlink: 'syz.3.173': attribute type 1 has an invalid length.
[   80.574271][ T6809] input: syz1 as /devices/virtual/input/input5
[   80.843739][   T34] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[   80.995248][   T34] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   80.998876][   T34] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   81.003359][   T34] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   81.006829][   T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.069148][   T64] cfg80211: failed to load regulatory.db
[   81.129807][ T6822] netlink: 'syz.0.182': attribute type 1 has an invalid length.
[   81.177072][ T6826] FAULT_INJECTION: forcing a failure.
[   81.177072][ T6826] name failslab, interval 1, probability 0, space 0, times 0
[   81.181206][ T6826] CPU: 0 UID: 0 PID: 6826 Comm: syz.3.184 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) 
[   81.181220][ T6826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   81.181227][ T6826] Call Trace:
[   81.181231][ T6826]  <TASK>
[   81.181235][ T6826]  dump_stack_lvl+0x16c/0x1f0
[   81.181253][ T6826]  should_fail_ex+0x512/0x640
[   81.181265][ T6826]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[   81.181280][ T6826]  should_failslab+0xc2/0x120
[   81.181294][ T6826]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[   81.181306][ T6826]  ? __alloc_skb+0x2b2/0x380
[   81.181321][ T6826]  __alloc_skb+0x2b2/0x380
[   81.181333][ T6826]  ? __pfx___alloc_skb+0x10/0x10
[   81.181347][ T6826]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[   81.181364][ T6826]  netlink_alloc_large_skb+0x69/0x130
[   81.181380][ T6826]  netlink_sendmsg+0x6a1/0xdd0
[   81.181396][ T6826]  ? __pfx_netlink_sendmsg+0x10/0x10
[   81.181411][ T6826]  ? __import_iovec+0x1c8/0x660
[   81.181435][ T6826]  ____sys_sendmsg+0xa95/0xc70
[   81.181444][ T6826]  ? gfs2_rename+0x260/0x12c0
[   81.181457][ T6826]  ? __pfx_____sys_sendmsg+0x10/0x10
[   81.181466][ T6826]  ? get_compat_msghdr+0x11a/0x170
[   81.181484][ T6826]  ___sys_sendmsg+0x134/0x1d0
[   81.181499][ T6826]  ? __pfx____sys_sendmsg+0x10/0x10
[   81.181526][ T6826]  __sys_sendmsg+0x16d/0x220
[   81.181539][ T6826]  ? __pfx___sys_sendmsg+0x10/0x10
[   81.181558][ T6826]  ? rcu_is_watching+0x12/0xc0
[   81.181570][ T6826]  __do_fast_syscall_32+0x73/0x120
[   81.181586][ T6826]  do_fast_syscall_32+0x32/0x80
[   81.181601][ T6826]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   81.181614][ T6826] RIP: 0023:0xf7f62579
[   81.181622][ T6826] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   81.181632][ T6826] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[   81.181641][ T6826] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0
[   81.181647][ T6826] RDX: 0000000004000080 RSI: 0000000000000000 RDI: 0000000000000000
[   81.181653][ T6826] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   81.181658][ T6826] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   81.181664][ T6826] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   81.181677][ T6826]  </TASK>
[   81.215305][ T6809] netlink: 40 bytes leftover after parsing attributes in process `syz.2.179'.
[   81.272962][   T34] usb 7-1: usb_control_msg returned -32
[   81.275256][   T34] usbtmc 7-1:16.0: can't read capabilities
[   81.282679][   T34] usb 7-1: USB disconnect, device number 4
[   81.755142][   T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   81.873977][ T6009] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   81.898247][ T6851] random: crng reseeded on system resumption
[   81.905114][   T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   81.908141][   T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   81.911866][   T10] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   81.918095][   T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   81.920892][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.923527][   T10] usb 8-1: Product: syz
[   81.925018][   T10] usb 8-1: Manufacturer: syz
[   81.926481][   T10] usb 8-1: SerialNumber: syz
[   82.023671][ T6009] usb 6-1: Using ep0 maxpacket: 16
[   82.028581][ T6009] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.032237][ T6009] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.035491][ T6009] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   82.040234][ T6009] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   82.043064][ T6009] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.047681][ T6009] usb 6-1: config 0 descriptor??
[   82.136406][   T10] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   82.263519][ T6860] netlink: 'syz.0.195': attribute type 1 has an invalid length.
[   82.340275][    T9] usb 8-1: USB disconnect, device number 2
[   82.344635][    T9] usblp0: removed
[   82.460511][ T6009] microsoft 0003:045E:07DA.0002: unknown global tag 0xe
[   82.460675][ T6867] FAULT_INJECTION: forcing a failure.
[   82.460675][ T6867] name failslab, interval 1, probability 0, space 0, times 0
[   82.467739][ T6009] microsoft 0003:045E:07DA.0002: item 0 2 1 14 parsing failed
[   82.472223][ T6009] microsoft 0003:045E:07DA.0002: parse failed
[   82.473142][ T6867] CPU: 2 UID: 0 PID: 6867 Comm: syz.0.196 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) 
[   82.473164][ T6867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   82.473175][ T6867] Call Trace:
[   82.473181][ T6867]  <TASK>
[   82.473187][ T6867]  dump_stack_lvl+0x16c/0x1f0
[   82.473216][ T6867]  should_fail_ex+0x512/0x640
[   82.473236][ T6867]  ? __kvmalloc_node_noprof+0x122/0x600
[   82.473257][ T6867]  should_failslab+0xc2/0x120
[   82.473280][ T6867]  __kvmalloc_node_noprof+0x135/0x600
[   82.473297][ T6867]  ? find_held_lock+0x2b/0x80
[   82.473316][ T6867]  ? seq_read_iter+0x826/0x12c0
[   82.473339][ T6867]  ? aa_file_perm+0x4c7/0xfb0
[   82.473366][ T6867]  ? seq_read_iter+0x826/0x12c0
[   82.473388][ T6867]  seq_read_iter+0x826/0x12c0
[   82.473424][ T6867]  ? __pfx__kstrtoull+0x10/0x10
[   82.473458][ T6867]  seq_read+0x39e/0x4e0
[   82.473481][ T6867]  ? __pfx_seq_read+0x10/0x10
[   82.473505][ T6867]  ? import_ubuf+0x1b6/0x220
[   82.473536][ T6867]  ? rw_verify_area+0xcf/0x680
[   82.473577][ T6867]  ? __pfx_seq_read+0x10/0x10
[   82.473601][ T6867]  vfs_readv+0x6bc/0x8a0
[   82.473615][ T6867]  ? get_pid_task+0x106/0x250
[   82.473644][ T6867]  ? __pfx_vfs_readv+0x10/0x10
[   82.473661][ T6867]  ? find_held_lock+0x2b/0x80
[   82.473699][ T6867]  ? __fget_files+0x20e/0x3c0
[   82.473721][ T6867]  ? do_preadv+0x1af/0x270
[   82.473736][ T6867]  do_preadv+0x1af/0x270
[   82.473752][ T6867]  ? __pfx_do_preadv+0x10/0x10
[   82.473765][ T6867]  ? rcu_is_watching+0x12/0xc0
[   82.473783][ T6867]  ? rcu_is_watching+0x12/0xc0
[   82.473803][ T6867]  __do_fast_syscall_32+0x73/0x120
[   82.473829][ T6867]  do_fast_syscall_32+0x32/0x80
[   82.473853][ T6867]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   82.473873][ T6867] RIP: 0023:0xf709e579
[   82.473887][ T6867] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   82.473902][ T6867] RSP: 002b:00000000f506d55c EFLAGS: 00000296 ORIG_RAX: 000000000000014d
[   82.473918][ T6867] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140
[   82.473928][ T6867] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[   82.473937][ T6867] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   82.473946][ T6867] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   82.473955][ T6867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   82.473977][ T6867]  </TASK>
[   82.561559][ T6009] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22
[   82.657279][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'.
[   82.672096][ T6009] usb 6-1: USB disconnect, device number 3
[   84.115021][ T6896] netlink: 'syz.3.204': attribute type 1 has an invalid length.
[   84.682497][ T6916] @: renamed from vlan0 (while UP)
[   86.660663][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'.
[   86.679494][ T6968] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[   86.682316][ T6968] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[   86.685958][ T6968] bridge0: port 3(netdevsim0) entered disabled state
[   86.690934][ T6968] bridge_slave_1: left allmulticast mode
[   86.692858][ T6968] bridge_slave_1: left promiscuous mode
[   86.695176][ T6968] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.699749][ T6968] bridge_slave_0: left allmulticast mode
[   86.701595][ T6968] bridge_slave_0: left promiscuous mode
[   86.703476][ T6968] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.253727][ T6009] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   87.405825][ T6009] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   87.410081][ T6009] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[   87.414267][ T6009] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[   87.418347][ T6009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.425847][ T6009] usb 5-1: config 0 descriptor??
[   87.432083][ T6009] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[   87.435201][ T6009] dvb-usb: bulk message failed: -22 (3/0)
[   87.442609][ T6009] dvb-usb: will use the device's hardware PID filter (table count: 16).
[   87.446865][ T6009] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[   87.450307][ T6009] usb 5-1: media controller created
[   87.455003][ T6009] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   87.464498][ T6009] dvb-usb: bulk message failed: -22 (6/0)
[   87.467129][ T6009] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[   87.473019][ T6009] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input6
[   87.483330][ T6009] dvb-usb: schedule remote query interval to 150 msecs.
[   87.486516][ T6009] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[   87.632453][ T6975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.638860][ T6975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.644842][ T6009] dvb-usb: bulk message failed: -22 (1/0)
[   87.647380][ T6009] dvb-usb: error while querying for an remote control event.
[   87.651787][ T6975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.225'.
[   87.757457][ T6009] usb 5-1: USB disconnect, device number 3
[   87.792225][ T6009] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[   88.663713][ T5965] Bluetooth: hci2: command 0x0405 tx timeout
[   88.712883][ T7004] syzkaller1: entered promiscuous mode
[   88.715912][ T7004] syzkaller1: entered allmulticast mode
[   90.001664][ T5965] Bluetooth: hci2: unexpected event for opcode 0x2002
[   92.076887][ T7083] FAULT_INJECTION: forcing a failure.
[   92.076887][ T7083] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   92.082494][ T7083] CPU: 2 UID: 0 PID: 7083 Comm: syz.2.252 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) 
[   92.082515][ T7083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   92.082525][ T7083] Call Trace:
[   92.082531][ T7083]  <TASK>
[   92.082538][ T7083]  dump_stack_lvl+0x16c/0x1f0
[   92.082566][ T7083]  should_fail_ex+0x512/0x640
[   92.082590][ T7083]  should_fail_alloc_page+0xe7/0x130
[   92.082621][ T7083]  prepare_alloc_pages+0x3c2/0x610
[   92.082647][ T7083]  ? rcu_is_watching+0x12/0xc0
[   92.082668][ T7083]  __alloc_frozen_pages_noprof+0x18f/0x23a0
[   92.082693][ T7083]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   92.082724][ T7083]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   92.082753][ T7083]  ? __lock_acquire+0x5ca/0x1ba0
[   92.082779][ T7083]  ? __lock_acquire+0x5ca/0x1ba0
[   92.082800][ T7083]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   92.082825][ T7083]  ? policy_nodemask+0xea/0x4e0
[   92.082848][ T7083]  alloc_pages_mpol+0x1fb/0x550
[   92.082871][ T7083]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   92.082893][ T7083]  ? __lock_acquire+0x5ca/0x1ba0
[   92.082919][ T7083]  folio_alloc_mpol_noprof+0x36/0x2f0
[   92.082944][ T7083]  vma_alloc_folio_noprof+0xed/0x1e0
[   92.082968][ T7083]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[   92.082999][ T7083]  do_pte_missing+0x223d/0x3fb0
[   92.083027][ T7083]  __handle_mm_fault+0x103d/0x2a40
[   92.083052][ T7083]  ? __pfx___handle_mm_fault+0x10/0x10
[   92.083069][ T7083]  ? __pte_offset_map_lock+0x155/0x2f0
[   92.083094][ T7083]  ? find_held_lock+0x2b/0x80
[   92.083111][ T7083]  ? find_held_lock+0x2b/0x80
[   92.083143][ T7083]  handle_mm_fault+0x3fe/0xad0
[   92.083164][ T7083]  __get_user_pages+0x771/0x36f0
[   92.083186][ T7083]  ? __pfx_mt_find+0x10/0x10
[   92.083211][ T7083]  ? __pfx___get_user_pages+0x10/0x10
[   92.083235][ T7083]  populate_vma_page_range+0x278/0x3a0
[   92.083253][ T7083]  ? __pfx_populate_vma_page_range+0x10/0x10
[   92.083268][ T7083]  ? __pfx_find_vma_intersection+0x10/0x10
[   92.083292][ T7083]  ? __pfx_apply_vma_lock_flags+0x10/0x10
[   92.083314][ T7083]  __mm_populate+0x1d8/0x380
[   92.083329][ T7083]  ? __pfx___mm_populate+0x10/0x10
[   92.083348][ T7083]  ? up_write+0x1b2/0x520
[   92.083373][ T7083]  do_mlock+0x448/0x810
[   92.083393][ T7083]  ? __fget_files+0x20e/0x3c0
[   92.083409][ T7083]  ? __pfx_do_mlock+0x10/0x10
[   92.083429][ T7083]  ? fput+0x70/0xf0
[   92.083449][ T7083]  ? ksys_write+0x1b9/0x240
[   92.083466][ T7083]  ? __pfx_ksys_write+0x10/0x10
[   92.083487][ T7083]  __ia32_sys_mlock+0x57/0x80
[   92.083505][ T7083]  ? syscall_enter_from_user_mode_prepare+0x68/0xe0
[   92.083528][ T7083]  __do_fast_syscall_32+0x73/0x120
[   92.083553][ T7083]  do_fast_syscall_32+0x32/0x80
[   92.083592][ T7083]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   92.083616][ T7083] RIP: 0023:0xf7ff3579
[   92.083628][ T7083] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   92.083643][ T7083] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000096
[   92.083659][ T7083] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000800000
[   92.083668][ T7083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   92.083677][ T7083] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   92.083685][ T7083] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   92.083694][ T7083] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   92.083714][ T7083]  </TASK>
[   93.999888][ T7126] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[   94.002365][ T7126] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   94.006001][ T7126] vhci_hcd vhci_hcd.0: Device attached
[   94.015532][ T5965] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   94.018533][ T5965] Bluetooth: hci2: Injecting HCI hardware error event
[   94.020973][ T5965] Bluetooth: hci2: hardware error 0x00
[   94.243699][  T834] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[   94.727437][ T7127] vhci_hcd: connection reset by peer
[   94.730951][   T46] vhci_hcd: stop threads
[   94.732662][   T46] vhci_hcd: release socket
[   94.734589][   T46] vhci_hcd: disconnect device
[   95.817959][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'.
[   96.136784][ T5965] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   96.363657][   T78] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   96.418177][ T7170] bridge_slave_0: left allmulticast mode
[   96.420170][ T7170] bridge_slave_0: left promiscuous mode
[   96.567748][ T7170] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.596519][ T7170] bridge_slave_1: left allmulticast mode
[   96.598664][ T7170] bridge_slave_1: left promiscuous mode
[   96.600785][ T7170] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.860558][   T78] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.864127][   T78] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.869788][   T78] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   96.878805][   T78] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   96.884159][ T7170] bond0: (slave bond_slave_0): Releasing backup interface
[   96.886567][   T78] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.909159][   T78] usb 8-1: config 0 descriptor??
[   96.916661][ T7170] bond0: (slave bond_slave_1): Releasing backup interface
[   97.127852][ T7184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.130636][ T7184] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.163996][   T78] plantronics 0003:047F:FFFF.0003: unbalanced delimiter at end of report description
[   97.167403][   T78] plantronics 0003:047F:FFFF.0003: parse failed
[   97.172575][   T78] plantronics 0003:047F:FFFF.0003: probe with driver plantronics failed with error -22
[   97.202948][ T7170] team0: Port device team_slave_0 removed
[   97.224677][ T7170] team0: Port device team_slave_1 removed
[   97.232983][ T7170] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.239986][ T7170] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.250729][ T7170] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.261565][ T7170] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.295522][ T5965] Bluetooth: hci1: command 0x0405 tx timeout
[   97.365443][   T64] usb 8-1: USB disconnect, device number 3
[   97.555127][ T7202] FAULT_INJECTION: forcing a failure.
[   97.555127][ T7202] name failslab, interval 1, probability 0, space 0, times 0
[   97.559843][ T7202] CPU: 3 UID: 0 PID: 7202 Comm: syz.1.288 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) 
[   97.559858][ T7202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   97.559864][ T7202] Call Trace:
[   97.559869][ T7202]  <TASK>
[   97.559872][ T7202]  dump_stack_lvl+0x16c/0x1f0
[   97.559891][ T7202]  should_fail_ex+0x512/0x640
[   97.559904][ T7202]  ? fs_reclaim_acquire+0xae/0x150
[   97.559934][ T7202]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[   97.559950][ T7202]  should_failslab+0xc2/0x120
[   97.559964][ T7202]  __kmalloc_noprof+0xd2/0x510
[   97.559979][ T7202]  tomoyo_realpath_from_path+0xc2/0x6e0
[   97.559995][ T7202]  ? tomoyo_profile+0x47/0x60
[   97.560013][ T7202]  tomoyo_path_number_perm+0x245/0x580
[   97.560025][ T7202]  ? tomoyo_path_number_perm+0x237/0x580
[   97.560039][ T7202]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   97.560064][ T7202]  ? find_held_lock+0x2b/0x80
[   97.560075][ T7202]  ? hook_file_ioctl_common+0x145/0x410
[   97.560087][ T7202]  ? __fget_files+0x204/0x3c0
[   97.560099][ T7202]  ? __fget_files+0x20e/0x3c0
[   97.560107][ T7202]  ? __fput_deferred+0x300/0x370
[   97.560122][ T7202]  security_file_ioctl_compat+0x9b/0x240
[   97.560137][ T7202]  __ia32_compat_sys_ioctl+0xc3/0x360
[   97.560154][ T7202]  __do_fast_syscall_32+0x73/0x120
[   97.560170][ T7202]  do_fast_syscall_32+0x32/0x80
[   97.560185][ T7202]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   97.560197][ T7202] RIP: 0023:0xf70ae579
[   97.560206][ T7202] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   97.560215][ T7202] RSP: 002b:00000000f509e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[   97.560225][ T7202] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002284
[   97.560231][ T7202] RDX: 0000000080001100 RSI: 0000000000000000 RDI: 0000000000000000
[   97.560237][ T7202] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   97.560242][ T7202] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   97.560248][ T7202] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   97.560260][ T7202]  </TASK>
[   97.560824][ T7202] ERROR: Out of memory at tomoyo_realpath_from_path.
[   98.654217][ T5965] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[   98.657070][ T5965] Bluetooth: hci1: Injecting HCI hardware error event
[   98.660775][ T5305] Bluetooth: hci1: hardware error 0x00
[   99.373857][  T834] vhci_hcd: vhci_device speed not set
[   99.377642][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'.
[   99.385911][ T7249] FAULT_INJECTION: forcing a failure.
[   99.385911][ T7249] name failslab, interval 1, probability 0, space 0, times 0
[   99.391301][ T7249] CPU: 0 UID: 0 PID: 7249 Comm: syz.0.300 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) 
[   99.391323][ T7249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   99.391333][ T7249] Call Trace:
[   99.391338][ T7249]  <TASK>
[   99.391344][ T7249]  dump_stack_lvl+0x16c/0x1f0
[   99.391372][ T7249]  should_fail_ex+0x512/0x640
[   99.391395][ T7249]  should_failslab+0xc2/0x120
[   99.391417][ T7249]  kmem_cache_alloc_noprof+0x6d/0x3b0
[   99.391439][ T7249]  ? __inet_hash_connect+0x7cb/0x1e30
[   99.391462][ T7249]  __inet_hash_connect+0x7cb/0x1e30
[   99.391488][ T7249]  ? __pfx___inet_check_established+0x10/0x10
[   99.391510][ T7249]  ? __pfx___inet_hash_connect+0x10/0x10
[   99.391534][ T7249]  ? inet_hash_connect+0x125/0x260
[   99.391555][ T7249]  dccp_v4_connect+0xbdc/0x1530
[   99.391584][ T7249]  __inet_stream_connect+0x3c5/0x1020
[   99.391610][ T7249]  ? __pfx___inet_stream_connect+0x10/0x10
[   99.391626][ T7249]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   99.391655][ T7249]  ? __pfx_inet_stream_connect+0x10/0x10
[   99.391672][ T7249]  ? __local_bh_enable_ip+0xa4/0x120
[   99.391695][ T7249]  ? __pfx_inet_stream_connect+0x10/0x10
[   99.391709][ T7249]  inet_stream_connect+0x57/0xa0
[   99.391726][ T7249]  __sys_connect_file+0x13e/0x1a0
[   99.391747][ T7249]  __sys_connect+0x14d/0x170
[   99.391765][ T7249]  ? __pfx___sys_connect+0x10/0x10
[   99.391792][ T7249]  ? __pfx_ksys_write+0x10/0x10
[   99.391814][ T7249]  __ia32_sys_connect+0x71/0xb0
[   99.391833][ T7249]  ? syscall_enter_from_user_mode_prepare+0x68/0xe0
[   99.391856][ T7249]  __do_fast_syscall_32+0x73/0x120
[   99.391881][ T7249]  do_fast_syscall_32+0x32/0x80
[   99.391905][ T7249]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   99.391926][ T7249] RIP: 0023:0xf709e579
[   99.391939][ T7249] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   99.391955][ T7249] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 000000000000016a
[   99.391970][ T7249] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000080
[   99.391981][ T7249] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000
[   99.391991][ T7249] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   99.392000][ T7249] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   99.392010][ T7249] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   99.392032][ T7249]  </TASK>
[   99.457237][ T7253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.298'.
[   99.485477][ T7253] netlink: 'syz.2.298': attribute type 1 has an invalid length.
[   99.554506][ T7243] netlink: 32 bytes leftover after parsing attributes in process `syz.2.298'.
[   99.561683][ T7243] netlink: 6 bytes leftover after parsing attributes in process `syz.2.298'.
[  100.733646][ T5305] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  101.378914][ T7285] random: crng reseeded on system resumption
[  101.871921][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'.
[  101.874069][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'.
[  101.878671][ T7294] veth0_to_bond: entered allmulticast mode
[  102.123856][ T1340] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  102.253835][ T1340] usb 5-1: device descriptor read/64, error -71
[  102.493672][ T1340] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  102.623728][ T1340] usb 5-1: device descriptor read/64, error -71
[  102.950737][ T1340] usb usb5-port1: attempt power cycle
[  103.294187][ T1340] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  103.314296][ T1340] usb 5-1: device descriptor read/8, error -71
[  103.563728][ T1340] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  103.596585][ T1340] usb 5-1: device descriptor read/8, error -71
[  103.703766][ T1340] usb usb5-port1: unable to enumerate USB device
[  106.146819][ T7381] FAULT_INJECTION: forcing a failure.
[  106.146819][ T7381] name failslab, interval 1, probability 0, space 0, times 0
[  106.151872][ T7381] CPU: 1 UID: 0 PID: 7381 Comm: syz.1.333 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) 
[  106.151894][ T7381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  106.151904][ T7381] Call Trace:
[  106.151912][ T7381]  <TASK>
[  106.151919][ T7381]  dump_stack_lvl+0x16c/0x1f0
[  106.151945][ T7381]  should_fail_ex+0x512/0x640
[  106.151965][ T7381]  ? fs_reclaim_acquire+0xae/0x150
[  106.151993][ T7381]  ? tomoyo_supervisor+0x45b/0x13b0
[  106.152009][ T7381]  should_failslab+0xc2/0x120
[  106.152032][ T7381]  __kmalloc_noprof+0xd2/0x510
[  106.152051][ T7381]  ? tomoyo_profile+0x47/0x60
[  106.152079][ T7381]  tomoyo_supervisor+0x45b/0x13b0
[  106.152100][ T7381]  ? __pfx_tomoyo_supervisor+0x10/0x10
[  106.152137][ T7381]  ? lockdep_hardirqs_on+0x7c/0x110
[  106.152164][ T7381]  ? tomoyo_check_path_acl+0xad/0x210
[  106.152185][ T7381]  ? tomoyo_check_acl+0x1f7/0x410
[  106.152206][ T7381]  tomoyo_path_permission+0x270/0x3b0
[  106.152229][ T7381]  tomoyo_check_open_permission+0x37b/0x3c0
[  106.152247][ T7381]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  106.152294][ T7381]  ? do_raw_spin_lock+0x12c/0x2b0
[  106.152318][ T7381]  tomoyo_file_open+0x6b/0x90
[  106.152336][ T7381]  security_file_open+0x84/0x1e0
[  106.152356][ T7381]  do_dentry_open+0x596/0x1c10
[  106.152380][ T7381]  vfs_open+0x82/0x3f0
[  106.152411][ T7381]  path_openat+0x1e5e/0x2d40
[  106.152436][ T7381]  ? __pfx_path_openat+0x10/0x10
[  106.152462][ T7381]  do_filp_open+0x20b/0x470
[  106.152480][ T7381]  ? __pfx_do_filp_open+0x10/0x10
[  106.152513][ T7381]  ? alloc_fd+0x471/0x7d0
[  106.152534][ T7381]  do_sys_openat2+0x11b/0x1d0
[  106.152556][ T7381]  ? __pfx_do_sys_openat2+0x10/0x10
[  106.152581][ T7381]  ? __fget_files+0x20e/0x3c0
[  106.152602][ T7381]  __ia32_compat_sys_openat+0x16d/0x210
[  106.152628][ T7381]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  106.152651][ T7381]  ? ksys_write+0x1b9/0x240
[  106.152671][ T7381]  ? rcu_is_watching+0x12/0xc0
[  106.152690][ T7381]  __do_fast_syscall_32+0x73/0x120
[  106.152717][ T7381]  do_fast_syscall_32+0x32/0x80
[  106.152745][ T7381]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  106.152764][ T7381] RIP: 0023:0xf70ae579
[  106.152777][ T7381] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  106.152792][ T7381] RSP: 002b:00000000f509e100 EFLAGS: 00000293 ORIG_RAX: 0000000000000127
[  106.152808][ T7381] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f509e150
[  106.152819][ T7381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7412ff4
[  106.152828][ T7381] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  106.152837][ T7381] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  106.152848][ T7381] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  106.152886][ T7381]  </TASK>
[  106.421412][ T7400] overlay: ./bus is not a directory
[  106.431063][ T7400] /dev/sg0: Can't lookup blockdev
[  106.683709][   T64] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  106.837791][   T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.841265][   T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.844682][   T64] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  106.847579][   T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.852560][   T64] usb 6-1: config 0 descriptor??
[  107.101068][ T7418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.343'.
[  107.262742][   T64] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0
[  107.265267][   T64] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0
[  107.270458][   T64] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0D8C:0022.0004/input/input7
[  107.281507][   T64] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0
[  107.476357][   T34] usb 6-1: USB disconnect, device number 4
[  107.786309][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.349'.
[  108.010064][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.352'.
[  108.074379][ T7447] --map-set only usable from mangle table
[  108.076117][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.355'.
[  108.388256][ T7464] netlink: 'syz.2.362': attribute type 1 has an invalid length.
[  110.483773][   T64] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  110.633647][   T64] usb 5-1: Using ep0 maxpacket: 32
[  110.636810][   T64] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  110.642513][   T64] usb 5-1: config 0 has no interface number 0
[  110.645767][   T64] usb 5-1: config 0 interface 184 has no altsetting 0
[  110.651058][   T64] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  110.656881][   T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.659482][   T64] usb 5-1: Product: syz
[  110.662111][   T64] usb 5-1: Manufacturer: syz
[  110.664730][   T64] usb 5-1: SerialNumber: syz
[  110.669221][   T64] usb 5-1: config 0 descriptor??
[  110.673251][   T64] smsc75xx v1.0.0
[  110.674797][   T64] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  110.680024][   T64] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22
[  110.731017][ T7531] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  111.272302][ T7538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.387'.
[  111.422480][ T6009] usb 5-1: USB disconnect, device number 8
[  111.470484][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'.
[  111.524765][ T7550] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  111.643179][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'.
[  112.093485][ T7569] netlink: 'syz.2.394': attribute type 55 has an invalid length.
[  112.096662][ T7569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.394'.
[  112.684987][ T7544] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  112.844552][ T7594] tmpfs: Unknown parameter 'usrquota_bloûHË'
[  113.415346][ T7629] netlink: 32 bytes leftover after parsing attributes in process `syz.3.407'.
[  113.427013][ T7629] netlink: 'syz.3.407': attribute type 10 has an invalid length.
[  113.452563][ T7629] veth0_vlan: left promiscuous mode
[  113.462046][ T7629] veth0_vlan: entered promiscuous mode
[  113.474803][ T7629] team0: Device veth0_vlan failed to register rx_handler
[  113.621363][ T7642] pim6reg: entered allmulticast mode
[  113.624533][ T7642] pim6reg: left allmulticast mode
[  114.189814][ T7655] FAULT_INJECTION: forcing a failure.
[  114.189814][ T7655] name failslab, interval 1, probability 0, space 0, times 0
[  114.193886][ T7655] CPU: 2 UID: 0 PID: 7655 Comm: syz.3.419 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) 
[  114.193900][ T7655] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  114.193906][ T7655] Call Trace:
[  114.193910][ T7655]  <TASK>
[  114.193914][ T7655]  dump_stack_lvl+0x16c/0x1f0
[  114.193947][ T7655]  should_fail_ex+0x512/0x640
[  114.193963][ T7655]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  114.193978][ T7655]  should_failslab+0xc2/0x120
[  114.193991][ T7655]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  114.194004][ T7655]  ? __alloc_skb+0x2b2/0x380
[  114.194022][ T7655]  __alloc_skb+0x2b2/0x380
[  114.194035][ T7655]  ? __pfx___alloc_skb+0x10/0x10
[  114.194052][ T7655]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  114.194069][ T7655]  netlink_alloc_large_skb+0x69/0x130
[  114.194084][ T7655]  netlink_sendmsg+0x6a1/0xdd0
[  114.194101][ T7655]  ? __pfx_netlink_sendmsg+0x10/0x10
[  114.194116][ T7655]  ? __import_iovec+0x1c8/0x660
[  114.194137][ T7655]  ____sys_sendmsg+0xa95/0xc70
[  114.194149][ T7655]  ? __pfx_____sys_sendmsg+0x10/0x10
[  114.194158][ T7655]  ? get_compat_msghdr+0x11a/0x170
[  114.194176][ T7655]  ___sys_sendmsg+0x134/0x1d0
[  114.194190][ T7655]  ? __pfx____sys_sendmsg+0x10/0x10
[  114.194218][ T7655]  __sys_sendmsg+0x16d/0x220
[  114.194232][ T7655]  ? __pfx___sys_sendmsg+0x10/0x10
[  114.194250][ T7655]  ? rcu_is_watching+0x12/0xc0
[  114.194263][ T7655]  __do_fast_syscall_32+0x73/0x120
[  114.194279][ T7655]  do_fast_syscall_32+0x32/0x80
[  114.194293][ T7655]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  114.194306][ T7655] RIP: 0023:0xf7f62579
[  114.194314][ T7655] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  114.194324][ T7655] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  114.194333][ T7655] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800001c0
[  114.194340][ T7655] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000
[  114.194345][ T7655] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  114.194351][ T7655] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  114.194356][ T7655] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  114.194368][ T7655]  </TASK>
[  114.217822][ T7656] FAULT_INJECTION: forcing a failure.
[  114.217822][ T7656] name failslab, interval 1, probability 0, space 0, times 0
[  114.287382][ T7656] CPU: 1 UID: 0 PID: 7656 Comm: syz.2.418 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) 
[  114.287409][ T7656] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  114.287415][ T7656] Call Trace:
[  114.287423][ T7656]  <TASK>
[  114.287427][ T7656]  dump_stack_lvl+0x16c/0x1f0
[  114.287446][ T7656]  should_fail_ex+0x512/0x640
[  114.287458][ T7656]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  114.287471][ T7656]  should_failslab+0xc2/0x120
[  114.287486][ T7656]  __kmalloc_cache_noprof+0x6a/0x3e0
[  114.287496][ T7656]  ? __pfx___mutex_trylock_common+0x10/0x10
[  114.287511][ T7656]  ? fuse_lookup_name+0x19f/0x780
[  114.287527][ T7656]  fuse_lookup_name+0x19f/0x780
[  114.287540][ T7656]  ? __mutex_lock+0x1ca/0xb90
[  114.287555][ T7656]  ? __pfx_fuse_lookup_name+0x10/0x10
[  114.287568][ T7656]  ? fuse_lock_inode+0xd2/0x110
[  114.287589][ T7656]  ? mod_objcg_state+0x5eb/0xa50
[  114.287604][ T7656]  fuse_lookup+0x1af/0x420
[  114.287617][ T7656]  ? __pfx_fuse_lookup+0x10/0x10
[  114.287637][ T7656]  ? do_raw_spin_unlock+0x172/0x230
[  114.287648][ T7656]  ? _raw_spin_unlock+0x28/0x50
[  114.287662][ T7656]  lookup_one_qstr_excl_raw.part.0+0xec/0x160
[  114.287676][ T7656]  ? lookup_dcache+0x66/0x170
[  114.287691][ T7656]  lookup_one_qstr_excl+0x3e/0x120
[  114.287705][ T7656]  do_renameat2+0x5aa/0xc90
[  114.287721][ T7656]  ? __pfx_do_renameat2+0x10/0x10
[  114.287734][ T7656]  ? find_held_lock+0x2b/0x80
[  114.287744][ T7656]  ? __might_fault+0xe3/0x190
[  114.287756][ T7656]  ? __might_fault+0x13b/0x190
[  114.287775][ T7656]  ? getname_flags.part.0+0x1c5/0x550
[  114.287792][ T7656]  __ia32_sys_rename+0x7c/0xa0
[  114.287805][ T7656]  __do_fast_syscall_32+0x73/0x120
[  114.287821][ T7656]  do_fast_syscall_32+0x32/0x80
[  114.287835][ T7656]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  114.287849][ T7656] RIP: 0023:0xf7ff3579
[  114.287857][ T7656] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  114.287866][ T7656] RSP: 002b:00000000f50d455c EFLAGS: 00000296 ORIG_RAX: 0000000000000026
[  114.287876][ T7656] RAX: ffffffffffffffda RBX: 0000000080000100 RCX: 00000000800005c0
[  114.287882][ T7656] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  114.287888][ T7656] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  114.287893][ T7656] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  114.287899][ T7656] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  114.287911][ T7656]  </TASK>
[  114.414219][ T7664] netlink: 'syz.3.423': attribute type 27 has an invalid length.
[  114.450930][ T7668] netlink: 'syz.1.425': attribute type 3 has an invalid length.
[  114.453382][ T7668] netlink: 224 bytes leftover after parsing attributes in process `syz.1.425'.
[  114.520335][ T7664] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.530451][ T7664] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.569663][ T7664] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.573182][ T7664] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.576056][ T7664] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.578820][ T7664] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.628520][ T7670] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.631301][ T7670] 8021q: adding VLAN 0 to HW filter on device team0
[  114.636200][ T7670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  114.767356][ T7681] FAULT_INJECTION: forcing a failure.
[  114.767356][ T7681] name failslab, interval 1, probability 0, space 0, times 0
[  114.771700][ T7681] CPU: 3 UID: 0 PID: 7681 Comm: syz.3.428 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) 
[  114.771716][ T7681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  114.771722][ T7681] Call Trace:
[  114.771726][ T7681]  <TASK>
[  114.771730][ T7681]  dump_stack_lvl+0x16c/0x1f0
[  114.771749][ T7681]  should_fail_ex+0x512/0x640
[  114.771761][ T7681]  ? __kmalloc_node_track_caller_noprof+0xc3/0x510
[  114.771777][ T7681]  should_failslab+0xc2/0x120
[  114.771792][ T7681]  __kmalloc_node_track_caller_noprof+0xd6/0x510
[  114.771805][ T7681]  ? __lock_acquire+0xaa4/0x1ba0
[  114.771818][ T7681]  ? kstrdup_const+0x63/0x80
[  114.771834][ T7681]  kstrdup+0x53/0x100
[  114.771847][ T7681]  kstrdup_const+0x63/0x80
[  114.771860][ T7681]  __kernfs_new_node+0x9b/0x8a0
[  114.771871][ T7681]  ? __pfx___mutex_trylock_common+0x10/0x10
[  114.771886][ T7681]  ? __pfx___kernfs_new_node+0x10/0x10
[  114.771899][ T7681]  ? find_held_lock+0x2b/0x80
[  114.771910][ T7681]  ? kernfs_root+0xee/0x2a0
[  114.771922][ T7681]  kernfs_new_node+0x13c/0x1e0
[  114.771936][ T7681]  kernfs_create_link+0xcc/0x240
[  114.771951][ T7681]  sysfs_do_create_link_sd+0x90/0x140
[  114.771962][ T7681]  sysfs_create_link+0x61/0xc0
[  114.771971][ T7681]  driver_sysfs_add+0x91/0x2d0
[  114.771987][ T7681]  really_probe+0x146/0xa90
[  114.772004][ T7681]  __driver_probe_device+0x1de/0x440
[  114.772021][ T7681]  driver_probe_device+0x4c/0x1b0
[  114.772037][ T7681]  __device_attach_driver+0x1df/0x310
[  114.772053][ T7681]  ? __pfx___device_attach_driver+0x10/0x10
[  114.772069][ T7681]  bus_for_each_drv+0x156/0x1e0
[  114.772082][ T7681]  ? __pfx_bus_for_each_drv+0x10/0x10
[  114.772095][ T7681]  ? lockdep_hardirqs_on+0x7c/0x110
[  114.772109][ T7681]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  114.772124][ T7681]  __device_attach+0x1e4/0x4b0
[  114.772141][ T7681]  ? __pfx___device_attach+0x10/0x10
[  114.772157][ T7681]  ? __might_fault+0xe3/0x190
[  114.772169][ T7681]  ? __might_fault+0x13b/0x190
[  114.772180][ T7681]  ? usb_ifnum_to_if+0x16f/0x1d0
[  114.772197][ T7681]  proc_ioctl+0x58e/0x6c0
[  114.772219][ T7681]  usbdev_ioctl+0x1773/0x4070
[  114.772260][ T7681]  ? __pfx_usbdev_ioctl+0x10/0x10
[  114.772284][ T7681]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  114.772302][ T7681]  ? do_vfs_ioctl+0x512/0x1990
[  114.772317][ T7681]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  114.772340][ T7681]  ? find_held_lock+0x2b/0x80
[  114.772350][ T7681]  ? hook_file_ioctl_common+0x145/0x410
[  114.772365][ T7681]  ? __fget_files+0x20e/0x3c0
[  114.772374][ T7681]  ? __fput_deferred+0x300/0x370
[  114.772394][ T7681]  ? __pfx_usbdev_ioctl+0x10/0x10
[  114.772409][ T7681]  compat_ptr_ioctl+0x6b/0xa0
[  114.772422][ T7681]  ? __pfx_compat_ptr_ioctl+0x10/0x10
[  114.772436][ T7681]  __ia32_compat_sys_ioctl+0x24c/0x360
[  114.772452][ T7681]  __do_fast_syscall_32+0x73/0x120
[  114.772468][ T7681]  do_fast_syscall_32+0x32/0x80
[  114.772483][ T7681]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  114.772495][ T7681] RIP: 0023:0xf7f62579
[  114.772504][ T7681] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  114.772513][ T7681] RSP: 002b:00000000f506555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  114.772523][ T7681] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000c0105512
[  114.772529][ T7681] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000
[  114.772534][ T7681] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  114.772540][ T7681] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  114.772545][ T7681] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  114.772558][ T7681]  </TASK>
[  114.772578][ T7681] hub 6-0:1.0: really_probe: driver_sysfs_add failed
[  114.775019][ T6009] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  115.063899][ T6009] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.067332][ T6009] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  115.070500][ T6009] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.082076][ T6009] usb 7-1: config 0 descriptor??
[  115.365911][ T6009] usbhid 7-1:0.0: can't add hid device: -71
[  115.374610][ T6009] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  115.421818][ T7689] 9pnet_fd: Insufficient options for proto=fd
[  115.444315][ T6009] usb 7-1: USB disconnect, device number 5
[  115.610682][ T7698] netlink: 'syz.1.433': attribute type 21 has an invalid length.
[  115.613221][ T7698] netlink: 'syz.1.433': attribute type 1 has an invalid length.
[  115.615952][ T7698] netlink: 100 bytes leftover after parsing attributes in process `syz.1.433'.
[  115.690975][ T7700] netlink: 'syz.3.434': attribute type 27 has an invalid length.
[  115.745373][ T7700] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.748156][ T7700] 8021q: adding VLAN 0 to HW filter on device team0
[  115.754094][ T7700] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.873761][ T6009] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  116.025812][ T6009] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.034927][ T6009] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  116.047052][ T6009] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.062364][ T6009] usb 7-1: config 0 descriptor??
[  116.277453][ T7674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.281886][ T7674] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.323733][ T7739] hub 6-0:1.0: USB hub found
[  117.325376][ T7739] hub 6-0:1.0: 1 port detected
[  117.419174][ T7748] netlink: 144 bytes leftover after parsing attributes in process `syz.0.450'.
[  117.423019][ T7748] netlink: 'syz.0.450': attribute type 55 has an invalid length.
[  117.426522][ T7748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.450'.
[  117.496260][ T6009] usbhid 7-1:0.0: can't add hid device: -71
[  117.510173][ T6009] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  117.556749][ T6009] usb 7-1: USB disconnect, device number 6
[  117.923883][ T7774] bridge0: port 3(syz_tun) entered blocking state
[  117.929754][ T7774] bridge0: port 3(syz_tun) entered disabled state
[  117.931886][ T7774] syz_tun: entered allmulticast mode
[  117.937502][ T7774] syz_tun: entered promiscuous mode
[  117.939508][ T7774] bridge0: port 3(syz_tun) entered blocking state
[  117.941601][ T7774] bridge0: port 3(syz_tun) entered forwarding state
[  118.898378][ T7787] syz.3.459: attempt to access beyond end of device
[  118.898378][ T7787] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0
[  118.921656][ T7787] XFS (nbd3): SB validate failed with error -5.
[  119.780355][ T7826] netlink: 272 bytes leftover after parsing attributes in process `syz.0.467'.
[  119.921764][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'.
[  120.850549][ T7853] capability: warning: `syz.0.473' uses deprecated v2 capabilities in a way that may be insecure
[  121.417341][ T7870] bridge1: the hash_elasticity option has been deprecated and is always 16
[  123.333289][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.495'.
[  123.783847][   T78] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  123.943639][   T78] usb 8-1: Using ep0 maxpacket: 32
[  123.948062][   T78] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  123.952862][   T78] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  123.956373][   T78] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  123.959101][   T78] usb 8-1: Product: syz
[  123.960498][   T78] usb 8-1: Manufacturer: syz
[  123.962041][   T78] usb 8-1: SerialNumber: syz
[  123.967241][   T78] usb 8-1: config 0 descriptor??
[  123.971789][ T7940] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  124.383665][   T78] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  124.583691][   T78] usb 5-1: Using ep0 maxpacket: 16
[  124.586705][   T78] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  124.591295][   T78] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  124.594849][   T78] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.598285][   T78] usb 5-1: Product: syz
[  124.600155][   T78] usb 5-1: Manufacturer: syz
[  124.602208][   T78] usb 5-1: SerialNumber: syz
[  124.606732][   T78] usb 5-1: config 0 descriptor??
[  124.611698][   T78] hub 5-1:0.0: bad descriptor, ignoring hub
[  124.614404][   T78] hub 5-1:0.0: probe with driver hub failed with error -5
[  124.620878][   T78] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input8
[  124.708242][ T7968] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  124.710385][ T7968] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  126.263897][    T9] usb 8-1: USB disconnect, device number 4
[  126.856184][ T7987] netlink: 'syz.1.508': attribute type 2 has an invalid length.
[  127.593755][ T5990] usb 5-1: USB disconnect, device number 9
[  127.600717][ T8000] tipc: Started in network mode
[  127.602285][ T8000] tipc: Node identity ac1414aa, cluster identity 4711
[  127.605411][ T8000] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  127.607621][ T8000] tipc: Enabled bearer <udp:s>, priority 10
[  127.744921][    C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  127.893629][    C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  128.043933][    C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  128.077769][ T8003] netlink: 80 bytes leftover after parsing attributes in process `syz.1.513'.
[  128.103647][   T64] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  128.193814][    C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  128.265255][   T64] usb 5-1: Using ep0 maxpacket: 8
[  128.268584][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'.
[  128.272322][   T64] usb 5-1: config 12 has an invalid interface number: 3 but max is 0
[  128.275528][   T64] usb 5-1: config 12 has an invalid interface descriptor of length 5, skipping
[  128.278476][   T64] usb 5-1: config 12 has an invalid descriptor of length 103, skipping remainder of the config
[  128.281647][   T64] usb 5-1: config 12 has no interface number 0
[  128.284894][   T64] usb 5-1: config 12 interface 3 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  128.289958][   T64] usb 5-1: config 12 interface 3 has no altsetting 0
[  128.294777][   T64] usb 5-1: New USB device found, idVendor=0bfd, idProduct=001b, bcdDevice= 6.4f
[  128.298311][   T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.301466][   T64] usb 5-1: Product: �
[  128.303229][   T64] usb 5-1: Manufacturer: 텇冈�ဣ塽戯�焸�瓖ូ鿆괾�ᩌ�㷛䃂鸗穘䩄瘞Nℇ脎Ȣ�䌠י�質⛩䠾⨒阛
[  128.309132][   T64] usb 5-1: SerialNumber: 严砉䫋幚錤�긋믶
[  128.333737][    C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  128.376440][ T8021] Bluetooth: MGMT ver 1.23
[  128.473633][    C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  128.521856][   T64] kvaser_usb 5-1:12.3: error -ENODEV: Cannot get usb endpoint(s)
[  128.525778][   T64] usb 5-1: USB disconnect, device number 10
[  128.614947][   T34] tipc: Node number set to 2886997162
[  128.753626][    C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  130.029711][ T8056] ALSA: mixer_oss: invalid index 40000
[  130.456954][ T8068] netlink: 'syz.1.534': attribute type 5 has an invalid length.
[  130.459937][ T8068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.534'.
[  130.653649][    C3] net_ratelimit: 2 callbacks suppressed
[  130.653661][    C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  130.789168][ T8073] netlink: 'syz.0.536': attribute type 1 has an invalid length.
[  131.036913][ T8083] overlayfs: failed to resolve './file1': -2
[  131.585283][ T8090] xt_TPROXY: Can be used only with -p tcp or -p udp
[  131.625758][ T8090] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[  131.693860][    C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  131.828419][ T8104] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0
[  132.006087][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  132.267059][ T1417] ieee802154 phy0 wpan0: encryption failed: -22
[  132.269698][ T1417] ieee802154 phy1 wpan1: encryption failed: -22
[  132.299289][ T8112] netlink: 'syz.1.546': attribute type 1 has an invalid length.
[  132.493678][    T9] usb 5-1: Using ep0 maxpacket: 8
[  132.496578][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  132.499973][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  132.502994][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  132.506181][    T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  132.510069][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  132.513049][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.725087][    T9] usb 5-1: GET_CAPABILITIES returned 0
[  132.726869][    T9] usbtmc 5-1:16.0: can't read capabilities
[  132.733642][    C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  132.935473][   T34] usb 5-1: USB disconnect, device number 11
[  133.366154][ T8124] FAULT_INJECTION: forcing a failure.
[  133.366154][ T8124] name failslab, interval 1, probability 0, space 0, times 0
[  133.371479][ T8124] CPU: 3 UID: 0 PID: 8124 Comm: syz.1.549 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) 
[  133.371501][ T8124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  133.371511][ T8124] Call Trace:
[  133.371530][ T8124]  <TASK>
[  133.371538][ T8124]  dump_stack_lvl+0x16c/0x1f0
[  133.371567][ T8124]  should_fail_ex+0x512/0x640
[  133.371587][ T8124]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  133.371610][ T8124]  should_failslab+0xc2/0x120
[  133.371633][ T8124]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  133.371653][ T8124]  ? __alloc_skb+0x2b2/0x380
[  133.371674][ T8124]  ? __lock_acquire+0x5ca/0x1ba0
[  133.371699][ T8124]  __alloc_skb+0x2b2/0x380
[  133.371719][ T8124]  ? __pfx___alloc_skb+0x10/0x10
[  133.371737][ T8124]  ? find_held_lock+0x2b/0x80
[  133.371758][ T8124]  ? __lock_acquire+0x5ca/0x1ba0
[  133.371783][ T8124]  sctp_packet_transmit+0x1ca/0x3040
[  133.371813][ T8124]  ? find_held_lock+0x2b/0x80
[  133.371830][ T8124]  ? sctp_outq_flush+0xb4e/0x3350
[  133.371854][ T8124]  sctp_outq_flush+0xb68/0x3350
[  133.371875][ T8124]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  133.371894][ T8124]  ? __pfx_sctp_make_heartbeat+0x10/0x10
[  133.371919][ T8124]  ? __pfx_sctp_outq_flush+0x10/0x10
[  133.371939][ T8124]  ? __pfx_sctp_sm_lookup_event+0x10/0x10
[  133.371961][ T8124]  ? sctp_outq_tail+0x671/0xa30
[  133.371983][ T8124]  ? sctp_do_8_2_transport_strike.constprop.0+0x267/0xb60
[  133.372009][ T8124]  sctp_do_sm+0x1792/0x5c80
[  133.372032][ T8124]  ? __kernel_text_address+0xd/0x40
[  133.372051][ T8124]  ? __pfx_sctp_do_sm+0x10/0x10
[  133.372067][ T8124]  ? kasan_save_stack+0x42/0x60
[  133.372085][ T8124]  ? kasan_save_track+0x14/0x30
[  133.372105][ T8124]  ? sctp_setsockopt+0x4ce/0xb870
[  133.372121][ T8124]  ? do_sock_setsockopt+0x221/0x470
[  133.372179][ T8124]  sctp_primitive_REQUESTHEARTBEAT+0x9f/0xd0
[  133.372203][ T8124]  sctp_apply_peer_addr_params+0x113/0x3400
[  133.372233][ T8124]  sctp_setsockopt+0x143b/0xb870
[  133.372258][ T8124]  ? __pfx_sctp_setsockopt+0x10/0x10
[  133.372275][ T8124]  ? __lock_acquire+0x5ca/0x1ba0
[  133.372297][ T8124]  ? __pfx_aa_sk_perm+0x10/0x10
[  133.372318][ T8124]  ? __schedule+0x1186/0x5de0
[  133.372341][ T8124]  ? sock_common_setsockopt+0x2e/0xf0
[  133.372366][ T8124]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  133.372391][ T8124]  do_sock_setsockopt+0x221/0x470
[  133.372416][ T8124]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  133.372455][ T8124]  __sys_setsockopt+0x120/0x1a0
[  133.372480][ T8124]  __ia32_sys_setsockopt+0xbc/0x160
[  133.372501][ T8124]  ? lockdep_hardirqs_on+0x7c/0x110
[  133.372524][ T8124]  ? syscall_enter_from_user_mode_prepare+0x68/0xe0
[  133.372547][ T8124]  __do_fast_syscall_32+0x73/0x120
[  133.372572][ T8124]  do_fast_syscall_32+0x32/0x80
[  133.372595][ T8124]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  133.372633][ T8124] RIP: 0023:0xf70ae579
[  133.372648][ T8124] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  133.372663][ T8124] RSP: 002b:00000000f507d55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e
[  133.372678][ T8124] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000084
[  133.372688][ T8124] RDX: 0000000000000009 RSI: 0000000080000300 RDI: 000000000000009c
[  133.372698][ T8124] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  133.372706][ T8124] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  133.372715][ T8124] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  133.372736][ T8124]  </TASK>
[  133.773737][    C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  134.598703][ T5955] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  134.602804][ T5955] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  134.606415][ T5955] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  134.610128][ T5955] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  134.613551][ T5955] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  134.641017][ T8148] netlink: 'syz.3.555': attribute type 1 has an invalid length.
[  134.770352][ T8145] chnl_net:caif_netlink_parms(): no params data found
[  134.797233][ T8144] FAULT_INJECTION: forcing a failure.
[  134.797233][ T8144] name failslab, interval 1, probability 0, space 0, times 0
[  134.800755][ T8144] CPU: 2 UID: 0 PID: 8144 Comm: syz.1.553 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) 
[  134.800769][ T8144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  134.800775][ T8144] Call Trace:
[  134.800779][ T8144]  <TASK>
[  134.800783][ T8144]  dump_stack_lvl+0x16c/0x1f0
[  134.800814][ T8144]  should_fail_ex+0x512/0x640
[  134.800827][ T8144]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  134.800841][ T8144]  should_failslab+0xc2/0x120
[  134.800855][ T8144]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  134.800867][ T8144]  ? d_instantiate+0x77/0x90
[  134.800878][ T8144]  ? alloc_empty_file+0x55/0x1e0
[  134.800894][ T8144]  alloc_empty_file+0x55/0x1e0
[  134.800907][ T8144]  alloc_file_pseudo+0x13a/0x230
[  134.800922][ T8144]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  134.800939][ T8144]  sock_alloc_file+0x50/0x210
[  134.800962][ T8144]  do_accept+0x240/0x530
[  134.800973][ T8144]  ? do_raw_spin_lock+0x12c/0x2b0
[  134.800983][ T8144]  ? __pfx_do_accept+0x10/0x10
[  134.801002][ T8144]  __sys_accept4+0x100/0x1b0
[  134.801012][ T8144]  ? __pfx___sys_accept4+0x10/0x10
[  134.801024][ T8144]  ? __pfx_ksys_write+0x10/0x10
[  134.801037][ T8144]  __ia32_sys_accept4+0x94/0x100
[  134.801048][ T8144]  ? syscall_enter_from_user_mode_prepare+0x68/0xe0
[  134.801064][ T8144]  __do_fast_syscall_32+0x73/0x120
[  134.801080][ T8144]  do_fast_syscall_32+0x32/0x80
[  134.801095][ T8144]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  134.801107][ T8144] RIP: 0023:0xf70ae579
[  134.801115][ T8144] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  134.801125][ T8144] RSP: 002b:00000000f507d55c EFLAGS: 00000296 ORIG_RAX: 000000000000016c
[  134.801134][ T8144] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[  134.801140][ T8144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  134.801145][ T8144] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  134.801151][ T8144] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  134.801156][ T8144] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  134.801168][ T8144]  </TASK>
[  134.813804][    C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  134.990855][ T8145] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.993337][ T8145] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.996201][ T8145] bridge_slave_0: entered allmulticast mode
[  134.999028][ T8145] bridge_slave_0: entered promiscuous mode
[  135.002637][ T8145] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.005369][ T8145] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.008284][ T8145] bridge_slave_1: entered allmulticast mode
[  135.010980][ T8145] bridge_slave_1: entered promiscuous mode
[  135.081304][ T8145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.095387][ T8145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.132195][ T8145] team0: Port device team_slave_0 added
[  135.135981][ T8145] team0: Port device team_slave_1 added
[  135.171538][ T8145] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.173754][ T8145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.181578][ T8145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.186215][ T8145] batman_adv: batadv0: Adding interface: batadv_slave_1
[  135.188534][ T8145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.198918][ T8145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.248442][ T8145] hsr_slave_0: entered promiscuous mode
[  135.250751][ T8145] hsr_slave_1: entered promiscuous mode
[  135.253761][ T8145] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  135.257692][ T8145] Cannot create hsr debugfs directory
[  135.419177][ T8145] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  135.426945][ T8145] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  135.433871][ T8145] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  135.444389][ T8145] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  135.480407][ T8145] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.483405][ T8145] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.487642][ T8145] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.490782][ T8145] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.543510][ T8145] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.553410][ T8145] 8021q: adding VLAN 0 to HW filter on device team0
[  135.564451][   T65] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.567864][   T65] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.586291][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.588550][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.598192][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.601105][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.861450][ T8145] 8021q: adding VLAN 0 to HW filter on device batadv0
[  135.863677][    C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  136.259433][ T8145] veth0_vlan: entered promiscuous mode
[  136.269526][ T8145] veth1_vlan: entered promiscuous mode
[  136.292454][ T8145] veth0_macvtap: entered promiscuous mode
[  136.298498][ T8145] veth1_macvtap: entered promiscuous mode
[  136.311777][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.316430][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.320461][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.326174][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.331593][ T8145] batman_adv: batadv0: Interface activated: batadv_slave_0
[  136.339818][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  136.345331][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.349242][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  136.353527][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.359153][ T8145] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.367660][ T8145] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.371289][ T8145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.375119][ T8145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.379317][ T8145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.430414][ T1220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.432947][ T1220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.450155][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.452857][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.529937][ T8192] netlink: 'syz.0.563': attribute type 3 has an invalid length.
[  136.663765][ T5955] Bluetooth: hci4: command tx timeout
[  136.680394][ T8203] netlink: 'syz.3.566': attribute type 27 has an invalid length.
[  136.883350][ T8199] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.886321][ T8199] 8021q: adding VLAN 0 to HW filter on device team0
[  136.892673][ T8199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  136.893661][    C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  137.179092][ T8216] overlayfs: failed to resolve './file1': -2
[  137.403927][ T5991] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  137.553769][ T5991] usb 9-1: Using ep0 maxpacket: 8
[  137.561274][ T5991] usb 9-1: config 0 has no interfaces?
[  137.566489][ T5991] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  137.569816][ T5991] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.574242][ T5991] usb 9-1: Product: syz
[  137.576228][ T5991] usb 9-1: Manufacturer: syz
[  137.577859][ T5991] usb 9-1: SerialNumber: syz
[  137.587635][ T5991] usb 9-1: config 0 descriptor??
[  137.943678][    C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  138.733747][ T5955] Bluetooth: hci4: command tx timeout
[  138.861055][  T834] usb 9-1: USB disconnect, device number 2
[  138.973680][    C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  140.013716][    C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  140.823783][ T5955] Bluetooth: hci4: command tx timeout
[  141.053704][    C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  141.625260][    T9] IPVS: starting estimator thread 0...
[  141.723837][ T8268] IPVS: using max 28 ests per chain, 67200 per kthread
[  142.093673][    C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  142.794151][ T1340] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  142.893652][ T5955] Bluetooth: hci4: command tx timeout
[  142.943692][ T1340] usb 5-1: Using ep0 maxpacket: 32
[  142.946723][ T1340] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  142.951374][ T1340] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  142.954502][ T1340] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  142.956948][ T1340] usb 5-1: Product: syz
[  142.958193][ T1340] usb 5-1: Manufacturer: syz
[  142.959651][ T1340] usb 5-1: SerialNumber: syz
[  142.962724][ T1340] usb 5-1: config 0 descriptor??
[  142.964886][ T8280] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  142.967688][ T1340] hub 5-1:0.0: bad descriptor, ignoring hub
[  142.969482][ T1340] hub 5-1:0.0: probe with driver hub failed with error -5
[  143.002232][ T8290] FAULT_INJECTION: forcing a failure.
[  143.002232][ T8290] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  143.007660][ T8290] CPU: 0 UID: 0 PID: 8290 Comm: syz.1.587 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) 
[  143.007681][ T8290] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  143.007691][ T8290] Call Trace:
[  143.007697][ T8290]  <TASK>
[  143.007704][ T8290]  dump_stack_lvl+0x16c/0x1f0
[  143.007731][ T8290]  should_fail_ex+0x512/0x640
[  143.007753][ T8290]  _copy_from_user+0x2e/0xd0
[  143.007775][ T8290]  move_addr_to_kernel+0x65/0x170
[  143.007793][ T8290]  __sys_connect+0xaf/0x170
[  143.007811][ T8290]  ? __pfx___sys_connect+0x10/0x10
[  143.007837][ T8290]  ? __pfx_ksys_write+0x10/0x10
[  143.007859][ T8290]  __ia32_sys_connect+0x71/0xb0
[  143.007877][ T8290]  ? syscall_enter_from_user_mode_prepare+0x68/0xe0
[  143.007901][ T8290]  __do_fast_syscall_32+0x73/0x120
[  143.007926][ T8290]  do_fast_syscall_32+0x32/0x80
[  143.007948][ T8290]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  143.007968][ T8290] RIP: 0023:0xf70ae579
[  143.007981][ T8290] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  143.007995][ T8290] RSP: 002b:00000000f507d55c EFLAGS: 00000296 ORIG_RAX: 000000000000016a
[  143.008010][ T8290] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000200
[  143.008020][ T8290] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000
[  143.008029][ T8290] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  143.008038][ T8290] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  143.008046][ T8290] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  143.008067][ T8290]  </TASK>
[  143.143635][    C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  143.274998][ T1340] usb 5-1: USB disconnect, device number 12
[  143.921301][ T8300] netlink: 32 bytes leftover after parsing attributes in process `syz.4.593'.
[  144.088015][ T8306] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  144.173686][    C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  145.213634][    C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  145.264467][ T8326] netlink: 'syz.1.602': attribute type 27 has an invalid length.
[  145.291631][ T8326] bridge0: port 3(syz_tun) entered disabled state
[  145.298017][ T8326] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.300822][ T8326] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.355077][ T8326] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.362071][ T8326] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.370029][ T8330] FAULT_INJECTION: forcing a failure.
[  145.370029][ T8330] name failslab, interval 1, probability 0, space 0, times 0
[  145.378731][ T8330] CPU: 0 UID: 0 PID: 8330 Comm: syz.1.602 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) 
[  145.378746][ T8330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  145.378753][ T8330] Call Trace:
[  145.378756][ T8330]  <TASK>
[  145.378760][ T8330]  dump_stack_lvl+0x16c/0x1f0
[  145.378780][ T8330]  should_fail_ex+0x512/0x640
[  145.378793][ T8330]  ? __kmalloc_noprof+0xbf/0x510
[  145.378806][ T8330]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290
[  145.378825][ T8330]  should_failslab+0xc2/0x120
[  145.378839][ T8330]  __kmalloc_noprof+0xd2/0x510
[  145.378850][ T8330]  ? __kernel_text_address+0xd/0x40
[  145.378861][ T8330]  ? unwind_get_return_address+0x59/0xa0
[  145.378875][ T8330]  ? arch_stack_walk+0xa6/0x100
[  145.378889][ T8330]  genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290
[  145.378915][ T8330]  genl_family_rcv_msg_doit+0xbf/0x2f0
[  145.378932][ T8330]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  145.378949][ T8330]  ? trace_cap_capable+0x18d/0x200
[  145.378963][ T8330]  ? bpf_lsm_capable+0x9/0x10
[  145.378974][ T8330]  ? security_capable+0x7e/0x260
[  145.378985][ T8330]  ? ns_capable+0xd7/0x110
[  145.378997][ T8330]  genl_rcv_msg+0x55c/0x800
[  145.379009][ T8330]  ? __pfx_genl_rcv_msg+0x10/0x10
[  145.379018][ T8330]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  145.379033][ T8330]  ? __pfx_nl80211_channel_switch+0x10/0x10
[  145.379044][ T8330]  ? __pfx_nl80211_post_doit+0x10/0x10
[  145.379059][ T8330]  ? __lock_acquire+0xaa4/0x1ba0
[  145.379076][ T8330]  netlink_rcv_skb+0x16a/0x440
[  145.379090][ T8330]  ? __pfx_genl_rcv_msg+0x10/0x10
[  145.379100][ T8330]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  145.379121][ T8330]  ? __pfx_down_read+0x10/0x10
[  145.379131][ T8330]  ? netlink_deliver_tap+0x1ae/0xd30
[  145.379147][ T8330]  genl_rcv+0x28/0x40
[  145.379161][ T8330]  netlink_unicast+0x53a/0x7f0
[  145.379177][ T8330]  ? __pfx_netlink_unicast+0x10/0x10
[  145.379195][ T8330]  netlink_sendmsg+0x8d1/0xdd0
[  145.379212][ T8330]  ? __pfx_netlink_sendmsg+0x10/0x10
[  145.379227][ T8330]  ? __import_iovec+0x1c8/0x660
[  145.379244][ T8330]  ____sys_sendmsg+0xa95/0xc70
[  145.379255][ T8330]  ? __pfx_____sys_sendmsg+0x10/0x10
[  145.379265][ T8330]  ? get_compat_msghdr+0x11a/0x170
[  145.379284][ T8330]  ___sys_sendmsg+0x134/0x1d0
[  145.379298][ T8330]  ? __pfx____sys_sendmsg+0x10/0x10
[  145.379327][ T8330]  __sys_sendmsg+0x16d/0x220
[  145.379340][ T8330]  ? __pfx___sys_sendmsg+0x10/0x10
[  145.379360][ T8330]  ? rcu_is_watching+0x12/0xc0
[  145.379372][ T8330]  __do_fast_syscall_32+0x73/0x120
[  145.379388][ T8330]  do_fast_syscall_32+0x32/0x80
[  145.379403][ T8330]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  145.379416][ T8330] RIP: 0023:0xf70ae579
[  145.379423][ T8330] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  145.379434][ T8330] RSP: 002b:00000000f505c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  145.379444][ T8330] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200
[  145.379451][ T8330] RDX: 0000000000000810 RSI: 0000000000000000 RDI: 0000000000000000
[  145.379456][ T8330] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  145.379462][ T8330] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  145.379468][ T8330] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  145.379481][ T8330]  </TASK>
[  145.505287][ T8326] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.508068][ T8326] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.510951][ T8326] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.514623][ T8326] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.556257][ T8329] bridge0: port 3(syz_tun) entered blocking state
[  145.558450][ T8329] bridge0: port 3(syz_tun) entered forwarding state
[  145.562347][ T8329] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.565548][ T8329] 8021q: adding VLAN 0 to HW filter on device team0
[  145.571106][ T8329] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.594149][ T8329] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.597647][ T8329] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.602364][ T8329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  145.606301][   T13] 
[  145.606524][ T8329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  145.607191][   T13] =============================
[  145.607206][   T13] WARNING: suspicious RCU usage
[  145.607211][   T13] 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 Not tainted
[  145.607218][   T13] -----------------------------
[  145.607221][   T13] net/sched/sch_generic.c:1251 suspicious rcu_dereference_protected() usage!
[  145.607229][   T13] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  145.607229][   T13] other info that might help us debug this:
[  145.607229][   T13] 
[  145.607233][   T13] 
[  145.607233][   T13] rcu_scheduler_active = 2, debug_locks = 1
[  145.607239][   T13] 3 locks held by kworker/u32:1/13:
[  145.614163][ T8329] veth1_macvtap: left promiscuous mode
[  145.614312][   T13]  #0: 
[  145.618786][ T8329] veth0_macvtap: left promiscuous mode
[  145.619610][   T13] ffff888012ea5948 ((wq_completion)bond0#4){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  145.619644][   T13]  #1: ffffc900001f7d18 (
[  145.623212][ T8329] veth0_macvtap: entered promiscuous mode
[  145.625771][   T13] (work_completion)(&(&bond->mii_work)->work)
[  145.634650][ T8329] veth1_macvtap: entered promiscuous mode
[  145.634752][   T13] ){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  145.647266][   T13]  #2: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0
[  145.650135][   T13] 
[  145.650135][   T13] stack backtrace:
[  145.651927][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) 
[  145.651940][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  145.651947][   T13] Workqueue: bond0 bond_mii_monitor
[  145.651960][   T13] Call Trace:
[  145.651964][   T13]  <TASK>
[  145.651968][   T13]  dump_stack_lvl+0x16c/0x1f0
[  145.651984][   T13]  lockdep_rcu_suspicious+0x166/0x260
[  145.652000][   T13]  ? __pfx_ethtool_op_get_link+0x10/0x10
[  145.652015][   T13]  dev_activate+0x45c/0x12d0
[  145.652030][   T13]  ? __pfx_dev_activate+0x10/0x10
[  145.652043][   T13]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  145.652060][   T13]  ? __pfx_ethtool_op_get_link+0x10/0x10
[  145.652075][   T13]  linkwatch_do_dev+0x13d/0x160
[  145.652086][   T13]  __linkwatch_sync_dev+0xfd/0x230
[  145.652096][   T13]  ethtool_op_get_link+0x1d/0x70
[  145.652111][   T13]  bond_check_dev_link+0x3f9/0x710
[  145.652122][   T13]  ? __pfx_bond_check_dev_link+0x10/0x10
[  145.652139][   T13]  bond_mii_monitor+0x3c0/0x2dc0
[  145.652155][   T13]  ? __pfx_bond_mii_monitor+0x10/0x10
[  145.652171][   T13]  ? rcu_is_watching+0x12/0xc0
[  145.652183][   T13]  process_one_work+0x9cc/0x1b70
[  145.652197][   T13]  ? __pfx_batadv_nc_worker+0x10/0x10
[  145.652210][   T13]  ? __pfx_process_one_work+0x10/0x10
[  145.652223][   T13]  ? assign_work+0x1a0/0x250
[  145.652240][   T13]  worker_thread+0x6c8/0xf10
[  145.652255][   T13]  ? __pfx_worker_thread+0x10/0x10
[  145.652264][   T13]  kthread+0x3c2/0x780
[  145.652280][   T13]  ? __pfx_kthread+0x10/0x10
[  145.652294][   T13]  ? __pfx_kthread+0x10/0x10
[  145.652307][   T13]  ? __pfx_kthread+0x10/0x10
[  145.652322][   T13]  ? __pfx_kthread+0x10/0x10
[  145.652336][   T13]  ? rcu_is_watching+0x12/0xc0
[  145.652346][   T13]  ? __pfx_kthread+0x10/0x10
[  145.652364][   T13]  ret_from_fork+0x45/0x80
[  145.652375][   T13]  ? __pfx_kthread+0x10/0x10
[  145.652390][   T13]  ret_from_fork_asm+0x1a/0x30
[  145.652412][   T13]  </TASK>
[  145.662776][ T8329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.673778][   T13] 
[  145.703879][ T8329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.704464][   T13] =============================
[  145.706386][ T8329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.707783][   T13] WARNING: suspicious RCU usage
[  145.707789][   T13] 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 Not tainted
[  145.709581][ T8329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.711004][   T13] -----------------------------
[  145.711009][   T13] net/sched/sch_generic.c:1229 suspicious rcu_dereference_protected() usage!
[  145.711017][   T13] 
[  145.711017][   T13] other info that might help us debug this:
[  145.711017][   T13] 
[  145.711021][   T13] 
[  145.711021][   T13] rcu_scheduler_active = 2, debug_locks = 1
[  145.711027][   T13] 3 locks held by kworker/u32:1/13:
[  145.711033][   T13]  #0: ffff888012ea5948 ((wq_completion)bond0#4){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  145.741361][ T1220] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.741473][ T1220] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.744497][   T13]  #1: ffffc900001f7d18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  145.744557][   T13]  #2: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0
[  145.756261][   T13] 
[  145.756261][   T13] stack backtrace:
[  145.758086][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) 
[  145.758102][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  145.758109][   T13] Workqueue: bond0 bond_mii_monitor
[  145.758123][   T13] Call Trace:
[  145.758127][   T13]  <TASK>
[  145.758131][   T13]  dump_stack_lvl+0x16c/0x1f0
[  145.758147][   T13]  lockdep_rcu_suspicious+0x166/0x260
[  145.758163][   T13]  ? __pfx_ethtool_op_get_link+0x10/0x10
[  145.758179][   T13]  transition_one_qdisc+0x1d4/0x210
[  145.758192][   T13]  dev_activate+0x216/0x12d0
[  145.758206][   T13]  ? __pfx_dev_activate+0x10/0x10
[  145.758220][   T13]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  145.758237][   T13]  ? __pfx_ethtool_op_get_link+0x10/0x10
[  145.758251][   T13]  linkwatch_do_dev+0x13d/0x160
[  145.758262][   T13]  __linkwatch_sync_dev+0xfd/0x230
[  145.758273][   T13]  ethtool_op_get_link+0x1d/0x70
[  145.758287][   T13]  bond_check_dev_link+0x3f9/0x710
[  145.758300][   T13]  ? __pfx_bond_check_dev_link+0x10/0x10
[  145.758316][   T13]  bond_mii_monitor+0x3c0/0x2dc0
[  145.758332][   T13]  ? __pfx_bond_mii_monitor+0x10/0x10
[  145.758348][   T13]  ? rcu_is_watching+0x12/0xc0
[  145.758361][   T13]  process_one_work+0x9cc/0x1b70
[  145.758374][   T13]  ? __pfx_batadv_nc_worker+0x10/0x10
[  145.758388][   T13]  ? __pfx_process_one_work+0x10/0x10
[  145.758401][   T13]  ? assign_work+0x1a0/0x250
[  145.758418][   T13]  worker_thread+0x6c8/0xf10
[  145.758433][   T13]  ? __pfx_worker_thread+0x10/0x10
[  145.758443][   T13]  kthread+0x3c2/0x780
[  145.758458][   T13]  ? __pfx_kthread+0x10/0x10
[  145.758472][   T13]  ? __pfx_kthread+0x10/0x10
[  145.758486][   T13]  ? __pfx_kthread+0x10/0x10
[  145.758500][   T13]  ? __pfx_kthread+0x10/0x10
[  145.758514][   T13]  ? rcu_is_watching+0x12/0xc0
[  145.758524][   T13]  ? __pfx_kthread+0x10/0x10
[  145.758539][   T13]  ret_from_fork+0x45/0x80
[  145.758549][   T13]  ? __pfx_kthread+0x10/0x10
[  145.758564][   T13]  ret_from_fork_asm+0x1a/0x30
[  145.758585][   T13]  </TASK>
[  145.766510][ T1220] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.769483][   T13] 
[  145.771668][ T1220] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.773209][   T13] =============================
[  145.773215][   T13] WARNING: suspicious RCU usage
[  145.773219][   T13] 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 Not tainted
[  145.837047][   T13] -----------------------------
[  145.838557][   T13] ./include/linux/rtnetlink.h:163 suspicious rcu_dereference_protected() usage!
[  145.841242][   T13] 
[  145.841242][   T13] other info that might help us debug this:
[  145.841242][   T13] 
[  145.844412][   T13] 
[  145.844412][   T13] rcu_scheduler_active = 2, debug_locks = 1
[  145.846823][   T13] 3 locks held by kworker/u32:1/13:
[  145.848377][   T13]  #0: ffff888012ea5948 ((wq_completion)bond0#4){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  145.851633][   T13]  #1: ffffc900001f7d18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  145.855493][   T13]  #2: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0
[  145.858416][   T13] 
[  145.858416][   T13] stack backtrace:
[  145.860193][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) 
[  145.860207][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  145.860215][   T13] Workqueue: bond0 bond_mii_monitor
[  145.860240][   T13] Call Trace:
[  145.860245][   T13]  <TASK>
[  145.860250][   T13]  dump_stack_lvl+0x16c/0x1f0
[  145.860267][   T13]  lockdep_rcu_suspicious+0x166/0x260
[  145.860283][   T13]  dev_activate+0x7f8/0x12d0
[  145.860299][   T13]  ? __pfx_dev_activate+0x10/0x10
[  145.860312][   T13]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  145.860329][   T13]  ? __pfx_ethtool_op_get_link+0x10/0x10
[  145.860345][   T13]  linkwatch_do_dev+0x13d/0x160
[  145.860355][   T13]  __linkwatch_sync_dev+0xfd/0x230
[  145.860366][   T13]  ethtool_op_get_link+0x1d/0x70
[  145.860380][   T13]  bond_check_dev_link+0x3f9/0x710
[  145.860392][   T13]  ? __pfx_bond_check_dev_link+0x10/0x10
[  145.860408][   T13]  bond_mii_monitor+0x3c0/0x2dc0
[  145.860424][   T13]  ? __pfx_bond_mii_monitor+0x10/0x10
[  145.860440][   T13]  ? rcu_is_watching+0x12/0xc0
[  145.860453][   T13]  process_one_work+0x9cc/0x1b70
[  145.860466][   T13]  ? __pfx_batadv_nc_worker+0x10/0x10
[  145.860480][   T13]  ? __pfx_process_one_work+0x10/0x10
[  145.860493][   T13]  ? assign_work+0x1a0/0x250
[  145.860523][   T13]  worker_thread+0x6c8/0xf10
[  145.860539][   T13]  ? __pfx_worker_thread+0x10/0x10
[  145.860549][   T13]  kthread+0x3c2/0x780
[  145.860564][   T13]  ? __pfx_kthread+0x10/0x10
[  145.860578][   T13]  ? __pfx_kthread+0x10/0x10
[  145.860592][   T13]  ? __pfx_kthread+0x10/0x10
[  145.860607][   T13]  ? __pfx_kthread+0x10/0x10
[  145.860621][   T13]  ? rcu_is_watching+0x12/0xc0
[  145.860631][   T13]  ? __pfx_kthread+0x10/0x10
[  145.860646][   T13]  ret_from_fork+0x45/0x80
[  145.860656][   T13]  ? __pfx_kthread+0x10/0x10
[  145.860671][   T13]  ret_from_fork_asm+0x1a/0x30
[  145.860693][   T13]  </TASK>
[  145.863654][   T13] ------------[ cut here ]------------
[  145.919720][   T13] RTNL: assertion failed at ./include/net/netdev_lock.h (56)
[  145.922854][   T13] WARNING: CPU: 1 PID: 13 at ./include/net/netdev_lock.h:56 netif_state_change+0x346/0x3b0
[  145.926030][   T13] Modules linked in:
[  145.927416][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) 
[  145.930980][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  145.934289][   T13] Workqueue: bond0 bond_mii_monitor
[  145.935876][   T13] RIP: 0010:netif_state_change+0x346/0x3b0
[  145.937690][   T13] Code: 8e fd ff ff e8 8b 12 73 f8 c6 05 a3 32 27 07 01 90 ba 38 00 00 00 48 c7 c6 a0 ae c0 8c 48 c7 c7 00 ab c0 8c e8 5b f6 32 f8 90 <0f> 0b 90 90 e9 5f fd ff ff e8 3c 95 d7 f8 e9 82 fd ff ff e8 d2 94
[  145.943412][   T13] RSP: 0018:ffffc900001f7930 EFLAGS: 00010282
[  145.945375][   T13] RAX: 0000000000000000 RBX: ffff888068be2000 RCX: ffffffff817a8f78
[  145.947739][   T13] RDX: ffff88801da98000 RSI: ffffffff817a8f85 RDI: 0000000000000001
[  145.950114][   T13] RBP: ffffc900001f79d0 R08: 0000000000000001 R09: 0000000000000000
[  145.952473][   T13] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff9200003ef26
[  145.954988][   T13] R13: 0000000000000000 R14: ffffffff8c370b60 R15: ffffffff89884600
[  145.957360][   T13] FS:  0000000000000000(0000) GS:ffff8880978bf000(0000) knlGS:0000000000000000
[  145.960016][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  145.961979][   T13] CR2: 00000000804b8fe4 CR3: 000000000e180000 CR4: 0000000000352ef0
[  145.964476][   T13] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  145.966860][   T13] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  145.969208][   T13] Call Trace:
[  145.970224][   T13]  <TASK>
[  145.971140][   T13]  ? __pfx_netif_state_change+0x10/0x10
[  145.972843][   T13]  ? __pfx_dev_activate+0x10/0x10
[  145.974431][   T13]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  145.976217][   T13]  linkwatch_do_dev+0x12b/0x160
[  145.977711][   T13]  __linkwatch_sync_dev+0xfd/0x230
[  145.979258][   T13]  ethtool_op_get_link+0x1d/0x70
[  145.980764][   T13]  bond_check_dev_link+0x3f9/0x710
[  145.982312][   T13]  ? __pfx_bond_check_dev_link+0x10/0x10
[  145.984123][   T13]  bond_mii_monitor+0x3c0/0x2dc0
[  145.985724][   T13]  ? __pfx_bond_mii_monitor+0x10/0x10
[  145.987425][   T13]  ? rcu_is_watching+0x12/0xc0
[  145.988952][   T13]  process_one_work+0x9cc/0x1b70
[  145.990494][   T13]  ? __pfx_batadv_nc_worker+0x10/0x10
[  145.992173][   T13]  ? __pfx_process_one_work+0x10/0x10
[  145.993921][   T13]  ? assign_work+0x1a0/0x250
[  145.995388][   T13]  worker_thread+0x6c8/0xf10
[  145.996873][   T13]  ? __pfx_worker_thread+0x10/0x10
[  145.998478][   T13]  kthread+0x3c2/0x780
[  145.999751][   T13]  ? __pfx_kthread+0x10/0x10
[  146.001172][   T13]  ? __pfx_kthread+0x10/0x10
[  146.002571][   T13]  ? __pfx_kthread+0x10/0x10
[  146.004078][   T13]  ? __pfx_kthread+0x10/0x10
[  146.005496][   T13]  ? rcu_is_watching+0x12/0xc0
[  146.006944][   T13]  ? __pfx_kthread+0x10/0x10
[  146.008377][   T13]  ret_from_fork+0x45/0x80
[  146.009726][   T13]  ? __pfx_kthread+0x10/0x10
[  146.011126][   T13]  ret_from_fork_asm+0x1a/0x30
[  146.012623][   T13]  </TASK>
[  146.013651][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  146.015832][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) 
[  146.019363][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  146.022566][   T13] Workqueue: bond0 bond_mii_monitor
[  146.024151][   T13] Call Trace:
[  146.025189][   T13]  <TASK>
[  146.026140][   T13]  dump_stack_lvl+0x3d/0x1f0
[  146.027551][   T13]  panic+0x71c/0x800
[  146.028759][   T13]  ? __pfx_panic+0x10/0x10
[  146.030134][   T13]  ? show_trace_log_lvl+0x29b/0x3e0
[  146.031686][   T13]  ? check_panic_on_warn+0x1f/0xb0
[  146.033252][   T13]  ? netif_state_change+0x346/0x3b0
[  146.034844][   T13]  check_panic_on_warn+0xab/0xb0
[  146.036345][   T13]  __warn+0xf6/0x3c0
[  146.037548][   T13]  ? preempt_schedule_notrace+0x62/0xe0
[  146.039231][   T13]  ? netif_state_change+0x346/0x3b0
[  146.040819][   T13]  report_bug+0x3c3/0x580
[  146.042125][   T13]  ? netif_state_change+0x346/0x3b0
[  146.043710][   T13]  handle_bug+0x184/0x210
[  146.045057][   T13]  exc_invalid_op+0x17/0x50
[  146.046441][   T13]  asm_exc_invalid_op+0x1a/0x20
[  146.047949][   T13] RIP: 0010:netif_state_change+0x346/0x3b0
[  146.049688][   T13] Code: 8e fd ff ff e8 8b 12 73 f8 c6 05 a3 32 27 07 01 90 ba 38 00 00 00 48 c7 c6 a0 ae c0 8c 48 c7 c7 00 ab c0 8c e8 5b f6 32 f8 90 <0f> 0b 90 90 e9 5f fd ff ff e8 3c 95 d7 f8 e9 82 fd ff ff e8 d2 94
[  146.055403][   T13] RSP: 0018:ffffc900001f7930 EFLAGS: 00010282
[  146.057303][   T13] RAX: 0000000000000000 RBX: ffff888068be2000 RCX: ffffffff817a8f78
[  146.059742][   T13] RDX: ffff88801da98000 RSI: ffffffff817a8f85 RDI: 0000000000000001
[  146.062194][   T13] RBP: ffffc900001f79d0 R08: 0000000000000001 R09: 0000000000000000
[  146.064644][   T13] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff9200003ef26
[  146.067115][   T13] R13: 0000000000000000 R14: ffffffff8c370b60 R15: ffffffff89884600
[  146.069568][   T13]  ? __pfx_ethtool_op_get_link+0x10/0x10
[  146.071261][   T13]  ? __warn_printk+0x198/0x350
[  146.072726][   T13]  ? __warn_printk+0x1a5/0x350
[  146.074221][   T13]  ? __pfx_netif_state_change+0x10/0x10
[  146.075878][   T13]  ? __pfx_dev_activate+0x10/0x10
[  146.077421][   T13]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  146.079210][   T13]  linkwatch_do_dev+0x12b/0x160
[  146.080706][   T13]  __linkwatch_sync_dev+0xfd/0x230
[  146.082277][   T13]  ethtool_op_get_link+0x1d/0x70
[  146.083794][   T13]  bond_check_dev_link+0x3f9/0x710
[  146.085357][   T13]  ? __pfx_bond_check_dev_link+0x10/0x10
[  146.087065][   T13]  bond_mii_monitor+0x3c0/0x2dc0
[  146.088555][   T13]  ? __pfx_bond_mii_monitor+0x10/0x10
[  146.090175][   T13]  ? rcu_is_watching+0x12/0xc0
[  146.091643][   T13]  process_one_work+0x9cc/0x1b70
[  146.093158][   T13]  ? __pfx_batadv_nc_worker+0x10/0x10
[  146.094778][   T13]  ? __pfx_process_one_work+0x10/0x10
[  146.096433][   T13]  ? assign_work+0x1a0/0x250
[  146.097864][   T13]  worker_thread+0x6c8/0xf10
[  146.099266][   T13]  ? __pfx_worker_thread+0x10/0x10
[  146.100845][   T13]  kthread+0x3c2/0x780
[  146.102104][   T13]  ? __pfx_kthread+0x10/0x10
[  146.103498][   T13]  ? __pfx_kthread+0x10/0x10
[  146.104925][   T13]  ? __pfx_kthread+0x10/0x10
[  146.106360][   T13]  ? __pfx_kthread+0x10/0x10
[  146.107772][   T13]  ? rcu_is_watching+0x12/0xc0
[  146.109252][   T13]  ? __pfx_kthread+0x10/0x10
[  146.110661][   T13]  ret_from_fork+0x45/0x80
[  146.112015][   T13]  ? __pfx_kthread+0x10/0x10
[  146.113460][   T13]  ret_from_fork_asm+0x1a/0x30
[  146.114946][   T13]  </TASK>
[  146.116476][   T13] Kernel Offset: disabled
[  146.117827][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:01:13  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000005 RCX=ffffffff819aa9d2 RDX=ffff88801da98000
RSI=ffffffff819aa9c0 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc900001f7730
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=1ffff9200003eee8 R13=0000000000000200 R14=ffff8880224c8000 R15=ffffc900001f77f8
RIP=ffffffff819aa9c2 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880977bf000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f505bfac CR3=00000000664e4000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000d400000000 0000000200000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffffc9000c803000 RDX=1ffffd40002eca11
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffea0001765080 RSP=ffffc90025e2f380
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000001 R15=ffff88806aabd9b0
RIP=ffffffff81f4c66a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff8880978bf000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000804b8fe4 CR3=0000000023ab4000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=ffff88802b241460 RCX=ffffffff81ae9b89 RDX=ffff888024ac8000
RSI=ffffffff81ae9b63 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90002e67588
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffffed100564828d R13=0000000000000001 R14=dffffc0000000000 R15=ffff88802b43b180
RIP=ffffffff81ae9b65 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880979bf000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7f66e40 CR3=000000000e180000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7402ff4
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000
RSI=ffffffff8b8e9440 RDI=ffff888072c7c070 RBP=ffff888072c7c070 RSP=ffffc90026d4ea08
R8 =0000000000000001 R9 =fffff52004da9d26 R10=ffffffff90866717 R11=ffffffff9acff630
R12=ffffffff89ed7fd0 R13=dffffc0000000000 R14=ffff888072c7c000 R15=ffff88806ab8b800
RIP=ffffffff84d1e4a0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888097abf000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f735bce4 CR3=000000006a6ba000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff714448f8771f1f 014785ae528d853d
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dbb7ff2a4bcfc371 7421a64936958553
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3f6f4d098356f7da 5453527e606baabb
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ed8cb62dead44bad a708339c0b12b943
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000a500
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fe000000595ca70c aa000000bf384a2d
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8b963699aaaaaaaa aa000000a22ffca5
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 aaaaaa005a2eaaaa 0000595c5b8c7f41
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 78e3a600595d7971 0000595c595c7179
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ebac91d5bd990409 598e556b174ff5d6
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 86cacdeec08fb063 6ad721b9e5dca914
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000