last executing test programs:

1m10.088028743s ago: executing program 0 (id=1177):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x68, 0x9, 0x6, 0x5, 0x0, 0x0, {0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1d}]}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x6}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'syz0\x00'}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x804)

1m9.860412123s ago: executing program 0 (id=1180):
r0 = userfaultfd(0x800)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x4})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000040)='0', 0x1)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000000c0)=@arm64={0xaa, 0x8, 0x6, '\x00', 0x6})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x3fe, 0x2, 0x6000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
sendmsg$NFT_BATCH(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x380, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0xec, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xdcb}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x190, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa764}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0xac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4a}]}]}, @NFT_MSG_NEWRULE={0x13c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0xc0, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}]}, @NFT_MSG_NEWSET={0x8c, 0x9, 0xa, 0xb02, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x101}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x34}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0x24, 0xd, 0x1, 0x0, "3f167500258d11904032638ef4e70a8e27f2b3c793e4be7ca564ffba44ecea7a"}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5b0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000090)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0))
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000800)={'wg1\x00', 0x2000})
ioctl$KVM_CAP_PTP_KVM(r1, 0x4068aea3, &(0x7f0000000840))
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000008c0)={'gretap0\x00', @ifru_ivalue=0x80})

26.97549516s ago: executing program 0 (id=1180):
r0 = userfaultfd(0x800)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x4})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000040)='0', 0x1)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000000c0)=@arm64={0xaa, 0x8, 0x6, '\x00', 0x6})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x3fe, 0x2, 0x6000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
sendmsg$NFT_BATCH(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x380, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0xec, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xdcb}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x190, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa764}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0xac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4a}]}]}, @NFT_MSG_NEWRULE={0x13c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0xc0, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}]}, @NFT_MSG_NEWSET={0x8c, 0x9, 0xa, 0xb02, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x101}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x34}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0x24, 0xd, 0x1, 0x0, "3f167500258d11904032638ef4e70a8e27f2b3c793e4be7ca564ffba44ecea7a"}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5b0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000090)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0))
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000800)={'wg1\x00', 0x2000})
ioctl$KVM_CAP_PTP_KVM(r1, 0x4068aea3, &(0x7f0000000840))
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000008c0)={'gretap0\x00', @ifru_ivalue=0x80})

20.186232152s ago: executing program 0 (id=1180):
r0 = userfaultfd(0x800)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x4})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000040)='0', 0x1)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000000c0)=@arm64={0xaa, 0x8, 0x6, '\x00', 0x6})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x3fe, 0x2, 0x6000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
sendmsg$NFT_BATCH(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x380, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0xec, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xdcb}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x190, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa764}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0xac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4a}]}]}, @NFT_MSG_NEWRULE={0x13c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0xc0, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}]}, @NFT_MSG_NEWSET={0x8c, 0x9, 0xa, 0xb02, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x101}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x34}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0x24, 0xd, 0x1, 0x0, "3f167500258d11904032638ef4e70a8e27f2b3c793e4be7ca564ffba44ecea7a"}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5b0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000090)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0))
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000800)={'wg1\x00', 0x2000})
ioctl$KVM_CAP_PTP_KVM(r1, 0x4068aea3, &(0x7f0000000840))
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000008c0)={'gretap0\x00', @ifru_ivalue=0x80})

12.227358594s ago: executing program 0 (id=1180):
r0 = userfaultfd(0x800)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x4})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000040)='0', 0x1)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000000c0)=@arm64={0xaa, 0x8, 0x6, '\x00', 0x6})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x3fe, 0x2, 0x6000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
sendmsg$NFT_BATCH(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x380, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0xec, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xdcb}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x190, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa764}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0xac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4a}]}]}, @NFT_MSG_NEWRULE={0x13c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0xc0, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}]}, @NFT_MSG_NEWSET={0x8c, 0x9, 0xa, 0xb02, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x101}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x34}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0x24, 0xd, 0x1, 0x0, "3f167500258d11904032638ef4e70a8e27f2b3c793e4be7ca564ffba44ecea7a"}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5b0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000090)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0))
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000800)={'wg1\x00', 0x2000})
ioctl$KVM_CAP_PTP_KVM(r1, 0x4068aea3, &(0x7f0000000840))
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000008c0)={'gretap0\x00', @ifru_ivalue=0x80})

7.062671496s ago: executing program 2 (id=1470):
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
rseq(&(0x7f0000000040), 0x20, 0x1, 0x300)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xc096, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1449deede43e9601880000000000a8c7828581d2"], 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = openat$dlm_control(0xffffff9c, &(0x7f0000000280), 0x200540, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x2400, 0x948, 0x93, 0x7}, 0x8)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000c06030000000000000000000a00000a05000100070000000900020073797a3200000000050001000700000009000200737a3000000000050005000792048c7dc400000005000100070000000900020073797a3200"/100], 0x64}, 0x1, 0x0, 0x0, 0x4000810}, 0x11)
sendto$inet(r1, &(0x7f0000000100)="ab", 0xff80, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

5.720204966s ago: executing program 2 (id=1474):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)={0x1c, 0x33, 0x1, 0x70bd2a, 0x25dbdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000) (fail_nth: 8)

5.348454071s ago: executing program 2 (id=1476):
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x1, 0xc, 0xcead40b02b360187, "2e85f85a3b9152e89e82960ad936188f4429f4bf777d1b56926c75b050d4c3f0", 0x3631564e})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10200)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000000000000a001000000000000f8ffffffffffffff"])
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
add_key$user(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x2}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
keyctl$clear(0x7, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB="10000000000000001c0012800b00010083726964676500000c0002800800030019000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg$alg(r6, &(0x7f0000000380), 0x0, 0x20000080)
setgroups(0x0, 0x0)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r7, 0x5421, &(0x7f0000000000)=0x5)
connect$bt_rfcomm(r7, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 0xb}, 0xa)
close(r7)

5.088864248s ago: executing program 0 (id=1180):
r0 = userfaultfd(0x800)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x4})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000040)='0', 0x1)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000000c0)=@arm64={0xaa, 0x8, 0x6, '\x00', 0x6})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x3fe, 0x2, 0x6000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
sendmsg$NFT_BATCH(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x380, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0xec, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xdcb}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x190, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa764}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0xac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4a}]}]}, @NFT_MSG_NEWRULE={0x13c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0xc0, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}]}, @NFT_MSG_NEWSET={0x8c, 0x9, 0xa, 0xb02, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x101}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x34}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0x24, 0xd, 0x1, 0x0, "3f167500258d11904032638ef4e70a8e27f2b3c793e4be7ca564ffba44ecea7a"}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5b0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000090)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0))
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000800)={'wg1\x00', 0x2000})
ioctl$KVM_CAP_PTP_KVM(r1, 0x4068aea3, &(0x7f0000000840))
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000008c0)={'gretap0\x00', @ifru_ivalue=0x80})

4.37472905s ago: executing program 2 (id=1479):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d80000001c0081044e81f782db44b9040a1d080214000000020003a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20000080)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket(0x2c, 0x4, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[])
chdir(&(0x7f0000000300)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x30)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYBLOB="fe8000"/15], 0xf8}}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)
lseek(r4, 0xfffffffc, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
openat$zero(0xffffff9c, &(0x7f0000000080), 0x8eec1, 0x0)

4.229881282s ago: executing program 3 (id=1482):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3000000010000108fdff763f0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008001a8004002d"], 0x30}}, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
syz_open_procfs(0x0, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, 0x0, 0x0, 0x1005)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00')
read$FUSE(r4, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1)
ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000740)={{}, "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"})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40405000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x4, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40051)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="64000000100001040000", @ANYRES32=0x0, @ANYBLOB="03050000100000003c002b80080003000100000008", @ANYRES32=r4, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="090003000a0800000800c05b0003ba82067d945056ca00"/33, @ANYRES32=r7, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
rseq(0x0, 0x0, 0x0, 0x300)
userfaultfd(0x80801)

3.715153713s ago: executing program 3 (id=1484):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
fchdir(r0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2)
r5 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x0, 0xff, 0x0, 0xffc0, 0x3}, &(0x7f0000000180)=0x20)
r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, 0x0, r6)
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0)
writev(r7, &(0x7f0000001800)=[{&(0x7f0000000580)='trylock ', 0x8}], 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040))

2.737207112s ago: executing program 3 (id=1486):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/custom1\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140003002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

1.732023226s ago: executing program 2 (id=1487):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x40, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xce)
recvmmsg(r5, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00', <r7=>0x0})
bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10)
setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000c300)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r10, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0x9}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])

1.556437814s ago: executing program 1 (id=1488):
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x1, 0xc, 0xcead40b02b360187, "2e85f85a3b9152e89e82960ad936188f4429f4bf777d1b56926c75b050d4c3f0", 0x3631564e})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10200)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000000000000a001000000000000f8ffffffffffffff"])
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
add_key$user(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x2}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
keyctl$clear(0x7, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB="10000000000000001c0012800b00010083726964676500000c0002800800030019000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg$alg(r6, &(0x7f0000000380), 0x0, 0x20000080)
setgroups(0x0, 0x0)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r7, 0x5421, &(0x7f0000000000)=0x5)
connect$bt_rfcomm(r7, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 0xb}, 0xa)
close(r7)

1.24195995s ago: executing program 3 (id=1489):
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="4a0b3e544dc0fe8f27876cced68dd77a7bc8515d71d9e63ec67f21162670772074781e3b7faf0bdc6cb5a738d015b16e96de004702be838a274f912fe13b9ef45ce0ac706e2ced1349b2a8945c2a3aea718bb8f763bdbaeb004ae9e87dde78"], 0x8c)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b9"], 0xb8)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x876, 0x800000000000009, 0x0, 0x100040000000004, 0x10000, 0x100, 0x9004, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x80000000023b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0xa, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x81, 0x3]})
ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="73656375726974792e91e8ed2f06bac914db89234fcd4c9860bc2b542a212e232d2e2d0040491929691c1be05fa75b9d8567af4f0313919ffadd65be9a15c3114a2e92be4bd005739c3c1614e7ab6391853381af930fb204e885aace4830996052b7fd7ef7daa1ed3b22e2dc178ea927a794c0cf5242708678b3c965c07f758101a363473cebcc9e52e456d0045cc767a4cdc6b94aacbbb5bb0b41199606774479b8418fd4004089669c7dc1e1fc707789901e9032d762209fae06fb6d551bc933d40638b10fc52e27c30843faf500e067e6c87839312fd997867e65c2bc0b70eaf7df1442036ea860acff2e21b3e99081b471765982d9e8f6cbcb11f730d9c85a0b6d0dc6a5bddb0ba0db89e7b6b095e81bed016dcd99c6a051790ececf3c0521de7772255225f437e3ee60a042042add000000000000000000003b6aa2278568cbf701dfbb4b516a83ffe9343061b245d459ff4876a9e8a72db4c9b4a8420b0aa8bbad4ca28da8880e454545be1507287f800fd61fc72ed15485983be41366ba83c8e46c51316689a80b7ddd8944d0979285327811974d8cae48d92eb372157c348e491cafd7784f280c6a6a09702b920b314f56221014de0070db142cf77897108f355aa71a6ccdcef4662ad53068f98412a988a89f2da892d237b8268470a37b8bfe5b5fd76153491b58795cb1c26091f183e212136338923fa0eef89e80060f7549bd643523e4e3eed48f322e81ba232e07f5a94f7d201ba2d7487d9d55e3199d3be8ed21aaaf3308a5aed47b95014472ec4d3417073adf86b16b4b6b87039225fae90c411b0825686d4be3a744d1b6c96195d76c90e871874de343c9b15f0bd4913eb56af43761b0c98e3b0d4e449737aec2b8df3d71703d5dfec6d13af5cc6e64de35a0700419dd8b7bd9ba4afb4894c86a8c335b6a25017081b4a54a4dc02457639a335b7d32bd119c6f02272e1f6831093b0b7cd5f0d47ff1fa9bce8b4a5b976ecd556b9b1632ae2665d41ad2a1f08c7548f844"])
write(r3, &(0x7f0000000000)="240000001a005f0400f9f407000904018000000000000000000000000800020040000000", 0x24)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182})
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x4, 0x7, 0xd, 0xb9, 0x0, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x4, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x80, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

611.449904ms ago: executing program 1 (id=1490):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x40042, 0x1fe)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
dup2(r1, r1)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000001740)=""/97, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400))
r3 = eventfd2(0x1, 0x1)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x2, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x4}}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in6=@empty, 0x3, 0x3, 0x0, 0x0, 0x0, 0x10000}}, 0xe4)
r5 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4000000)
sendmsg$key(r5, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x4e, &(0x7f0000000040)})
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000004000000000000003c173ec508f471aa904200000300000000000000d52e", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000914303b9850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000003700)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/163, 0x0, 0x4000})
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c)
connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, r1, {0x2, 0x0, @remote}, 0x2, 0xfb, 0x2}}, 0xffffffffffffff8d)

548.227273ms ago: executing program 1 (id=1491):
r0 = socket$pppoe(0x18, 0x1, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0x699ca911a6aa00f6, 0x42)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)={0x10000005})
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r3 = gettid()
timer_create(0x3, &(0x7f000049efa0)={0x0, 0x4, 0x4, @tid=r3}, &(0x7f00000002c0))
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04fd0a20"], 0x7)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000002c0)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}})

440.065288ms ago: executing program 1 (id=1492):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x6, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0)

180.739854ms ago: executing program 3 (id=1493):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x80, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0xfffff1d0, 0x18000)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4004)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0e05403, &(0x7f00000001c0)={{0x1, 0x3, 0x2000, 0x0, 0x400}, 0x1f2, 0x5, 'id1\x00', 'timer1\x00', 0x0, 0x5, 0x700, 0x4, 0x5}) (async, rerun: 32)
ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000002c0)={0x80001, 0x0, [0x6, 0xffffffffc0000000, 0x0, 0xffffffffffffffc0, 0x1, 0x6, 0x2, 0x5]}) (async, rerun: 32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfe, 0x400000}, 0xc) (async, rerun: 32)
timer_create(0x3, &(0x7f0000000480)={0x0, 0x8, 0x1, @thr={&(0x7f0000000380), &(0x7f00000003c0)="93c7d5f9aea0b147111203098738e77b8bc6af2387a0422a22db2a2c0fd63b26d8da04ab51c19345c132880de5433a98318d5ed6f9c3a39fd27ae0ca32cd51b92e5d665789bcbd11995788d8e91923b07eb83c3e3b26bc150ea07d1f31bd574bf0d88bd903b020143aa1ce7a35afac8b94d7634e5e6c6731845b231620902a406e877133129607dd6c2e87663a2f6dcfea11620711b061553a2a7ec1fce1b93f8eb8ffd13ca650e45852fc141f24c20d94e41e5bc1feda691f"}}, &(0x7f00000004c0)=<r3=>0x0) (rerun: 32)
timer_settime(r3, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}}, 0x0) (async)
r4 = gettid()
sendmsg$nl_generic(r1, &(0x7f00000028c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002880)={&(0x7f0000000580)={0x22c4, 0x1c, 0xb20, 0x70bd2a, 0x25dfdbfc, {0x13}, [@generic="d1ab86c122d6c84f510578544d34467a2bd67a8c61e2ea5784c5cb345bc9797ca0d9b5362acf98a2ff40fcdf86eb345f2ddcd101994fa8eed934", @generic="3a7a2d5f587fa2f482478758c1476bfae0d213902836240be2072abf45f69b3c81e5f18f094833417cb4713a9994cfe54659f0b2b26b17309e93f53d7ec47bcc77a87bfbeecc8c2f230d02cf7d948e5962ac1e8404ab60c091f48a93700310f3dfc1626c6d16f8e9560e84f47dfef00fb265c6cf8a382efacd463dd5908f3d3dc7b093361a4ba4b7d8fae9665778a6c2f9a11d6c7d47cdbe209a24988935f832bb050fcececd3ef7d8cd6b9ce885a56aca4eb48e4087e4a870f9397bb0e37e4523ebf6d7700db3", @generic="cdda3a9b012ac4464111fd098583919b2e6815d23c05b543298a2994d581f819855d8a7f24dfcdd7ddefe8c3d0fa69721ca6da70e475044c6d442254ef5ac17ba9bf93c74ec3c1e91bdfa66a92a6fd09806fd44c0e1a1d687255bb4a124e38f2dd65e61dd09fe8d3a684d5ca7abc4f61f7abd3cb212ebb401d935285e5f7fad06146f6ad22e2240165390c872415070d262580fc4dcb989ed3db9a134cdde0c2b1e1de60db9ccde2718280a7b8c7648cbd308011d5535e11d22e000f945211eed66716fe17af71d9469b13877a2b1e132a5736428909c90b527fc2b8714c801d7cded818edf704f8ab5fb2261f3b0bf8f12daa7c6ac3c68b4d8ff75f9bbd9b02ff087f61e31e2a89ed86214c4fba37962100635d0bd50e95c389a751ce6de3b8de40d79118225ef834976bfc721daacdca0b52afb822d820ba92c07cfb6b0b5817d82070ab0a9cfcb54eb6e621572a7a33f5b5f6af601cfbbac666688c686f4c5b85e729994361979449d047abf4398f77a3311a789a186474803a0bf44954f16137a7b2520d631b6dfa65541f35a0e9aa95cde3755c5d5260bdb8af7ba65c8e65e76decf62e9eab2efb11bf1f2ee50a82f7d8799d5d81bf727acab4e9347bd5c757c44ff71cad4fc48599183f32e6062b552c91cb8f58ecd534689fb69e3920e3a8ecc59becb6e88f572b227802400ab0ede1e90bcdb866641876aa10764990ed6f2c9a8c1c288d5ad7c8265a6804d9d89098bd9eabcebec007d2c50428b520fd7878092005772c0241d07510ee0808516775d0c4d4276dc60264aaf34beb156ab390f81a82718daffa1aa4246b6445d4c8bc9fb6cff592d4265c6ae8cbddf7546d91b72074a75d0db8d0ebec1e049eb57058242f4f868a21bddea5c8a40ebeed012356f94571f6535c430a055ebc70973ca88b285659d05f8f4e54aee1b149a83d5d1ba73646783106284a5579b0dcfe3a337b0613961001ea46240e5720c3706914a8198531284447444570389672819b23e67eb35ccbe3170a7f103a03474d21034e74ef90bd26e1bc8cb5beab5f4563a43990348a89c32a6a770058c5f1ec8f4ebd85d9b02ae9e5c02f72750206c06d8102eeeb2efbbb5be75c786b56db41ee8eb06d0f84155ad48f4df1223be07833ba0212e910c9abc4f941c1900b84e6297f62c8c8ccd2cd782984e6ff43dd43142ffabbe00ebf1ca75ab662c06e644e542aa0bde059e219f573ab241f61fef7b7cb9c8d2f096ae7b5099e59cfd6e2de8c0270468d47ba228db950c37272d8c940b1db79d2662b8914d83e7511b7d449b8ac5495c5530f1f15756facd85be43f5e330c7cc332013f976eb4b3c4c50b62e664ccbf68ab2a5ad131f11947e79766a2838d4231eaa5a87e52398ec529f8aa284d75f3e1cecac5486b2ab4b023addd1a0579abd142f07bde913832114d1146b3509a672edfb985d5e989a5e56348e9c508eb1a069822a4b49aa964ed4bca5e85bd781f9c3af2805573268f5e7181316e805a3fc6fc5949c27446eb2a421e8864f856eec9d2a020d6e67244019abb71c7128b30812f31eb44233afa2f8f304c70aebc17e46d6997e4cdb41e669a46f4e612c84b8c9f1aeaecbb77d4da405f776fc1eba2045b0babb72a198d61d7274a535dc6456dfb0ebd8738ad9baf88dc8c5938cb5eeb5f1626a4b8fdaad9568b9d065763238b5728357b805e3b8acfb052d015548023203fb90f835ad2b8627a7cba0a931c45f2cce83877fa962705d49989f87dd3b3283d02eb8858974b36c13452b476cc4db22e59139d190b66f9ccea3a36acb0f14a73f7a329e6b1e3ee4b4c792f57aefd3fe0a3cbfaf8e1c6a8d3b1fd6d22704b2fdc69e8f90be1fa60cc65816b3b2c7b671e098bd4836192a6bfa334bcf44acf83223b054e2904978988822c9d898a795296cb8b4ee7ca0af3874bbf849764e0ab1917ab7395affc364f9ecd739da846e029c47e4145207542db34839780d8cfa1f9ee7939ac9910bab8923171d4d5b2cd07d0a5f9eba998e5be51cab6258f1240c887e60b1eacdf8cccf0bc54f4ac6daa7bbd805a1bbe183ea5e0c7a615447d6d711da927a47d9d89c7671e6da383898e07f4c3aedc2aa99a40077e2b512163ff155aa2883b6d0800ce154a65714f39dfb151db2afd694f20807ae1a64a3b205cd144cf834af2664b382a1e46b26fe2f2890b6558ddab76ee5031b046eebf592899b2d5bd133fc85e0f75358ab0535af1d75abc2288d00bf30bf4b2f75f1cfb452d6674b58933853f83d9a8ae68c58cc0ff01cc3d813a51a8d03bd2c604b76a33d76cb514f4cc2e53dc4c53aa9f9efd024fceb155d783fac794d45b469239e238607f38a5d0a492f77349b4ddd646d429ebbb63bf25d7dc2e421d8a88609da852eedeb7173eed445457866355e6a6be432c0daa20054e3c0fd83d9f786cd91ad641608a347882585e328bf290f1a2e397585ed920fc7ebefc0036280a0fa7df953abf1fdd3b3e02d1e594654570bf1c72bc9c925024eaf6e48c284d16c45dae4f05560ad9d4d7c0dabd86d244cad59348924dc42dbed4c2169d094073c7d58f22ac998fc02a950ef16b0b3c436233b22611d22acf533b449df7996eb35e647c98f4c3e314bad406cd275ea929c4acce299f40038ec1ef2d512abe0f545e590f00b7a32ab3ef64299cf4496b2a7402f74bd6a366adf6ba750105daba751bebcdda6c38c8bc37d2e4c62c164097730ea10041ec54bc07624a519aa806a828a6caf665f0098cc4bc6064b16eba1413daef3f1e792c9ee249e0cc9f160bfbbac651d85ad88040cf02848baea6b03c20b2b9449ac0a2cf55eec43393b6237268c143dd85d19885ba0c39778f31a8fce0c275e665dfb90a87d424c022af4a8ad48300e5f9a3a8b1fc0376c2d5487d42c231072a0d85b02697ec1566bb852ce888474305663b7569ab5c5d897ebc76e3f7516497176f486cead4304ff9e9378d64c633c780b45b653d5c3b13b241fedf0298432eeacfede07e09f486480805f365e409a06d6ec44d80283a667c4904c2c4404c990b1dfb085e665379cea49059e9ce2b91fdac617aecbe1984773b646ac976dda535285a508c43c5efbbdf0da0b46e54ce67b6a2ddf08ca2ce2a43566e6eb467c9f8322e8bc7156530a08435bfcc7d0dc7abd38e206b109cbd18f3c1aa9ab7c8a1a60b2d58c4c9c9196009ed427603eb1ac3d2657274e7e5387d4794fab83ceb2f98e891bd5c963b7b941aba0999891564c51cf6f8f8cc287b468605303093c62cf2a4c3ad0038134f0074c1ea1bdc07498b97ba29a8ef4b48f1ad151d8a6cde9b633f5b71e869585dc0a7c7868bd7e69e57364d84aaeda516e35e2fa84d8138f0641304804f3340c83c0057c33cb1e84984f4a8c1b83fe4b20d1a4dcfc9f82d9bee329c8322423fd86fbcbdcc985463f8329add269e6d57be850ae8f28d9bf43d64277cb5b5315c101de5eec3cf460ed168183d14259310ec4d6408d24c8297f30f6b4463cd1ddecd8c3a98b4c87db41e6c23e61deff0b25a7a0baeaac2c3c8e46b128084dbe012a297d369dd95689235d96ec7652ba890f530a1a1605117042d06188f6cd5be3880e083f0bca083335120a275557abdfbece94e2ecde389c833def1bad841d998c8925281bff6826b200473e593b084c4c1f5b0b1e29dd420a2092d670f176c23defe15207ddfce49646dfbc5167d21e0e78f68a4a84801bd4c7d1041d458ceaec8c52de8032b4d6632930cc50083c6f61511ba421af444dcf5ce341b3faecda59f373903d5170cfd94d7639b47df7fccbd95e6a0b41dfceb7a687b06c8facebc51a8bc984db8c06275f1bf8db911f0450e521cc5f05b1374f9a056f9bc1e191a58f552586db656230562d3b8c48c08835a1691fc5cf51517c03c682b4584426a80ff0a659878ed55c691cc8c6c43f46589ddfc3e3353730dc75d34bf54a8f0984cd43d4155cea5e66be3a8f57ff9788d63c336f25e70084c2b834e2d3c6be0ee9b711f0efa4bf15074066c1125e8de96b1bb54fc1b77bf23122c32cca95d799e25cbe2f327e688eee4756fa0dbf7fda4a026920fd9bacafde24dffb922acb89c74014a713e315d668268730839a0814af54eca5d1997f17959d656b9c5399715f68ad2a45ef7fc8d678c895ec32ff916974c4c578d42f6a861d332d483b138dd8c645d6d2c8b049a42b1b5ffb1b6a0e49fb0d764e5cef1b1c789f53fdced51b9810eaadf02a2435cf8ee4817b1fc02cb277342222166e4f21138fe56db07cbe1f317d45d94b0580d4a5b1a8ec9b2dc01f08be8fdf3336d2ab9ee0d81419d9f04826fcbbf0d79624476df9b49e4e7b9dde6b1dd108ed86599f5d6270cc39cd745199d5bebbadc2426b94e696c1c2d1d3a69a71fc9d0bd14d6bb8686f1ed06fb802e842531928409f4fd80f497f752ed6fcec66c43443feab5f5fc04dc769a2f7d8524164faf5ced1b1d84c35533e0a7a586c3301755c7f9914474234c4a133949dc47d08a539c03127ecdbbe9694afe590ba73bb54232189f9795f399753053d815ac6dca375c8c5b155c994952a492206df40805b52e49501853f28a577f6469aacc99db8f33352344d34ef6c3a2e467ca3b51c4d4467e382b2d0988c57fa2a103617618392e6478c975d346365ad38876dab8897b919bd376c562e389986e2da9ac2335b6b496e21b787bc79232e3ae579f34bc1a21ed5be4ccd85867fe0211d239094ac7e4fb6bfbc98fec98cb20325cab9ab7e0cff3e5632279aef05f989e3a740db842bd13da678813f334e16b845d2bc358850591d15231404840e8eb39430c07c111ea2556999ef283d5ee279340bc1675bfb8a9199f6cb2ffc014cf4316a5d12a6247186e97b086493528a9eb053143ec0113bf153fb0996547e3e92325ed9a639bcb21fc140636ce9073d5f3fea8bb4684015a6ea81415bbf50a410722b76646361394ccb98c5b2c2bd9ca59b87529b37280ac8ffa9b8c142f5bb8dbf29de0afbbd1d4e6c4b48bccb8bf9539ee50b9045a30d6c54cfc4957f76e385fedd347e5147f2bde842bc413992a7d0dde81100904a7655d6c11b858b5e4eb64bd017f365e5d7de6492de3895469ca2985155c2bb1abd60da3fa206af363ac144930092e6839dd3e407db04361cc618829227100ebafe8ccc975095591d4e6eef429ebd0d1e74908b0ee7a2530f9c5d2eb201c969a77831a2dc0aab620ad3341309ca7d152e4de626709d9cf2dde4e38eb366fa1e8771ed4f51da2735030a8d86f2a62d6700b07bc96334891b73452b8e99130dfa3868116f919e2ac69c0f05a1715f76ba2721c78f36b69499b9db0c7ca52cfbc0e2fa4d840ddd8a53f6423a6a088ff7d4f76932a5cb585f65f2eb4c3832e5223e2d3706b7bb84e01fc0b97abe65b1af061e78beb22e5459cfc8a8ea554f6d8fc135ed0443177b61c93fd9327d9775da03c3acbaa30bb077cfb994cb6a00ec6537ddd96a91352b6a909f70bcd8bfc2d955a15239f82774056c5c7ec23ee02b984c0030c5303a2603adbcffa0a344c5827b481920445453c9b8774823e8e28e505f2bf432ed48946e223330b980bf56be37a95e27fe4bdac438241df90edca5488a146c94285e1b8ca2ec57c89acf9eeb15ffb51865c0811d755bcb506033383e8db02dc59eed67c8879a36e96c5f15342c9c8dc1ab4ec9db79b915331162e8ab7234b8cbce4a56b2a5d6be1c66d9c7c3203269d3c89c7270dcee94f28d8e47501900e8bd2dbf61bccda4851d9b11d", @generic="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", @nested={0x9f, 0x8e, 0x0, 0x1, [@generic="a1ecab443380c5709c9cd37efe213f1ecba11baf3dcf5a035c6b415ca6eac9147187fe5486e39174fad796ea8576db9d9a2cc1f38743c2cf1dbb491786c19c0a8144cedecc6c9824436a3e8a2e31d073958a7c74e99176489c7d843fd3b725951f878d3ad28485d8229de5ef4c20dd582f3d4c4ffa2e4d0305524b8da33d5eb0bcbfa723336ccda957f288d30f0c1496ff9fdf27fd10634121b7b5"]}, @typed={0x8, 0xc9, 0x0, 0x0, @pid=r4}, @nested={0x18, 0x52, 0x0, 0x1, [@typed={0x14, 0x116, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x35}}]}, @generic="649702b2f5f9a831bfaea120621be67d7e48fce2a21714420f10ce9a408b89b4693bb2103977faf01fa431d3d598a8ab19bf93956348f8bebb90108859d717599ba333c6fea1e9e639f3b17809bdd22b06c73bf466511627eed588c35143ac14769544d7d55f7127f48fbd6c046eb5070636de6fcbc91ac392269c581a6cea0ae396a3e08b0a335067ff9dabf78a3adffda63e44aa2ec70620153dfde524e594b86f6bd2ae86a2b666a52b2618719b578e87dc547b13eaf53e0979a33246ec13ffbb55f5af345b47f1f7fced002b53e269dc62d2e4b1b97a85dc74bb5e62742cb28ea3a4f5bf2e1dc7fe3b3bed"]}, 0x22c4}, 0x1, 0x0, 0x0, 0x4044084}, 0x20000000)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000002900)={{0x1, 0x1, 0x18, <r5=>r1, {0xee01, 0xee01}}, './file0\x00'})
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000002940)={0xc, 0x8, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0x8, 0x8001, [0x6, 0x7169, 0x10001, 0x9, 0x2, 0x9, 0x16]}}, @enc_lim={0x4, 0x1, 0x66}]}, 0x50) (async)
read$FUSE(r5, &(0x7f00000029c0)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_LK(r1, &(0x7f0000004a00)={0x28, 0xfffffffffffffff5, r6, {{0x8001, 0x4, 0x0, r4}}}, 0x28) (async)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000004a40)={<r7=>0x0, @initdev, @multicast1}, &(0x7f0000004a80)=0xc)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000004ac0)={0x0, 0x1, 0x80, r7}, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004b00)) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000004b40)={0xa, 0x4e22, 0x10001, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffb}, 0x1c) (async, rerun: 32)
r8 = openat$cgroup_ro(r1, &(0x7f0000004b80)='rdma.current\x00', 0x0, 0x0) (async, rerun: 32)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000004bc0)={{0x0, 0x0, 0xd72, 0x1, 0x10}, 0x7, 0x9, 0x4}) (async)
syz_open_procfs(r4, &(0x7f0000004c00)='net/ip_mr_vif\x00')
r9 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r9, 0x891c, &(0x7f0000004c40)={'dvmrp0\x00', {0x2, 0x4e22, @remote}}) (async)
sendmsg$nl_route(r8, &(0x7f0000004d80)={&(0x7f0000004c80)={0x10, 0x0, 0x0, 0x90019000}, 0xc, &(0x7f0000004d40)={&(0x7f0000004cc0)=@bridge_delneigh={0x54, 0x1d, 0x800, 0x70bd29, 0x25dfdbfb, {0x1c, 0x0, 0x0, r7, 0x1, 0x18, 0x1}, [@NDA_FDB_EXT_ATTRS={0x14, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xdc}]}, @NDA_SRC_VNI={0x8, 0xb, 0x6}, @NDA_SRC_VNI={0x8, 0xb, 0x5}, @NDA_DST_IPV6={0x14, 0x1, @local}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) (async)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
r11 = openat$dlm_plock(0xffffff9c, &(0x7f0000004dc0), 0xd4000, 0x0) (rerun: 32)
recvmmsg(r11, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000005100)=[{&(0x7f0000004e00)=""/115, 0x73}, {&(0x7f0000004e80)=""/4, 0x4}, {&(0x7f0000004ec0)=""/116, 0x74}, {&(0x7f0000004f40)=""/128, 0x80}, {&(0x7f0000004fc0)}, {&(0x7f0000005000)=""/203, 0xcb}], 0x6}, 0x4}, {{0x0, 0x0, &(0x7f0000006400)=[{&(0x7f0000005140)=""/4096, 0x1000}, {&(0x7f0000006140)=""/92, 0x5c}, {&(0x7f00000061c0)=""/143, 0x8f}, {&(0x7f0000006280)=""/164, 0xa4}, {&(0x7f0000006340)=""/156, 0x9c}], 0x5, &(0x7f0000006440)=""/80, 0x50}, 0x4}], 0x2, 0x40, &(0x7f0000006500)={0x77359400}) (async)
getsockopt$TIPC_CONN_TIMEOUT(r11, 0x10f, 0x82, &(0x7f0000006540), &(0x7f0000006580)=0x4)
recvmsg(r10, &(0x7f0000007cc0)={&(0x7f00000065c0)=@l2tp, 0x80, &(0x7f0000007c40)=[{&(0x7f0000006640)=""/183, 0xb7}, {&(0x7f0000006700)=""/126, 0x7e}, {&(0x7f0000006780)=""/168, 0xa8}, {&(0x7f0000006840)=""/131, 0x83}, {&(0x7f0000006900)=""/89, 0x59}, {&(0x7f0000006980)=""/165, 0xa5}, {&(0x7f0000006a40)=""/200, 0xc8}, {&(0x7f0000006b40)=""/35, 0x23}, {&(0x7f0000006b80)=""/147, 0x93}, {&(0x7f0000006c40)=""/4096, 0x1000}], 0xa}, 0x20)

127.472383ms ago: executing program 1 (id=1494):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='mm_migrate_pages\x00', r0, 0x0, 0xdf5}, 0x14)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1c0000)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000240)={'ip6tnl0\x00', <r3=>0x0, 0x4, 0x2, 0x0, 0x6, 0x12, @private1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8000, 0x80, 0x8, 0x5bd}})
sendmsg$nl_route_sched(r2, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=@deltfilter={0xf9c, 0x2d, 0x500, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x8, 0xffff}, {0xfff4, 0xa}, {0xc, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_u32={{0x8}, {0xf50, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x3}, @TCA_U32_SEL={0x194, 0x5, {0x6, 0x7, 0x7, 0x7, 0x6, 0xa8, 0x800, 0x4, [{0x1, 0xad5c, 0x8e, 0x3ff}, {0x4, 0xfffffc01, 0x200, 0x9}, {0x8, 0x8, 0x4, 0x1}, {0x15, 0x1ff, 0x7fffffff, 0x7e053ceb}, {0x8, 0x400, 0xfffffffa, 0x10001}, {0x3, 0x6, 0xd, 0x74}, {0x80000001, 0x8, 0x6, 0x2}, {0x1ff, 0x5b2, 0x8000, 0x1}, {0x6, 0x1, 0x0, 0xffff7448}, {0x3, 0x3, 0x6, 0xfffffff9}, {0x2, 0xe1f, 0x100}, {0x3, 0x39f, 0x5, 0x7fff}, {0x5, 0x7fff, 0xfff, 0xf}, {0x1ff, 0x0, 0x5, 0xb}, {0x4, 0x8, 0x8, 0xfffffffd}, {0x5, 0x1, 0x2400, 0x9e6}, {0x6, 0x7f, 0x66e, 0x9e}, {0xb, 0xa, 0x9, 0xa000000}, {0xb5, 0xfffffffc, 0x0, 0x7}, {0xffff, 0x8, 0x10, 0x80000000}, {0xd, 0x2, 0x400, 0x2000}, {0x2, 0x7, 0x49, 0x1ff}, {0xfffffff9, 0x4, 0x8, 0x1}, {0x1, 0x3, 0x7ff, 0x9}]}}, @TCA_U32_SEL={0x6c4, 0x5, {0xb, 0x9, 0x7, 0x450, 0xfffc, 0x8, 0x3, 0x9, [{0x7, 0xfffffab2, 0x7fff, 0x9}, {0x3, 0xe, 0xffffffff, 0xffff}, {0x6, 0x4, 0x6, 0x2}, {0x1, 0xfffffff8, 0x80, 0x4}, {0x2, 0x1, 0x8}, {0x9, 0x6, 0x5, 0x9}, {0x0, 0xe, 0x0, 0x6}, {0x800, 0x20e, 0xb1}, {0x4, 0x5, 0x0, 0x3ff}, {0x3, 0xf9, 0x1, 0x7aca169b}, {0xa5, 0x400, 0x6, 0x5}, {0x0, 0x2, 0x6, 0x3}, {0x7fff, 0x4, 0x1}, {0x8, 0x2, 0x1, 0x4}, {0x9, 0x2, 0x4, 0x9}, {0x80, 0x81, 0xc, 0x2}, {0x0, 0x9, 0x15cb, 0x1}, {0x9, 0x3, 0x6, 0x9}, {0xcb22, 0x63f6, 0x5, 0xc}, {0xfffffffb, 0x0, 0xfffff3f2, 0x7}, {0x4, 0x5, 0x7, 0x5}, {0x2, 0xffffffff, 0x1ff, 0x401}, {0x1, 0x80000001, 0xa, 0x7}, {0x7ff, 0x0, 0x9, 0x7}, {0x54, 0x2186, 0x4, 0x2}, {0x2, 0x31b4, 0x1, 0x8}, {0x80, 0x3, 0x5, 0x1ff}, {0x1000, 0x2, 0x7, 0x6}, {0x401, 0x10001, 0x8, 0x1ae0}, {0xffff, 0x7, 0xf5c, 0x5}, {0xc, 0x9, 0x6, 0x8000}, {0x8, 0x9, 0x2204, 0xb150}, {0xfffffff7, 0x0, 0x8, 0x5}, {0x0, 0x6d69cddb, 0x4, 0x3}, {0xfffffc3c, 0x40b2, 0x4, 0x7f}, {0x6, 0x6, 0x0, 0x5}, {0x4, 0x6, 0x3, 0x4b}, {0x5, 0x5, 0x0, 0x7f}, {0xffa, 0xfffffffd, 0x9, 0x5}, {0xffffffff, 0x800, 0x8, 0x2}, {0x10000, 0x7, 0x7, 0x1}, {0x4, 0x4, 0x8000, 0x6}, {0x6, 0x734e5bc7, 0x10, 0xd}, {0x10, 0x0, 0x9, 0x7}, {0xffffff41, 0x5, 0x8, 0x41a3}, {0x0, 0x7, 0x81, 0x9}, {0x7, 0x7, 0x800, 0x5}, {0x1ec7, 0x8, 0x338, 0x6}, {0xbbe, 0x8826, 0x9, 0x1}, {0x7, 0x6, 0x9, 0xfff}, {0x0, 0x0, 0x8}, {0x5, 0x6, 0xc, 0x8}, {0xe, 0xfffff000, 0x7, 0x4}, {0x7, 0x9, 0x9, 0x10000}, {0x0, 0xfffff8b0, 0x7fff, 0x9}, {0x2, 0x506, 0x8, 0x3ff}, {0x1, 0x7fffffff, 0x4, 0x6}, {0x8, 0xb1, 0x8, 0x1}, {0x7, 0x0, 0x1, 0xe711}, {0x1, 0xffffffff, 0x2, 0x1000}, {0x6, 0xadc, 0x76, 0x32}, {0x0, 0x2, 0x9, 0x5}, {0x3da5, 0xfffffffc, 0x40, 0x8}, {0x5, 0x3, 0xb, 0x5}, {0x8, 0xd, 0x9, 0x4}, {0x7, 0x4, 0x6, 0x8}, {0x7de, 0xcebf, 0xb319605e, 0x4000000}, {0x0, 0x3, 0x54b, 0x1}, {0x5, 0x6, 0x7, 0x8}, {0xe4, 0x0, 0x9e, 0xfffffffb}, {0x1, 0x6, 0x0, 0x80000000}, {0xf, 0x8, 0x2, 0x4081}, {0x0, 0x9, 0x6, 0x5}, {0xa, 0x6f, 0x6, 0xe874}, {0x200, 0x4d, 0x4, 0x10001}, {0x5a9b, 0x2, 0x4, 0x101}, {0x7, 0x8, 0xffff, 0x1000}, {0x7fffffff, 0x80000001, 0x7, 0x4}, {0xffff, 0xe, 0x9, 0x275}, {0x0, 0x3, 0xc0000000, 0x1}, {0xfffffdec, 0x2, 0x3, 0x4}, {0x5, 0x9, 0x9, 0x10000}, {0x7, 0x5, 0x9, 0x1}, {0xe4a1, 0x0, 0x5, 0x40}, {0x0, 0x10001, 0x5}, {0x8, 0x2, 0x5, 0xfffffff8}, {0x8, 0x9, 0x6, 0xb}, {0x2, 0x10, 0x329a39a2, 0xe8b6}, {0x7f, 0x7298, 0x2, 0xffffffa2}, {0x7, 0x4, 0x2, 0x81}, {0x6, 0x6, 0x600000, 0x7}, {0x6, 0x8000, 0x101, 0x5}, {0x3, 0xbc, 0xb, 0x4}, {0x3, 0x5, 0x7, 0xffffc231}, {0x7, 0x0, 0x9, 0x2}, {0x4, 0x9, 0xc9, 0xfffffff1}, {0x800, 0xa000000, 0x9, 0x8ff}, {0x1, 0x0, 0x8}, {0x8856, 0x5, 0x10001, 0x435e}, {0x8, 0x0, 0x40, 0x1}, {0x172a, 0x4e, 0x3da1, 0x7ff}, {0x3, 0x32, 0x2, 0x1}, {0x4, 0xd, 0x10000, 0xfffffffb}, {0x55, 0x4, 0xe4, 0x2}, {0x10000, 0xc, 0xff, 0x5}, {0x5, 0x7, 0x6}, {0x70bf4f42, 0x2, 0x4, 0x80}]}}, @TCA_U32_SEL={0x6e4, 0x5, {0xb, 0xf, 0x7, 0x5, 0x2, 0x6, 0x1, 0x0, [{0x1, 0xffff, 0x4, 0x2}, {0x100, 0x6, 0x4b45, 0x7}, {0x9, 0xb7d, 0x3, 0x142b}, {0x5eca, 0x7f, 0x4, 0xf2}, {0x9, 0x84, 0x3}, {0x7fffffff, 0x0, 0x1}, {0x3, 0x8, 0x8c98, 0x1}, {0x8, 0x9, 0xcad4, 0x8}, {0x9, 0x0, 0x4000000, 0xc}, {0x4, 0xffff, 0x4, 0x4}, {0x4, 0x5, 0x85, 0x4}, {0x0, 0x3, 0x870, 0x7}, {0x2e5, 0xac5, 0x2, 0x4}, {0x0, 0x0, 0x1000}, {0x85, 0x2, 0x3, 0x7}, {0x4d419bb1, 0xffffffff, 0xa, 0xb740}, {0x8, 0x23, 0x10000, 0x2}, {0x200, 0x0, 0x4, 0x6}, {0x8, 0x7fff, 0x6, 0xcd3a}, {0x10, 0x0, 0x5, 0x6745}, {0x3ff, 0x0, 0x3f4, 0x1}, {0x1000, 0x0, 0xaf0, 0x5}, {0x2, 0x50, 0x9, 0x100}, {0xe4, 0x100, 0x73, 0xffffffff}, {0x3, 0x81, 0xc, 0x4}, {0x8001, 0x2, 0xfffff9a7, 0x7b}, {0x40, 0x3, 0x5, 0x1ff}, {0x5, 0xe, 0x8, 0x1}, {0x80, 0xffffffff, 0x8, 0x926b}, {0x2, 0x2e13ec93, 0x800, 0x6}, {0x6, 0x8, 0x8000, 0xe053}, {0x1, 0x2, 0x6e97, 0x6800}, {0x2, 0x200, 0xfe80, 0xfffffffb}, {0x8, 0x9, 0xdb, 0x200}, {0x2, 0x3, 0x3, 0x3}, {0x8, 0x4, 0x9, 0x5}, {0x2, 0x8001, 0x7, 0x687}, {0x58c1, 0x100, 0x402db4c0, 0x400}, {0xff, 0x7, 0x10, 0x1}, {0x0, 0x5c, 0xd, 0xe35}, {0x1400000, 0x1, 0xb}, {0x620, 0x6, 0x8, 0xa26a}, {0xd, 0x6, 0x4, 0x6}, {0x7f000000, 0xfffffff8, 0xfffffffa, 0x800}, {0x8, 0x8, 0xc, 0x8}, {0x4, 0x8, 0xaa, 0x8}, {0x4, 0x10000, 0x80, 0x3}, {0x42a0, 0xe27de91, 0xffffff6a, 0x1}, {0x2, 0x0, 0x1, 0x2}, {0x10, 0x2, 0x7, 0x200}, {0xcb8, 0x81, 0x800, 0x69}, {0x10, 0x1ff, 0x0, 0x7}, {0x6, 0x0, 0x1ff, 0x797}, {0x8, 0x7ff, 0x7, 0x3}, {0xe8, 0x3, 0x7cfa, 0x9}, {0xffff, 0xd, 0x7fffffff, 0xdc}, {0x968, 0x1, 0x8, 0xdfb9}, {0x8000, 0xb22, 0x2, 0x5}, {0x7, 0x10001, 0x0, 0x3}, {0x2, 0x4, 0x3ff, 0x1}, {0x7, 0x80000000, 0x9, 0x7}, {0x0, 0x9, 0x2, 0x5}, {0x1, 0x4, 0x4, 0x9}, {0x1, 0xf4a, 0x0, 0x100}, {0xfff, 0x7, 0x3e80, 0x5}, {0x5, 0x20, 0x2, 0x9}, {0x9, 0x0, 0x8000, 0x81}, {0x4, 0x1000, 0xe1, 0x2}, {0xff, 0xfffffff7, 0xffff, 0x1}, {0x3, 0x7fff, 0x9, 0x1}, {0xb7b7, 0x1, 0x5, 0x1eaa}, {0x6, 0x75, 0x4, 0x2}, {0x3, 0x0, 0x5, 0x2}, {0x3, 0x5e00000, 0x6, 0x9}, {0x0, 0x7f, 0x0, 0x7}, {0x8, 0x5, 0x3, 0x5}, {0x5, 0x9, 0x0, 0x7fff}, {0x2, 0x7, 0x400, 0x40}, {0x98f7, 0x12, 0x1, 0x10001}, {0x2cf, 0x4, 0xab, 0xfffffff9}, {0xd, 0x9, 0x6f2, 0xaee}, {0xbf8b, 0x5, 0x7b48, 0x7}, {0x6, 0x1, 0xd, 0x8}, {0x0, 0x7, 0xfb, 0x3}, {0x6, 0x7f, 0x9, 0x28b6}, {0x7fff, 0x3, 0x7fffffff, 0x5}, {0x5a57, 0xab, 0x3, 0x5}, {0x3ff, 0x3, 0x2, 0x5}, {0x7, 0x43d0, 0x1000, 0x4}, {0xe, 0x7, 0x1, 0x3}, {0x200, 0xef9, 0x795}, {0x401, 0x4, 0xffff, 0xffff}, {0x63, 0x7ff, 0xfffffff8, 0x2}, {0x5, 0xe, 0x2, 0x2}, {0x1, 0x7, 0x9}, {0x800, 0x7fff, 0xff, 0x37f8}, {0xfc5, 0x1, 0x9, 0x4}, {0xfffffffa, 0x3, 0x8000, 0x8}, {0x6, 0xb2e0, 0x800, 0x5}, {0xffffffff, 0x2, 0xfffffffb, 0x5}, {0xfffffffc, 0x9, 0x81, 0xe4a}, {0x4ea44ebe, 0x5, 0x315, 0xe}, {0x3e6, 0x727, 0x8001, 0x1}, {0x81, 0x9, 0x0, 0xc3}, {0x6, 0x0, 0x3b09, 0x4}, {0x7, 0x6, 0x7, 0x1400000}, {0x1, 0x2, 0x8, 0x5}, {0x1, 0x3, 0x8, 0x4}, {0x9, 0x40, 0x830, 0x6}]}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x7f}]}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_RATE={0x6, 0x5, {0xfe, 0x3}}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0xf9c}, 0x1, 0x0, 0x0, 0x8841}, 0x24000080)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890b, &(0x7f0000000080)={@local, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x4, 0x0, 0x7, 0x280})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)

117.7322ms ago: executing program 2 (id=1495):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x1, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1b, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x804)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x108b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540), 0x0, 0x20000001)
openat$nullb(0xffffff9c, &(0x7f00000000c0), 0x224400, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) (fail_nth: 3)
setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4)
setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000000)=0x3f, 0x4)
recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$video4linux(&(0x7f0000000000), 0xafaf, 0x0)

117.271513ms ago: executing program 3 (id=1496):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x6, @private2, 0x2}], 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x800)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8)
syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x10000000}, &(0x7f0000000340), &(0x7f0000000280))
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000500)={'syz1\x00', {0x7, 0x1, 0x4, 0x15}, 0x31, [0x0, 0x1, 0x7, 0x2, 0x9, 0x5, 0x0, 0x858, 0x5, 0x2, 0xcdb9, 0xc8c, 0x4, 0x9, 0x3, 0x5, 0x6, 0x3b8, 0xfffffff8, 0x7, 0x8000, 0x82, 0x10001, 0x1, 0xe, 0x8, 0x8, 0x1, 0x0, 0x4b0e880e, 0x80000000, 0xb, 0xbd92, 0x81, 0x7, 0x2, 0x6, 0x3e18b6be, 0x2, 0x7, 0x5b98, 0x1ff, 0x4, 0x6, 0x1, 0x1, 0x7ff, 0xffffff01, 0x8001, 0x8000, 0x2, 0xf8000000, 0x654, 0x729e4a8b, 0x1, 0x8, 0xffffffff, 0x6, 0x8, 0x3, 0xfffffffe, 0xffff43d0, 0x5, 0x400], [0x4, 0x4, 0x70, 0x3, 0x1, 0x6, 0x1, 0x5, 0x454, 0x80, 0x1, 0x6, 0x10000, 0x7, 0x9, 0x9, 0xffffff7f, 0x9, 0x6, 0x3, 0x5, 0x8, 0x2, 0x80000001, 0x1ff, 0x411, 0x201, 0x3, 0x9, 0x8001, 0x8, 0x100, 0x3, 0x3099, 0x374, 0x0, 0x40, 0x7ff, 0x3, 0x8, 0x9, 0xfa, 0x5, 0xce81, 0xd, 0x9, 0x1, 0x0, 0x7f, 0x10, 0x4f3b7fa9, 0x6, 0x4a8, 0x6, 0x0, 0x2, 0xeb, 0x0, 0x9, 0x7fff, 0xf, 0x1001, 0x401, 0x1], [0x81, 0x6, 0xd, 0x9, 0x1, 0x9, 0xfffff23f, 0x2, 0x401, 0x8, 0x2, 0xa9, 0x622, 0xb, 0x8, 0x3ff, 0xfffffffa, 0x7, 0x8, 0xffff8000, 0x200, 0x1, 0x0, 0x4, 0x3, 0x200, 0x1a40, 0xac22, 0x4, 0xe, 0xffffffff, 0x9, 0x4, 0x81, 0x6, 0xff, 0x4, 0x3, 0x3, 0x6, 0x5, 0x5b04a85a, 0x1, 0x5, 0x9, 0xfffffff7, 0x6, 0x1, 0xfffffffb, 0xffff, 0x8, 0x2, 0x2, 0x800, 0x0, 0x8, 0x3, 0x80000001, 0x7, 0xfffff939, 0x2, 0x2, 0xb3, 0x9], [0x1, 0x2, 0x7fff, 0x3f1, 0x7, 0x8ba8, 0x40, 0x0, 0xfffffffd, 0xf4, 0x4, 0xdee, 0x5, 0x1, 0x1c, 0xa9bf, 0xffff8000, 0x0, 0x8, 0x40, 0xe, 0xfffffffd, 0x8, 0x3290, 0x5, 0x1, 0x0, 0x6, 0x4, 0x2, 0x4, 0xf, 0x4, 0x4dc, 0x6, 0xfffffff8, 0x200, 0x72, 0x4, 0xfffffffc, 0x3, 0xb, 0x37f, 0x4, 0x9, 0x3, 0x20, 0xfa91, 0x7, 0x401, 0x5, 0x81, 0x20000000, 0x603, 0x0, 0x2, 0x2, 0xd, 0xa, 0x7, 0x5, 0x627b6092, 0x6, 0x6]}, 0x45c)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000140)=0x200000000)
write$vhost_msg_v2(r5, &(0x7f0000000980)={0x2, 0x80000, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48)

0s ago: executing program 1 (id=1497):
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x48240, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000400)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000004, 0x10048484, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10, 0x2a1}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x141001, 0x0)
write$FUSE_WRITE(r3, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0xc}}, 0x18)
pwritev2(r3, &(0x7f0000000140)=[{&(0x7f0000000000)='_', 0x1}], 0x1, 0x81, 0x0, 0x2)
write$FUSE_OPEN(r0, &(0x7f0000000240)={0x20, 0x0, r2, {0x0, 0x11}}, 0x20)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
sendto$unix(0xffffffffffffffff, &(0x7f00000004c0)="a0a3", 0x2, 0x200080d1, 0x0, 0x0)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x10102, 0x0, 0x0)
close(r1)

kernel console output (not intermixed with test programs):

[ T9697] program syz.0.1026 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  185.802350][ T1108] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
[  185.804682][ T1108] ata1.00: irq_stat 0x40000000
[  185.806458][ T1108] ata1.00: failed command: ZAC MANAGEMENT OUT
[  185.808634][ T1108] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 20
[  185.808634][ T1108]          res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error)
[  185.814307][ T1108] ata1.00: status: { DRDY ERR }
[  185.815931][ T1108] ata1.00: error: { ABRT }
[  185.817690][ T1108] ata1.00: device reported invalid CHS sector 0
[  186.052881][ T9704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1028'.
[  186.442144][    C3] ata1: illegal qc_active transition (00000000->00004000)
[  186.638228][ T9722] input: syz1 as /devices/virtual/input/input16
[  186.680598][   T40] kauditd_printk_skb: 78 callbacks suppressed
[  186.680609][   T40] audit: type=1326 audit(2000000010.249:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1033" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  186.689419][   T40] audit: type=1326 audit(2000000010.249:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1033" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  186.697241][   T40] audit: type=1326 audit(2000000010.249:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1033" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  186.704056][   T40] audit: type=1326 audit(2000000010.249:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1033" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  186.710612][   T40] audit: type=1326 audit(2000000010.249:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1033" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  186.717462][   T40] audit: type=1326 audit(2000000010.249:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1033" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  186.725371][   T40] audit: type=1326 audit(2000000010.249:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1033" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  186.733561][   T40] audit: type=1326 audit(2000000010.249:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1033" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  186.734112][ T9727] binder: 9726:9727 ioctl c0306201 800003c0 returned -14
[  186.740687][   T40] audit: type=1326 audit(2000000010.249:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1033" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  186.740713][   T40] audit: type=1326 audit(2000000010.259:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1033" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  186.773941][ T1108] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[  186.778961][ T1108] ata1.00: configured for UDMA/100
[  188.470317][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1043'.
[  189.188872][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1044'.
[  190.389336][ T9808] net_ratelimit: 7 callbacks suppressed
[  190.389349][ T9808] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.503558][ T9811] program syz.3.1055 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  190.562493][ T1108] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
[  190.564722][ T1108] ata1.00: irq_stat 0x40000000
[  190.572416][ T1108] ata1.00: failed command: ZAC MANAGEMENT OUT
[  190.580090][ T1108] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 21
[  190.580090][ T1108]          res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error)
[  190.585526][ T9823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1061'.
[  190.590351][ T1108] ata1.00: status: { DRDY ERR }
[  190.591924][ T1108] ata1.00: error: { ABRT }
[  190.593580][ T1108] ata1.00: device reported invalid CHS sector 0
[  191.739526][   T40] kauditd_printk_skb: 8 callbacks suppressed
[  191.740142][   T40] audit: type=1326 audit(2000000001.909:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.1.1065" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000
[  191.749260][   T40] audit: type=1326 audit(2000000001.919:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.1.1065" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000
[  191.758837][   T40] audit: type=1326 audit(2000000001.929:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.1.1065" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f51579 code=0x7ffc0000
[  191.767514][   T40] audit: type=1326 audit(2000000001.929:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.1.1065" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000
[  191.776932][   T40] audit: type=1326 audit(2000000001.929:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.1.1065" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000
[  191.791668][   T40] audit: type=1326 audit(2000000001.929:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.1.1065" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f51579 code=0x7ffc0000
[  191.810677][   T40] audit: type=1326 audit(2000000001.929:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.1.1065" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f51579 code=0x7ffc0000
[  191.829576][   T40] audit: type=1326 audit(2000000001.929:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.1.1065" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f51579 code=0x7ffc0000
[  191.840659][   T40] audit: type=1326 audit(2000000001.929:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.1.1065" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f51579 code=0x7ffc0000
[  191.851829][   T40] audit: type=1326 audit(2000000001.929:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.1.1065" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f51579 code=0x7ffc0000
[  192.864242][ T9855] netlink: 'syz.2.1070': attribute type 2 has an invalid length.
[  192.889444][ T9855] : entered promiscuous mode
[  193.701144][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  193.722234][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  193.959285][ T9893] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  193.962012][ T9893] IPv6: NLM_F_CREATE should be set when creating new route
[  194.284066][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1087'.
[  194.287700][ T9907] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1087'.
[  194.358520][   T63] Bluetooth: hci2: unexpected event for opcode 0x0401
[  195.481287][ T9934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1097'.
[  195.848480][ T5801] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  195.902212][   T59] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  196.013170][ T5801] usb 5-1: Using ep0 maxpacket: 32
[  196.039973][ T9938] loop2: detected capacity change from 0 to 3
[  196.057656][ T9938] ldm_validate_privheads(): Disk read failed.
[  196.060001][ T9938] Dev loop2: unable to read RDB block 3
[  196.061812][ T9938]  loop2: unable to read partition table
[  196.064277][ T9938] loop2: partition table beyond EOD, truncated
[  196.066207][ T9938] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  196.084989][   T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.092551][   T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.096645][ T5801] usb 5-1: unable to get BOS descriptor or descriptor too short
[  196.099043][ T5801] usb 5-1: too many configurations: 105, using maximum allowed: 8
[  196.106596][   T59] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  196.110569][   T59] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  196.117465][   T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.120018][ T5801] usb 5-1: unable to read config index 0 descriptor/start: -71
[  196.122532][ T5801] usb 5-1: can't read configurations, error -71
[  196.123865][ T9951] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  196.126369][   T59] usb 6-1: config 0 descriptor??
[  196.131030][ T9951] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  196.332200][   T63] Bluetooth: hci3: command 0x0419 tx timeout
[  196.543395][ T9942] binder: 9941:9942 ioctl c0306201 800003c0 returned -14
[  196.554401][   T59] usbhid 6-1:0.0: can't add hid device: -71
[  196.556364][   T59] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  196.564543][   T59] usb 6-1: USB disconnect, device number 6
[  196.619785][ T9960] lo speed is unknown, defaulting to 1000
[  196.622201][ T9960] lo speed is unknown, defaulting to 1000
[  196.627354][ T9960] lo speed is unknown, defaulting to 1000
[  196.638504][ T9960] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  196.654241][ T9960] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  196.761860][ T9960] lo speed is unknown, defaulting to 1000
[  196.769615][ T9960] lo speed is unknown, defaulting to 1000
[  196.776760][ T9960] lo speed is unknown, defaulting to 1000
[  196.784558][ T9960] lo speed is unknown, defaulting to 1000
[  198.532208][   T40] kauditd_printk_skb: 8 callbacks suppressed
[  198.532219][   T40] audit: type=1326 audit(2000000008.699:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9990 comm="syz.2.1115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  198.542319][   T40] audit: type=1326 audit(2000000008.699:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9990 comm="syz.2.1115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  198.548951][   T40] audit: type=1326 audit(2000000008.719:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9990 comm="syz.2.1115" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  198.556886][   T40] audit: type=1326 audit(2000000008.719:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9990 comm="syz.2.1115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  198.572040][   T40] audit: type=1326 audit(2000000008.719:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9990 comm="syz.2.1115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  198.578124][ T9994] fuse: Bad value for 'fd'
[  198.578929][   T40] audit: type=1326 audit(2000000008.719:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9990 comm="syz.2.1115" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  198.604846][   T40] audit: type=1326 audit(2000000008.719:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9990 comm="syz.2.1115" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  198.611804][   T40] audit: type=1326 audit(2000000008.719:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9990 comm="syz.2.1115" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  198.630572][   T40] audit: type=1326 audit(2000000008.719:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9990 comm="syz.2.1115" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  198.649157][   T40] audit: type=1326 audit(2000000008.719:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9990 comm="syz.2.1115" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  199.043225][   T63] Bluetooth: hci3: unexpected Set CIG Parameters response data
[  199.061111][   T63] Bluetooth: hci3: unexpected event for opcode 0x2062
[  199.992307][   T34] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  200.145987][   T34] usb 8-1: Using ep0 maxpacket: 32
[  200.151376][   T34] usb 8-1: config 0 has an invalid interface number: 12 but max is 0
[  200.162139][   T34] usb 8-1: config 0 has no interface number 0
[  200.164703][   T34] usb 8-1: config 0 interface 12 has no altsetting 0
[  200.175596][   T34] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  200.186605][   T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.192383][   T34] usb 8-1: Product: syz
[  200.198109][   T34] usb 8-1: Manufacturer: syz
[  200.208254][   T34] usb 8-1: SerialNumber: syz
[  200.221425][   T34] usb 8-1: config 0 descriptor??
[  200.651020][T10043] siw: device registration error -23
[  200.937166][   T34] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  200.939543][   T34] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71
[  200.941793][   T34] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  200.944237][   T34] f81534 8-1:0.12: probe with driver f81534 failed with error -71
[  200.948816][   T34] usb 8-1: USB disconnect, device number 8
[  201.436435][    C1] sd 0:0:0:0: [sda] tag#27 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  201.440118][    C1] sd 0:0:0:0: [sda] tag#27 CDB: Test Unit Ready 
[  201.682173][   T34] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  201.722264][ T5801] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  201.864338][   T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.868679][   T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.872600][   T34] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  201.876223][   T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.881552][   T34] usb 6-1: config 0 descriptor??
[  201.894127][ T5801] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.898371][ T5801] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.901463][ T5801] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  201.905593][ T5801] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  201.908389][ T5801] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.912839][ T5801] usb 8-1: config 0 descriptor??
[  202.294289][   T34] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0
[  202.296648][   T34] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0
[  202.300618][   T34] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0D8C:0022.0005/input/input17
[  202.309377][   T34] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0
[  202.372941][   T59] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  202.376614][T10064] binder: 10063:10064 ioctl c0306201 800003c0 returned -14
[  202.384431][ T5801] usbhid 8-1:0.0: can't add hid device: -71
[  202.387228][ T5801] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  202.394036][ T5801] usb 8-1: USB disconnect, device number 9
[  202.432203][ T6008] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  202.493774][  T838] usb 6-1: USB disconnect, device number 7
[  202.533782][   T59] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  202.537262][   T59] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  202.542232][   T59] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  202.545438][   T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.548261][   T59] usb 5-1: Product: syz
[  202.549865][   T59] usb 5-1: Manufacturer: syz
[  202.551569][   T59] usb 5-1: SerialNumber: syz
[  202.562856][   T59] cdc_mbim 5-1:1.0: skipping garbage
[  202.586022][ T6008] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  202.589612][ T6008] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.593116][ T6008] usb 7-1: Product: syz
[  202.594807][ T6008] usb 7-1: Manufacturer: syz
[  202.596591][ T6008] usb 7-1: SerialNumber: syz
[  202.600406][ T6008] usb 7-1: config 0 descriptor??
[  202.767551][T10075] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  202.809071][ T5801] usb 7-1: USB disconnect, device number 4
[  203.133893][   T63] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  203.137668][   T63] Bluetooth: hci3: Injecting HCI hardware error event
[  203.141077][ T5947] Bluetooth: hci3: hardware error 0x00
[  203.372768][T10075] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  203.375492][   T59] cdc_mbim 5-1:1.0: setting tx_max = 184
[  203.518135][   T59] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device
[  203.579179][    C2] cdc_mbim 5-1:1.0: nonzero urb status received: -71
[  203.581459][    C2] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes
[  203.604548][   T59] wwan wwan0: port wwan0mbim0 attached
[  203.630750][   T59] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 72:ab:79:2a:d1:5c
[  203.643853][   T59] usb 5-1: USB disconnect, device number 12
[  203.654174][   T59] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM
[  203.715631][   T59] wwan wwan0: port wwan0mbim0 disconnected
[  203.990048][T10100] syz.1.1148 (10100) used greatest stack depth: 19240 bytes left
[  204.532380][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1153'.
[  204.800398][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1157'.
[  204.804204][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1157'.
[  205.212510][ T5947] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  206.044002][T10162] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1165'.
[  206.958024][T10182] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  206.961099][T10182] overlayfs: failed to set xattr on upper
[  206.964348][T10182] overlayfs: ...falling back to redirect_dir=nofollow.
[  206.966491][T10182] overlayfs: ...falling back to index=off.
[  206.968521][T10182] overlayfs: ...falling back to uuid=null.
[  207.049426][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1173'.
[  207.153746][T10188] hsr_slave_1 (unregistering): left promiscuous mode
[  207.171008][T10190] FAULT_INJECTION: forcing a failure.
[  207.171008][T10190] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  207.175049][T10190] CPU: 2 UID: 0 PID: 10190 Comm: syz.2.1174 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) 
[  207.175064][T10190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  207.175071][T10190] Call Trace:
[  207.175075][T10190]  <TASK>
[  207.175079][T10190]  dump_stack_lvl+0x16c/0x1f0
[  207.175113][T10190]  should_fail_ex+0x512/0x640
[  207.175134][T10190]  _copy_from_user+0x2e/0xd0
[  207.175150][T10190]  get_compat_msghdr+0xa7/0x170
[  207.175180][T10190]  ? __pfx_get_compat_msghdr+0x10/0x10
[  207.175197][T10190]  ? __lock_acquire+0x622/0x1c90
[  207.175214][T10190]  ___sys_recvmsg+0x191/0x1a0
[  207.175230][T10190]  ? __pfx____sys_recvmsg+0x10/0x10
[  207.175247][T10190]  ? find_held_lock+0x2b/0x80
[  207.175262][T10190]  ? __pfx___might_resched+0x10/0x10
[  207.175276][T10190]  do_recvmmsg+0x55d/0x750
[  207.175297][T10190]  ? __pfx_do_recvmmsg+0x10/0x10
[  207.175325][T10190]  ? __fget_files+0x20e/0x3c0
[  207.175338][T10190]  ? handle_mm_fault+0x1b0/0xd10
[  207.175353][T10190]  __sys_recvmmsg+0x21c/0x280
[  207.175368][T10190]  ? __pfx___sys_recvmmsg+0x10/0x10
[  207.175384][T10190]  ? __pfx_ksys_write+0x10/0x10
[  207.175401][T10190]  __ia32_compat_sys_recvmmsg_time32+0xc4/0x160
[  207.175411][T10190]  ? lockdep_hardirqs_on+0x7c/0x110
[  207.175437][T10190]  ? syscall_enter_from_user_mode_prepare+0x68/0xe0
[  207.175454][T10190]  __do_fast_syscall_32+0x7c/0x3a0
[  207.175471][T10190]  do_fast_syscall_32+0x32/0x80
[  207.175486][T10190]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  207.175499][T10190] RIP: 0023:0xf7f36579
[  207.175507][T10190] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  207.175517][T10190] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000151
[  207.175527][T10190] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[  207.175533][T10190] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000
[  207.175539][T10190] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  207.175545][T10190] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  207.175551][T10190] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  207.175564][T10190]  </TASK>
[  207.255081][ T5947] Bluetooth: hci2: command 0x0419 tx timeout
[  207.460496][T10203] netlink: 'syz.2.1178': attribute type 10 has an invalid length.
[  207.563150][T10206] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  207.566705][T10206] overlayfs: missing 'lowerdir'
[  207.927938][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  207.934300][ T5947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  207.937708][ T5947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  207.949441][ T5947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  207.953341][ T5947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  207.995950][T10210] lo speed is unknown, defaulting to 1000
[  208.067407][T10216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1181'.
[  208.141204][T10210] chnl_net:caif_netlink_parms(): no params data found
[  208.251014][T10210] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.255241][T10210] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.258170][T10210] bridge_slave_0: entered allmulticast mode
[  208.261939][T10210] bridge_slave_0: entered promiscuous mode
[  208.267670][T10210] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.270665][T10210] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.273707][T10210] bridge_slave_1: entered allmulticast mode
[  208.277448][T10210] bridge_slave_1: entered promiscuous mode
[  208.333595][T10210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.341535][T10210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.386293][T10210] team0: Port device team_slave_0 added
[  208.391469][T10210] team0: Port device team_slave_1 added
[  208.451592][T10210] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.453783][T10210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.461788][T10210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.467344][T10210] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.469470][T10210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.477498][T10210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.563373][T10210] hsr_slave_0: entered promiscuous mode
[  208.567055][T10210] hsr_slave_1: entered promiscuous mode
[  208.569719][T10210] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  208.573701][T10210] Cannot create hsr debugfs directory
[  208.684205][T10210] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.687291][T10210] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  208.740698][T10210] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.744822][T10210] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  208.804996][T10229] input: syz0 as /devices/virtual/input/input18
[  208.806282][T10210] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.810652][T10210] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  208.856667][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1185'.
[  208.881627][T10210] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.885687][T10210] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  209.010525][T10210] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  209.024482][T10210] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  209.029007][T10210] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  209.034781][T10210] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  209.093499][T10210] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.096541][T10210] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.099557][T10210] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.102289][T10210] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.150462][T10210] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.166414][T10210] 8021q: adding VLAN 0 to HW filter on device team0
[  209.173517][  T216] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.178082][  T216] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.211012][  T216] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.213332][  T216] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.216244][  T216] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.218424][  T216] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.239237][T10252] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1191'.
[  209.340055][T10259] syzkaller1: entered promiscuous mode
[  209.341821][T10259] syzkaller1: entered allmulticast mode
[  209.389794][T10210] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.431798][T10210] veth0_vlan: entered promiscuous mode
[  209.440385][T10210] veth1_vlan: entered promiscuous mode
[  209.486150][T10210] veth0_macvtap: entered promiscuous mode
[  209.497595][T10210] veth1_macvtap: entered promiscuous mode
[  209.612310][T10210] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.618021][T10210] batman_adv: batadv0: Interface activated: batadv_slave_1
[  209.621821][T10210] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.625311][T10210] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.628455][T10210] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.631757][T10210] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.720820][  T216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.729829][  T216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.748280][ T1242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.751832][ T1242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.012502][   T63] Bluetooth: hci2: command tx timeout
[  210.161715][T10268] lo speed is unknown, defaulting to 1000
[  210.547916][T10269] netlink: 'syz.3.1194': attribute type 3 has an invalid length.
[  210.550341][T10269] netlink: 5108 bytes leftover after parsing attributes in process `syz.3.1194'.
[  210.553819][T10269] netlink: 'syz.3.1194': attribute type 3 has an invalid length.
[  210.556349][T10269] netlink: 5108 bytes leftover after parsing attributes in process `syz.3.1194'.
[  210.774890][T10268] mmap: syz.3.1194 (10268) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  210.952176][   T59] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  210.976928][T10276] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  211.123665][   T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.126981][   T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.131192][   T59] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  211.134708][   T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.138912][   T59] usb 7-1: config 0 descriptor??
[  211.549164][   T59] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0
[  211.551603][   T59] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0
[  211.556392][   T59] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0D8C:0022.0006/input/input19
[  211.566122][   T59] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[  211.753077][  T838] usb 7-1: USB disconnect, device number 5
[  212.492996][T10306] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1206'.
[  212.495769][T10306] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1206'.
[  212.916171][T10329] ata1.00: invalid multi_count 1 ignored
[  212.973939][T10329] FAULT_INJECTION: forcing a failure.
[  212.973939][T10329] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  212.977942][T10329] CPU: 0 UID: 0 PID: 10329 Comm: syz.1.1214 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) 
[  212.977957][T10329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  212.977964][T10329] Call Trace:
[  212.977968][T10329]  <TASK>
[  212.977972][T10329]  dump_stack_lvl+0x16c/0x1f0
[  212.977991][T10329]  should_fail_ex+0x512/0x640
[  212.978008][T10329]  _copy_to_user+0x32/0xd0
[  212.978025][T10329]  simple_read_from_buffer+0xcb/0x170
[  212.978041][T10329]  proc_fail_nth_read+0x197/0x270
[  212.978054][T10329]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  212.978067][T10329]  ? rw_verify_area+0xcf/0x680
[  212.978079][T10329]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  212.978091][T10329]  vfs_read+0x1e4/0xc60
[  212.978105][T10329]  ? fdget_pos+0x2a2/0x370
[  212.978121][T10329]  ? __pfx_vfs_read+0x10/0x10
[  212.978133][T10329]  ? find_held_lock+0x2b/0x80
[  212.978147][T10329]  ? __fget_files+0x20e/0x3c0
[  212.978164][T10329]  ksys_read+0x12a/0x250
[  212.978178][T10329]  ? __pfx_ksys_read+0x10/0x10
[  212.978193][T10329]  ? rcu_is_watching+0x12/0xc0
[  212.978205][T10329]  __do_fast_syscall_32+0x7c/0x3a0
[  212.978223][T10329]  do_fast_syscall_32+0x32/0x80
[  212.978239][T10329]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  212.978252][T10329] RIP: 0023:0xf7f51579
[  212.978260][T10329] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  212.978270][T10329] RSP: 002b:00000000f5076590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  212.978280][T10329] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5076620
[  212.978287][T10329] RDX: 000000000000000f RSI: 00000000f73e3ff4 RDI: 0000000000000000
[  212.978292][T10329] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  212.978298][T10329] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  212.978304][T10329] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  212.978317][T10329]  </TASK>
[  213.078602][T10327] netlink: zone id is out of range
[  213.081202][T10327] netlink: zone id is out of range
[  213.081915][T10332] binder: 10331:10332 ioctl c0306201 0 returned -14
[  213.083786][T10327] netlink: zone id is out of range
[  213.087774][T10333] binder: 10331:10333 ioctl c0306201 0 returned -14
[  213.088496][T10327] netlink: zone id is out of range
[  213.092407][T10327] netlink: zone id is out of range
[  213.102230][T10327] netlink: zone id is out of range
[  213.114773][T10327] netlink: set zone limit has 4 unknown bytes
[  213.122361][T10333] lo speed is unknown, defaulting to 1000
[  213.235071][T10342] FAULT_INJECTION: forcing a failure.
[  213.235071][T10342] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  213.240334][T10342] CPU: 1 UID: 0 PID: 10342 Comm: syz.2.1217 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) 
[  213.240356][T10342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  213.240366][T10342] Call Trace:
[  213.240373][T10342]  <TASK>
[  213.240380][T10342]  dump_stack_lvl+0x16c/0x1f0
[  213.240409][T10342]  should_fail_ex+0x512/0x640
[  213.240434][T10342]  _copy_from_user+0x2e/0xd0
[  213.240459][T10342]  copy_from_sockptr_offset.constprop.0+0x153/0x1a0
[  213.240481][T10342]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[  213.240504][T10342]  ? __local_bh_enable_ip+0xa4/0x120
[  213.240524][T10342]  packet_setsockopt+0x11dc/0x33c0
[  213.240551][T10342]  ? __pfx_packet_setsockopt+0x10/0x10
[  213.240575][T10342]  ? aa_sk_perm+0x2f4/0xb10
[  213.240595][T10342]  ? __pfx_aa_sk_perm+0x10/0x10
[  213.240619][T10342]  ? __pfx_packet_setsockopt+0x10/0x10
[  213.240640][T10342]  do_sock_setsockopt+0x221/0x470
[  213.240657][T10342]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  213.240688][T10342]  __sys_setsockopt+0x120/0x1a0
[  213.240714][T10342]  __ia32_sys_setsockopt+0xbc/0x160
[  213.240735][T10342]  ? lockdep_hardirqs_on+0x7c/0x110
[  213.240756][T10342]  ? syscall_enter_from_user_mode_prepare+0x68/0xe0
[  213.240780][T10342]  __do_fast_syscall_32+0x7c/0x3a0
[  213.240805][T10342]  do_fast_syscall_32+0x32/0x80
[  213.240829][T10342]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  213.240848][T10342] RIP: 0023:0xf7f36579
[  213.240860][T10342] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  213.240874][T10342] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e
[  213.240889][T10342] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000107
[  213.240898][T10342] RDX: 0000000000000005 RSI: 0000000080000040 RDI: 000000000000001c
[  213.240912][T10342] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  213.240921][T10342] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  213.240929][T10342] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  213.240952][T10342]  </TASK>
[  213.346738][T10344] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1219'.
[  213.496839][T10350] lo speed is unknown, defaulting to 1000
[  213.521308][T10353] Bluetooth: MGMT ver 1.23
[  214.297403][T10357] mkiss: ax0: crc mode is auto.
[  214.895931][T10370] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1227'.
[  214.908010][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1227'.
[  215.806565][T10386] 9pnet: Unknown protocol version 9p20\++}
[  216.162309][T10394] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1233'.
[  216.165225][T10394] unsupported nla_type 256
[  217.022202][T10079] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  217.182160][T10079] usb 7-1: Using ep0 maxpacket: 8
[  217.186207][T10079] usb 7-1: config 0 has no interfaces?
[  217.188667][T10079] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  217.192639][T10079] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.209172][T10079] usb 7-1: config 0 descriptor??
[  217.430870][T10079] usb 7-1: USB disconnect, device number 6
[  218.084318][T10425] lo speed is unknown, defaulting to 1000
[  218.090483][T10424] lo speed is unknown, defaulting to 1000
[  218.628612][T10437] openvswitch: netlink: Flow key attr not present in new flow.
[  219.303729][   T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  219.378024][   T40] kauditd_printk_skb: 129 callbacks suppressed
[  219.378035][   T40] audit: type=1326 audit(2000000029.549:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10444 comm="syz.2.1248" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  219.391941][   T40] audit: type=1326 audit(2000000029.549:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10444 comm="syz.2.1248" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  219.403871][   T40] audit: type=1326 audit(2000000029.549:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10444 comm="syz.2.1248" exe="/syz-executor" sig=0 arch=40000003 syscall=82 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  219.411359][   T40] audit: type=1326 audit(2000000029.549:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10444 comm="syz.2.1248" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  219.418762][   T40] audit: type=1326 audit(2000000029.549:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10444 comm="syz.2.1248" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  219.426615][   T40] audit: type=1326 audit(2000000029.549:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10444 comm="syz.2.1248" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  219.435439][   T40] audit: type=1326 audit(2000000029.549:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10444 comm="syz.2.1248" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  219.444644][   T40] audit: type=1326 audit(2000000029.549:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10444 comm="syz.2.1248" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  219.451363][   T40] audit: type=1326 audit(2000000029.549:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10444 comm="syz.2.1248" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  219.461805][   T40] audit: type=1326 audit(2000000029.549:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10444 comm="syz.2.1248" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000
[  219.566901][T10460] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  219.571385][T10460] netlink: 'syz.3.1249': attribute type 10 has an invalid length.
[  219.574904][T10460] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1249'.
[  219.579689][T10460] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.586747][T10460] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.589482][T10460] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.594295][T10460] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.600792][T10460] team0: Port device geneve0 added
[  220.195330][T10490] lo speed is unknown, defaulting to 1000
[  220.247521][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1256'.
[  220.254132][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1256'.
[  226.883210][T10517] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1259'.
[  226.886146][T10517] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1259'.
[  226.907541][T10517] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1259'.
[  226.910474][T10517] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1259'.
[  226.947202][T10517] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1259'.
[  226.950061][T10517] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1259'.
[  229.152162][   T53] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  229.323754][   T53] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  229.327152][   T53] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  229.332934][   T53] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  229.341629][   T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.344377][   T53] usb 6-1: Product: syz
[  229.345818][   T53] usb 6-1: Manufacturer: syz
[  229.347293][   T53] usb 6-1: SerialNumber: syz
[  229.374442][   T53] cdc_mbim 6-1:1.0: skipping garbage
[  229.594420][T10535] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  230.257980][T10557] FAULT_INJECTION: forcing a failure.
[  230.257980][T10557] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  230.262373][T10557] CPU: 3 UID: 0 PID: 10557 Comm: syz.2.1266 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) 
[  230.262390][T10557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  230.262396][T10557] Call Trace:
[  230.262400][T10557]  <TASK>
[  230.262404][T10557]  dump_stack_lvl+0x16c/0x1f0
[  230.262423][T10557]  should_fail_ex+0x512/0x640
[  230.262440][T10557]  _copy_to_user+0x32/0xd0
[  230.262459][T10557]  simple_read_from_buffer+0xcb/0x170
[  230.262475][T10557]  proc_fail_nth_read+0x197/0x270
[  230.262490][T10557]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  230.262503][T10557]  ? rw_verify_area+0xcf/0x680
[  230.262515][T10557]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  230.262527][T10557]  vfs_read+0x1e4/0xc60
[  230.262541][T10557]  ? fdget_pos+0x2a2/0x370
[  230.262556][T10557]  ? __pfx_vfs_read+0x10/0x10
[  230.262569][T10557]  ? find_held_lock+0x2b/0x80
[  230.262583][T10557]  ? __fget_files+0x20e/0x3c0
[  230.262595][T10557]  ? ktime_get_ts64+0x160/0x400
[  230.262611][T10557]  ksys_read+0x12a/0x250
[  230.262625][T10557]  ? __pfx_ksys_read+0x10/0x10
[  230.262640][T10557]  ? rcu_is_watching+0x12/0xc0
[  230.262652][T10557]  __do_fast_syscall_32+0x7c/0x3a0
[  230.262669][T10557]  do_fast_syscall_32+0x32/0x80
[  230.262684][T10557]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  230.262698][T10557] RIP: 0023:0xf7f36579
[  230.262706][T10557] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  230.262716][T10557] RSP: 002b:00000000f5035590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  230.262726][T10557] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5035620
[  230.262732][T10557] RDX: 000000000000000f RSI: 00000000f73c3ff4 RDI: 0000000000000000
[  230.262738][T10557] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  230.262744][T10557] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  230.262750][T10557] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  230.262762][T10557]  </TASK>
[  231.125753][T10567] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(17)
[  231.128073][T10567] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  231.130795][T10567] vhci_hcd vhci_hcd.0: Device attached
[  231.135984][T10567] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(19)
[  231.138065][T10567] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  231.140445][T10567] vhci_hcd vhci_hcd.0: Device attached
[  231.143740][T10567] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(21)
[  231.145820][T10567] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  231.148251][T10567] vhci_hcd vhci_hcd.0: Device attached
[  231.153267][T10567] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(23)
[  231.156027][T10567] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  231.158993][T10567] vhci_hcd vhci_hcd.0: Device attached
[  231.162802][T10567] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(25)
[  231.165420][T10567] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  231.167984][T10567] vhci_hcd vhci_hcd.0: Device attached
[  231.171840][T10567] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(27)
[  231.173961][T10567] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  231.176627][T10567] vhci_hcd vhci_hcd.0: Device attached
[  231.180423][T10567] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  231.185105][T10567] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(31)
[  231.187546][T10567] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  231.190462][T10567] vhci_hcd vhci_hcd.0: Device attached
[  231.200393][T10578] vhci_hcd: connection closed
[  231.200626][T10574] vhci_hcd: connection closed
[  231.200655][T10572] vhci_hcd: connection closed
[  231.201215][   T13] vhci_hcd: stop threads
[  231.201227][   T13] vhci_hcd: release socket
[  231.201235][   T13] vhci_hcd: disconnect device
[  231.202257][   T13] vhci_hcd: stop threads
[  231.204719][T10570] vhci_hcd: connection closed
[  231.205104][T10576] vhci_hcd: connection closed
[  231.205253][T10568] vhci_hcd: connection closed
[  231.205634][   T13] vhci_hcd: release socket
[  231.217799][   T13] vhci_hcd: disconnect device
[  231.219599][   T13] vhci_hcd: stop threads
[  231.220971][   T13] vhci_hcd: release socket
[  231.223355][   T13] vhci_hcd: disconnect device
[  231.226361][   T13] vhci_hcd: stop threads
[  231.227716][   T13] vhci_hcd: release socket
[  231.229125][   T13] vhci_hcd: disconnect device
[  231.230888][   T13] vhci_hcd: stop threads
[  231.232334][   T13] vhci_hcd: release socket
[  231.233739][   T13] vhci_hcd: disconnect device
[  231.235538][   T13] vhci_hcd: stop threads
[  231.237054][   T13] vhci_hcd: release socket
[  231.238641][   T13] vhci_hcd: disconnect device
[  231.492249][   T24] usb 44-1: SetAddress Request (2) to port 0
[  231.502358][   T24] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd
[  231.729106][T10580] vhci_hcd: connection reset by peer
[  231.735803][ T1138] vhci_hcd: stop threads
[  231.738130][ T1138] vhci_hcd: release socket
[  231.739948][ T1138] vhci_hcd: disconnect device
[  232.146695][   T53] cdc_mbim 6-1:1.0: failed GET_NTB_PARAMETERS
[  232.155644][   T53] cdc_mbim 6-1:1.0: bind() failure
[  232.168763][   T53] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  232.172287][   T53] cdc_ncm 6-1:1.1: bind() failure
[  232.198852][   T53] usb 6-1: USB disconnect, device number 8
[  233.099180][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1276'.
[  233.102002][T10616] netlink: 'syz.2.1276': attribute type 5 has an invalid length.
[  233.104847][T10616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1276'.
[  233.120746][T10616] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  233.123747][T10616] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  233.126373][T10616] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  233.129036][T10616] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  233.131609][T10616] geneve2: entered promiscuous mode
[  233.133760][T10616] geneve2: entered allmulticast mode
[  233.149581][T10619] FAULT_INJECTION: forcing a failure.
[  233.149581][T10619] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  233.153804][T10619] CPU: 3 UID: 0 PID: 10619 Comm: syz.3.1281 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) 
[  233.153819][T10619] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  233.153826][T10619] Call Trace:
[  233.153829][T10619]  <TASK>
[  233.153834][T10619]  dump_stack_lvl+0x16c/0x1f0
[  233.153853][T10619]  should_fail_ex+0x512/0x640
[  233.153870][T10619]  _copy_from_user+0x2e/0xd0
[  233.153886][T10619]  kstrtouint_from_user+0xd6/0x1d0
[  233.153898][T10619]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  233.153910][T10619]  ? __lock_acquire+0xb8a/0x1c90
[  233.153930][T10619]  proc_fail_nth_write+0x83/0x250
[  233.153943][T10619]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  233.153959][T10619]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  233.153970][T10619]  vfs_write+0x29d/0x1150
[  233.153988][T10619]  ? __pfx_vfs_write+0x10/0x10
[  233.154000][T10619]  ? find_held_lock+0x2b/0x80
[  233.154013][T10619]  ? __fget_files+0x20e/0x3c0
[  233.154031][T10619]  ksys_write+0x12a/0x250
[  233.154045][T10619]  ? __pfx_ksys_write+0x10/0x10
[  233.154060][T10619]  ? rcu_is_watching+0x12/0xc0
[  233.154073][T10619]  __do_fast_syscall_32+0x7c/0x3a0
[  233.154090][T10619]  do_fast_syscall_32+0x32/0x80
[  233.154105][T10619]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  233.154118][T10619] RIP: 0023:0xf7f38579
[  233.154126][T10619] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  233.154136][T10619] RSP: 002b:00000000f5056590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004
[  233.154146][T10619] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5056620
[  233.154152][T10619] RDX: 0000000000000001 RSI: 00000000f73c3ff4 RDI: 0000000000000000
[  233.154158][T10619] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  233.154164][T10619] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  233.154169][T10619] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  233.154182][T10619]  </TASK>
[  233.254614][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1282'.
[  233.257443][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1282'.
[  233.287059][T10624] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1283'.
[  233.642193][    T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  233.663757][ T6008] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  233.802182][    T9] usb 8-1: Using ep0 maxpacket: 32
[  233.805437][    T9] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[  233.808087][    T9] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  233.810716][    T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[  233.813777][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  233.816818][    T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  233.819902][    T9] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  233.823720][    T9] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  233.826479][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.830553][    T9] usb 8-1: config 0 descriptor??
[  233.842167][ T6008] usb 6-1: Using ep0 maxpacket: 32
[  233.845413][ T6008] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  233.848170][ T6008] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  233.853151][ T6008] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  233.857499][ T6008] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  233.865480][ T6008] usb 6-1: config 0 interface 0 has no altsetting 0
[  233.870513][ T6008] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  233.874287][ T6008] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=6
[  233.877595][ T6008] usb 6-1: Product: syz
[  233.879324][ T6008] usb 6-1: Manufacturer: syz
[  233.881261][ T6008] usb 6-1: SerialNumber: syz
[  233.885412][ T6008] usb 6-1: config 0 descriptor??
[  233.889827][ T6008] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  233.895322][ T6008] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  234.043121][    T9] usblp 8-1:0.0: usblp1: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  234.047922][    T9] usb 8-1: USB disconnect, device number 10
[  234.052296][    T9] usblp1: removed
[  234.179878][   T10] usb 6-1: USB disconnect, device number 9
[  234.181850][    C0] ldusb 6-1:0.0: usb_submit_urb failed (-19)
[  234.187115][   T10] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  234.394859][T10631] ldusb: No device or device unplugged -19
[  234.492227][   T59] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  234.642252][   T59] usb 8-1: Using ep0 maxpacket: 32
[  234.645078][   T59] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[  234.647662][   T59] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  234.650385][   T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[  234.653456][   T59] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  234.656397][   T59] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  234.659822][   T59] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  234.663878][   T59] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  234.666666][   T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.675397][   T59] usb 8-1: config 0 descriptor??
[  234.872238][ T6008] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  234.881264][   T59] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  235.025122][ T6008] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  235.028073][ T6008] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.030667][ T6008] usb 7-1: Product: syz
[  235.032051][ T6008] usb 7-1: Manufacturer: syz
[  235.034236][ T6008] usb 7-1: SerialNumber: syz
[  235.040289][ T6008] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  235.073457][T10079] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  235.119091][   T59] usb 8-1: USB disconnect, device number 11
[  235.123579][   T59] usblp0: removed
[  235.440884][T10658] veth3: entered promiscuous mode
[  235.442611][T10658] veth3: entered allmulticast mode
[  235.652626][T10668] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1297'.
[  235.802985][T10670] netlink: 'syz.3.1298': attribute type 5 has an invalid length.
[  235.829038][T10667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.832124][T10667] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.835123][T10667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.839240][T10667] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.851081][   T53] usb 7-1: USB disconnect, device number 7
[  236.168509][T10705] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  236.316704][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1309'.
[  236.319712][T10710] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  236.322605][T10710] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.572573][   T24] usb 44-1: device descriptor read/8, error -110
[  236.652293][T10079] usb 7-1: Service connection timeout for: 256
[  236.658571][T10079] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services
[  236.668841][T10079] ath9k_htc: Failed to initialize the device
[  236.673220][   T53] usb 7-1: ath9k_htc: USB layer deinitialized
[  236.894868][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.898521][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.901930][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.905407][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.908731][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.911467][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.914900][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.919209][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.921759][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.924256][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.926708][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.929821][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.932611][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.935202][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.937888][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.941637][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.944077][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.946474][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.949083][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.952265][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.954838][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.957841][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.961050][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.965398][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.968083][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.970828][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.974961][   T24] usb usb44-port1: attempt power cycle
[  236.977383][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.980622][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.985892][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.988439][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.991396][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.994662][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  236.997761][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  237.000418][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  237.003016][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  237.005420][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  237.008192][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  237.011385][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  237.015003][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  237.018166][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  237.021313][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  237.024490][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  237.027569][   T59] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  237.036557][   T59] hid-generic 0000:007F:FFFFFFFE.0007: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  237.071115][T10730] fido_id[10730]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  237.222184][   T53] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  237.352274][   T53] usb 6-1: device descriptor read/64, error -71
[  237.552980][   T24] usb usb44-port1: unable to enumerate USB device
[  237.592218][   T53] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  237.722334][   T53] usb 6-1: device descriptor read/64, error -71
[  237.832807][   T53] usb usb6-port1: attempt power cycle
[  237.846424][T10734] binder: 10731:10734 ioctl c0306201 80000080 returned -14
[  238.172262][   T53] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  238.192961][   T53] usb 6-1: device descriptor read/8, error -71
[  238.442291][   T53] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  238.472892][   T53] usb 6-1: device descriptor read/8, error -71
[  238.584486][   T53] usb usb6-port1: unable to enumerate USB device
[  238.768813][T10741] afs: Unknown parameter 'appraise_type'
[  238.865492][T10745] sctp: [Deprecated]: syz.3.1318 (pid 10745) Use of struct sctp_assoc_value in delayed_ack socket option.
[  238.865492][T10745] Use struct sctp_sack_info instead
[  239.362518][   T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  239.502265][   T10] usb 7-1: device descriptor read/64, error -71
[  239.772822][   T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  239.903359][   T10] usb 7-1: device descriptor read/64, error -71
[  240.024540][   T10] usb usb7-port1: attempt power cycle
[  240.392196][   T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  240.421151][T10781] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  240.423015][   T10] usb 7-1: device descriptor read/8, error -71
[  240.435084][T10781] xt_TPROXY: Can be used only with -p tcp or -p udp
[  240.683050][   T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  240.704406][   T10] usb 7-1: device descriptor read/8, error -71
[  240.816191][   T10] usb usb7-port1: unable to enumerate USB device
[  240.871023][T10788] FAULT_INJECTION: forcing a failure.
[  240.871023][T10788] name failslab, interval 1, probability 0, space 0, times 0
[  240.875000][T10788] CPU: 1 UID: 0 PID: 10788 Comm: syz.3.1332 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) 
[  240.875015][T10788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  240.875021][T10788] Call Trace:
[  240.875025][T10788]  <TASK>
[  240.875029][T10788]  dump_stack_lvl+0x16c/0x1f0
[  240.875048][T10788]  should_fail_ex+0x512/0x640
[  240.875063][T10788]  ? fs_reclaim_acquire+0xae/0x150
[  240.875076][T10788]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  240.875090][T10788]  should_failslab+0xc2/0x120
[  240.875100][T10788]  __kmalloc_noprof+0xd2/0x510
[  240.875118][T10788]  tomoyo_realpath_from_path+0xc2/0x6e0
[  240.875133][T10788]  ? tomoyo_profile+0x47/0x60
[  240.875149][T10788]  tomoyo_path_number_perm+0x245/0x580
[  240.875160][T10788]  ? tomoyo_path_number_perm+0x237/0x580
[  240.875172][T10788]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  240.875198][T10788]  ? find_held_lock+0x2b/0x80
[  240.875209][T10788]  ? hook_file_ioctl_common+0x145/0x410
[  240.875223][T10788]  ? __fget_files+0x20e/0x3c0
[  240.875236][T10788]  ? __fput_deferred+0x450/0x480
[  240.875248][T10788]  security_file_ioctl_compat+0x9b/0x240
[  240.875262][T10788]  __ia32_compat_sys_ioctl+0xc3/0x370
[  240.875276][T10788]  __do_fast_syscall_32+0x7c/0x3a0
[  240.875293][T10788]  do_fast_syscall_32+0x32/0x80
[  240.875308][T10788]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  240.875320][T10788] RIP: 0023:0xf7f38579
[  240.875329][T10788] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  240.875339][T10788] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  240.875348][T10788] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005437
[  240.875355][T10788] RDX: 0000000008000000 RSI: 0000000000000000 RDI: 0000000000000000
[  240.875360][T10788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  240.875366][T10788] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  240.875372][T10788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  240.875385][T10788]  </TASK>
[  240.875388][T10788] ERROR: Out of memory at tomoyo_realpath_from_path.
[  241.004108][T10791] Invalid logical block size (536870912)
[  241.007099][   T63] Bluetooth: hci0: unexpected event for opcode 0x1004
[  241.900770][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1335'.
[  242.252225][   T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  242.432899][   T24] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  242.440332][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.444891][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.448386][   T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  242.454547][   T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  242.457498][   T24] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  242.460260][   T24] usb 6-1: Manufacturer: syz
[  242.466253][   T24] usb 6-1: config 0 descriptor??
[  242.702161][   T53] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  242.853813][   T53] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  242.857190][   T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.861132][   T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.864191][   T53] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  242.869697][   T53] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  242.872505][   T53] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  242.873541][   T24] appleir 0003:05AC:8243.0008: unknown main item tag 0x0
[  242.874971][   T53] usb 7-1: Manufacturer: syz
[  242.876130][   T53] usb 7-1: config 0 descriptor??
[  242.884816][   T24] appleir 0003:05AC:8243.0008: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  243.297537][T10810] loop6: detected capacity change from 0 to 524287999
[  243.312234][   T53] appleir 0003:05AC:8243.0009: unknown main item tag 0x0
[  243.386611][   T53] appleir 0003:05AC:8243.0009: hiddev1,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  244.341924][ T6061] usb 7-1: USB disconnect, device number 12
[  244.462798][   T53] usb 6-1: reset high-speed USB device number 14 using dummy_hcd
[  244.494469][T10816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1340'.
[  244.592148][   T53] usb 6-1: device descriptor read/64, error -32
[  244.832418][   T53] usb 6-1: reset high-speed USB device number 14 using dummy_hcd
[  245.012520][   T53] usb 6-1: device descriptor read/64, error -32
[  245.322210][   T53] usb 6-1: reset high-speed USB device number 14 using dummy_hcd
[  245.704733][T10838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1345'.
[  245.801955][T10837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1346'.
[  245.807114][T10837] 9pnet_virtio: no channels available for device syz
[  245.912176][   T53] usb 6-1: device not accepting address 14, error -71
[  246.116360][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1350'.
[  246.749126][ T3232] usb 6-1: USB disconnect, device number 14
[  247.758255][T10928] FAULT_INJECTION: forcing a failure.
[  247.758255][T10928] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  247.762668][T10928] CPU: 3 UID: 0 PID: 10928 Comm: syz.1.1361 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) 
[  247.762684][T10928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  247.762691][T10928] Call Trace:
[  247.762694][T10928]  <TASK>
[  247.762699][T10928]  dump_stack_lvl+0x16c/0x1f0
[  247.762718][T10928]  should_fail_ex+0x512/0x640
[  247.762735][T10928]  _copy_to_user+0x32/0xd0
[  247.762752][T10928]  drm_ioctl+0x5eb/0xc30
[  247.762770][T10928]  ? __pfx_drm_mode_obj_set_property_ioctl+0x10/0x10
[  247.762784][T10928]  ? __pfx_drm_ioctl+0x10/0x10
[  247.762809][T10928]  drm_compat_ioctl+0x327/0x460
[  247.762822][T10928]  ? __pfx_drm_compat_ioctl+0x10/0x10
[  247.762833][T10928]  __ia32_compat_sys_ioctl+0x242/0x370
[  247.762848][T10928]  __do_fast_syscall_32+0x7c/0x3a0
[  247.762865][T10928]  do_fast_syscall_32+0x32/0x80
[  247.762880][T10928]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  247.762894][T10928] RIP: 0023:0xf7f51579
[  247.762902][T10928] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  247.762912][T10928] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  247.762922][T10928] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01864ba
[  247.762929][T10928] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000
[  247.762935][T10928] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  247.762940][T10928] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  247.762946][T10928] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  247.762958][T10928]  </TASK>
[  247.952238][ T6008] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  248.102177][ T6008] usb 7-1: Using ep0 maxpacket: 16
[  248.106271][ T6008] usb 7-1: config 0 has no interfaces?
[  248.114008][ T6008] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  248.122319][ T6008] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.131679][ T6008] usb 7-1: Product: syz
[  248.133238][ T6008] usb 7-1: Manufacturer: syz
[  248.134710][ T6008] usb 7-1: SerialNumber: syz
[  248.137718][ T6008] usb 7-1: config 0 descriptor??
[  248.923041][T10079] usb 7-1: USB disconnect, device number 13
[  249.007179][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1367'.
[  249.991667][T10963] netlink: 'syz.1.1373': attribute type 10 has an invalid length.
[  249.994259][T10963] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1373'.
[  249.999466][T10963] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  250.006687][T10963] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  250.010951][T10963] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  250.019318][T10965] FAULT_INJECTION: forcing a failure.
[  250.019318][T10965] name failslab, interval 1, probability 0, space 0, times 0
[  250.024657][T10965] CPU: 3 UID: 0 PID: 10965 Comm: syz.3.1372 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) 
[  250.024672][T10965] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  250.024678][T10965] Call Trace:
[  250.024682][T10965]  <TASK>
[  250.024686][T10965]  dump_stack_lvl+0x16c/0x1f0
[  250.024705][T10965]  should_fail_ex+0x512/0x640
[  250.024719][T10965]  ? __kmalloc_noprof+0xbf/0x510
[  250.024735][T10965]  ? nft_trans_alloc_gfp+0x26/0x2e0
[  250.024751][T10965]  should_failslab+0xc2/0x120
[  250.024761][T10965]  __kmalloc_noprof+0xd2/0x510
[  250.024774][T10965]  ? lockdep_init_map_type+0x5c/0x280
[  250.024791][T10965]  nft_trans_alloc_gfp+0x26/0x2e0
[  250.024807][T10965]  nf_tables_newtable+0x1387/0x1b40
[  250.024824][T10965]  ? __pfx_nf_tables_newtable+0x10/0x10
[  250.024841][T10965]  ? __nla_parse+0x40/0x60
[  250.024853][T10965]  nfnetlink_rcv_batch+0x18ed/0x2330
[  250.024873][T10965]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[  250.024888][T10965]  ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0
[  250.024902][T10965]  ? kmalloc_reserve+0x18b/0x2c0
[  250.024913][T10965]  ? __alloc_skb+0x166/0x380
[  250.024925][T10965]  ? netlink_alloc_large_skb+0x69/0x130
[  250.024936][T10965]  ? netlink_sendmsg+0x6a1/0xdd0
[  250.024965][T10965]  ? __nla_parse+0x40/0x60
[  250.024977][T10965]  nfnetlink_rcv+0x3c1/0x430
[  250.024989][T10965]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  250.025002][T10965]  ? is_vmalloc_addr+0x86/0xa0
[  250.025019][T10965]  netlink_unicast+0x53d/0x7f0
[  250.025032][T10965]  ? __pfx_netlink_unicast+0x10/0x10
[  250.025046][T10965]  netlink_sendmsg+0x8d1/0xdd0
[  250.025059][T10965]  ? __pfx_netlink_sendmsg+0x10/0x10
[  250.025071][T10965]  ? __import_iovec+0x1dd/0x650
[  250.025090][T10965]  ____sys_sendmsg+0xa98/0xc70
[  250.025103][T10965]  ? __pfx_____sys_sendmsg+0x10/0x10
[  250.025114][T10965]  ? get_compat_msghdr+0x11a/0x170
[  250.025136][T10965]  ___sys_sendmsg+0x134/0x1d0
[  250.025151][T10965]  ? __pfx____sys_sendmsg+0x10/0x10
[  250.025173][T10965]  ? find_held_lock+0x2b/0x80
[  250.025191][T10965]  __sys_sendmsg+0x16d/0x220
[  250.025207][T10965]  ? __pfx___sys_sendmsg+0x10/0x10
[  250.025227][T10965]  ? rcu_is_watching+0x12/0xc0
[  250.025240][T10965]  __do_fast_syscall_32+0x7c/0x3a0
[  250.025256][T10965]  do_fast_syscall_32+0x32/0x80
[  250.025272][T10965]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  250.025285][T10965] RIP: 0023:0xf7f38579
[  250.025293][T10965] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  250.025303][T10965] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  250.025313][T10965] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[  250.025319][T10965] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000
[  250.025325][T10965] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  250.025331][T10965] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  250.025337][T10965] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  250.025349][T10965]  </TASK>
[  250.346287][T10978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1376'.
[  250.522339][T10985] netlink: 'syz.1.1379': attribute type 1 has an invalid length.
[  250.543341][T10900] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.552825][T10985] (syz.1.1379,10985,2):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  250.556521][T10985] (syz.1.1379,10985,2):ocfs2_fill_super:1177 ERROR: status = -22
[  250.758749][T10900] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.778542][ T5943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  250.783374][ T5943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  250.788032][ T5943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  250.792227][ T5943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  250.794921][ T5943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  250.817035][T10992] lo speed is unknown, defaulting to 1000
[  250.843546][T10900] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.992293][T10900] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.092705][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1380'.
[  251.153834][T10992] chnl_net:caif_netlink_parms(): no params data found
[  251.189201][T10900] bridge_slave_1: left allmulticast mode
[  251.191858][T10900] bridge_slave_1: left promiscuous mode
[  251.195367][T10900] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.201691][T10900] bridge_slave_0: left allmulticast mode
[  251.205509][T10900] bridge_slave_0: left promiscuous mode
[  251.207353][T10900] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.467977][T11010] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1382'.
[  251.565088][T10900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  251.569540][T10900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  251.574916][T10900] bond0 (unregistering): Released all slaves
[  251.848553][T10992] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.850802][T10992] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.853417][T10992] bridge_slave_0: entered allmulticast mode
[  251.856042][T10992] bridge_slave_0: entered promiscuous mode
[  251.861592][T10992] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.864473][T10992] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.867163][T10992] bridge_slave_1: entered allmulticast mode
[  251.869922][T10992] bridge_slave_1: entered promiscuous mode
[  251.925987][T10992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.930385][T10992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  252.099313][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1386'.
[  252.128112][T10992] team0: Port device team_slave_0 added
[  252.165458][T10992] team0: Port device team_slave_1 added
[  252.253820][T10900] hsr_slave_0: left promiscuous mode
[  252.256560][T10900] hsr_slave_1: left promiscuous mode
[  252.259139][T10900] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  252.262390][T10900] batman_adv: batadv0: Removing interface: batadv_slave_0
[  252.265771][T10900] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  252.268729][T10900] batman_adv: batadv0: Removing interface: batadv_slave_1
[  252.305072][T10900] veth1_macvtap: left promiscuous mode
[  252.307386][T10900] veth0_macvtap: left promiscuous mode
[  252.309164][T10900] veth1_vlan: left promiscuous mode
[  252.312345][T10900] veth0_vlan: left promiscuous mode
[  252.822225][ T5947] Bluetooth: hci2: command tx timeout
[  253.128790][T10900] team0 (unregistering): Port device team_slave_1 removed
[  253.251563][T10900] team0 (unregistering): Port device team_slave_0 removed
[  253.825011][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1392'.
[  253.922493][T10992] batman_adv: batadv0: Adding interface: batadv_slave_0
[  253.925569][T10992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.936319][T10992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  253.950422][T10992] batman_adv: batadv0: Adding interface: batadv_slave_1
[  253.952718][T10992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.961022][T10992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  254.007000][T10992] hsr_slave_0: entered promiscuous mode
[  254.009248][T10992] hsr_slave_1: entered promiscuous mode
[  254.011376][T10992] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  254.014829][T10992] Cannot create hsr debugfs directory
[  254.041262][T11066] zonefs (nbd3) ERROR: Not a zoned block device
[  254.106624][T11070] FAULT_INJECTION: forcing a failure.
[  254.106624][T11070] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  254.110633][T11070] CPU: 3 UID: 0 PID: 11070 Comm: syz.3.1394 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) 
[  254.110647][T11070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  254.110654][T11070] Call Trace:
[  254.110658][T11070]  <TASK>
[  254.110662][T11070]  dump_stack_lvl+0x16c/0x1f0
[  254.110681][T11070]  should_fail_ex+0x512/0x640
[  254.110698][T11070]  _copy_from_user+0x2e/0xd0
[  254.110714][T11070]  kstrtouint_from_user+0xd6/0x1d0
[  254.110727][T11070]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  254.110738][T11070]  ? __lock_acquire+0xb8a/0x1c90
[  254.110758][T11070]  proc_fail_nth_write+0x83/0x250
[  254.110771][T11070]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  254.110787][T11070]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  254.110798][T11070]  vfs_write+0x29d/0x1150
[  254.110815][T11070]  ? __pfx_vfs_write+0x10/0x10
[  254.110828][T11070]  ? find_held_lock+0x2b/0x80
[  254.110841][T11070]  ? __fget_files+0x20e/0x3c0
[  254.110859][T11070]  ksys_write+0x12a/0x250
[  254.110873][T11070]  ? __pfx_ksys_write+0x10/0x10
[  254.110888][T11070]  ? rcu_is_watching+0x12/0xc0
[  254.110901][T11070]  __do_fast_syscall_32+0x7c/0x3a0
[  254.110918][T11070]  do_fast_syscall_32+0x32/0x80
[  254.110934][T11070]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  254.110947][T11070] RIP: 0023:0xf7f38579
[  254.110955][T11070] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  254.110964][T11070] RSP: 002b:00000000f5056590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004
[  254.110974][T11070] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5056620
[  254.110980][T11070] RDX: 0000000000000001 RSI: 00000000f73c3ff4 RDI: 0000000000000000
[  254.110986][T11070] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  254.110992][T11070] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  254.110997][T11070] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  254.111010][T11070]  </TASK>
[  254.242417][T11076] FAULT_INJECTION: forcing a failure.
[  254.242417][T11076] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  254.247715][T11076] CPU: 2 UID: 0 PID: 11076 Comm: syz.3.1395 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) 
[  254.247740][T11076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  254.247750][T11076] Call Trace:
[  254.247756][T11076]  <TASK>
[  254.247763][T11076]  dump_stack_lvl+0x16c/0x1f0
[  254.247793][T11076]  should_fail_ex+0x512/0x640
[  254.247821][T11076]  _copy_from_iter+0x29f/0x16f0
[  254.247849][T11076]  ? __alloc_skb+0x200/0x380
[  254.247874][T11076]  ? __pfx__copy_from_iter+0x10/0x10
[  254.247901][T11076]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  254.247927][T11076]  netlink_sendmsg+0x829/0xdd0
[  254.247948][T11076]  ? __pfx_netlink_sendmsg+0x10/0x10
[  254.247968][T11076]  ? __import_iovec+0x1dd/0x650
[  254.247998][T11076]  ____sys_sendmsg+0xa98/0xc70
[  254.248015][T11076]  ? __get_secs_required+0x610/0x1000
[  254.248039][T11076]  ? __pfx_____sys_sendmsg+0x10/0x10
[  254.248054][T11076]  ? get_compat_msghdr+0x11a/0x170
[  254.248078][T11076]  ___sys_sendmsg+0x134/0x1d0
[  254.248094][T11076]  ? __pfx____sys_sendmsg+0x10/0x10
[  254.248115][T11076]  ? find_held_lock+0x2b/0x80
[  254.248134][T11076]  __sys_sendmsg+0x16d/0x220
[  254.248149][T11076]  ? __pfx___sys_sendmsg+0x10/0x10
[  254.248170][T11076]  ? rcu_is_watching+0x12/0xc0
[  254.248182][T11076]  __do_fast_syscall_32+0x7c/0x3a0
[  254.248200][T11076]  do_fast_syscall_32+0x32/0x80
[  254.248215][T11076]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  254.248228][T11076] RIP: 0023:0xf7f38579
[  254.248237][T11076] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  254.248247][T11076] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  254.248257][T11076] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800005c0
[  254.248265][T11076] RDX: 00000000040c0080 RSI: 0000000000000000 RDI: 0000000000000000
[  254.248270][T11076] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  254.248276][T11076] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  254.248282][T11076] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  254.248294][T11076]  </TASK>
[  254.465165][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1397'.
[  254.738661][T11102] 
@ÿ: renamed from bond_slave_0
[  254.850259][T10992] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  254.861888][T10992] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  254.866358][T10992] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  254.870775][T10992] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  254.898494][ T5947] Bluetooth: hci2: command 0x041b tx timeout
[  254.934041][T10992] 8021q: adding VLAN 0 to HW filter on device bond0
[  254.963800][T10992] 8021q: adding VLAN 0 to HW filter on device team0
[  254.968749][T10900] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.970914][T10900] bridge0: port 1(bridge_slave_0) entered forwarding state
[  254.977470][T10900] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.979700][T10900] bridge0: port 2(bridge_slave_1) entered forwarding state
[  255.102036][T10992] 8021q: adding VLAN 0 to HW filter on device batadv0
[  255.129479][T10992] veth0_vlan: entered promiscuous mode
[  255.134022][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  255.136190][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  255.137193][T10992] veth1_vlan: entered promiscuous mode
[  255.158250][T10992] veth0_macvtap: entered promiscuous mode
[  255.164340][T10992] veth1_macvtap: entered promiscuous mode
[  255.173947][T10992] batman_adv: batadv0: Interface activated: batadv_slave_0
[  255.184550][T10992] batman_adv: batadv0: Interface activated: batadv_slave_1
[  255.194106][T10992] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  255.196817][T10992] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  255.200430][T10992] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  255.206307][T10992] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.285553][T10896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.288711][T10896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.319688][T10876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.323062][T10876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.816026][T11156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1405'.
[  256.398947][T11151] Process accounting resumed
[  256.498298][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'.
[  257.318117][T10897] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.570880][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  257.583022][ T5947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  257.590039][ T5947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  257.594818][ T5947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  257.598861][ T5947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  257.652689][T11175] lo speed is unknown, defaulting to 1000
[  257.811004][T11175] chnl_net:caif_netlink_parms(): no params data found
[  257.961406][T11175] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.982365][T11175] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.985000][T11175] bridge_slave_0: entered allmulticast mode
[  257.991194][T11175] bridge_slave_0: entered promiscuous mode
[  257.995644][T11175] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.997909][T11175] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.000146][T11175] bridge_slave_1: entered allmulticast mode
[  258.007817][T11175] bridge_slave_1: entered promiscuous mode
[  258.065591][T11175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  258.070020][T11175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.122923][T11196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1416'.
[  258.130357][T11175] team0: Port device team_slave_0 added
[  258.134245][T11175] team0: Port device team_slave_1 added
[  258.166006][T11175] batman_adv: batadv0: Adding interface: batadv_slave_0
[  258.168192][T11175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.176144][T11175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  258.180330][T11175] batman_adv: batadv0: Adding interface: batadv_slave_1
[  258.182700][T11175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.190653][T11175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  258.236372][T11175] hsr_slave_0: entered promiscuous mode
[  258.239232][T11175] hsr_slave_1: entered promiscuous mode
[  258.241633][T11175] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  258.244730][T11175] Cannot create hsr debugfs directory
[  258.902468][T11223] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1421'.
[  258.905209][T11223] FAULT_INJECTION: forcing a failure.
[  258.905209][T11223] name failslab, interval 1, probability 0, space 0, times 0
[  258.908965][T11223] CPU: 2 UID: 0 PID: 11223 Comm: syz.2.1421 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) 
[  258.908979][T11223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  258.908986][T11223] Call Trace:
[  258.908990][T11223]  <TASK>
[  258.908994][T11223]  dump_stack_lvl+0x16c/0x1f0
[  258.909013][T11223]  should_fail_ex+0x512/0x640
[  258.909031][T11223]  should_failslab+0xc2/0x120
[  258.909043][T11223]  __kmalloc_cache_noprof+0x6a/0x3e0
[  258.909056][T11223]  ? __pfx___might_resched+0x10/0x10
[  258.909067][T11223]  ? __hw_addr_add_ex+0x3c9/0x7c0
[  258.909082][T11223]  __hw_addr_add_ex+0x3c9/0x7c0
[  258.909096][T11223]  ? __pfx___hw_addr_add_ex+0x10/0x10
[  258.909107][T11223]  ? __mutex_unlock_slowpath+0x161/0x6a0
[  258.909126][T11223]  ? __pfx_ipgre_tunnel_setup+0x10/0x10
[  258.909141][T11223]  dev_addr_init+0x161/0x250
[  258.909154][T11223]  ? __pfx_dev_addr_init+0x10/0x10
[  258.909172][T11223]  alloc_netdev_mqs+0x3d2/0x1570
[  258.909191][T11223]  rtnl_create_link+0xc08/0xf90
[  258.909209][T11223]  rtnl_newlink+0xb69/0x2000
[  258.909232][T11223]  ? __pfx_rtnl_newlink+0x10/0x10
[  258.909247][T11223]  ? kasan_quarantine_put+0x10a/0x240
[  258.909261][T11223]  ? lockdep_hardirqs_on+0x7c/0x110
[  258.909278][T11223]  ? kfree_skbmem+0x1a4/0x1f0
[  258.909297][T11223]  ? rcu_is_watching+0x12/0xc0
[  258.909308][T11223]  ? trace_cap_capable+0x18d/0x200
[  258.909322][T11223]  ? find_held_lock+0x2b/0x80
[  258.909331][T11223]  ? __pfx_rtnl_newlink+0x10/0x10
[  258.909346][T11223]  ? __pfx_rtnl_newlink+0x10/0x10
[  258.909361][T11223]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  258.909370][T11223]  ? __pfx_rtnl_newlink+0x10/0x10
[  258.909386][T11223]  rtnetlink_rcv_msg+0x95b/0xe90
[  258.909397][T11223]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  258.909410][T11223]  ? ref_tracker_free+0x37c/0x830
[  258.909427][T11223]  netlink_rcv_skb+0x158/0x420
[  258.909439][T11223]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  258.909449][T11223]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  258.909465][T11223]  ? netlink_deliver_tap+0x1ae/0xd30
[  258.909478][T11223]  netlink_unicast+0x53d/0x7f0
[  258.909491][T11223]  ? __pfx_netlink_unicast+0x10/0x10
[  258.909506][T11223]  netlink_sendmsg+0x8d1/0xdd0
[  258.909519][T11223]  ? __pfx_netlink_sendmsg+0x10/0x10
[  258.909531][T11223]  ? __import_iovec+0x1dd/0x650
[  258.909550][T11223]  ____sys_sendmsg+0xa98/0xc70
[  258.909564][T11223]  ? __pfx_____sys_sendmsg+0x10/0x10
[  258.909574][T11223]  ? get_compat_msghdr+0x11a/0x170
[  258.909597][T11223]  ___sys_sendmsg+0x134/0x1d0
[  258.909612][T11223]  ? __pfx____sys_sendmsg+0x10/0x10
[  258.909634][T11223]  ? find_held_lock+0x2b/0x80
[  258.909653][T11223]  __sys_sendmsg+0x16d/0x220
[  258.909668][T11223]  ? __pfx___sys_sendmsg+0x10/0x10
[  258.909689][T11223]  ? rcu_is_watching+0x12/0xc0
[  258.909701][T11223]  __do_fast_syscall_32+0x7c/0x3a0
[  258.909718][T11223]  do_fast_syscall_32+0x32/0x80
[  258.909733][T11223]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  258.909746][T11223] RIP: 0023:0xf7f36579
[  258.909754][T11223] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  258.909764][T11223] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  258.909774][T11223] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280
[  258.909780][T11223] RDX: 0000000000048004 RSI: 0000000000000000 RDI: 0000000000000000
[  258.909785][T11223] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  258.909791][T11223] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  258.909797][T11223] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  258.909810][T11223]  </TASK>
[  259.044069][T10897] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.196810][T11227] smc: adding net device wg1 with user defined pnetid SYZ1
[  259.202634][   T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  259.209769][T10897] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.256157][T11236] program syz.3.1425 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  259.274560][T10897] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.307884][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1426'.
[  259.382780][T10897] bridge_slave_1: left allmulticast mode
[  259.384610][T10897] bridge_slave_1: left promiscuous mode
[  259.387458][T10897] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.394405][T10897] bridge_slave_0: left allmulticast mode
[  259.396589][T10897] bridge_slave_0: left promiscuous mode
[  259.398737][T10897] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.712686][ T5947] Bluetooth: hci2: command tx timeout
[  259.903536][T10897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  259.908311][T10897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  259.912464][T10897] bond0 (unregistering): Released all slaves
[  259.982359][T11245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1428'.
[  260.513566][T10897] hsr_slave_0: left promiscuous mode
[  260.515663][T10897] hsr_slave_1: left promiscuous mode
[  260.517633][T10897] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  260.519977][T10897] batman_adv: batadv0: Removing interface: batadv_slave_0
[  260.525240][T10897] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  260.527585][T10897] batman_adv: batadv0: Removing interface: batadv_slave_1
[  260.553594][T10897] veth1_macvtap: left promiscuous mode
[  260.555576][T10897] veth0_macvtap: left promiscuous mode
[  260.557272][T10897] veth1_vlan: left promiscuous mode
[  260.559047][T10897] veth0_vlan: left promiscuous mode
[  261.321363][T10897] team0 (unregistering): Port device team_slave_1 removed
[  261.364759][T11299] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1433'.
[  261.408180][T10897] team0 (unregistering): Port device team_slave_0 removed
[  261.772255][ T5947] Bluetooth: hci2: command 0x041b tx timeout
[  261.980303][T11276] syzkaller1: entered promiscuous mode
[  261.982006][T11276] syzkaller1: entered allmulticast mode
[  261.985910][T11297] FAULT_INJECTION: forcing a failure.
[  261.985910][T11297] name failslab, interval 1, probability 0, space 0, times 0
[  261.994377][T11297] CPU: 1 UID: 0 PID: 11297 Comm: syz.1.1432 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) 
[  261.994400][T11297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  261.994408][T11297] Call Trace:
[  261.994413][T11297]  <TASK>
[  261.994419][T11297]  dump_stack_lvl+0x16c/0x1f0
[  261.994453][T11297]  should_fail_ex+0x512/0x640
[  261.994473][T11297]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  261.994494][T11297]  should_failslab+0xc2/0x120
[  261.994507][T11297]  __kmalloc_cache_noprof+0x6a/0x3e0
[  261.994525][T11297]  ? ____ip_mc_inc_group+0x403/0x10f0
[  261.994544][T11297]  ____ip_mc_inc_group+0x403/0x10f0
[  261.994559][T11297]  ? __kmalloc_noprof+0x231/0x510
[  261.994578][T11297]  ? __pfx_____ip_mc_inc_group+0x10/0x10
[  261.994600][T11297]  __ip_mc_join_group+0x451/0x600
[  261.994634][T11297]  start_sync_thread+0x1850/0x28b0
[  261.994652][T11297]  ? __pfx_sync_thread_backup+0x10/0x10
[  261.994674][T11297]  ? __pfx_start_sync_thread+0x10/0x10
[  261.994694][T11297]  ? find_held_lock+0x2b/0x80
[  261.994708][T11297]  ? __might_fault+0xe3/0x190
[  261.994736][T11297]  ? do_ip_vs_set_ctl+0x451/0x11d0
[  261.994753][T11297]  do_ip_vs_set_ctl+0x451/0x11d0
[  261.994770][T11297]  ? __lock_acquire+0xb8a/0x1c90
[  261.994790][T11297]  ? __mutex_trylock_common+0x10/0x250
[  261.994808][T11297]  ? __pfx_do_ip_vs_set_ctl+0x10/0x10
[  261.994825][T11297]  ? __pfx___mutex_trylock_common+0x10/0x10
[  261.994845][T11297]  ? __pfx___might_resched+0x10/0x10
[  261.994865][T11297]  ? nf_sockopt_find.constprop.0+0x222/0x290
[  261.994884][T11297]  ? __mutex_unlock_slowpath+0x161/0x6a0
[  261.994924][T11297]  ? nf_setsockopt+0x8d/0xf0
[  261.994937][T11297]  nf_setsockopt+0x8d/0xf0
[  261.994953][T11297]  ip_setsockopt+0xcb/0xf0
[  261.994974][T11297]  sctp_setsockopt+0x16c/0xb870
[  261.994998][T11297]  ? __pfx_sctp_setsockopt+0x10/0x10
[  261.995016][T11297]  ? __pfx_aa_sk_perm+0x10/0x10
[  261.995037][T11297]  ? sock_common_setsockopt+0x2e/0xf0
[  261.995053][T11297]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  261.995069][T11297]  do_sock_setsockopt+0x221/0x470
[  261.995084][T11297]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  261.995112][T11297]  __sys_setsockopt+0x120/0x1a0
[  261.995137][T11297]  __ia32_sys_setsockopt+0xbc/0x160
[  261.995156][T11297]  ? lockdep_hardirqs_on+0x7c/0x110
[  261.995175][T11297]  ? syscall_enter_from_user_mode_prepare+0x68/0xe0
[  261.995197][T11297]  __do_fast_syscall_32+0x7c/0x3a0
[  261.995223][T11297]  do_fast_syscall_32+0x32/0x80
[  261.995244][T11297]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  261.995261][T11297] RIP: 0023:0xf7f51579
[  261.995272][T11297] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  261.995286][T11297] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e
[  261.995299][T11297] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000
[  261.995323][T11297] RDX: 000000000000048b RSI: 0000000080000000 RDI: 0000000000000018
[  261.995333][T11297] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  261.995341][T11297] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  261.995349][T11297] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  261.995369][T11297]  </TASK>
[  262.000212][T11305] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[  262.170905][T11304] sp0: Synchronizing with TNC
[  262.241630][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1436'.
[  262.333585][T11175] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  262.339352][T11314] netlink: 'syz.1.1437': attribute type 5 has an invalid length.
[  262.344190][T11175] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  262.363849][T11175] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  262.377974][T11175] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  262.423891][T11325] random: crng reseeded on system resumption
[  262.456493][T11175] 8021q: adding VLAN 0 to HW filter on device bond0
[  262.484568][T11175] 8021q: adding VLAN 0 to HW filter on device team0
[  262.500254][T10869] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.503238][T10869] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.520950][T10899] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.523483][T10899] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.687057][T11175] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.730335][T11175] veth0_vlan: entered promiscuous mode
[  262.756625][T11175] veth1_vlan: entered promiscuous mode
[  262.781014][T11302] [U] è
[  262.784858][T11175] veth0_macvtap: entered promiscuous mode
[  262.791430][T11175] veth1_macvtap: entered promiscuous mode
[  262.823508][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1439'.
[  262.856429][T11175] batman_adv: batadv0: Interface activated: batadv_slave_0
[  262.866552][T11175] batman_adv: batadv0: Interface activated: batadv_slave_1
[  262.878362][T11175] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  262.883451][T11175] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  262.888594][T11175] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  262.894762][T11175] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  262.987962][T10897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.990499][T10897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.015322][T10900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.018129][T10900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.155969][T11347] can: request_module (can-proto-3) failed.
[  263.213505][   T40] kauditd_printk_skb: 4 callbacks suppressed
[  263.213516][   T40] audit: type=1326 audit(2000000073.389:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11346 comm="syz.3.1440" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f38579 code=0x0
[  264.636769][ T5943] Bluetooth: hci1: unexpected event for opcode 0x080c
[  265.255289][T10876] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.900312][   T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  265.904276][   T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  265.909702][   T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  265.915383][   T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  265.920807][   T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  265.928648][T11375] ebtables: wrong size: *len 120, entries_size 144, replsz 144
[  265.970148][T11372] lo speed is unknown, defaulting to 1000
[  266.092781][T11372] chnl_net:caif_netlink_parms(): no params data found
[  266.146852][T11383] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1448'.
[  266.215658][T11372] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.217968][T11372] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.221114][T11372] bridge_slave_0: entered allmulticast mode
[  266.224900][T11372] bridge_slave_0: entered promiscuous mode
[  266.228392][T11372] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.230784][T11372] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.233506][T11372] bridge_slave_1: entered allmulticast mode
[  266.236240][T11372] bridge_slave_1: entered promiscuous mode
[  266.269004][T11372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  266.274433][T11372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  266.544838][T11395] ceph: No mds server is up or the cluster is laggy
[  266.573425][ T3232] libceph: connect (1)[c::]:6789 error -101
[  266.577994][ T3232] libceph: mon0 (1)[c::]:6789 connect error
[  266.599716][T11383] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1448'.
[  266.626700][T11372] team0: Port device team_slave_0 added
[  266.632286][T11372] team0: Port device team_slave_1 added
[  266.690128][T11372] batman_adv: batadv0: Adding interface: batadv_slave_0
[  266.692585][T11372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  266.700197][T11372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  266.705185][T11372] batman_adv: batadv0: Adding interface: batadv_slave_1
[  266.707432][T11372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  266.715555][T11372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  266.753213][T11372] hsr_slave_0: entered promiscuous mode
[  266.755511][T11372] hsr_slave_1: entered promiscuous mode
[  266.757548][T11372] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  266.759922][T11372] Cannot create hsr debugfs directory
[  266.992461][T10876] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.135063][T10876] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.303249][T10876] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.403166][T11418] tmpfs: Bad value for 'mpol'
[  267.461162][T10876] bridge_slave_1: left allmulticast mode
[  267.463878][T10876] bridge_slave_1: left promiscuous mode
[  267.465785][T10876] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.469610][T10876] bridge_slave_0: left allmulticast mode
[  267.471410][T10876] bridge_slave_0: left promiscuous mode
[  267.473510][T10876] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.771874][T10876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  267.778428][T10876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  267.783080][T10876] bond0 (unregistering): Released all slaves
[  268.012576][   T63] Bluetooth: hci2: command tx timeout
[  268.123538][T10876] hsr_slave_0: left promiscuous mode
[  268.126582][T10876] hsr_slave_1: left promiscuous mode
[  268.128410][T10876] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  268.130569][T10876] batman_adv: batadv0: Removing interface: batadv_slave_0
[  268.134865][T10876] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  268.137797][T10876] batman_adv: batadv0: Removing interface: batadv_slave_1
[  268.162254][T10876] veth1_macvtap: left promiscuous mode
[  268.163922][T10876] veth0_macvtap: left promiscuous mode
[  268.165736][T10876] veth1_vlan: left promiscuous mode
[  268.167282][T10876] veth0_vlan: left promiscuous mode
[  268.235098][T11450] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1459'.
[  268.282896][T11455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  268.285200][T11455] IPv6: NLM_F_CREATE should be set when creating new route
[  268.324850][T11459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1461'.
[  268.377179][T11462] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(17)
[  268.379941][T11462] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  268.382773][T11463] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14)
[  268.385536][T11463] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  268.389283][T11462] vhci_hcd vhci_hcd.0: Device attached
[  268.390738][T11463] vhci_hcd vhci_hcd.0: Device attached
[  268.393991][T11462] capability: warning: `syz.1.1462' uses deprecated v2 capabilities in a way that may be insecure
[  268.398814][T11462] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(16)
[  268.400943][T11462] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  268.403473][T11462] vhci_hcd vhci_hcd.0: Device attached
[  268.405669][T11462] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  268.409469][T11462] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(22)
[  268.411596][T11462] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  268.414872][T11462] vhci_hcd vhci_hcd.0: Device attached
[  268.422606][T11462] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(24)
[  268.425382][T11462] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  268.428628][T11462] vhci_hcd vhci_hcd.0: Device attached
[  268.432992][T11463] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(29)
[  268.435726][T11463] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  268.439361][T11463] vhci_hcd vhci_hcd.0: Device attached
[  268.439418][T11462] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(26)
[  268.444274][T11462] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  268.447784][T11462] vhci_hcd vhci_hcd.0: Device attached
[  268.449018][T11479] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  268.453321][T11463] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  268.459222][T11462] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  268.468100][T11476] vhci_hcd: connection closed
[  268.468245][T11475] vhci_hcd: connection closed
[  268.468934][T11466] vhci_hcd: connection closed
[  268.468948][T11464] vhci_hcd: connection closed
[  268.469169][T11473] vhci_hcd: connection closed
[  268.469876][T11471] vhci_hcd: connection closed
[  268.470236][T10869] vhci_hcd: stop threads
[  268.470250][T10869] vhci_hcd: release socket
[  268.470261][T10869] vhci_hcd: disconnect device
[  268.470407][T10869] vhci_hcd: stop threads
[  268.470413][T10869] vhci_hcd: release socket
[  268.470422][T10869] vhci_hcd: disconnect device
[  268.473784][T11469] vhci_hcd: connection closed
[  268.475525][T10869] vhci_hcd: stop threads
[  268.498035][T10869] vhci_hcd: release socket
[  268.500177][T10869] vhci_hcd: disconnect device
[  268.506385][T10869] vhci_hcd: stop threads
[  268.507783][T10869] vhci_hcd: release socket
[  268.509505][T10869] vhci_hcd: disconnect device
[  268.511717][T10869] vhci_hcd: stop threads
[  268.514437][T10869] vhci_hcd: release socket
[  268.516168][T10869] vhci_hcd: disconnect device
[  268.518316][T10869] vhci_hcd: stop threads
[  268.520092][T10869] vhci_hcd: release socket
[  268.522141][T10869] vhci_hcd: disconnect device
[  268.524657][T10869] vhci_hcd: stop threads
[  268.526448][T10869] vhci_hcd: release socket
[  268.528131][T10869] vhci_hcd: disconnect device
[  268.562272][ T6026] vhci_hcd: vhci_device speed not set
[  268.960428][T10876] team0 (unregistering): Port device team_slave_1 removed
[  269.100822][T10876] team0 (unregistering): Port device team_slave_0 removed
[  269.163666][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1464'.
[  269.719556][T11372] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  269.725841][T11372] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  269.731577][T11372] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  269.746243][T11372] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  269.840958][T11372] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.857105][T11372] 8021q: adding VLAN 0 to HW filter on device team0
[  269.866846][T10896] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.870045][T10896] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.889581][T10899] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.892133][T10899] bridge0: port 2(bridge_slave_1) entered forwarding state
[  270.095327][   T63] Bluetooth: hci2: command tx timeout
[  270.165753][T11372] 8021q: adding VLAN 0 to HW filter on device batadv0
[  270.208796][T11372] veth0_vlan: entered promiscuous mode
[  270.231346][T11372] veth1_vlan: entered promiscuous mode
[  270.253212][T11372] veth0_macvtap: entered promiscuous mode
[  270.259564][T11372] veth1_macvtap: entered promiscuous mode
[  270.271817][T11372] batman_adv: batadv0: Interface activated: batadv_slave_0
[  270.280771][T11372] batman_adv: batadv0: Interface activated: batadv_slave_1
[  270.287986][T11372] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  270.291914][T11372] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  270.295242][T11372] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  270.297959][T11372] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  270.353566][T10896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.356067][T10896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.406424][T10899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.409667][T10899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.335662][   T40] audit: type=1326 audit(2000000081.509:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11521 comm="syz.3.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000
[  271.344482][   T40] audit: type=1326 audit(2000000081.509:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11521 comm="syz.3.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000
[  271.353717][   T40] audit: type=1326 audit(2000000081.509:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11521 comm="syz.3.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f38579 code=0x7ffc0000
[  271.362698][   T40] audit: type=1326 audit(2000000081.509:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11521 comm="syz.3.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000
[  271.371287][   T40] audit: type=1326 audit(2000000081.509:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11521 comm="syz.3.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f38579 code=0x7ffc0000
[  271.371327][   T40] audit: type=1326 audit(2000000081.509:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11521 comm="syz.3.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000
[  271.371363][   T40] audit: type=1326 audit(2000000081.509:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11521 comm="syz.3.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f38579 code=0x7ffc0000
[  271.371406][   T40] audit: type=1326 audit(2000000081.509:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11521 comm="syz.3.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000
[  271.371439][   T40] audit: type=1326 audit(2000000081.509:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11521 comm="syz.3.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f38579 code=0x7ffc0000
[  271.410485][   T40] audit: type=1326 audit(2000000081.509:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11521 comm="syz.3.1473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000
[  271.959823][T11529] netlink: 'syz.2.1474': attribute type 1 has an invalid length.
[  271.963151][T11529] FAULT_INJECTION: forcing a failure.
[  271.963151][T11529] name failslab, interval 1, probability 0, space 0, times 0
[  271.967053][T11529] CPU: 2 UID: 0 PID: 11529 Comm: syz.2.1474 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) 
[  271.967068][T11529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  271.967075][T11529] Call Trace:
[  271.967078][T11529]  <TASK>
[  271.967082][T11529]  dump_stack_lvl+0x16c/0x1f0
[  271.967121][T11529]  should_fail_ex+0x512/0x640
[  271.967139][T11529]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  271.967157][T11529]  should_failslab+0xc2/0x120
[  271.967167][T11529]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  271.967182][T11529]  ? __alloc_skb+0x2b2/0x380
[  271.967200][T11529]  __alloc_skb+0x2b2/0x380
[  271.967213][T11529]  ? __pfx___alloc_skb+0x10/0x10
[  271.967227][T11529]  ? genl_rcv_msg+0x4d0/0x800
[  271.967239][T11529]  ? genl_rcv_msg+0x4bb/0x800
[  271.967255][T11529]  netlink_ack+0x15d/0xb80
[  271.967270][T11529]  netlink_rcv_skb+0x332/0x420
[  271.967280][T11529]  ? __pfx_genl_rcv_msg+0x10/0x10
[  271.967293][T11529]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  271.967310][T11529]  ? netlink_deliver_tap+0x1ae/0xd30
[  271.967322][T11529]  genl_rcv+0x28/0x40
[  271.967332][T11529]  netlink_unicast+0x53d/0x7f0
[  271.967344][T11529]  ? __pfx_netlink_unicast+0x10/0x10
[  271.967359][T11529]  netlink_sendmsg+0x8d1/0xdd0
[  271.967372][T11529]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.967396][T11529]  ? __import_iovec+0x1dd/0x650
[  271.967416][T11529]  ____sys_sendmsg+0xa98/0xc70
[  271.967427][T11529]  ? gfs2_dir_exhash_dealloc+0xd70/0xed0
[  271.967439][T11529]  ? __pfx_____sys_sendmsg+0x10/0x10
[  271.967450][T11529]  ? get_compat_msghdr+0x11a/0x170
[  271.967472][T11529]  ___sys_sendmsg+0x134/0x1d0
[  271.967488][T11529]  ? __pfx____sys_sendmsg+0x10/0x10
[  271.967510][T11529]  ? find_held_lock+0x2b/0x80
[  271.967530][T11529]  __sys_sendmsg+0x16d/0x220
[  271.967545][T11529]  ? __pfx___sys_sendmsg+0x10/0x10
[  271.967566][T11529]  ? rcu_is_watching+0x12/0xc0
[  271.967578][T11529]  __do_fast_syscall_32+0x7c/0x3a0
[  271.967596][T11529]  do_fast_syscall_32+0x32/0x80
[  271.967611][T11529]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  271.967625][T11529] RIP: 0023:0xf7f36579
[  271.967633][T11529] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  271.967644][T11529] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  271.967653][T11529] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000780
[  271.967660][T11529] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000
[  271.967666][T11529] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  271.967671][T11529] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  271.967677][T11529] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  271.967690][T11529]  </TASK>
[  272.058833][    C2] vkms_vblank_simulate: vblank timer overrun
[  272.083979][T11530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1475'.
[  272.396642][T10897] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.002534][T11547] ata1.00: invalid multi_count 1 ignored
[  273.099570][T11549] netlink: 'syz.2.1479': attribute type 12 has an invalid length.
[  273.101892][T11549] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1479'.
[  273.138125][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1480'.
[  273.172384][ T5943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  273.176254][ T5943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  273.178980][ T5943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  273.182208][ T5943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  273.184699][ T5943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  273.251992][T11552] lo speed is unknown, defaulting to 1000
[  273.252248][T11558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  273.460170][T11562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1479'.
[  273.467501][T11562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1479'.
[  273.661088][T11564] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1482'.
[  273.747096][T11552] chnl_net:caif_netlink_parms(): no params data found
[  273.981952][T11552] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.987772][T11552] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.993341][T11552] bridge_slave_0: entered allmulticast mode
[  273.996932][T11552] bridge_slave_0: entered promiscuous mode
[  274.001371][T11552] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.004862][T11552] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.007983][T11552] bridge_slave_1: entered allmulticast mode
[  274.011763][T11552] bridge_slave_1: entered promiscuous mode
[  274.260046][T11552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.275759][T11552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.376706][T11552] team0: Port device team_slave_0 added
[  274.380703][T11552] team0: Port device team_slave_1 added
[  274.417800][T11552] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.419986][T11552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.429813][T11552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.435899][T11552] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.438200][T11552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.447250][T11552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.578829][T11552] hsr_slave_0: entered promiscuous mode
[  274.581033][T11552] hsr_slave_1: entered promiscuous mode
[  274.583757][T11552] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  274.586265][T11552] Cannot create hsr debugfs directory
[  274.606046][T10897] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.691110][T10897] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.793946][T10897] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.991256][T10897] bridge_slave_1: left allmulticast mode
[  274.993642][T10897] bridge_slave_1: left promiscuous mode
[  274.996045][T10897] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.002806][T10897] bridge_slave_0: left allmulticast mode
[  275.005299][T10897] bridge_slave_0: left promiscuous mode
[  275.009008][T10897] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.213917][   T63] Bluetooth: hci2: command tx timeout
[  275.359925][T10897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  275.367520][T10897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  275.371491][T10897] bond0 (unregistering): Released all slaves
[  275.780153][T10897] hsr_slave_0: left promiscuous mode
[  275.785877][T10897] hsr_slave_1: left promiscuous mode
[  275.787916][T10897] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  275.790223][T10897] batman_adv: batadv0: Removing interface: batadv_slave_0
[  275.793068][T10897] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  275.795473][T10897] batman_adv: batadv0: Removing interface: batadv_slave_1
[  275.827261][T10897] veth1_macvtap: left promiscuous mode
[  275.829067][T10897] veth0_macvtap: left promiscuous mode
[  275.830868][T10897] veth1_vlan: left promiscuous mode
[  275.832687][T10897] veth0_vlan: left promiscuous mode
[  276.320637][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1489'.
[  276.399652][T11611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1487'.
[  276.577475][T10897] team0 (unregistering): Port device team_slave_1 removed
[  276.647890][T10897] team0 (unregistering): Port device team_slave_0 removed
[  276.950934][   T63] Bluetooth: hci1: unexpected event for opcode 0x200a
[  277.274581][T11626] netlink: 'syz.1.1492': attribute type 4 has an invalid length.
[  277.302319][   T63] Bluetooth: hci2: command tx timeout
[  277.420257][T11552] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  277.428569][T11552] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  277.433427][T11552] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  277.445404][T11552] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  277.499916][T11552] 8021q: adding VLAN 0 to HW filter on device bond0
[  277.508191][T11552] 8021q: adding VLAN 0 to HW filter on device team0
[  277.526040][T11552] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  277.529915][T11552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  277.544181][T10876] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.546422][T10876] bridge0: port 1(bridge_slave_0) entered forwarding state
[  277.553465][T10876] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.555603][T10876] bridge0: port 2(bridge_slave_1) entered forwarding state
[  277.633695][T11552] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.699566][T11672] FAULT_INJECTION: forcing a failure.
[  277.699566][T11672] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  277.699950][T11552] veth0_vlan: entered promiscuous mode
[  277.700415][T11672] 
[  277.700421][T11672] ======================================================
[  277.700425][T11672] WARNING: possible circular locking dependency detected
[  277.700429][T11672] 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 Not tainted
[  277.700436][T11672] ------------------------------------------------------
[  277.700439][T11672] syz.2.1495/11672 is trying to acquire lock:
[  277.700444][T11672] ffffffff8e4d1d60 (console_owner){-.-.}-{0:0}, at: vprintk_emit+0x4d4/0x6d0
[  277.700470][T11672] 
[  277.700470][T11672] but task is already holding lock:
[  277.700472][T11672] ffff88802b23a418 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  277.700492][T11672] 
[  277.700492][T11672] which lock already depends on the new lock.
[  277.700492][T11672] 
[  277.700495][T11672] 
[  277.700495][T11672] the existing dependency chain (in reverse order) is:
[  277.700498][T11672] 
[  277.700498][T11672] -> #4 (&rq->__lock){-.-.}-{2:2}:
[  277.700510][T11672]        _raw_spin_lock_nested+0x31/0x40
[  277.700523][T11672]        raw_spin_rq_lock_nested+0x29/0x130
[  277.700532][T11672]        task_rq_lock+0xcf/0x490
[  277.700540][T11672]        cgroup_move_task+0x81/0x2a0
[  277.700551][T11672]        css_set_move_task+0x288/0x5f0
[  277.700562][T11672]        cgroup_post_fork+0x201/0x9e0
[  277.700570][T11672]        copy_process+0x5cfc/0x76a0
[  277.700581][T11672]        kernel_clone+0xfc/0x960
[  277.700591][T11672]        user_mode_thread+0xc7/0x110
[  277.700602][T11672]        rest_init+0x23/0x2b0
[  277.700612][T11672]        start_kernel+0x3ee/0x4d0
[  277.700633][T11672]        x86_64_start_reservations+0x18/0x30
[  277.700644][T11672]        x86_64_start_kernel+0x130/0x190
[  277.700654][T11672]        common_startup_64+0x13e/0x148
[  277.700669][T11672] 
[  277.700669][T11672] -> #3 (&p->pi_lock){-.-.}-{2:2}:
[  277.700681][T11672]        _raw_spin_lock_irqsave+0x3a/0x60
[  277.700693][T11672]        try_to_wake_up+0xb2/0x1680
[  277.700702][T11672]        __wake_up_common+0x135/0x1f0
[  277.700713][T11672]        __wake_up+0x31/0x60
[  277.700723][T11672]        tty_port_default_wakeup+0x2a/0x40
[  277.700732][T11672]        serial8250_tx_chars+0x68e/0x860
[  277.700741][T11672]        serial8250_handle_irq+0x761/0xcb0
[  277.700751][T11672]        serial8250_default_handle_irq+0x9a/0x210
[  277.700761][T11672]        serial8250_interrupt+0x106/0x210
[  277.700772][T11672]        __handle_irq_event_percpu+0x229/0x7d0
[  277.700782][T11672]        handle_irq_event+0xab/0x1e0
[  277.700789][T11672]        handle_edge_irq+0x28e/0xab0
[  277.700804][T11672]        __common_interrupt+0xdf/0x250
[  277.700814][T11672]        common_interrupt+0xba/0xe0
[  277.700824][T11672]        asm_common_interrupt+0x26/0x40
[  277.700833][T11672]        pv_native_safe_halt+0xf/0x20
[  277.700845][T11672]        default_idle+0x13/0x20
[  277.700853][T11672]        default_idle_call+0x6d/0xb0
[  277.700862][T11672]        do_idle+0x391/0x510
[  277.700870][T11672]        cpu_startup_entry+0x4f/0x60
[  277.700878][T11672]        start_secondary+0x21d/0x2b0
[  277.700889][T11672]        common_startup_64+0x13e/0x148
[  277.700903][T11672] 
[  277.700903][T11672] -> #2 (&tty->write_wait){-...}-{3:3}:
[  277.700915][T11672]        _raw_spin_lock_irqsave+0x3a/0x60
[  277.700927][T11672]        __wake_up+0x1c/0x60
[  277.700936][T11672]        tty_port_default_wakeup+0x2a/0x40
[  277.700944][T11672]        serial8250_tx_chars+0x68e/0x860
[  277.700953][T11672]        serial8250_handle_irq+0x761/0xcb0
[  277.700962][T11672]        serial8250_default_handle_irq+0x9a/0x210
[  277.700972][T11672]        serial8250_interrupt+0x106/0x210
[  277.700982][T11672]        __handle_irq_event_percpu+0x229/0x7d0
[  277.700990][T11672]        handle_irq_event+0xab/0x1e0
[  277.700998][T11672]        handle_edge_irq+0x28e/0xab0
[  277.701011][T11672]        __common_interrupt+0xdf/0x250
[  277.701021][T11672]        common_interrupt+0xba/0xe0
[  277.701031][T11672]        asm_common_interrupt+0x26/0x40
[  277.701039][T11672]        _raw_spin_unlock_irqrestore+0x31/0x80
[  277.701052][T11672]        uart_write+0x2a4/0xb30
[  277.701065][T11672]        n_tty_write+0x412/0x1160
[  277.701074][T11672]        file_tty_write.constprop.0+0x501/0x9b0
[  277.701088][T11672]        redirected_tty_write+0xd4/0x150
[  277.701102][T11672]        vfs_write+0x6c7/0x1150
[  277.701115][T11672]        ksys_write+0x12a/0x250
[  277.701127][T11672]        do_syscall_64+0xcd/0x490
[  277.701140][T11672]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.701149][T11672] 
[  277.701149][T11672] -> #1 (&port_lock_key){-.-.}-{3:3}:
[  277.701161][T11672]        _raw_spin_lock_irqsave+0x3a/0x60
[  277.701172][T11672]        serial8250_console_write+0x181/0x1890
[  277.701183][T11672]        console_flush_all+0x801/0xc60
[  277.701190][T11672]        console_unlock+0xd8/0x210
[  277.701198][T11672]        vprintk_emit+0x418/0x6d0
[  277.701206][T11672]        _printk+0xc7/0x100
[  277.701217][T11672]        register_console+0xc2d/0x11b0
[  277.701225][T11672]        univ8250_console_init+0x5f/0x90
[  277.701236][T11672]        console_init+0x14f/0x680
[  277.701246][T11672]        start_kernel+0x29f/0x4d0
[  277.701256][T11672]        x86_64_start_reservations+0x18/0x30
[  277.701266][T11672]        x86_64_start_kernel+0x130/0x190
[  277.701276][T11672]        common_startup_64+0x13e/0x148
[  277.701290][T11672] 
[  277.701290][T11672] -> #0 (console_owner){-.-.}-{0:0}:
[  277.701301][T11672]        __lock_acquire+0x126f/0x1c90
[  277.701313][T11672]        lock_acquire+0x179/0x350
[  277.701323][T11672]        vprintk_emit+0x4e5/0x6d0
[  277.701332][T11672]        _printk+0xc7/0x100
[  277.701343][T11672]        should_fail_ex+0x4e7/0x640
[  277.701356][T11672]        strncpy_from_user+0x3b/0x2e0
[  277.701367][T11672]        strncpy_from_user_nofault+0x7f/0x180
[  277.701376][T11672]        bpf_probe_read_compat_str+0xe8/0x180
[  277.701388][T11672]        bpf_prog_c1796171ffc7efef+0x3e/0x44
[  277.701396][T11672]        bpf_trace_run4+0x249/0x5a0
[  277.701412][T11672]        __bpf_trace_sched_switch+0x145/0x190
[  277.701427][T11672]        __traceiter_sched_switch+0x6f/0xc0
[  277.701440][T11672]        __schedule+0x1bee/0x5de0
[  277.701452][T11672]        preempt_schedule_irq+0x51/0x90
[  277.701464][T11672]        irqentry_exit+0x36/0x90
[  277.701477][T11672]        asm_sysvec_reschedule_ipi+0x1a/0x20
[  277.701487][T11672]        fib_lookup_good_nhc+0xb3/0x3f0
[  277.701496][T11672]        fib_table_lookup+0xd03/0x2300
[  277.701504][T11672]        __ip_dev_find+0x341/0x5b0
[  277.701514][T11672]        ip_route_output_key_hash_rcu+0x127e/0x28f0
[  277.701528][T11672]        ip_route_output_key_hash+0x137/0x2e0
[  277.701541][T11672]        ip_route_output_flow+0x27/0x150
[  277.701554][T11672]        udp_sendmsg+0x1bdd/0x29f0
[  277.701563][T11672]        inet_sendmsg+0x105/0x140
[  277.701575][T11672]        ____sys_sendmsg+0x973/0xc70
[  277.701586][T11672]        ___sys_sendmsg+0x134/0x1d0
[  277.701598][T11672]        __sys_sendmmsg+0x2f9/0x420
[  277.701611][T11672]        __ia32_compat_sys_sendmmsg+0x9d/0x100
[  277.701621][T11672]        __do_fast_syscall_32+0x7c/0x3a0
[  277.701635][T11672]        do_fast_syscall_32+0x32/0x80
[  277.701648][T11672]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  277.701660][T11672] 
[  277.701660][T11672] other info that might help us debug this:
[  277.701660][T11672] 
[  277.701663][T11672] Chain exists of:
[  277.701663][T11672]   console_owner --> &p->pi_lock --> &rq->__lock
[  277.701663][T11672] 
[  277.701676][T11672]  Possible unsafe locking scenario:
[  277.701676][T11672] 
[  277.701679][T11672]        CPU0                    CPU1
[  277.701681][T11672]        ----                    ----
[  277.701684][T11672]   lock(&rq->__lock);
[  277.701689][T11672]                                lock(&p->pi_lock);
[  277.701696][T11672]                                lock(&rq->__lock);
[  277.701702][T11672]   lock(console_owner);
[  277.701708][T11672] 
[  277.701708][T11672]  *** DEADLOCK ***
[  277.701708][T11672] 
[  277.701710][T11672] 4 locks held by syz.2.1495/11672:
[  277.701715][T11672]  #0: ffffffff8e5c47c0 (rcu_read_lock){....}-{1:3}, at: ip_route_output_key_hash+0xf5/0x2e0
[  277.701740][T11672]  #1: ffffffff8e5c47c0 (rcu_read_lock){....}-{1:3}, at: __ip_dev_find+0xa3/0x5b0
[  277.701762][T11672]  #2: ffff88802b23a418 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  277.701782][T11672]  #3: ffffffff8e5c47c0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1cf/0x5a0
[  277.701806][T11672] 
[  277.701806][T11672] stack backtrace:
[  277.701811][T11672] CPU: 1 UID: 0 PID: 11672 Comm: syz.2.1495 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) 
[  277.701823][T11672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  277.701830][T11672] Call Trace:
[  277.701833][T11672]  <TASK>
[  277.701837][T11672]  dump_stack_lvl+0x116/0x1f0
[  277.701851][T11672]  print_circular_bug+0x275/0x350
[  277.701863][T11672]  check_noncircular+0x14c/0x170
[  277.701899][T11672]  __lock_acquire+0x126f/0x1c90
[  277.701914][T11672]  lock_acquire+0x179/0x350
[  277.701925][T11672]  ? vprintk_emit+0x4d4/0x6d0
[  277.701935][T11672]  ? vprintk_emit+0x4c2/0x6d0
[  277.701944][T11672]  vprintk_emit+0x4e5/0x6d0
[  277.701953][T11672]  ? vprintk_emit+0x4d4/0x6d0
[  277.701962][T11672]  ? __pfx_vprintk_emit+0x10/0x10
[  277.701974][T11672]  _printk+0xc7/0x100
[  277.701985][T11672]  ? __pfx__printk+0x10/0x10
[  277.701999][T11672]  ? __pfx____ratelimit+0x10/0x10
[  277.702013][T11672]  should_fail_ex+0x4e7/0x640
[  277.702027][T11672]  strncpy_from_user+0x3b/0x2e0
[  277.702040][T11672]  strncpy_from_user_nofault+0x7f/0x180
[  277.702049][T11672]  bpf_probe_read_compat_str+0xe8/0x180
[  277.702062][T11672]  bpf_prog_c1796171ffc7efef+0x3e/0x44
[  277.702070][T11672]  bpf_trace_run4+0x249/0x5a0
[  277.702083][T11672]  ? __pfx_bpf_trace_run4+0x10/0x10
[  277.702096][T11672]  ? __lock_acquire+0xb8a/0x1c90
[  277.702108][T11672]  ? __lock_acquire+0xb8a/0x1c90
[  277.702121][T11672]  __bpf_trace_sched_switch+0x145/0x190
[  277.702136][T11672]  ? __pfx___bpf_trace_sched_switch+0x10/0x10
[  277.702151][T11672]  ? dl_scaled_delta_exec+0xdb/0x2e0
[  277.702165][T11672]  ? plist_check_prev_next+0x12a/0x1a0
[  277.702177][T11672]  ? tracing_record_taskinfo_sched_switch+0x54/0x400
[  277.702193][T11672]  __traceiter_sched_switch+0x6f/0xc0
[  277.702207][T11672]  ? set_next_task_rt+0x2eb/0x6a0
[  277.702218][T11672]  __schedule+0x1bee/0x5de0
[  277.702231][T11672]  ? strncpy_from_user+0x1d2/0x2e0
[  277.702246][T11672]  ? __pfx___schedule+0x10/0x10
[  277.702258][T11672]  ? bpf_trace_run4+0x2be/0x5a0
[  277.702274][T11672]  preempt_schedule_irq+0x51/0x90
[  277.702287][T11672]  irqentry_exit+0x36/0x90
[  277.702301][T11672]  asm_sysvec_reschedule_ipi+0x1a/0x20
[  277.702311][T11672] RIP: 0010:fib_lookup_good_nhc+0xb3/0x3f0
[  277.702321][T11672] Code: 03 80 3c 02 00 0f 85 1e 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 2b 48 8d bd 18 04 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 ef 02 00 00 4c 8b bd 18 04 00 00 e8 8b 84 7c 01 31 ff 89 c5
[  277.702331][T11672] RSP: 0018:ffffc90004347320 EFLAGS: 00000246
[  277.702339][T11672] RAX: dffffc0000000000 RBX: ffff88805026da80 RCX: ffffffff8a006c67
[  277.702345][T11672] RDX: 1ffff1100a23c883 RSI: ffffffff8a006c89 RDI: ffff8880511e4418
[  277.702351][T11672] RBP: ffff8880511e4000 R08: 0000000000000001 R09: 0000000000000000
[  277.702357][T11672] R10: 0000000000000000 R11: 0000000000000001 R12: ffffc900043474c0
[  277.702363][T11672] R13: ffff88805026da97 R14: 0000000000000001 R15: 0000000000000000
[  277.702371][T11672]  ? fib_lookup_good_nhc+0x57/0x3f0
[  277.702380][T11672]  ? fib_lookup_good_nhc+0x79/0x3f0
[  277.702391][T11672]  fib_table_lookup+0xd03/0x2300
[  277.702408][T11672]  __ip_dev_find+0x341/0x5b0
[  277.702419][T11672]  ? __pfx___ip_dev_find+0x10/0x10
[  277.702430][T11672]  ? __lock_acquire+0x622/0x1c90
[  277.702445][T11672]  ip_route_output_key_hash_rcu+0x127e/0x28f0
[  277.702461][T11672]  ip_route_output_key_hash+0x137/0x2e0
[  277.702475][T11672]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  277.702491][T11672]  ? find_held_lock+0x2b/0x80
[  277.702500][T11672]  ip_route_output_flow+0x27/0x150
[  277.702514][T11672]  udp_sendmsg+0x1bdd/0x29f0
[  277.702525][T11672]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  277.702537][T11672]  ? __pfx_udp_sendmsg+0x10/0x10
[  277.702547][T11672]  ? kernelmode_fixup_or_oops.constprop.0+0x77/0xe0
[  277.702564][T11672]  ? __pfx___might_resched+0x10/0x10
[  277.702573][T11672]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  277.702588][T11672]  ? aa_sk_perm+0x2f4/0xb10
[  277.702601][T11672]  ? __import_iovec+0x1dd/0x650
[  277.702615][T11672]  ? __pfx_udp_sendmsg+0x10/0x10
[  277.702625][T11672]  inet_sendmsg+0x105/0x140
[  277.702638][T11672]  ____sys_sendmsg+0x973/0xc70
[  277.702649][T11672]  ? __pfx_____sys_sendmsg+0x10/0x10
[  277.702660][T11672]  ? get_compat_msghdr+0x11a/0x170
[  277.702677][T11672]  ___sys_sendmsg+0x134/0x1d0
[  277.702691][T11672]  ? __pfx____sys_sendmsg+0x10/0x10
[  277.702705][T11672]  ? __lock_acquire+0x622/0x1c90
[  277.702723][T11672]  __sys_sendmmsg+0x2f9/0x420
[  277.702738][T11672]  ? __pfx___sys_sendmmsg+0x10/0x10
[  277.702759][T11672]  __ia32_compat_sys_sendmmsg+0x9d/0x100
[  277.702769][T11672]  ? syscall_enter_from_user_mode_prepare+0x68/0xe0
[  277.702784][T11672]  __do_fast_syscall_32+0x7c/0x3a0
[  277.702800][T11672]  do_fast_syscall_32+0x32/0x80
[  277.702815][T11672]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  277.702826][T11672] RIP: 0023:0xf7f36579
[  277.702833][T11672] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  277.702842][T11672] RSP: 002b:00000000f501455c EFLAGS: 00000296 ORIG_RAX: 0000000000000159
[  277.702851][T11672] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080007fc0
[  277.702857][T11672] RDX: 000000000800001d RSI: 0000000000000300 RDI: 0000000000000000
[  277.702863][T11672] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  277.702868][T11672] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  277.702874][T11672] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  277.702882][T11672]  </TASK>
[  278.117573][T11672] CPU: 1 UID: 0 PID: 11672 Comm: syz.2.1495 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) 
[  278.117588][T11672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  278.117596][T11672] Call Trace:
[  278.117601][T11672]  <TASK>
[  278.117607][T11672]  dump_stack_lvl+0x116/0x1f0
[  278.117627][T11672]  should_fail_ex+0x512/0x640
[  278.117643][T11672]  strncpy_from_user+0x3b/0x2e0
[  278.117657][T11672]  strncpy_from_user_nofault+0x7f/0x180
[  278.117668][T11672]  bpf_probe_read_compat_str+0xe8/0x180
[  278.117683][T11672]  bpf_prog_c1796171ffc7efef+0x3e/0x44
[  278.117692][T11672]  bpf_trace_run4+0x249/0x5a0
[  278.117706][T11672]  ? __pfx_bpf_trace_run4+0x10/0x10
[  278.117719][T11672]  ? __lock_acquire+0xb8a/0x1c90
[  278.117733][T11672]  ? __lock_acquire+0xb8a/0x1c90
[  278.117746][T11672]  __bpf_trace_sched_switch+0x145/0x190
[  278.117762][T11672]  ? __pfx___bpf_trace_sched_switch+0x10/0x10
[  278.117778][T11672]  ? dl_scaled_delta_exec+0xdb/0x2e0
[  278.117792][T11672]  ? plist_check_prev_next+0x12a/0x1a0
[  278.117804][T11672]  ? tracing_record_taskinfo_sched_switch+0x54/0x400
[  278.117820][T11672]  __traceiter_sched_switch+0x6f/0xc0
[  278.117835][T11672]  ? set_next_task_rt+0x2eb/0x6a0
[  278.117846][T11672]  __schedule+0x1bee/0x5de0
[  278.117860][T11672]  ? strncpy_from_user+0x1d2/0x2e0
[  278.117890][T11672]  ? __pfx___schedule+0x10/0x10
[  278.117903][T11672]  ? bpf_trace_run4+0x2be/0x5a0
[  278.117919][T11672]  preempt_schedule_irq+0x51/0x90
[  278.117933][T11672]  irqentry_exit+0x36/0x90
[  278.117947][T11672]  asm_sysvec_reschedule_ipi+0x1a/0x20
[  278.117958][T11672] RIP: 0010:fib_lookup_good_nhc+0xb3/0x3f0
[  278.117969][T11672] Code: 03 80 3c 02 00 0f 85 1e 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 2b 48 8d bd 18 04 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 ef 02 00 00 4c 8b bd 18 04 00 00 e8 8b 84 7c 01 31 ff 89 c5
[  278.117979][T11672] RSP: 0018:ffffc90004347320 EFLAGS: 00000246
[  278.117988][T11672] RAX: dffffc0000000000 RBX: ffff88805026da80 RCX: ffffffff8a006c67
[  278.117995][T11672] RDX: 1ffff1100a23c883 RSI: ffffffff8a006c89 RDI: ffff8880511e4418
[  278.118001][T11672] RBP: ffff8880511e4000 R08: 0000000000000001 R09: 0000000000000000
[  278.118007][T11672] R10: 0000000000000000 R11: 0000000000000001 R12: ffffc900043474c0
[  278.118012][T11672] R13: ffff88805026da97 R14: 0000000000000001 R15: 0000000000000000
[  278.118020][T11672]  ? fib_lookup_good_nhc+0x57/0x3f0
[  278.118029][T11672]  ? fib_lookup_good_nhc+0x79/0x3f0
[  278.118040][T11672]  fib_table_lookup+0xd03/0x2300
[  278.118056][T11672]  __ip_dev_find+0x341/0x5b0
[  278.118067][T11672]  ? __pfx___ip_dev_find+0x10/0x10
[  278.118079][T11672]  ? __lock_acquire+0x622/0x1c90
[  278.118093][T11672]  ip_route_output_key_hash_rcu+0x127e/0x28f0
[  278.118111][T11672]  ip_route_output_key_hash+0x137/0x2e0
[  278.118126][T11672]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  278.118142][T11672]  ? find_held_lock+0x2b/0x80
[  278.118152][T11672]  ip_route_output_flow+0x27/0x150
[  278.118167][T11672]  udp_sendmsg+0x1bdd/0x29f0
[  278.118178][T11672]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  278.118190][T11672]  ? __pfx_udp_sendmsg+0x10/0x10
[  278.118200][T11672]  ? kernelmode_fixup_or_oops.constprop.0+0x77/0xe0
[  278.118218][T11672]  ? __pfx___might_resched+0x10/0x10
[  278.118227][T11672]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  278.118243][T11672]  ? aa_sk_perm+0x2f4/0xb10
[  278.118256][T11672]  ? __import_iovec+0x1dd/0x650
[  278.118271][T11672]  ? __pfx_udp_sendmsg+0x10/0x10
[  278.118282][T11672]  inet_sendmsg+0x105/0x140
[  278.118295][T11672]  ____sys_sendmsg+0x973/0xc70
[  278.118309][T11672]  ? __pfx_____sys_sendmsg+0x10/0x10
[  278.118320][T11672]  ? get_compat_msghdr+0x11a/0x170
[  278.118338][T11672]  ___sys_sendmsg+0x134/0x1d0
[  278.118353][T11672]  ? __pfx____sys_sendmsg+0x10/0x10
[  278.118367][T11672]  ? __lock_acquire+0x622/0x1c90
[  278.118386][T11672]  __sys_sendmmsg+0x2f9/0x420
[  278.118401][T11672]  ? __pfx___sys_sendmmsg+0x10/0x10
[  278.118422][T11672]  __ia32_compat_sys_sendmmsg+0x9d/0x100
[  278.118432][T11672]  ? syscall_enter_from_user_mode_prepare+0x68/0xe0
[  278.118447][T11672]  __do_fast_syscall_32+0x7c/0x3a0
[  278.118463][T11672]  do_fast_syscall_32+0x32/0x80
[  278.118478][T11672]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  278.118490][T11672] RIP: 0023:0xf7f36579
[  278.118498][T11672] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  278.118507][T11672] RSP: 002b:00000000f501455c EFLAGS: 00000296 ORIG_RAX: 0000000000000159
[  278.118516][T11672] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080007fc0
[  278.118522][T11672] RDX: 000000000800001d RSI: 0000000000000300 RDI: 0000000000000000
[  278.118528][T11672] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  278.118534][T11672] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  278.118539][T11672] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  278.118548][T11672]  </TASK>
[  278.162993][T11552] veth1_vlan: entered promiscuous mode
[  278.288819][T11552] veth0_macvtap: entered promiscuous mode
[  278.293523][T11552] veth1_macvtap: entered promiscuous mode
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  278.351890][T11552] batman_adv: batadv0: Interface activated: batadv_slave_0
[  278.582623][T10900] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.728724][T10900] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.830108][T10900] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.900744][T10900] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.061026][T10900] team0: Port device geneve0 removed
[  279.402282][T10900] bond0 (unregistering): Released all slaves
[  281.103612][T10900] tipc: Disabling bearer <udp:syz2>
[  281.105872][T10900] tipc: Left network mode
[  281.292676][T10900] hsr_slave_0: left promiscuous mode
[  281.294793][T10900] hsr_slave_1: left promiscuous mode
[  282.787484][T10900] IPVS: stop unused estimator thread 0...
[  283.074613][T10900] bridge_slave_1: left allmulticast mode
[  283.076420][T10900] bridge_slave_1: left promiscuous mode
[  283.078212][T10900] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.081166][T10900] bridge_slave_0: left allmulticast mode
[  283.083186][T10900] bridge_slave_0: left promiscuous mode
[  283.085018][T10900] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.185635][T10900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  283.189240][T10900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  283.192635][T10900] bond0 (unregistering): Released all slaves
[  283.309049][T10900] hsr_slave_0: left promiscuous mode
[  283.311150][T10900] hsr_slave_1: left promiscuous mode
[  283.313227][T10900] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  283.315806][T10900] batman_adv: batadv0: Removing interface: batadv_slave_0
[  283.318413][T10900] batman_adv: batadv0: Removing interface: batadv_slave_1
[  283.324252][T10900] veth1_macvtap: left promiscuous mode
[  283.326030][T10900] veth0_macvtap: left promiscuous mode
[  283.328153][T10900] veth1_vlan: left promiscuous mode
[  283.329930][T10900] veth0_vlan: left promiscuous mode
[  283.481076][T10900] team0 (unregistering): Port device team_slave_1 removed
[  283.515977][T10900] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
23:59:26  Registers:
info registers vcpu 0

CPU#0
RAX=0000000080010002 RBX=0000000000000003 RCX=ffffffff8169e256 RDX=ffff8880275a8000
RSI=ffffffff816a12ac RDI=0000000000000000 RBP=ffff88802b23a400 RSP=ffffc90000007b18
R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=ffffc90000007ff8
R12=0000000000000003 R13=0000000000000003 R14=ffff88802b23b380 R15=ffffed1005647480
RIP=ffffffff816a12ad RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88809755f000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000000000000 CR3=0000000066825000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85587435 RDI=ffffffff9b06da00 RBP=ffffffff9b06d9c0 RSP=ffffc900043468f8
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d
R12=0000000000000000 R13=0000000000000032 R14=ffffffff9b06d9c0 R15=ffffffff855873d0
RIP=ffffffff8558745f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88809765f000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000000000000 CR3=0000000066825000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=ffff88802b23a400 RCX=ffffffff8b7faae6 RDX=0000000000000000
RSI=0000000000000004 RDI=ffff88802b23a400 RBP=0000000000000003 RSP=ffffc9000653f988
R8 =0000000000000000 R9 =ffffed1005647480 R10=ffff88802b23a403 R11=0000000000000001
R12=ffffed1005647480 R13=0000000000000000 R14=ffff88802b43b380 R15=0000000000000002
RIP=ffffffff82216870 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88809775f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000000000000 CR3=0000000077806000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 000000ff00000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000001 RBX=0000000000000001 RCX=ffffc900042a0000 RDX=ffffc9000429f601
RSI=ffffc9000429f608 RDI=ffffc9000429f638 RBP=ffffc9000429f608 RSP=ffffc9000429f558
R8 =0000000000000001 R9 =0000000000000000 R10=ffffc9000429f638 R11=0000000000006aad
R12=ffffc9000429f688 R13=ffffc9000429f648 R14=ffffc9000429f640 R15=ffffc90004298000
RIP=ffffffff816a8639 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88809785f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fa5f8ce1e9c CR3=0000000060406000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000020000000 Opmask01=0000000000000080 Opmask02=00000000fff7ffdf Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa5f90518f0 00007fa5f9051310
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa5f9012050 00007fa5f90110c0
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa5f9012580 00007fa5f9011b20
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa5f8d140c0 00007fa5f9012ab0
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa5f9050da0 00007fa5f90115f0
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa5f8d146b0 00007fa5f8d140c0
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa5f9012ab0 00007fa5f9012580
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa5f9011b20 00007fa5f9012050
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6f7365722f6574 6174732d6b6f6f68 2f6463706368642f 6e75722f7261762f
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6669006b6e696c2e 326874652e666e6f 632e766c6f736572 2f65746174732d6b
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000