last executing test programs:

4m42.912900542s ago: executing program 3 (id=41):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a010400000013000000000200000018000480140001800b00010064796e736574000004000280140000001100010000000000000000000000000a"], 0x54}}, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400)
ioctl$TUNSETOFFLOAD(r0, 0x80047441, 0x20000000)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000002c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x1})
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0))
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x24, 0x9, 0x5})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x2, 0x861, 0x3})
r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000240)={r5})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3})

4m42.316136178s ago: executing program 3 (id=45):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, 0x0, '\x00', 0x0})
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r3 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r3, 0x400455c8, 0x2)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', <r5=>0x0, 0x5c, 0x4, 0x9, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x44}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x10, 0x2, 0x4}})
r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={0xffffffffffffffff}, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
fcntl$lock(r7, 0x25, &(0x7f0000000140))
fcntl$lock(r7, 0x24, &(0x7f00000000c0)={0x2})
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=0x1, @ANYBLOB="1d11009704faea000000000000008d1a59d10000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000400"/28], 0x50)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4018}, 0x14)
r10 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fchdir(r10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x15, &(0x7f0000000780)=@raw=[@call={0x85, 0x0, 0x0, 0x40}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @printk={@lld}], &(0x7f0000000540)='syzkaller\x00', 0x7, 0xe5, &(0x7f0000000180)=""/229, 0x40f00, 0x5, '\x00', r5, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r6, 0x1, &(0x7f0000000480)=[r7, r8, 0x1, 0xffffffffffffffff, r8, 0xffffffffffffffff, r10, r9, 0xffffffffffffffff, r7, r3], &(0x7f0000000580)=[{0x0, 0x5, 0xb, 0x4}], 0x10, 0xe331, @void, @value}, 0x94)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1abc82)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x82)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0xdb)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x251, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e0, 0x8, 0x0, 0x0}}, 0x10)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x7001, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180))

4m41.675566843s ago: executing program 3 (id=47):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
r1 = getpgrp(0x0)
r2 = syz_pidfd_open(r1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x1a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
close(0x3)
fcntl$notify(r3, 0x402, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = fsopen(&(0x7f0000000040)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6c, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10)
sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x8)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r7 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f00000000c0))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000002200)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000000)={0x24, r8, 0x1, 0x0, 0x10000000, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40408c0}, 0x8080)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r12 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x88901)
kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000040)={r7, r2})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r12, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r6, {0x8, 0xfffffffd}}, './file0\x00'})
openat$dlm_monitor(0xffffff9c, &(0x7f0000000300), 0x8000, 0x0)

4m41.565081858s ago: executing program 3 (id=48):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0xfffffffc, {}, [{0x90, 0x1, [@m_ct={0x44, 0x42, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11641e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x20, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x647b}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x2004c844)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000280)={0x1e, 0x2})
r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc})
socket$alg(0x26, 0x5, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r7 = inotify_init1(0x0)
inotify_add_watch(r7, &(0x7f0000000200)='./bus\x00', 0x6000000b)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff}, {0x0, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x53c}]}, 0x2c}, 0x1, 0x0, 0x0, 0xaa6bcb446f309d09}, 0x4000080)
io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)

4m40.59516635s ago: executing program 3 (id=51):
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}], 0x0, 0x0, 0x0, 0x0, 0x2}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@updsa={0x100, 0x1a, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast}, {@in=@empty, 0x66, 0x2b}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@mcast1}]}, 0x100}}, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000180)={'vlan1\x00', 0x0})
getrlimit(0x4, &(0x7f0000000040))
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="aa", 0x1, 0x20000000, &(0x7f0000000100)={0xa, 0x0, 0x4, @local, 0x4}, 0x1c)
mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1)
mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/149, 0x95)

4m39.875332529s ago: executing program 2 (id=54):
syz_emit_ethernet(0xe, &(0x7f0000002d40)=ANY=[@ANYBLOB="6ae0b0225afe59410180c2000001"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
capset(&(0x7f0000000040)={0x20080522}, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x45, 0x12, 0xfb, 0x0})
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
bind$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x7, @any, 0x5, 0x2}, 0xe)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
recvmmsg(r3, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c)
ioctl$PPPIOCSACTIVE(r2, 0x40087446, &(0x7f0000000180)={0x0, 0x0})
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x3, 0x0, 0x8000}, 0x10)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x18}}, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003040)=ANY=[@ANYBLOB="200000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000e3900000"], 0x20}}, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000005e00)=@delchain={0x2e0c, 0x65, 0x10, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xb, 0x2}, {0x8, 0xffe0}}, [@f_rsvp6={{0xa}, {0x2ddc, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x2, 0x4, 0x7}, {0x83, 0x7, 0x9}, 0x16, 0xc0, 0x2}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xe, 0xfff3}}, @TCA_RSVP_ACT={0x2530, 0x6, [@m_csum={0xd0, 0xd, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7f, 0x2, 0x10000000, 0x5, 0x3}, 0x2e}}]}, {0x88, 0x6, "44f237506e5e4f6dadc681eb4f96ffd4be4528f3045cd8151089e5033619affe51aabcf5fc0a050b31ea772748a63c7139980e9b241dd7be56935036323649a6a4d9da5075874b36ac1a578c40b3e81c6b1a7aa5ae130f45d72cec1d556af696887854c67663c70b25774f62625762de3c642a1ac7d964fc1053e90ec51118889a6c1343"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x47c, 0x0, 0x0, 0x0, {{0xb}, {0x440, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}], [], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x6, 0x4, 0x8, 0x9, 0x3e28dc4e, 0x3, 0x7ff, 0x10, 0xa584, 0xfffffffa, 0x5, 0x200, 0x6, 0x0, 0xfffffff3, 0xffffffff, 0x61b00, 0x5, 0x7, 0x4, 0xf, 0xb22, 0xfff, 0x8, 0x7fff, 0x25, 0x101, 0x9, 0x8, 0x4, 0x9, 0x4, 0xc, 0x3, 0xffff, 0x7, 0x6, 0x7, 0x8f49, 0x5, 0xfffffffd, 0xfffffff8, 0x100, 0x4, 0x4, 0x4, 0xffff6f9c, 0xff, 0xb60b, 0x6, 0x5, 0x1, 0x400, 0x5, 0xca9a, 0x6f6d, 0x4b, 0x3, 0xf, 0x8, 0x909, 0x0, 0x7fffffff, 0x8, 0x800, 0x3, 0x831, 0xa, 0x80000000, 0xfffffc00, 0x7, 0xc, 0x88000000, 0x9, 0x7, 0xffffffff, 0x9, 0xfff, 0x4, 0x0, 0x6, 0x0, 0x4, 0x99de, 0x9, 0x9, 0x800, 0x8, 0x204, 0x8, 0x2, 0xb, 0xe79, 0x54, 0x9, 0x800, 0x6, 0x1, 0x40, 0x1, 0x100, 0xd, 0x5, 0x80, 0x80000001, 0x7ffc, 0x4, 0xe6ed, 0x1ff, 0x1000, 0x6, 0x4, 0x10000, 0x6, 0xca3c, 0x5, 0xc6, 0x4, 0x200, 0x8, 0x4, 0x7, 0x100, 0xe0, 0x9, 0x2, 0x9, 0x10001, 0xfffffff9, 0x65, 0xffffffff, 0xa, 0x0, 0x7fffffff, 0x81, 0x81, 0x2, 0xffffffff, 0x5, 0x1, 0xffff0000, 0x1, 0x9, 0x417dfd68, 0x5, 0xe5b, 0xffff, 0x1ff, 0xfffff000, 0x60, 0x1, 0x6, 0x8a4, 0x2, 0x3, 0x0, 0x4, 0x8, 0x3ff, 0x6, 0x2, 0x6, 0x1, 0x10000, 0x6, 0x3, 0x5f4, 0x7f, 0x6, 0x7, 0xa3, 0x8, 0x7, 0x52, 0xbc, 0xe78, 0x2, 0xa, 0x1, 0x42b7ad76, 0xbf8b, 0x7, 0xc, 0xe70, 0xfffffffd, 0x4, 0x5, 0x1, 0x9, 0xd1e, 0x3, 0x6, 0xcc5, 0xd1, 0x44c, 0x3ff, 0x7, 0xc, 0x6, 0x0, 0x401, 0x8000, 0x5, 0x2, 0x6, 0x3, 0x2, 0x6, 0x0, 0x4, 0x1, 0x4, 0x1, 0x40000, 0x7, 0x2, 0x7, 0xfffffffb, 0x5, 0x3cd9, 0x7, 0x0, 0x8000, 0xa4c6, 0x9c0, 0x0, 0xb4b, 0x7fff, 0xfffffffb, 0x4, 0x9, 0x75, 0x9, 0x8767, 0xfffffff7, 0x200, 0x3ff, 0x9, 0xb, 0x1, 0x4, 0x6, 0x5, 0x4, 0xfffffff4, 0x8000, 0x6, 0x7, 0x7fffffff, 0x4, 0x1ff, 0x7, 0x3, 0x2, 0xa0]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]]}, {0x12, 0x6, "9c1267d6a5ff9c879efc7ddfe91b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_pedit={0x1ec0, 0x17, 0x0, 0x0, {{0xa}, {0x1dd8, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xfffffff7, 0x2, 0xffffffffffffffff, 0x3, 0x2}, 0x2, 0x7, [{0x8, 0x8, 0xffffff01, 0x5, 0x80000001, 0x8}]}, [{0x2, 0x7ff, 0x4, 0xcb08, 0xfffffff0, 0x8}, {0x2b, 0x7, 0x1, 0x1000, 0x8d, 0x9}, {0x8000, 0x1, 0x10001, 0x662, 0xc1af, 0x8}, {0x5, 0xb5, 0x8, 0x80000001, 0x5, 0x95}, {0x0, 0x9, 0x6, 0x101, 0x4, 0x5}, {0x1, 0x200, 0xfffffbff, 0x2, 0x4b, 0x9}, {0x0, 0x7fff, 0x96, 0x0, 0x1, 0x1ff}, {0xec, 0x9, 0x7f, 0xfffffffe, 0x7, 0xe4f9}, {0x5, 0x8, 0xda, 0x7f, 0x9, 0x53ab}, {0x8, 0x1, 0x2, 0x7ff, 0x3, 0x1}, {0x102, 0x8300, 0x8, 0x3f800, 0x8001, 0x2}, {0x21, 0x1, 0x7fffffff, 0x0, 0x7fff, 0x6}, {0x16c8, 0x0, 0x7fffffff, 0xb46a, 0x0, 0x7}, {0x2, 0x1000, 0x9, 0x9, 0x8, 0x4}, {0x9, 0x4, 0x6a, 0x7, 0x3, 0x8001}, {0x1, 0x2, 0x8, 0x3ff, 0x1059, 0x1000}, {0x5, 0x4, 0x7fff, 0x7, 0x324e8d92, 0x3}, {0x1, 0x80000000, 0x6, 0x7, 0x400, 0x8001}, {0x6, 0xffffff45, 0x9, 0x6, 0x8, 0x12000000}, {0xfffffff4, 0x6, 0x0, 0x2, 0xfffffc00, 0x200}, {0x1, 0x376, 0xba00000, 0x53a, 0xa, 0x3}, {0x7ff, 0x8, 0xe8, 0x7, 0x4, 0xaa}, {0x4, 0x3, 0xf, 0x5, 0x5, 0x5}, {0xd, 0x7, 0xb2, 0x2, 0x5, 0x5c}, {0x11, 0x6, 0x9, 0x7194, 0x0, 0xff}, {0x3, 0x80000000, 0xa1a, 0x322, 0x8, 0x4e}, {0x72, 0x448, 0x3, 0x1, 0x5, 0x7}, {0x9, 0x6, 0x7, 0x4, 0x1, 0x2}, {0x4a76, 0x4, 0xfff, 0x0, 0x9}, {0x2, 0x0, 0x10000, 0x3, 0x7, 0x7}, {0x10001, 0xd011, 0xffffffff, 0x80, 0xfffffff7, 0x9}, {0x3, 0xc924, 0x1ff, 0x4, 0xc, 0xffff}, {0x7, 0xff, 0x4, 0x586, 0x40, 0x6}, {0x4, 0xd, 0x0, 0x291, 0x7, 0x6}, {0x8, 0x1, 0x7, 0x8, 0x4, 0x6}, {0x7, 0x0, 0x4, 0xac6, 0xe9, 0x30980000}, {0x2, 0x4, 0x7, 0x200, 0x85, 0xd}, {0x4e9, 0x5, 0x200, 0x5, 0x0, 0xffffffcb}, {0x1000, 0x21b9, 0x0, 0x58, 0x4, 0x80000001}, {0x8, 0xc, 0x8, 0x0, 0x5, 0x7f}, {0x1ad, 0x0, 0x200, 0x9, 0x4, 0x3}, {0x7, 0x4, 0x4, 0x9, 0x2, 0x44c}, {0xfffffff9, 0x5, 0x3ff, 0x6, 0x8, 0xfff}, {0xb, 0xd2, 0x6, 0x80000000, 0x4, 0x8}, {0x6, 0x2, 0x2, 0x2, 0x4, 0x7}, {0x4, 0x600e10f7, 0x400, 0x2, 0x5800, 0xffffff81}, {0x6, 0xfffffffa, 0x10000, 0x7, 0x2, 0xc}, {0xa27, 0x5, 0xbaef, 0x190e, 0xc1a, 0x400}, {0xfffff801, 0x2, 0x8, 0x3, 0x100, 0x6}, {0x6, 0xffff4805, 0x101, 0x8000, 0x4, 0x2}, {0x5, 0xfffffff5, 0x6, 0xffffffff, 0x6, 0x3}, {0x4, 0x2, 0x6, 0x101, 0x0, 0x401}, {0x6, 0x8, 0x7ff, 0x4c51, 0x3}, {0x10000, 0xa, 0x5, 0x6, 0x4b920, 0x5}, {0x9, 0x7fffffff, 0xfaea, 0x9, 0x8, 0x9}, {0xce1, 0x2, 0x1f4e, 0x806e, 0x401, 0x6}, {0x9, 0x8001, 0x4, 0x0, 0x4, 0x3}, {0x4, 0x4, 0x8, 0x3, 0x9, 0x7ff}, {0x1, 0x8001, 0x3, 0x9, 0x2, 0x1}, {0x7fff, 0x5, 0x7, 0x7, 0x8, 0x1}, {0x8001, 0x1, 0xfffffffe, 0xd, 0x7, 0x8}, {0x8f08, 0x401, 0x5, 0x9, 0x1, 0x7fff}, {0x101, 0x7, 0x0, 0x9, 0x87, 0x4}, {0x6, 0x0, 0x5, 0x5, 0x6, 0x1}, {0x3, 0x6bb, 0x100, 0x8, 0x8, 0xbf4}, {0x0, 0x2, 0x8, 0xffffffff, 0x0, 0x5}, {0x4, 0x1, 0x9, 0x4, 0x4, 0x46}, {0x6, 0x261, 0x8, 0x5, 0x4, 0x9}, {0x5, 0xffff, 0x9, 0xc, 0x48, 0x1}, {0x3f, 0x7fff, 0x8, 0x0, 0x9, 0x400}, {0xfffffffa, 0x2, 0x400, 0x1, 0x0, 0x8}, {0x10001, 0x2, 0x7, 0xfffffff8, 0x5, 0x7}, {0x8, 0x2, 0x7, 0x0, 0x2}, {0x4, 0x7fff, 0x9, 0x5c, 0x5, 0x6}, {0xe3, 0x42a8279d, 0xc2b3, 0x44, 0xb, 0xa7b7}, {0x401, 0x80, 0xfffffff1, 0x6, 0x3, 0x7fffffff}, {0x31, 0xb, 0x3, 0x8, 0x7}, {0x8, 0xfffffffd, 0xbba7, 0x81, 0x1, 0x80000000}, {0x2, 0xf143, 0x8, 0x9, 0xa}, {0x9, 0x3, 0x6, 0x1, 0x5, 0x6}, {0x6, 0x10001, 0x3, 0x1, 0x0, 0x5}, {0x5, 0x2, 0x6deb, 0xfffffeff, 0x7f, 0x7}, {0x0, 0x9, 0xa6, 0x6, 0x8001, 0x1}, {0xf, 0xffffffff, 0x6, 0x9, 0x9, 0x3}, {0x1, 0x8, 0x240, 0x8, 0x7, 0x3}, {0x7, 0x7, 0xc, 0x4, 0xfffffff9, 0x7}, {0x8, 0x100, 0xa, 0x5, 0x7fffffff, 0x80000001}, {0xe, 0xc2b1, 0x2, 0x7, 0x1, 0x9}, {0x5, 0x6, 0x9, 0x4, 0x9, 0x4}, {0x3, 0x4, 0xfffffffd, 0x3, 0x7fffffff, 0x7}, {0x3, 0x668, 0x7cd9, 0xa1b, 0xe}, {0x7fffffff, 0x3, 0x3, 0x8ad, 0x0, 0x3}, {0x6, 0x32ba, 0x800, 0x80, 0xfffffffe, 0x5}, {0x8001, 0x10, 0x400, 0x7, 0x5}, {0x9a6, 0x498, 0x3, 0x10, 0x4d, 0x101}, {0x9, 0x1, 0x9, 0x2, 0xb3, 0x6}, {0xfff, 0x1, 0x7ff, 0x9, 0xbd58, 0x7fff}, {0x9, 0x8, 0x4, 0x5, 0x7, 0x1}, {0x7, 0x8, 0x1, 0x8785, 0x10001, 0x9}, {0x0, 0x3, 0x2, 0x7f, 0xb, 0x7}, {0x4, 0x81, 0x7fffffff, 0x4, 0x7, 0x8}, {0x7f, 0x3, 0x2cb, 0xfffffff1, 0xd, 0x7fffffff}, {0x9, 0x8, 0x3, 0x8, 0xcda2, 0x2}, {0x7, 0xfffff18a, 0x2, 0xbff1, 0x40}, {0x5, 0x0, 0x0, 0x8000, 0x10, 0x8763}, {0x81, 0x3, 0x7, 0x3, 0x7d, 0x3}, {0x0, 0x1, 0x9, 0x0, 0x3, 0x3}, {0x0, 0x2c, 0x2, 0x40, 0x1, 0xa}, {0x0, 0xa94, 0x8, 0xb, 0x6, 0xcb4}, {0xffffff01, 0x1, 0x2, 0xfffffffb, 0x1}, {0x4, 0x4, 0x0, 0x1, 0x7, 0x7}, {0x9, 0x3, 0x9, 0x100, 0x1b, 0x7fffffff}, {0xbd, 0x5, 0xae3, 0x65, 0x5, 0x2b2}, {0x1, 0x0, 0x7, 0x22, 0x1, 0x2}, {0x0, 0xfffffff4, 0x200, 0x4, 0x10, 0x4}, {0x6, 0xfffffff9, 0x1, 0x7fffffff, 0x8001, 0x3}, {0x2, 0x7, 0x2, 0x180, 0xec, 0xfffffff7}, {0x4e, 0x3, 0x5, 0x35a7, 0x0, 0x7fff}, {0x4, 0x42320394, 0x7fff, 0x8, 0x6, 0x4}, {0x9, 0x401, 0x101, 0x8, 0x6bb, 0x8}, {0x0, 0x8000, 0x0, 0x6, 0x5773, 0x96}, {0xc89e, 0x66, 0x9, 0x4, 0x5, 0x8}, {0x3, 0xa, 0x2, 0x5e0e569d, 0xa6, 0x8}, {0x2, 0xa, 0x9, 0x5, 0xe, 0x80000000}, {0x0, 0x6, 0x7, 0x9, 0x8, 0x8001}, {0x8, 0x2, 0x0, 0x3, 0x2, 0x3}, {0x5, 0x4, 0xfffffeff, 0x3, 0x8, 0x7ff}, {0x9, 0x6, 0x5, 0x9, 0x80000000, 0x1}], [{0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x4}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x5}, {0x0, 0x2fb52f0b24774f77}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x1}, {0x3}, {0x2, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1ad81b010fc9d94a}, {0x5}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x2}, {0x6, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0xebe69ce100ff1833}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x75ff1c94c5a00ea1, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x1}]}}, @TCA_PEDIT_KEYS_EX={0xbc, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_PARMS={0xee0, 0x2, {{{0x9, 0xfffffffc, 0x5, 0x1319}, 0x3, 0x7, [{0x4, 0x1000, 0x8, 0x40, 0x3, 0x9}, {0xfffeffff, 0x3ff, 0x90000, 0x2, 0x3}, {0x6, 0x13, 0x1, 0x8, 0x101, 0xff}, {0x8000, 0x4, 0x7, 0x0, 0x3, 0x1}, {0x3, 0x2, 0x0, 0x4, 0x6, 0x1}, {0x0, 0x9b, 0xb, 0x5, 0x1, 0x2}, {0x2, 0x0, 0x400, 0x5, 0x69b, 0x10000}, {0x5, 0x8, 0xfffff000, 0x6, 0x0, 0x4}]}, [{0x249, 0x3, 0x1, 0x8, 0x7, 0x5}, {0x5, 0x5, 0x228a, 0x0, 0x8000, 0x101}, {0x9, 0x0, 0xfffff076, 0xc, 0x0, 0x4}, {0x4, 0xffffe127, 0x4, 0xfffffff4, 0x0, 0x9e0}, {0x7a8a, 0x1, 0x3, 0x4, 0x2, 0x4}, {0x7fffffff, 0x101, 0x3bb, 0xc21, 0xe17, 0xf23d}, {0x6, 0x15a, 0x8, 0x6, 0x5, 0xf29}, {0x53c, 0x27, 0x401, 0x8, 0x4, 0x6}, {0x8, 0x0, 0x1, 0x715f, 0x4, 0x7}, {0xdcd5, 0x2, 0x3cbd, 0x760, 0x1000, 0x4}, {0x8, 0x0, 0x8, 0x5670, 0xd, 0x8000}, {0xff, 0x5, 0x9874, 0x8d, 0x62, 0x248}, {0x3, 0x6, 0xffffffff, 0x5, 0xe, 0xc4f}, {0x9, 0x0, 0x9, 0xfffffff8, 0x120000, 0xfffffffc}, {0x100, 0xe8, 0xf, 0x8000, 0x8, 0xf9}, {0x5, 0x101, 0x3, 0x1, 0x7, 0x100}, {0x0, 0xfffffeff, 0x6, 0x4, 0x1, 0x5}, {0x6, 0x7, 0x0, 0x0, 0xa, 0x134c}, {0x5, 0x9ff, 0x8, 0x0, 0x5, 0x1}, {0x6, 0xffff, 0x8, 0xfffffff9, 0x2, 0x3}, {0x61f, 0x44, 0x2, 0x5, 0x9, 0x5}, {0x2fe, 0x8, 0x8, 0x3, 0x800, 0xffff8ad6}, {0x7, 0x401, 0x8, 0x5, 0x0, 0x7}, {0x3, 0x4, 0x9, 0x81, 0x3, 0xad36}, {0x7, 0x1, 0x3, 0x6, 0xffffffc0, 0x7ff}, {0x2, 0xfffffe01, 0x1, 0x2, 0x8000, 0x7}, {0x6, 0x6, 0x3ba4, 0x8001, 0x2, 0xab7}, {0x9, 0x5, 0x2, 0xffff, 0x1, 0x2}, {0x9, 0x9, 0xa0, 0xffff, 0x6, 0x89b}, {0x3, 0x4000, 0x3, 0x9, 0x0, 0x9}, {0x80000000, 0xc7f, 0xff, 0xf, 0x5, 0x4}, {0x6, 0x7e8, 0x80000000, 0x2, 0x1000, 0x2}, {0x2, 0x81, 0xc, 0x6, 0x7, 0x74ff}, {0x3b8f000, 0x3, 0xc00000, 0x7, 0xf234, 0xb1}, {0x8, 0x8, 0x400000, 0x2, 0xd6, 0x40}, {0x40, 0x5, 0x5, 0x9, 0x80, 0x6}, {0x10, 0x0, 0x3, 0x1, 0x0, 0xfffffe00}, {0xa3, 0x2, 0x2, 0x81, 0x8, 0x1}, {0x9, 0x600, 0x9, 0x3, 0x4, 0x3}, {0xcb, 0x4, 0x2, 0x7a, 0x3, 0x7f}, {0xb, 0x200, 0xa, 0x3, 0x5, 0x3}, {0x6, 0x5, 0x5, 0x27, 0x6, 0x3}, {0xfb, 0xffff479e, 0x79d0, 0x8e, 0x8001, 0x9}, {0x0, 0x1ff, 0x3, 0x7fffffff, 0x9}, {0x646, 0x40, 0x80, 0x8000, 0x660c, 0x9}, {0x40, 0x9, 0x9, 0x0, 0x1ff, 0x101}, {0xa, 0x8, 0xffff5fc6, 0x7, 0x8, 0xfe}, {0x7, 0x2, 0x9, 0x1, 0xe7, 0xf8}, {0xb0, 0x6, 0x2, 0x9, 0xb007, 0x7}, {0x1, 0x19c23a69, 0x80, 0x9, 0x6, 0x7}, {0x6, 0x9, 0x101, 0x5, 0x5, 0x56}, {0x5, 0x7, 0x9, 0x9, 0x1, 0x1}, {0x100, 0x3, 0x3e, 0xfffff7f5, 0x1, 0x27}, {0xd, 0x595a, 0x0, 0x10, 0x1000, 0x5}, {0x7e97, 0x4, 0x7fff, 0xf77, 0x2fd9, 0xb4}, {0x9, 0x5, 0x2dbb4985, 0x7ff, 0x5, 0x8000}, {0x6, 0x434e, 0x40, 0x80000001, 0x8, 0x4}, {0x8, 0x10000, 0x9, 0x7ff, 0x4, 0x6}, {0x6, 0x5, 0x8000, 0x7, 0x20e, 0x1e7}, {0x1, 0xe52a, 0x0, 0x0, 0x4, 0x6}, {0x4, 0x8, 0xfe, 0x4, 0x3, 0x4}, {0x4ae, 0x9, 0x100, 0x9}, {0x6, 0x6, 0xb75, 0x10, 0xa4, 0x7}, {0x4d, 0xff, 0xf9, 0x64, 0x5, 0x70}, {0x8001, 0xf, 0x4, 0x6c83, 0xffff, 0x1}, {0x7, 0x1, 0x5, 0x2f3, 0x4, 0xffffffff}, {0x2, 0x73, 0x3, 0x3, 0x8, 0x10001}, {0x7, 0x3, 0x6, 0xfff, 0x7, 0x211}, {0xb9a4, 0xff, 0xb, 0x1ff, 0x5, 0x7}, {0xfffffffb, 0x8, 0x5f2, 0x8000, 0x3, 0x8}, {0x1000, 0xfff, 0x7, 0x3, 0xb3, 0x1}, {0x56, 0x7fff, 0x3bfe, 0x0, 0x2, 0x7}, {0xb57, 0x400, 0x38, 0x101, 0xfffffffb, 0x8}, {0xa, 0x9, 0x9, 0x893f, 0x4, 0x3}, {0x6, 0xc8b1, 0x4, 0x0, 0x3}, {0x80000000, 0x4ac, 0x2, 0x2, 0x6}, {0x6, 0x2, 0x582c645a, 0x5, 0x3ff, 0x3ff}, {0x6, 0x70, 0x100, 0x9, 0x4, 0x7}, {0xb, 0x9d, 0x1, 0x1, 0x3, 0x4}, {0x5, 0x0, 0x9, 0x2, 0x78180000, 0x200}, {0x5, 0x10, 0x6, 0x9, 0xff, 0x5}, {0x200, 0x3, 0x51f3, 0x9, 0x5, 0xb8}, {0x80, 0x7, 0x3, 0x9, 0x53b, 0x6}, {0xd1b3, 0x3, 0x6, 0x35c, 0x8, 0x8}, {0x4, 0xb, 0x0, 0x5, 0x7fffffff, 0x2}, {0x3, 0x0, 0x1, 0x1, 0x0, 0x434}, {0x4, 0x8, 0x8, 0x9, 0xfffffffc, 0x2}, {0x81, 0x4, 0x0, 0x8, 0x6, 0x9}, {0x80000000, 0x8001, 0x80, 0x2, 0x2, 0xd}, {0x400, 0x4, 0x3, 0xb, 0x9, 0x8}, {0x4cb4, 0x4, 0x8000, 0x5a5, 0x3, 0x8}, {0x4, 0x8, 0x800, 0x10, 0x6, 0xd5b}, {0x9, 0x5, 0x5, 0x980, 0x16c000, 0x4c}, {0xfffff800, 0xb, 0xffffff00, 0xffff, 0xffff8000, 0xfffffffe}, {0x1, 0x3, 0x2, 0x0, 0x5dd, 0xa228}, {0x9, 0x7ff, 0x113377ac, 0x86ae, 0x0, 0x3}, {0x6, 0x4, 0x6, 0x10000, 0x1, 0x3}, {0x1, 0x401, 0x439, 0xa, 0x4, 0xa05b}, {0x3, 0xfe81, 0x4, 0xfff, 0x7, 0x2}, {0x1, 0xf, 0x0, 0x0, 0x4, 0xbe2}, {0x0, 0x65b563ca, 0x9, 0x1, 0xe9, 0x82f2}, {0x6, 0x5, 0x7f, 0x0, 0x80000000, 0x2}, {0x10, 0x10001, 0x6, 0x3, 0x7, 0x6}, {0x381, 0x40, 0x8, 0x91fb, 0x1, 0x80}, {0xffffffff, 0x1, 0x8000, 0x1f5, 0x100, 0x2}, {0x2, 0x4, 0x62d78000, 0x7, 0xb, 0x6c7a}, {0x100, 0xfffffff9, 0x100, 0x7f, 0xeb, 0x400}, {0x101, 0x0, 0x3, 0xb, 0x0, 0x3}, {0x0, 0x79b6, 0x10, 0x555, 0xfffffffe, 0x6}, {0x200, 0x6, 0x5, 0x1, 0x0, 0x5}, {0xbff1, 0x7, 0xcee7, 0x0, 0x5}, {0x8, 0x7, 0x5, 0x0, 0xfffffff6, 0x2}, {0x21, 0x376e, 0x7, 0x7, 0x7fff, 0x7}, {0x7, 0x5, 0x401, 0xc5, 0x5, 0x9}, {0x10001, 0x7, 0x1, 0x0, 0x9, 0xfffffffe}, {0x6, 0x5, 0x401, 0xffffffff, 0x3, 0x3}, {0x3, 0x7, 0x80000001, 0x1, 0x7, 0x6}, {0xffff, 0xe75, 0x1, 0xcc, 0x1, 0xffff}, {0x7fff, 0x52, 0x80000000, 0xf, 0x2, 0xf}, {0x2, 0x0, 0x1, 0x9811, 0x1, 0x1}, {0x36, 0x5, 0x1, 0xd7a, 0x4, 0xc}, {0xfff, 0x10000, 0x2, 0x5, 0x80, 0x3}, {0x0, 0x81, 0x1ce3, 0x8, 0x6, 0x8}, {0x0, 0x6, 0x3, 0x6, 0x6e8fbd20}, {0x6, 0x1, 0x7, 0x9}, {0x2, 0x0, 0x200, 0x3, 0x9a, 0x9}, {0x4, 0x1, 0x9, 0x7, 0x3, 0x7}, {0xc7, 0x29f, 0x4, 0x40}], [{0x5}, {0x4}, {0x3, 0x1}, {0x3}, {}, {0x5, 0x2}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x7}, {0x8a6398a2d615e051}, {0x5}, {0x5}, {0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x3, 0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x2}, {0x4}, {0x5, 0x1}, {0x2}, {}, {0x2}, {0x4, 0x1}, {0x1}, {0x4}, {0x5}, {0x2}, {0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x6f7beee386297365, 0x1}, {0x5}, {}, {0x2}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x7, 0x1}, {}, {}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x3}, {0x5}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}]}}]}, {0xbe, 0x6, "b0d8cc3ea39a747058304d01df677d45d140bc9546e9a3b5ec8b1e4341c4cdefa745ad1b62427958837723fccc9e2ea66fb57bbd0833bae4f199fd22764e091752e0136296ed530275e8ba9a6365b59e765acdc483d0d222960cb96b470abe0a0af996e7387a9c60bbd3adb2358b6f0bd4d461b3290823c1399ed136f562389e63128fc749d615d9cfff1304ca251fc908c4d024979c00f7ec60d867c7247c6556be99fe2bad78127421382148aae55aff8a4abc02da46256e34"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x120, 0x17, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10001, 0x9, 0x2, 0x0, 0x80}, 0x3354}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x91, 0x3, 0x20000000, 0x40, 0x401}, 0x5}}]}, {0xb5, 0x6, "302fefba22bcc21704928578f42bbf708d0fad5c1821859ce8acdf729d38b8d21e45ab69f18b9fb8548df000d8ec889eb7554dfb6c79267fe21c1ac225df914d1a5ab312a2adbbe5e11ad01dbbe735c97b0ce512db789199de5deea12329edd150a0c6098f3dd52cb5f0bf47eac2dd51201cad8db4c240d5988ac75e017025df4cd579dbe0f2643fe2d93dcc7143ee1bbd2856bf9eb1b7af2bcc029db0f8baea1ecd360aedbd66d8869ee1acecf55130c3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x4, 0x5}}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_RSVP_POLICE={0x850, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x76e155a7, 0xffffffffffffffff, 0x5, 0x7, 0x5, {0x1, 0x0, 0x4, 0x8001, 0x7fff, 0xc4}, {0x3, 0x0, 0x4, 0x4, 0x3, 0x9}, 0xd, 0xdad, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x61, 0x80000000, 0x251e, 0x4, 0x3, 0x0, 0x8, 0x0, 0x2, 0x80000000, 0x3, 0x727, 0x1, 0x3, 0x2, 0x7, 0x80, 0xc875, 0x3, 0x6, 0x4, 0x43e3, 0xd, 0x400, 0xf, 0x7fffffff, 0x7, 0x2, 0x90c4, 0x3, 0x1, 0x5, 0x8a25, 0x7fff, 0x1, 0x9, 0x9, 0x6, 0x2, 0xae, 0x6, 0x3, 0xdd, 0x1, 0x0, 0xd, 0x7, 0xfff, 0x3, 0x400, 0x0, 0x9, 0x7, 0x7, 0xcd07, 0x0, 0x8, 0x7fff, 0x44, 0xc, 0x7, 0x0, 0x1000, 0x1, 0x2, 0x36, 0x6, 0x800, 0x3, 0xd04, 0x6, 0x10000, 0x9, 0x2, 0x8, 0x5, 0x9, 0xfffffff8, 0x5, 0xce1000, 0x1, 0x2, 0xd52, 0xfffffffb, 0x7, 0x0, 0xfc3, 0x7, 0x200, 0x7fff, 0x2, 0xfffffff7, 0xc, 0x9, 0x9, 0x8, 0x80000000, 0x0, 0x8, 0xffff, 0x0, 0x47, 0x401, 0x9, 0x400, 0x107, 0x7ff, 0x1c5ce7a7, 0x4, 0x4, 0x9, 0x9, 0x800, 0x2, 0x6, 0xffffffc8, 0x1, 0x2, 0x7, 0x9, 0x99bc, 0x1000, 0xc54, 0x1, 0x3, 0x1, 0x3, 0x1000, 0x1, 0x250, 0x5, 0x0, 0xeec, 0x6, 0x0, 0x7f, 0xffffffff, 0x6, 0xfffffeff, 0xfffffff9, 0xfff, 0x9, 0x40, 0x5, 0x197, 0x71, 0x1dc, 0x9, 0x1, 0x8, 0x2, 0x4, 0x0, 0x3, 0x1, 0x9, 0x7, 0xb5, 0xc, 0x8a73, 0x2, 0x9, 0xf, 0x1, 0x80, 0x1000, 0x7, 0x9, 0x0, 0xab0, 0x0, 0xb, 0x1, 0x5, 0x6, 0x5, 0x9, 0x5, 0x1735, 0xfffffff1, 0xfffffffc, 0xfff, 0x8, 0x9, 0x1ff, 0x7, 0x1, 0x6e5, 0x8000, 0x6, 0x4, 0x8, 0xfffffffa, 0x3, 0x9, 0x0, 0x7fff, 0x1000, 0x3, 0x1, 0x9, 0x9, 0x7, 0x9, 0x0, 0x4, 0x2, 0x9b, 0x80000001, 0x0, 0x7ff, 0xd0d, 0x80, 0x5, 0x1, 0xf3, 0x5d, 0xa740, 0x0, 0x9, 0x7, 0x7, 0x4, 0x1000, 0x9, 0x18000, 0xb, 0x5, 0x9, 0x5, 0x2, 0x5, 0x2, 0x5, 0x9, 0x10001, 0x8, 0x3, 0x5, 0x1, 0x400, 0x2, 0xb2, 0x7, 0x0, 0x5, 0x3, 0x7ff, 0x5, 0x4, 0x5, 0xffffffff, 0x3, 0x6, 0x7cd]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0xd2, 0x7f, 0x9, 0x3, 0x6, 0x80000001, 0x8, 0x0, 0x0, 0x3, 0x24dd, 0xffffffff, 0xb1a8, 0x7, 0x7, 0xc, 0x3, 0x3, 0x6, 0x800, 0x5, 0x6, 0xcb7, 0x1, 0xfffffff6, 0xfffff6ed, 0x4, 0x8, 0x80000000, 0x8, 0x10000, 0x4, 0x4, 0x200000, 0x1, 0x4, 0x0, 0x1e4, 0x1, 0x7, 0x8, 0x98, 0xfffffffc, 0x0, 0x8, 0x9, 0x2, 0x101, 0x4, 0x401, 0x2, 0x5, 0x7, 0x40, 0x7fffffff, 0x1de252a, 0x2, 0x100, 0xff, 0x9, 0x6, 0x2, 0x6, 0x10, 0x8, 0x200, 0xc529, 0xa, 0x5, 0x0, 0x2, 0x0, 0x0, 0x1000, 0x7, 0x81, 0x0, 0x3a18, 0x40000000, 0x1, 0x4, 0x219, 0x1, 0x5, 0x5, 0x4, 0xd8, 0x1, 0x10000, 0x51912db4, 0x5, 0x6, 0x4, 0x6c88, 0x8, 0x1, 0x3, 0x4, 0x0, 0x0, 0x1, 0x1000, 0xfffffffb, 0x9, 0x2, 0x3, 0x6, 0xffff, 0x8, 0x1, 0x5, 0x2, 0x2, 0x8, 0x8, 0x9, 0xfffffff9, 0x2, 0x1, 0xfffffff8, 0x4f, 0x5, 0xf8000000, 0x5, 0x4, 0xd690, 0x1, 0xb, 0x8, 0x4, 0x8, 0x0, 0x9, 0x6, 0x77cb, 0x3d, 0xfffffff0, 0x1, 0x2, 0x9, 0x1, 0x480, 0x7, 0x5, 0x7, 0x5, 0x5, 0x1, 0x9, 0x6, 0x7, 0xfffffffa, 0x3, 0x0, 0x6, 0x2a, 0x4, 0xa8, 0x5, 0x4, 0x0, 0x5, 0x4, 0xff, 0x4781787d, 0x800, 0x81, 0x1, 0x7, 0x5, 0x5, 0x4, 0x9, 0x6, 0xf7a6, 0x9, 0x7, 0x5, 0xd505, 0x798, 0x1, 0x501, 0x401, 0x80, 0xc, 0x9, 0x8001, 0x74fdf445, 0x3000, 0xe, 0x3c59, 0xffff9990, 0x1, 0xffffff5c, 0x7, 0x3, 0x6, 0x9, 0x6, 0x3, 0x2, 0x6, 0x4, 0x5, 0x8000, 0x1, 0x2, 0x8, 0x200, 0xc7, 0x9, 0x3, 0xa, 0x6, 0x6, 0x6, 0x1, 0x7, 0x3, 0x8, 0x3, 0x8, 0xdd9, 0x1, 0x0, 0x2, 0x8001, 0xffff, 0x7fff, 0x3, 0xed, 0x4, 0x7, 0xe4, 0x7, 0x3, 0xffffffff, 0x9, 0x7b4, 0x3, 0x1c000000, 0x60, 0x10001, 0xfc7, 0xffffff00, 0x4, 0xffffffff, 0xffff8000, 0x10, 0x9, 0xc16, 0x10, 0xfffffffc, 0x8, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}]}, @TCA_RSVP_DST={0x14, 0x2, @private1}]}}]}, 0x2e0c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000)
openat$uhid(0xffffff9c, 0x0, 0x4cf4914ad2e0162c, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
writev(r2, &(0x7f0000000300)=[{&(0x7f0000000480)="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", 0xf00}], 0x1)

4m39.656121887s ago: executing program 3 (id=55):
close(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800090400000000000000000a00"/28], 0x24}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x2000000, {0x0, 0x0, 0x0, r6, 0x192}}, 0x20}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYRESDEC=r0], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)

4m39.490437331s ago: executing program 2 (id=56):
sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x2000239, 0x0, &(0x7f0000000200), 0x0)
io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(r6, 0x0, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
sendfile(r5, r7, 0x0, 0x100800001)
mount$binder(0x0, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000100), 0x0, &(0x7f0000000680)=ANY=[])
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80)
r9 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r9, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"})
r10 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
close_range(r8, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00')

4m38.930233235s ago: executing program 2 (id=58):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
eventfd2(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000380000000000019078e0000001ac1414aa05009078000000004500000100000000006c0000ac1e0001e000000209eeb331b0e18750"], 0x0)
r2 = dup(r1)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x18d542, 0x2)
ftruncate(r3, 0xee72)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x400}, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000480)=<r5=>0x0)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x24004052)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r7 = dup(r6)
write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c)
r8 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=<r9=>0x0, &(0x7f0000000280)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc})
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='contention_end\x00', r11}, 0x18)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

4m38.266353455s ago: executing program 2 (id=61):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_G_EDID(r2, 0xc0285628, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000380)={{0x0, 0x1}, 0x0, 0x1, 0x0, {}, 0x2, 0x3})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r3 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r3, 0x400455c8, 0x2)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', <r5=>0x0, 0x5c, 0x4, 0x9, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x44}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x10, 0x2, 0x4}})
r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={0xffffffffffffffff}, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
fcntl$lock(r7, 0x25, &(0x7f0000000140))
fcntl$lock(r7, 0x24, &(0x7f00000000c0)={0x2})
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=0x1, @ANYBLOB="1d11009704faea000000000000008d1a59d10000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000400"/28], 0x50)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4018}, 0x14)
r10 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fchdir(r10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x15, &(0x7f0000000780)=@raw=[@call={0x85, 0x0, 0x0, 0x40}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @printk={@lld}], &(0x7f0000000540)='syzkaller\x00', 0x7, 0xe5, &(0x7f0000000180)=""/229, 0x40f00, 0x5, '\x00', r5, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r6, 0x1, &(0x7f0000000480)=[r7, r8, 0x1, 0xffffffffffffffff, r8, 0xffffffffffffffff, r10, r9, 0xffffffffffffffff, r7, r3], &(0x7f0000000580)=[{0x0, 0x5, 0xb, 0x4}], 0x10, 0xe331, @void, @value}, 0x94)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1abc82)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x82)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0xdb)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x251, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e0, 0x8, 0x0, 0x0}}, 0x10)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x7001, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180))

4m37.21011816s ago: executing program 2 (id=64):
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}], 0x0, 0x0, 0x0, 0x0, 0x2}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@updsa={0x100, 0x1a, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast}, {@in=@empty, 0x66, 0x2b}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@mcast1}]}, 0x100}}, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000180)={'vlan1\x00', 0x0})
getrlimit(0x4, &(0x7f0000000040))
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="aa", 0x1, 0x20000000, &(0x7f0000000100)={0xa, 0x0, 0x4, @local, 0x4}, 0x1c)
mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1)
mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/149, 0x95)

4m36.346379328s ago: executing program 2 (id=67):
sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x2000239, 0x0, &(0x7f0000000200), 0x0)
io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(r6, 0x0, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
sendfile(r5, r7, 0x0, 0x100800001)
mount$binder(0x0, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000100), 0x0, &(0x7f0000000680)=ANY=[])
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80)
r9 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r9, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"})
syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, r10)
close_range(r8, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00')

4m24.260379339s ago: executing program 32 (id=55):
close(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800090400000000000000000a00"/28], 0x24}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x2000000, {0x0, 0x0, 0x0, r6, 0x192}}, 0x20}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYRESDEC=r0], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)

4m21.290476659s ago: executing program 33 (id=67):
sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x2000239, 0x0, &(0x7f0000000200), 0x0)
io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(r6, 0x0, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
sendfile(r5, r7, 0x0, 0x100800001)
mount$binder(0x0, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000100), 0x0, &(0x7f0000000680)=ANY=[])
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80)
r9 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r9, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"})
syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, r10)
close_range(r8, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00')

2m41.830041536s ago: executing program 5 (id=672):
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000440)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x6, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x2, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0000004a000000000000000300000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000f361cc4d9f08ba069d860000000000000000bb168f65ff00007c3da3625400296ecbdc29dcff38000000000000000000f2ffffffffffffff1b0000000000000000"]}, 0xe0)

2m41.754964685s ago: executing program 5 (id=673):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setgid(r1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="168c882cd976ab9a0000", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

2m41.731605137s ago: executing program 5 (id=674):
clock_adjtime(0x0, &(0x7f00000001c0)={0x8b90, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x2, 0x0, 0x8})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r5}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f00000002c0))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x25dfdbff, {0xa, 0x0, 0xa1}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x10, 0x455f, 0x6bf4}}]}, 0x40}}, 0x24005040)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0)

2m41.51716863s ago: executing program 5 (id=676):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x16, &(0x7f0000000080)={@local, @broadcast, @void, {@llc={0x4, {@snap={0x0, 0x0, "af", '5<K'}}}}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r3, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c)
sendto$inet6(r3, &(0x7f0000000300)='H', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
shutdown(r3, 0x1)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000400)={0x4d, 0x8, 0x40, 0xbf, 0xff, 0xa, 0x1, 0x61, 0x8, 0x8, 0x3, 0x60, 0x6, 0x9}, 0xe)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
socket$kcm(0x21, 0x2, 0xa)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001fc0)={'wpan0\x00', <r5=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000000)={0x38, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x38}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$inet(0x2, 0x800, 0x3)

2m40.631157232s ago: executing program 5 (id=681):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r2, 0x10d, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000e5ff000000000000000000000000000000257ba98c6fb44b05d324921649e9fef9a906edcc5662c60d7a3a6957a0736440471f34a74902e025f5e6f582a2b65f13608a16ac7a04bdc873bfb456fe72c6917c9c6c03d6e2035998c179f2b210f7a95982128a923f1c"], 0x48)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000008c0)={0x0, 0x1, &(0x7f00000000c0)=[r4], 0x0, 0x0, 0x0})
socket$l2tp(0x2, 0x2, 0x73)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r7, @ANYBLOB="000126bd7000ffdbdf250600000008000300", @ANYRES32=r8, @ANYBLOB="0c0099000e00000063000000140017800400030004000200040002000400010008001780040001001c00e70070ddff5c20f56eb43a138f6cdc4e70c8b4b7f82cb759562010001780040001000400020004000100100017800400030004000200040006000a00e800ffffffffffff00001c00e70078013eb353cc207f075c0c02ef8a820af7f3ffdb62d991501c00e70050d54d83026408625511bc2e878270e4b475175b1a8be590100017800400020004000300040006002800178004000400040002000400040004000100040002000400010004000200040005000400030005005300000000000500530001000000d04e9d1d9d4e2257d77223b02ea540eed1f31a7695f3dc"], 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x6004811)
r9 = syz_io_uring_setup(0x16c2, &(0x7f0000000480)={0x0, 0xbd12, 0x10100, 0x3, 0x327}, &(0x7f0000000300)=<r10=>0x0, &(0x7f0000000040)=<r11=>0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3})
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
write$UHID_CREATE2(r12, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r12, 0x0)
syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r9, 0x2d3e, 0xfffffffe, 0x11, 0x0, 0x0)

2m39.798059324s ago: executing program 5 (id=683):
syz_emit_ethernet(0xe, &(0x7f0000002d40)=ANY=[@ANYBLOB="6ae0b0225afe59410180c2000001"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
capset(&(0x7f0000000040)={0x20080522}, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x45, 0x12, 0xfb, 0x0})
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
bind$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x7, @any, 0x5, 0x2}, 0xe)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
recvmmsg(r3, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c)
ioctl$PPPIOCSACTIVE(r2, 0x40087446, &(0x7f0000000180)={0x0, 0x0})
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x3, 0x0, 0x8000}, 0x10)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x18}}, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0)

2m24.86018782s ago: executing program 34 (id=683):
syz_emit_ethernet(0xe, &(0x7f0000002d40)=ANY=[@ANYBLOB="6ae0b0225afe59410180c2000001"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
capset(&(0x7f0000000040)={0x20080522}, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x45, 0x12, 0xfb, 0x0})
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
bind$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x7, @any, 0x5, 0x2}, 0xe)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
recvmmsg(r3, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c)
ioctl$PPPIOCSACTIVE(r2, 0x40087446, &(0x7f0000000180)={0x0, 0x0})
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x3, 0x0, 0x8000}, 0x10)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x18}}, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0)

50.645908048s ago: executing program 1 (id=1352):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x2c, 0x28, 0x28, 0x4, [@const={0x0, 0x0, 0x0, 0x2, 0x20}, @func_proto={0x2, 0x0, 0x0, 0x13, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)

50.538805481s ago: executing program 1 (id=1353):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
fdatasync(r0)

50.484770099s ago: executing program 1 (id=1354):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x17)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x10)
add_key(&(0x7f0000000600)='keyring\x00', 0x0, &(0x7f00000006c0)="b51dda", 0x3, 0xfffffffffffffffc)
fcntl$notify(r1, 0x402, 0x3)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x80000038)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[@ANYBLOB="3800577a73dbbdcb71e95c759fe7b2659cfd01fd", @ANYRES16=r6, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="0c009900000000000000000008009f000d000000080026006c090000"], 0x38}}, 0x0)

49.929154242s ago: executing program 1 (id=1358):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800009500000000002f31e251ce32bb00006c145afd81fcbf7d0e238d999c4c05252e2cee5009b5b0f6b2e0dc9fd6a56bdd8061c4a883018779371c7afdbd3bcd22b93d4d9f9a8656ed8c3877271a0491f112483154531fdd8f0af3c352e7403d0e7888f4c35ed8b2a2cff8336f105cb047d5d1d26e5de12f3b3f64c4396de9b5f1966cea5fdf14ea12f9788a4202520199d031a58621348cf6c44b6b54f0729cdaa9549bd7451dcea4c9c5da49e1852c05a0677005db90017b67c7de51ab98c4c6ec905100ef95b488e7f8472b9e97a059978db15362e8708a627773685700"/239], &(0x7f0000000180)='syzkaller\x00', 0xb, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]})
chdir(&(0x7f0000000140)='./bus\x00')
open(&(0x7f0000000080)='./file1\x00', 0x12b842, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800009500000000002f31e251ce32bb00006c145afd81fcbf7d0e238d999c4c05252e2cee5009b5b0f6b2e0dc9fd6a56bdd8061c4a883018779371c7afdbd3bcd22b93d4d9f9a8656ed8c3877271a0491f112483154531fdd8f0af3c352e7403d0e7888f4c35ed8b2a2cff8336f105cb047d5d1d26e5de12f3b3f64c4396de9b5f1966cea5fdf14ea12f9788a4202520199d031a58621348cf6c44b6b54f0729cdaa9549bd7451dcea4c9c5da49e1852c05a0677005db90017b67c7de51ab98c4c6ec905100ef95b488e7f8472b9e97a059978db15362e8708a627773685700"/239], &(0x7f0000000180)='syzkaller\x00', 0xb, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) (async)
chdir(&(0x7f0000000140)='./bus\x00') (async)
open(&(0x7f0000000080)='./file1\x00', 0x12b842, 0x0) (async)

49.820886026s ago: executing program 1 (id=1359):
clock_adjtime(0x0, &(0x7f00000001c0)={0x8b90, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x2, 0x0, 0x8})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r6}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f00000002c0))
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x25dfdbff, {0xa, 0x0, 0xa1}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x10, 0x455f, 0x6bf4}}]}, 0x40}}, 0x24005040)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0)

47.39125812s ago: executing program 1 (id=1377):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, 0x0, '\x00', 0x0})
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000380)={{0x0, 0x1}, 0x0, 0x1, 0x0, {}, 0x2, 0x3})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r3 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r3, 0x400455c8, 0x2)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', <r5=>0x0, 0x5c, 0x4, 0x9, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x44}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x10, 0x2, 0x4}})
r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={0xffffffffffffffff}, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
fcntl$lock(r7, 0x25, &(0x7f0000000140))
fcntl$lock(r7, 0x24, &(0x7f00000000c0)={0x2})
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=0x1, @ANYBLOB="1d11009704faea000000000000008d1a59d10000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000400"/28], 0x50)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4018}, 0x14)
r10 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fchdir(r10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x15, &(0x7f0000000780)=@raw=[@call={0x85, 0x0, 0x0, 0x40}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @printk={@lld}], &(0x7f0000000540)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', r5, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r6, 0x1, &(0x7f0000000480)=[r7, r8, 0x1, 0xffffffffffffffff, r8, 0xffffffffffffffff, r10, r9, 0xffffffffffffffff, r7, r3], &(0x7f0000000580)=[{0x0, 0x5, 0xb, 0x4}], 0x10, 0xe331, @void, @value}, 0x94)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1abc82)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x82)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0xdb)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x251, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e0, 0x8, 0x0, 0x0}}, 0x10)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x7001, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180))

47.331260591s ago: executing program 35 (id=1377):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, 0x0, '\x00', 0x0})
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000380)={{0x0, 0x1}, 0x0, 0x1, 0x0, {}, 0x2, 0x3})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r3 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r3, 0x400455c8, 0x2)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', <r5=>0x0, 0x5c, 0x4, 0x9, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x44}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x10, 0x2, 0x4}})
r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={0xffffffffffffffff}, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
fcntl$lock(r7, 0x25, &(0x7f0000000140))
fcntl$lock(r7, 0x24, &(0x7f00000000c0)={0x2})
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=0x1, @ANYBLOB="1d11009704faea000000000000008d1a59d10000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000400"/28], 0x50)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4018}, 0x14)
r10 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fchdir(r10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x15, &(0x7f0000000780)=@raw=[@call={0x85, 0x0, 0x0, 0x40}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @printk={@lld}], &(0x7f0000000540)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', r5, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r6, 0x1, &(0x7f0000000480)=[r7, r8, 0x1, 0xffffffffffffffff, r8, 0xffffffffffffffff, r10, r9, 0xffffffffffffffff, r7, r3], &(0x7f0000000580)=[{0x0, 0x5, 0xb, 0x4}], 0x10, 0xe331, @void, @value}, 0x94)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1abc82)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x82)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0xdb)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x251, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e0, 0x8, 0x0, 0x0}}, 0x10)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x7001, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180))

5.5912006s ago: executing program 0 (id=1659):
r0 = dup(0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000001480)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000003880)=[{{&(0x7f0000001080)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001100)="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", 0xfe}, {&(0x7f0000001200)="349cd43733bd2f6e34dc73b438a4903a6cfc7f50bcb8beda6183d8fdad29cf1dca815046ad88258be63252ed6624c453212a18e4a75384902aaf11a709f5f6170cbd042ee9e0739c60fbc10b19587c85b84dc3dafb6a5527a361817830dde51a14b4e76f69dcd7917e3db419181919d56c387a69db7cc50db9aad58261e29735f78b870788e0d3766a970a2cd5c7815baf9a8fc4bcb6f027800f64918d2eac971e8dcd337e9665352a32af43a12837f9ee5a1413e540ec57a738c9d3af0269913708b73366e49d413d61caa678a68613bd0eea4afa671c622725e8455a0dc0ec32341b3f", 0xe4}, {&(0x7f0000001300)="b29395728f84af531d6c5e40ff1d480b2a20bb4f6314131f1a70d9c0ad4ce3c15ecd9ae27f588ea0c689fe9e695955c84205", 0x32}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000001340)="8cb5e6dd7e09c1c69caf10128ccf218da390ec40c6028f4628cb55b6096df92091aa118c21e84dbb710979b05d5b3641de51a9de28487a465858c21c7d0a7bdfb9ba9dab409a02865ffc470f6d9b805b6dcf1fc63ea02a97d86800ba078ee90e0cfde482a83f878a14922cad950deec070578c48fb5fda1a7a2353c37c9aae88f3264b393f248ff12eaf8dad1bb52e44a4f7898cf47ad97654effeee5b70c5ac2014a1554d98a6fb8d5df3de29a6293ce11bb05f1e7d4eb52fe1e344", 0xbc}, {&(0x7f00000037c0)="19906a63685bc322d7976c611da0a318e5b338df3ea63ef1fcac2dc9a0fd05e1e69aff816fe13c16f22f5bda71293bafa13f1abc18175f4e458c27c2f677c3985fc0144d5025d3ba", 0x48}], 0x6, &(0x7f0000002640)=[@cred={{0x18, 0x1, 0x2, {r1}}}], 0x18, 0x4005144}}, {{&(0x7f0000002680)=@abs={0x1, 0x0, 0x4e25}, 0x6e, &(0x7f0000003780)=[{&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000003700)="2ad8ae0cb70b55e8d38b40f2edd76e44d243d9e6ee34c3b948eb088774e9758e324299b50f33e87830ab0f33008ea4c2996c5757f22f476174e4c433d06614997ad075d47c0fca9bb5baa7cf39bebd8d667376fb1bb968159d6494bc205bc3990faef3d2978f30", 0x67}], 0x2, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0c0000000100000001000000180000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="180000df8967e8d2f8dbe500", @ANYRESHEX=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="181000008100000001012000", @ANYRES32, @ANYRES32=r0, @ANYRES32], 0xb4, 0x1}}], 0x2, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
write$proc_mixer(0xffffffffffffffff, &(0x7f0000001040)=ANY=[@ANYRES8, @ANYRESDEC=r1], 0xe6)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = open(0x0, 0x60840, 0x1d2)
fcntl$setlease(r5, 0x400, 0x0)
ioctl$TCSETA(r5, 0x5406, &(0x7f0000000180)={0x80, 0x7, 0x3, 0x8, 0xb, "b8a5a42327f8600b"})
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00')
read$hiddev(r7, &(0x7f0000000100)=""/100, 0x64)
r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_GET_NR_MMU_PAGES(r8, 0xae45, 0x8)
syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$UI_END_FF_UPLOAD(r6, 0x406855c9, &(0x7f0000000480)={0x0, 0x0, {0x0, 0x0, 0x5, {}, {}, @rumble={0x7, 0x9}}, {0x0, 0xa4, 0x0, {}, {}, @ramp={0x0, 0xffff}}})
fsmount(r4, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006)

2.520541398s ago: executing program 0 (id=1678):
syz_clone(0x60002000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 83)

2.290763576s ago: executing program 0 (id=1681):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000020ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0)

2.28810006s ago: executing program 0 (id=1685):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000104facdd8d6d553f2d730000000000000000", @ANYRES16=r1, @ANYRES16=r1], 0x54}, 0x1, 0x0, 0x0, 0x44018}, 0x400c804)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000040)=0xffffff01, 0x4)
r3 = getpid()
r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r4, &(0x7f0000000080), 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x1f, 0x2, 0x7, 0x20000004}})
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0)
sched_setscheduler(r3, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={<r7=>0x0}, &(0x7f0000000080)=0xc)
r8 = getpgrp(r7)
syz_pidfd_open(r8, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r11 = socket(0x200000100000011, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r12=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x000T', @ANYRES16=r10, @ANYBLOB="01002bbd7000fcdbdf250300000005000200f200000005000500000000000c00018008000100", @ANYRES32=r12, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40)
r13 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
setuid(0xee00)
ioctl$sock_bt_bnep_BNEPCONNADD(r13, 0x400442c8, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRESOCT=r9, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7090000000000001801000020646c0a00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x41f, &(0x7f0000001440)=ANY=[@ANYRES64=r8], 0x0)
epoll_create(0x5)

2.228486412s ago: executing program 0 (id=1688):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f00000001c0), 0x2000000000000112}, 0x3268455f}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/171, 0xab}], 0x1}, 0xfffffff9}], 0x2, 0x2, 0x0)
fsopen(&(0x7f0000000100)='binfmt_misc\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xd)
r2 = dup(r1)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {}, {}, {}, {}, {}, {0x100}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x10010, r6, 0xb5e9f000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)

1.61111042s ago: executing program 4 (id=1692):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8, 0xa, r1}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000380)='sessionid\x00')
pread64(r4, 0x0, 0x0, 0x4)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r7=>0x0})
fsetxattr(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="62747266732e7dc05e262b5d2a00"], &(0x7f0000000400)='-\x00', 0x2, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r7, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x500)

1.460056479s ago: executing program 4 (id=1694):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x2ec, 0x0, 0x60, 0xd0e0000, 0x140, 0x100, 0x258, 0x1d8, 0x1d8, 0x258, 0x1d8, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x7000000, 0x0, 'dvmrp1\x00', 'veth1_to_hsr\x00', {}, {}, 0x33}, 0xee02, 0xd8, 0x140, 0x0, {}, [@common=@unspec=@limit={{0x3c}, {0x0, 0xffff}}, @common=@ah={{0x2c}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'lo\x00', 'bridge0\x00'}, 0x9400, 0xb8, 0x118, 0x94, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv4=@empty}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x348)

1.371483857s ago: executing program 4 (id=1696):
mkdir(&(0x7f0000000400)='./file0\x00', 0x101) (async)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f00000004c0))
pipe2$9p(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) (async, rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) (async, rerun: 32)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

1.324772133s ago: executing program 7 (id=1698):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) (async)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={<r4=>0x0, @broadcast, @private}, &(0x7f00000000c0)=0xc)
setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000100)={@remote, @empty, r4}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x4, 0x51, 0x5, 0xe5d9, 0x8, @mcast2, @mcast1, 0x20, 0x20, 0x100, 0x362}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', <r5=>0x0, 0x4, 0x51, 0x5, 0xe5d9, 0x8, @mcast2, @mcast1, 0x20, 0x20, 0x100, 0x362}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, 0x1040}}, 0x20}}, 0x400c004)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000140)={'sit0\x00', <r9=>0x0, 0x7800, 0x80, 0x7f, 0x401, {{0x4d, 0x4, 0x1, 0x5, 0x134, 0x68, 0x0, 0x0, 0x0, 0x0, @remote, @remote, {[@end, @ssrr={0x89, 0x1f, 0x3a, [@dev={0xac, 0x14, 0x14, 0x44}, @remote, @rand_addr=0x64010101, @empty, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x77, 0xffffffffffffffff, [{0x7, 0xb, "4340e0c754d86fbefb"}, {0x5, 0x12, "fbf95607840d58284a5e1ca7df5c6935"}, {0x0, 0x2}, {0x5, 0x9, "b869b20bc5df2d"}, {0x7, 0xf, "b2ecd2f98a8e8a53de587b2597"}, {0x1, 0xf, "db00476b84976bd397630078ae"}, {0x0, 0xa, "c57536ad82ad5a2d"}, {0x5, 0x9, "b5c625e6351dee"}, {0x0, 0xa, "cf50fad5e1aa62c7"}, {0x7, 0xe, "98b205fe604df28d334d9686"}]}, @lsrr={0x83, 0xb, 0x54, [@broadcast, @loopback]}, @lsrr={0x83, 0x1b, 0x27, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xb}, @local]}, @timestamp_prespec={0x44, 0x2c, 0xbf, 0x3, 0x0, [{@loopback, 0x800}, {@private=0xa010101, 0x6}, {@rand_addr=0x64010101, 0x2}, {@multicast1, 0x3}, {@multicast1, 0xb3b}]}, @cipso={0x86, 0xd, 0x1, [{0x2, 0x7, "05064098a2"}]}, @rr={0x7, 0x27, 0xa4, [@dev={0xac, 0x14, 0x14, 0x3a}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @multicast2, @remote, @loopback, @broadcast]}]}}}}})
sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@ipv4_delroute={0x6c, 0x19, 0x200, 0x70bd27, 0x25dfdbff, {0x2, 0x14, 0x0, 0x6, 0xfc, 0x3, 0x158, 0xa, 0x2000}, [@RTA_IIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x371c, 0x10, 0x6, r4}}, @RTA_PRIORITY={0x8, 0x6, 0x7}, @RTA_IIF={0x8, 0x3, r5}, @RTA_GATEWAY={0x8, 0x5, @multicast1}, @RTA_MARK={0x8}, @RTA_PREFSRC={0x8, 0x7, @multicast2}, @RTA_OIF={0x8, 0x4, r8}, @RTA_MULTIPATH={0xc, 0x9, {0x60e, 0x0, 0xd4, r9}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x48084) (async)
sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@ipv4_delroute={0x6c, 0x19, 0x200, 0x70bd27, 0x25dfdbff, {0x2, 0x14, 0x0, 0x6, 0xfc, 0x3, 0x158, 0xa, 0x2000}, [@RTA_IIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x371c, 0x10, 0x6, r4}}, @RTA_PRIORITY={0x8, 0x6, 0x7}, @RTA_IIF={0x8, 0x3, r5}, @RTA_GATEWAY={0x8, 0x5, @multicast1}, @RTA_MARK={0x8}, @RTA_PREFSRC={0x8, 0x7, @multicast2}, @RTA_OIF={0x8, 0x4, r8}, @RTA_MULTIPATH={0xc, 0x9, {0x60e, 0x0, 0xd4, r9}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x48084)

1.249230613s ago: executing program 6 (id=1699):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000340)={0x2020}, 0x2020) (async)
read$FUSE(r2, &(0x7f0000000340)={0x2020}, 0x2020)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) (async)
r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd)
keyctl$revoke(0x3, r3)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) (async)
read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) (async)
write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
utimes(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1b) (async)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1b)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f00000002c0)={0x1, 0x0, 0x5})
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000100), &(0x7f0000006200)=ANY=[@ANYBLOB="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"], 0x0, 0x0)
lseek(r4, 0x9, 0x2)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x8, 0x0)
dup(r0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x4, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='pids.events\x00', 0x26e1, 0x0)
close(r9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r9, 0x8b34, &(0x7f00000001c0)={'virt_wifi0\x00', @random="000300202800"})

1.248975751s ago: executing program 4 (id=1700):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x24004800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x11)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x9, 0x5, 0x5ed, 0x10000, r4, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0xc, @void, @value, @value=r5}, 0x50)
close(r7)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000400"/18], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0)
fstat(r8, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
setresuid(0x0, 0x0, r9)
r10 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
ioctl$LOOP_SET_STATUS64(r10, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x281, 0x0, 0x12, 0x14, 0x20, "95ad4489a25673b5a955f5f736ef1f1c033d36c0ee69107626f72875ceb9332cb79ea25534348f613b34a61a895ec716fbdbbfe992a25b1f2a25f36b0fad5d99", "4a1982d41c7c4e8f704adce76f19e1f6b54de1571daea73904d4af73e6f9d403919e5f74b51629df746181d1ffbfcd1d5b56e8615f129d343b1aec97cbd8d551", "1b5a0325815abc1c406400", [0x0, 0x7]})
syz_emit_ethernet(0x38b, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)

1.160748394s ago: executing program 6 (id=1701):
clock_adjtime(0x0, &(0x7f00000001c0)={0x8b90, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x2, 0x0, 0x8})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r6}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f00000002c0))
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x25dfdbff, {0xa, 0x0, 0xa1}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x10, 0x455f, 0x6bf4}}]}, 0x40}}, 0x24005040)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0)

1.159695639s ago: executing program 7 (id=1702):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x6)
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0)
writev(r0, &(0x7f0000000b00)=[{&(0x7f0000000940)='\n', 0xfdef}], 0x1)
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000))
mmap(&(0x7f000054f000/0x1000)=nil, 0x1000, 0xa, 0x100010, 0xffffffffffffffff, 0x40000)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000001380)=0x5, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r4=>0x0})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
r5 = gettid()
prlimit64(r5, 0xc, &(0x7f0000000000)={0x8000, 0x1}, 0x0)
r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
r7 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r9, 0x0, 0x0, 0x0)
sched_setaffinity(r7, 0x0, 0x0)
recvmmsg(r8, 0x0, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0xfffd, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r10, 0x2000009)
sendfile(r6, r10, 0x0, 0x7ffff000)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000005880)={0x1d, r4, 0x400000000002}, 0x18)

1.000927536s ago: executing program 6 (id=1703):
r0 = epoll_create1(0x0)
eventfd2(0x0, 0x0)
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
epoll_pwait2(r0, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r3, &(0x7f0000000000), 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xd0}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a120, 0x60})
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0)
ioctl$SG_IO(r5, 0x2285, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="18000001f000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa005e850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r7}, 0x10)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsetxattr$system_posix_acl(r8, &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000004680)={{}, {0x1, 0x2}, [], {0x4, 0x2}, [{0x8, 0x4, 0xffffffffffffffff}], {0x10, 0x1}, {0x20, 0x2}}, 0x2c, 0x2)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
writev(r5, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e2400a0000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9", 0x2a}], 0x2)

919.457366ms ago: executing program 0 (id=1704):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x1, 0x803, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00'})
mkdir(0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
close(0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x0, 0x20020, &(0x7f0000000140)=""/24}, &(0x7f0000000380)="851666ce20db", 0x0, 0xfffffffb, 0x39, 0x0, 0x0})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
lseek(r6, 0xfffffffffffffffb, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)

315.611811ms ago: executing program 4 (id=1705):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') (async, rerun: 64)
umount2(&(0x7f0000000340)='./file0\x00', 0x0) (rerun: 64)

231.204841ms ago: executing program 7 (id=1706):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000240), 0x2, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2b63707573e0a02e"], 0x8)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0x0)
ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f00000000c0))
ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000100)={"4689d4c4841a41c9e4641d9d", 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x80}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xa, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000881}, 0x0)
bind$inet(r4, 0x0, 0x0)
r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r8, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
write$uinput_user_dev(r8, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3b6, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x54, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c)
ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r8, 0x5501)
close_range(r7, 0xffffffffffffffff, 0x0)

230.417119ms ago: executing program 4 (id=1707):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x74, 0x30, 0x1, 0x8000, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x0, 0x10000004, 0x4}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0xc0}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x700}}, {0xc}}}]}]}, 0x74}}, 0x0)

71.319653ms ago: executing program 6 (id=1708):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r1, @ANYBLOB="0a000600080211000001000005001900020000000500e400460100000600b500460100000500740006000000050013010100000006001200070000000600ed00c0"], 0x94}}, 0x4000)

70.861159ms ago: executing program 7 (id=1709):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200"])
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000780)=""/99, 0x63}, {&(0x7f0000000800)=""/39, 0x27}], 0x2, &(0x7f0000000880)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})
sendmsg$tipc(r1, &(0x7f0000000700)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x1}}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000180)="68374199fc863aba844cfd374d939dd4bfc8632a18fda891b6df3c36286a69c96d7c15e831aae28248b3927af286e83575ee471caf8e187570eb8bece4387b98857c9cc1ce15ff91105b35bba3b664a3b6d13f073570952c07d8958c2e2cc98688df493272ade5090d6d9c37c3d2a7782f71dc3fe825a202a2725665966b0f1dca3892768b5d6229a0ef07eea31ed5138b587219c084d9f2109eb0d2cbe35344aa8b46a22b84f52e063dcaef183fb5724a8984c8822721", 0xb7}, {&(0x7f0000000240)="40af330fdc6acd659e3585", 0xb}, {&(0x7f0000000280)="005ad4300bfd9bf808761b0f1827bab4d20dfcdb83c272b770945959e5", 0x1d}, {&(0x7f00000002c0)="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", 0xfd}, {&(0x7f00000003c0)="4d3b511955a74dee5a5469bf9c9f3ee508dac8c385c0c41fe52243e64b6e26ec237de447abdc71b09b18865fd8c96db9378bb1b2568522d61abfb097061779f978f5ba3170d945f6ed5867cfdb3a02ad62deed825017025b118e1ab893cf3fe6e56378a5c514eaf80af1f55ef2dc757ca2f33ce4444782ac53515c6e70d253602c84c023774ce3553aad5cd3139114d7e53a34878fffd00affb72448460335fc240053ad683d9355456639925d41f7dcdc7097984fd79740", 0xb8}, {&(0x7f0000000480)="96077b34e4a39017a58e243aadf539ca0b2e8bd17eb63474ca3bf9fd309bbdf6dd366157c3837fe071db725247212f243b95ae772e95", 0x36}, {&(0x7f00000004c0)="241c6b7322f9f65edb31db52482620fbf4035fc62eead5fc5c9ade0956fe0d1cfda9ecf879a1f7944391ce4422d3c9e1023a330ea86aeac50e6ca449f8632d185787463f153a4d0b18b6e76d140bbcbcaff17d2b4c36cec9bec0cc4b0775d13df4e391b68b46b24c5bb937215512518cd146933d065c3bdeed2365f36bfb903cdb6071899fc653337d1b6101577b133d088ea8ad2d1a6c687d9d16548a266c0e6776678e50524e837f61fc08b4be4de7fc5bd42c483710f26f16bc80fe22907714c51c55929f0729c9ce05f6e633275c6293f2a70280f8ce2fe35bbb6d7a74c6b4249684dfb050b38e5090d07c14", 0xee}], 0x7, &(0x7f0000000600)="7c9f6bb2591790ead2c59c3f6135cfbcc9716305fd4dbd019f5cd84879c5eddeaddde8e9eb7301af7937ae4afde192eb27598903a7cba1d2787ef2f20d3d94a56560bce42a72e2f9a8b1edd1dd94bb1aea85f3fbdaf6399a8fb04d501c39660171adbfe8b71cbeca0f05a06ce1e908eac7f4e7880e8fb5b8781a87598f27e541d1eb0bf4054eec9a9e3ffb1ed5d64d9565795f4943864c1410887150433b184d110da125252cfdead5988c082d6ac22b64c36cddb17280f7978f4a4557dde8ac6d55e7b72129bd810f5ee7a2419effffb6e5ba62f0a4c1ae", 0xd8, 0x4048001}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000080)={0xbc, 0x0, 0x3})

67.379442ms ago: executing program 6 (id=1710):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x5dec950e14b1d20a, 0x12, r2, 0x67dbd000)
syz_io_uring_setup(0x48be, &(0x7f0000000000)={0x0, 0x0, 0x60}, &(0x7f00000011c0), 0x0)

67.03641ms ago: executing program 7 (id=1711):
clock_adjtime(0x0, &(0x7f00000001c0)={0x8b90, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x2, 0x0, 0x8})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r6}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f00000002c0))
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x25dfdbff, {0xa, 0x0, 0xa1}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x10, 0x455f, 0x6bf4}}]}, 0x40}}, 0x24005040)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0)

824.847µs ago: executing program 6 (id=1712):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f00000001c0), 0x2000000000000112}, 0x3268455f}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/171, 0xab}], 0x1}, 0xfffffff9}], 0x2, 0x2, 0x0)
fsopen(&(0x7f0000000100)='binfmt_misc\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xd)
r2 = dup(r1)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {}, {}, {}, {}, {}, {0x100}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x10010, r6, 0xb5e9f000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)

0s ago: executing program 7 (id=1713):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_dccp(0xa, 0x6, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r1, &(0x7f0000000440)=""/247, 0x26)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x10f, @time, 0x0, {0x0, 0x7}})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0xc0bc5310, &(0x7f0000000040)={0x0, @time={0x6, 0x2}, 0x0, {0x8d}, 0x6, 0x0, 0x1})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
userfaultfd(0x80001)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x1e, 0x1, 0x0)
connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$RTC_PIE_ON(r3, 0x7005)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {}, {}, {0x1}, {}, {0xfffffffa, 0x6}], 0x0, 0x0, 0x8, 0x0, 0x1}})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000240)={[{0x8000, 0x10, 0xff, 0x91, 0x80, 0xd, 0x9d, 0x0, 0x80, 0x8, 0x3, 0x5, 0x3}, {0x90f, 0x200, 0xd, 0xeb, 0x1, 0x10, 0x2, 0x4f, 0xb, 0x4, 0xf2, 0x7, 0xbc1e}, {0x1, 0x7, 0x73, 0x1, 0x5, 0x7e, 0x8, 0x6, 0x2, 0x3, 0x7, 0x6, 0x100}], 0x8001})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$ax25(0x3, 0x7, 0xca)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0)
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xcc, 0xe, &(0x7f0000000540)="03e03abf69a3dea5669e965ccaf701ad8e7806d5d46c83a1ef452313d71b704e24b1c7fd2573f9b49c4e14286421d6cbd60887010e4b2de08af650f009ca9afb5daac82ca2a700f99db97f44ed7005ff71de7c45e0f06d760fd98b789937653bbd751a08e0c48ff3481e14b0bc89bfdffa718abc3f9ad52e6f8008fa2627a1a53198cf9ea9185328d29e194828e66e93a1732f26ce43b8831f91d27306a62995bd9395e8afb7d067dfb1e8019a2e5dfae216156b114c95dd04321d00db6d30df3f6f851dfed8c904120fa6dd", &(0x7f0000000300)=""/14, 0x6, 0x0, 0xae, 0x8b, &(0x7f0000000640)="bf083ffa88d632d70ea0a808b52eda180a7b459906778f5abca14622664b4b056c52d36912cf45da8e46299fd70219b3d13e2617ef4bd7cf2b95c657c982d4ef23655fb411e7868f4de51d975d33130666dc042a322134c2fc2a205116ca1a08e753e26ccf1769eeeb814c04f063e06a8fffbac9a160f5d83ab70fbd4fcf41fc7d73133a63e21f54246b15b6bb77fce70a067af5b6f70a590bbd5fbd268353c42985f35e67feedd573e9e382dc42", &(0x7f0000000700)="bc4fad35db580fbc4009470a2a722b0e6516a4a979bc863a77d4eb47df18e24c1d514931c80142d7bbbe00e17a21de063801290ef3941a92a0bdb9c1a22d81505cd87aa33ce1bb45f6cd44e0f35686783833d34865b6d375a39bd5fd893a7b97a1ebd685a298c9ba071d68fcaa9e95a98589fbac51e10fc407b0eaaac0d9855ea7769430b7633442239919", 0x2, 0x0, 0x200}, 0x4c)
mbind(&(0x7f0000be0000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x1000000000000085, 0x4, 0x0)

kernel console output (not intermixed with test programs):

tting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  162.513765][ T1477] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  162.516678][ T1477] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  162.518956][ T1477] usb 10-1: Product: syz
[  162.520197][ T1477] usb 10-1: Manufacturer: syz
[  162.524399][ T1477] cdc_wdm 10-1:1.0: skipping garbage
[  162.525953][ T1477] cdc_wdm 10-1:1.0: skipping garbage
[  162.529194][ T1477] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  162.531069][ T1477] cdc_wdm 10-1:1.0: Unknown control protocol
[  162.727560][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  162.730306][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  162.733211][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  162.735691][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  162.738142][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  162.740622][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  162.743090][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  162.745575][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  162.748016][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  162.750523][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  162.753018][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  162.755538][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  162.758032][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  162.760524][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  162.763048][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  162.765553][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  162.767997][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  162.770216][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  162.772689][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  162.775155][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  162.813955][ T8681] random: crng reseeded on system resumption
[  162.862365][ T7547] usb 10-1: USB disconnect, device number 6
[  163.430282][ T8684] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  163.572915][ T8692] dvmrp0: entered allmulticast mode
[  163.687355][ T8696] FAULT_INJECTION: forcing a failure.
[  163.687355][ T8696] name failslab, interval 1, probability 0, space 0, times 0
[  163.691352][ T8696] CPU: 3 UID: 0 PID: 8696 Comm: syz.0.603 Not tainted 6.13.0-rc6-syzkaller-00290-gbe548645527a #0
[  163.694376][ T8696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  163.697446][ T8696] Call Trace:
[  163.698411][ T8696]  <TASK>
[  163.699267][ T8696]  dump_stack_lvl+0x16c/0x1f0
[  163.700637][ T8696]  should_fail_ex+0x497/0x5b0
[  163.702000][ T8696]  ? fs_reclaim_acquire+0xae/0x150
[  163.703477][ T8696]  should_failslab+0xc2/0x120
[  163.704850][ T8696]  kmem_cache_alloc_noprof+0x6e/0x3b0
[  163.706399][ T8696]  ? vm_area_dup+0x21/0x300
[  163.707712][ T8696]  vm_area_dup+0x21/0x300
[  163.708961][ T8696]  copy_mm+0xd89/0x25b0
[  163.710182][ T8696]  ? __pfx_copy_mm+0x10/0x10
[  163.711523][ T8696]  ? copy_process+0x3ca7/0x6f20
[  163.712935][ T8696]  ? __raw_spin_lock_init+0x3a/0x110
[  163.714394][ T8696]  copy_process+0x3e6d/0x6f20
[  163.715758][ T8696]  ? __pfx_copy_process+0x10/0x10
[  163.717211][ T8696]  ? find_held_lock+0x2d/0x110
[  163.718592][ T8696]  kernel_clone+0xfd/0x960
[  163.719879][ T8696]  ? __pfx_kernel_clone+0x10/0x10
[  163.721374][ T8696]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  163.723098][ T8696]  __do_compat_sys_ia32_clone+0xb7/0x100
[  163.724719][ T8696]  ? __pfx___do_compat_sys_ia32_clone+0x10/0x10
[  163.726519][ T8696]  __do_fast_syscall_32+0x73/0x120
[  163.727999][ T8696]  do_fast_syscall_32+0x32/0x80
[  163.729421][ T8696]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  163.731246][ T8696] RIP: 0023:0xf70ce579
[  163.732433][ T8696] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  163.737911][ T8696] RSP: 002b:00000000f509f50c EFLAGS: 00000246 ORIG_RAX: 0000000000000078
[  163.740296][ T8696] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000
[  163.742560][ T8696] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  163.744830][ T8696] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  163.747101][ T8696] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  163.749379][ T8696] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  163.751661][ T8696]  </TASK>
[  163.851013][ T8702] fuse: Unknown parameter '0x00000000000000030x0000000000000003'
[  164.876448][ T8688] xt_recent: hitcount (117440512) is larger than allowed maximum (65535)
[  165.480978][ T5294] Bluetooth: hci2: command 0x0c1a tx timeout
[  165.691504][ T8735] netlink: 'syz.4.608': attribute type 1 has an invalid length.
[  165.693965][ T8735] netlink: 224 bytes leftover after parsing attributes in process `syz.4.608'.
[  165.928490][ T8734] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  166.403646][ T8760] netlink: 'syz.0.613': attribute type 1 has an invalid length.
[  166.405903][ T8760] netlink: 224 bytes leftover after parsing attributes in process `syz.0.613'.
[  166.460491][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.617'.
[  166.940236][ T8780] netlink: 36 bytes leftover after parsing attributes in process `syz.4.622'.
[  166.946088][ T8780] netlink: 16 bytes leftover after parsing attributes in process `syz.4.622'.
[  166.949218][ T8780] netlink: 36 bytes leftover after parsing attributes in process `syz.4.622'.
[  166.955210][ T8780] netlink: 36 bytes leftover after parsing attributes in process `syz.4.622'.
[  167.861128][ T8789] netlink: 'syz.4.624': attribute type 10 has an invalid length.
[  169.496936][ T8832] netlink: 20 bytes leftover after parsing attributes in process `syz.1.632'.
[  169.904402][ T8838] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  170.573241][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.5.635'.
[  170.576193][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.635'.
[  170.579391][ T8849] netlink: 'syz.5.635': attribute type 14 has an invalid length.
[  170.981057][  T146] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  172.460113][ T8902] loop6: detected capacity change from 0 to 524287999
[  172.468789][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0
[  172.485882][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  172.489627][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  172.505218][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  172.508929][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  172.531308][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  172.533965][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  172.538274][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  172.541003][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  172.543641][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  172.546329][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  172.676292][    C1] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  172.679475][    C0] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  172.682946][    C0] Buffer I/O error on dev loop6, logical block 65535968, async page read
[  173.339705][ T8925] xt_hashlimit: size too large, truncated to 1048576
[  173.351045][  T146] usb 10-1: device descriptor read/64, error -71
[  173.584754][  T146] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  173.733272][  T146] usb 10-1: config 0 has no interfaces?
[  173.737386][  T146] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  173.741108][  T146] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  173.744237][  T146] usb 10-1: Product: syz
[  173.745582][  T146] usb 10-1: Manufacturer: syz
[  173.748261][  T146] usb 10-1: config 0 descriptor??
[  173.949602][ T8915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.953632][ T8915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.170614][ T8915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.182204][ T8915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.324011][ T8915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.343386][ T8915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.401526][ T8950] sctp: [Deprecated]: syz.1.660 (pid 8950) Use of int in max_burst socket option deprecated.
[  174.401526][ T8950] Use struct sctp_assoc_value instead
[  174.482340][ T5983] usb 10-1: USB disconnect, device number 8
[  174.580202][ T8956] netlink: 'syz.4.663': attribute type 12 has an invalid length.
[  174.583293][ T8956] netlink: 'syz.4.663': attribute type 29 has an invalid length.
[  174.586387][ T8956] netlink: 'syz.4.663': attribute type 2 has an invalid length.
[  174.590018][ T8956] netlink: 'syz.4.663': attribute type 2 has an invalid length.
[  174.593463][ T8956] netlink: 'syz.4.663': attribute type 1 has an invalid length.
[  174.596499][ T8956] netlink: 'syz.4.663': attribute type 37 has an invalid length.
[  174.600536][ T8956] netlink: 'syz.4.663': attribute type 2 has an invalid length.
[  174.939469][    C2] vkms_vblank_simulate: vblank timer overrun
[  175.559708][ T8974] loop2: detected capacity change from 0 to 7
[  175.562974][ T8974] Dev loop2: unable to read RDB block 7
[  175.565259][ T8974]  loop2: unable to read partition table
[  175.567605][ T8974] loop2: partition table beyond EOD, truncated
[  175.570080][ T8974] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  175.619843][ T8976] __nla_validate_parse: 2 callbacks suppressed
[  175.619858][ T8976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.669'.
[  175.740993][ T8980] FAULT_INJECTION: forcing a failure.
[  175.740993][ T8980] name failslab, interval 1, probability 0, space 0, times 0
[  175.745024][ T8980] CPU: 3 UID: 0 PID: 8980 Comm: syz.1.670 Not tainted 6.13.0-rc6-syzkaller-00290-gbe548645527a #0
[  175.748087][ T8980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  175.751246][ T8980] Call Trace:
[  175.752266][ T8980]  <TASK>
[  175.753224][ T8980]  dump_stack_lvl+0x16c/0x1f0
[  175.754622][ T8980]  should_fail_ex+0x497/0x5b0
[  175.756003][ T8980]  ? fs_reclaim_acquire+0xae/0x150
[  175.757516][ T8980]  should_failslab+0xc2/0x120
[  175.758931][ T8980]  kmem_cache_alloc_noprof+0x6e/0x3b0
[  175.760537][ T8980]  ? vm_area_dup+0x21/0x300
[  175.761913][ T8980]  vm_area_dup+0x21/0x300
[  175.763334][ T8980]  copy_mm+0xd89/0x25b0
[  175.764580][ T8980]  ? __pfx_copy_mm+0x10/0x10
[  175.765913][ T8980]  ? copy_process+0x3ca7/0x6f20
[  175.767364][ T8980]  ? __raw_spin_lock_init+0x3a/0x110
[  175.768964][ T8980]  copy_process+0x3e6d/0x6f20
[  175.770390][ T8980]  ? __pfx_copy_process+0x10/0x10
[  175.771908][ T8980]  ? find_held_lock+0x2d/0x110
[  175.773407][ T8980]  kernel_clone+0xfd/0x960
[  175.774722][ T8980]  ? __pfx_kernel_clone+0x10/0x10
[  175.776182][ T8980]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  175.777890][ T8980]  __do_compat_sys_ia32_clone+0xb7/0x100
[  175.779538][ T8980]  ? __pfx___do_compat_sys_ia32_clone+0x10/0x10
[  175.781431][ T8980]  __do_fast_syscall_32+0x73/0x120
[  175.783034][ T8980]  do_fast_syscall_32+0x32/0x80
[  175.784560][ T8980]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  175.786418][ T8980] RIP: 0023:0xf7f71579
[  175.787630][ T8980] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  175.793617][ T8980] RSP: 002b:00000000f50a550c EFLAGS: 00000246 ORIG_RAX: 0000000000000078
[  175.796833][ T8980] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000
[  175.799841][ T8980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  175.802891][ T8980] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  175.805921][ T8980] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  175.808946][ T8980] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  175.812568][ T8980]  </TASK>
[  176.354193][ T8993] fuse: Bad value for 'user_id'
[  176.357748][ T8993] fuse: Bad value for 'user_id'
[  176.448200][ T8995] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  176.466353][ T8995] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  176.839923][ T8999] netlink: 20 bytes leftover after parsing attributes in process `syz.4.675'.
[  176.843437][ T8999] netlink: 20 bytes leftover after parsing attributes in process `syz.4.675'.
[  177.222177][   T39] audit: type=1326 audit(1736757249.385:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.0.678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  177.228330][   T39] audit: type=1326 audit(1736757249.385:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.0.678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  177.328190][ T9023] Bluetooth: Invalid esc byte 0x00
[  177.928217][   T70] Bluetooth: (null): Invalid header checksum
[  177.930203][   T70] Bluetooth: (null): Invalid header checksum
[  177.932500][   T70] Bluetooth: (null): Invalid header checksum
[  177.934613][   T70] Bluetooth: (null): Invalid header checksum
[  177.936719][   T70] Bluetooth: (null): Invalid header checksum
[  177.938728][   T70] Bluetooth: (null): Invalid header checksum
[  177.941358][   T70] Bluetooth: (null): Invalid header checksum
[  178.049772][   T11] Bluetooth: (null): Invalid header checksum
[  178.129435][ T9036] netlink: 36 bytes leftover after parsing attributes in process `syz.1.682'.
[  178.133049][ T9036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.682'.
[  178.157508][ T9036] netlink: 36 bytes leftover after parsing attributes in process `syz.1.682'.
[  178.166840][   T70] Bluetooth: (null): Invalid header checksum
[  178.172203][ T9036] netlink: 36 bytes leftover after parsing attributes in process `syz.1.682'.
[  179.831808][ T9055] vlan2: entered promiscuous mode
[  179.833739][ T9055] bond0: entered promiscuous mode
[  179.835294][ T9055] bond_slave_0: entered promiscuous mode
[  179.839101][ T9055] bond_slave_1: entered promiscuous mode
[  179.840789][ T9055] batadv0: entered promiscuous mode
[  179.846219][ T9055] bond0: left promiscuous mode
[  179.847682][ T9055] bond_slave_0: left promiscuous mode
[  179.849299][ T9055] bond_slave_1: left promiscuous mode
[  179.850915][ T9055] batadv0: left promiscuous mode
[  179.866067][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.688'.
[  179.872193][ T9057] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.878691][ T9057] batadv_slave_0: entered promiscuous mode
[  180.246057][ T9067] netlink: 'syz.1.692': attribute type 1 has an invalid length.
[  180.248516][ T9067] netlink: 224 bytes leftover after parsing attributes in process `syz.1.692'.
[  180.490520][ T9070] netlink: 52 bytes leftover after parsing attributes in process `syz.0.693'.
[  180.524922][ T9077] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  180.581457][ T9079] vlan2: entered promiscuous mode
[  181.561696][ T9090] tmpfs: Unknown parameter 'gyd'
[  182.547662][ T9105] siw: device registration error -23
[  182.825696][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.703'.
[  182.829097][ T9109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.703'.
[  182.905744][ T9111] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  183.075787][   T39] audit: type=1326 audit(1736757255.349:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.4.706" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000
[  183.082864][   T39] audit: type=1326 audit(1736757255.349:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.4.706" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7fd0579 code=0x7ffc0000
[  183.089021][   T39] audit: type=1326 audit(1736757255.349:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.4.706" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000
[  183.095187][   T39] audit: type=1326 audit(1736757255.349:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.4.706" exe="/syz-executor" sig=0 arch=40000003 syscall=396 compat=1 ip=0xf7fd0579 code=0x7ffc0000
[  183.101212][   T39] audit: type=1326 audit(1736757255.349:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.4.706" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000
[  183.107353][   T39] audit: type=1326 audit(1736757255.349:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.4.706" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd0579 code=0x7ffc0000
[  183.113701][   T39] audit: type=1326 audit(1736757255.349:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.4.706" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000
[  183.119772][   T39] audit: type=1326 audit(1736757255.349:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.4.706" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fd0579 code=0x7ffc0000
[  183.125919][   T39] audit: type=1326 audit(1736757255.349:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.4.706" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000
[  183.134539][   T39] audit: type=1326 audit(1736757255.349:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.4.706" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000
[  183.242992][ T9124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.709'.
[  183.245590][ T9124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.709'.
[  183.387344][ T9131] netlink: 'syz.4.711': attribute type 27 has an invalid length.
[  183.477778][ T9131] bridge0: port 3(syz_tun) entered disabled state
[  183.498053][ T9131] infiniband syz0: set down
[  183.500168][ T9131] tipc: Resetting bearer <eth:team0>
[  183.528702][ T9131] geneve0: left allmulticast mode
[  183.579039][ T9133] bridge0: port 3(syz_tun) entered blocking state
[  183.581736][ T9133] bridge0: port 3(syz_tun) entered forwarding state
[  183.586290][ T9133] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.588451][ T9133] infiniband syz0: set active
[  183.590652][ T9133] infiniband syz0: set active
[  183.592796][ T9133] 8021q: adding VLAN 0 to HW filter on device team0
[  183.594956][ T9133] tipc: Resetting bearer <eth:team0>
[  183.600970][ T9133] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  183.759880][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'.
[  184.053465][ T9138] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  184.315578][ T9142] input: syz1 as /devices/virtual/input/input34
[  184.564155][ T9134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.247593][ T9154] netlink: 64 bytes leftover after parsing attributes in process `syz.4.718'.
[  185.250219][ T9154] nbd: illegal input index -28
[  185.290959][ T9152] syz_tun: left allmulticast mode
[  185.321947][ T9152] syz_tun: left promiscuous mode
[  185.325798][ T9152] bridge0: port 3(syz_tun) entered disabled state
[  185.514772][ T9152] bridge_slave_0: left allmulticast mode
[  185.516771][ T9152] bridge_slave_0: left promiscuous mode
[  185.518423][ T9152] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.542288][ T9152] bridge_slave_1: left allmulticast mode
[  185.544497][ T9152] bridge_slave_1: left promiscuous mode
[  185.553786][ T9152] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.695358][ T9152] bond0: (slave bond_slave_0): Releasing backup interface
[  185.709451][ T9152] bond0: (slave bond_slave_1): Releasing backup interface
[  185.795495][ T9160] random: crng reseeded on system resumption
[  185.823715][ T9152] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.827187][ T9152] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.830913][ T9152] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.850636][ T9152] batman_adv: batadv0: Removing interface: gretap1
[  185.965624][ T9169] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  186.180767][ T9173] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  186.447776][ T9180] input: syz1 as /devices/virtual/input/input35
[  186.551038][ T9197] overlayfs: conflicting options: nfs_export=on,index=off
[  187.146614][ T9226] Bluetooth: Invalid esc byte 0x00
[  187.201621][  T103] Bluetooth: (null): Invalid header checksum
[  187.204084][  T103] Bluetooth: (null): Invalid header checksum
[  187.319104][  T103] Bluetooth: (null): Invalid header checksum
[  187.429963][   T11] Bluetooth: (null): Invalid header checksum
[  187.596283][ T1137] Bluetooth: (null): Invalid header checksum
[  187.645897][ T1137] Bluetooth: (null): Invalid header checksum
[  187.765371][   T11] Bluetooth: (null): Invalid header checksum
[  187.882961][   T11] Bluetooth: (null): Invalid header checksum
[  188.428079][    T8] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  188.458885][ T9247] loop6: detected capacity change from 0 to 524287999
[  188.464590][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[  188.467853][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  188.470723][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  188.474432][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  188.477648][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  188.484504][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  188.488010][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  188.491591][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  188.495133][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  188.500538][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  188.503986][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  188.538776][    C1] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  188.542974][    C1] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  188.546776][    C1] Buffer I/O error on dev loop6, logical block 65535968, async page read
[  188.586026][    T8] usb 6-1: device descriptor read/64, error -71
[  188.862963][    T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  188.869930][ T9252] input: syz1 as /devices/virtual/input/input36
[  189.234081][    T8] usb 6-1: device descriptor read/64, error -71
[  189.325489][ T9257] netlink: 'syz.0.740': attribute type 4 has an invalid length.
[  189.358065][    T8] usb usb6-port1: attempt power cycle
[  189.704770][    T8] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  189.733024][    T8] usb 6-1: device descriptor read/8, error -71
[  189.930049][ T9264] netlink: 76 bytes leftover after parsing attributes in process `syz.0.743'.
[  189.982033][    T8] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  190.004314][    T8] usb 6-1: device descriptor read/8, error -71
[  190.122845][    T8] usb usb6-port1: unable to enumerate USB device
[  190.241916][ T9271] bio_check_eod: 2 callbacks suppressed
[  190.241958][ T9271] syz.0.743: attempt to access beyond end of device
[  190.241958][ T9271] nbd0: rw=0, sector=2, nr_sectors = 1 limit=0
[  190.573025][ T9274] netdevsim netdevsim4: Direct firmware load for .
[  190.573025][ T9274]  failed with error -2
[  190.576284][ T9274] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  190.576284][ T9274] 
[  191.204657][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.749'.
[  192.347948][ T9303] Bluetooth: Invalid esc byte 0x00
[  192.382042][   T11] Bluetooth: (null): Invalid header checksum
[  192.384307][   T11] Bluetooth: (null): Invalid header checksum
[  192.491165][   T11] Bluetooth: (null): Invalid header checksum
[  192.512478][ T9306] netlink: 68 bytes leftover after parsing attributes in process `syz.4.755'.
[  192.515547][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.755'.
[  192.518231][ T9306] syz_tun: left allmulticast mode
[  192.519812][ T9306] syz_tun: left promiscuous mode
[  192.521623][ T9306] bridge0: port 3(syz_tun) entered disabled state
[  192.525031][ T9306] bridge_slave_1: left allmulticast mode
[  192.526833][ T9306] bridge_slave_1: left promiscuous mode
[  192.528621][ T9306] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.532040][ T9306] bridge_slave_0: left allmulticast mode
[  192.533805][ T9306] bridge_slave_0: left promiscuous mode
[  192.535623][ T9306] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.599730][   T11] Bluetooth: (null): Invalid header checksum
[  192.709929][ T1139] Bluetooth: (null): Invalid header checksum
[  192.818344][ T1139] Bluetooth: (null): Invalid header checksum
[  192.999633][   T11] Bluetooth: (null): Invalid header checksum
[  193.037348][ T1139] Bluetooth: (null): Invalid header checksum
[  193.267405][ T1412] ieee802154 phy0 wpan0: encryption failed: -22
[  193.375777][ T5943] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  193.381895][ T5943] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  193.399447][ T5943] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  193.410391][ T5943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  193.413045][ T5943] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  193.417106][ T5943] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  193.777055][   T39] audit: type=1804 audit(1736757266.151:39): pid=9334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.763" name="/newroot/178/file0/file0" dev="9p" ino=37749333 res=1 errno=0
[  193.794803][   T39] audit: type=1804 audit(1736757266.171:40): pid=9331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.763" name="/newroot/178/file0/file0" dev="9p" ino=37749333 res=1 errno=0
[  194.001975][ T9328] chnl_net:caif_netlink_parms(): no params data found
[  194.076728][ T9328] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.079619][ T9328] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.082497][ T9328] bridge_slave_0: entered allmulticast mode
[  194.085572][ T9328] bridge_slave_0: entered promiscuous mode
[  194.090899][ T9328] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.093790][ T9328] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.097179][ T9328] bridge_slave_1: entered allmulticast mode
[  194.102048][ T9328] bridge_slave_1: entered promiscuous mode
[  194.136462][ T9328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.143120][ T9328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.166846][ T9328] team0: Port device team_slave_0 added
[  194.169772][ T9328] team0: Port device team_slave_1 added
[  194.190330][ T9328] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.192412][ T9328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.200638][ T9328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  194.204507][ T9328] batman_adv: batadv0: Adding interface: batadv_slave_1
[  194.206556][ T9328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.214072][ T9328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  194.237257][ T9328] hsr_slave_0: entered promiscuous mode
[  194.239452][ T9328] hsr_slave_1: entered promiscuous mode
[  194.241539][ T9328] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  194.243762][ T9328] Cannot create hsr debugfs directory
[  194.358725][ T9328] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  194.366622][ T9328] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  194.372181][ T9328] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  194.386472][ T9328] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  194.397285][ T9328] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.399427][ T9328] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.401646][ T9328] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.403737][ T9328] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.436931][ T9328] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.447652][  T103] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.471186][  T103] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.503417][ T9328] 8021q: adding VLAN 0 to HW filter on device team0
[  194.518192][ T9328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  194.521221][ T9328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  194.539465][  T103] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.541601][  T103] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.544212][  T103] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.546308][  T103] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.625703][ T9328] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.736155][ T9328] veth0_vlan: entered promiscuous mode
[  194.740287][ T9328] veth1_vlan: entered promiscuous mode
[  194.752218][ T9328] veth0_macvtap: entered promiscuous mode
[  194.756309][ T9328] veth1_macvtap: entered promiscuous mode
[  194.763214][ T9328] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.770521][ T9328] batman_adv: batadv0: Interface activated: batadv_slave_1
[  194.775368][ T9328] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.778888][ T9328] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.782358][ T9328] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.786166][ T9328] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.815101][  T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.821795][  T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.830385][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.832765][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.921013][ T9366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.768'.
[  194.924789][ T9366] geneve0: entered allmulticast mode
[  194.972623][ T7547] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  195.121619][ T7547] usb 6-1: Using ep0 maxpacket: 8
[  195.489292][ T5294] Bluetooth: hci4: command tx timeout
[  196.922850][ T9398] loop2: detected capacity change from 0 to 7
[  196.925543][ T9398] Dev loop2: unable to read RDB block 7
[  196.927672][ T9398]  loop2: unable to read partition table
[  196.929886][ T9398] loop2: partition table beyond EOD, truncated
[  196.933645][ T9398] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  197.018175][ T9406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.779'.
[  197.021553][ T9406] syz.4.779 (9406) used obsolete PPPIOCDETACH ioctl
[  197.523095][ T7547] usb 6-1: unable to get BOS descriptor or descriptor too short
[  197.527961][ T9409] cgroup: Invalid name
[  197.530977][ T7547] usb 6-1: unable to read config index 0 descriptor/start: -71
[  197.533241][ T7547] usb 6-1: can't read configurations, error -71
[  197.556433][ T5294] Bluetooth: hci4: command tx timeout
[  198.078451][ T9421] mkiss: ax0: crc mode is auto.
[  198.104371][ T9424] input: syz1 as /devices/virtual/input/input38
[  198.585919][ T9450] random: crng reseeded on system resumption
[  198.771240][   T39] audit: type=1800 audit(1736757271.182:41): pid=9455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.789" name="file0" dev="9p" ino=37749333 res=0 errno=0
[  198.881796][ T9459] syzkaller1: entered promiscuous mode
[  198.883434][ T9459] syzkaller1: entered allmulticast mode
[  199.014026][ T9462] netlink: 40 bytes leftover after parsing attributes in process `syz.4.792'.
[  199.627351][ T5294] Bluetooth: hci4: command tx timeout
[  199.893414][ T9484] netlink: 'syz.4.797': attribute type 10 has an invalid length.
[  199.915494][ T9483] netlink: 596 bytes leftover after parsing attributes in process `syz.0.798'.
[  200.355851][ T9487] netlink: 'syz.0.799': attribute type 4 has an invalid length.
[  200.392226][ T9489] futex_wake_op: syz.1.800 tries to shift op by -1; fix this program
[  200.428314][ T9494] fuse: Unknown parameter '0x00000000000000030x0000000000000003'
[  201.696120][ T5294] Bluetooth: hci4: command tx timeout
[  201.774055][ T9522] fuse: Bad value for 'fd'
[  202.392938][ T8083] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  202.556949][ T8083] usb 9-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01
[  202.560561][ T8083] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.564094][ T8083] usb 9-1: Product: syz
[  202.565854][ T8083] usb 9-1: Manufacturer: syz
[  202.567621][ T8083] usb 9-1: SerialNumber: syz
[  202.570706][ T8083] usb 9-1: config 0 descriptor??
[  202.576097][ T8083] go7007 9-1:0.0: Sensoray 2250 found
[  202.578300][ T8083] go7007 9-1:0.0: probe with driver go7007 failed with error -12
[  203.024701][ T9552] netlink: 32 bytes leftover after parsing attributes in process `syz.6.819'.
[  203.038371][ T8083] usb 9-1: USB disconnect, device number 2
[  203.314550][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.822'.
[  203.351730][ T9564] CUSE: unknown device info ""
[  203.353269][ T9564] CUSE: zero length info key specified
[  203.509439][ T9566] overlayfs: lower data-only dirs require metacopy support.
[  203.701509][ T9577] netlink: 'syz.4.828': attribute type 27 has an invalid length.
[  203.767451][ T5294] Bluetooth: hci4: command tx timeout
[  203.797350][  T146] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  203.951124][  T146] usb 6-1: config 0 has no interfaces?
[  203.954537][  T146] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  203.958134][  T146] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  203.960504][  T146] usb 6-1: Product: syz
[  203.961737][  T146] usb 6-1: Manufacturer: syz
[  204.246425][  T146] usb 6-1: config 0 descriptor??
[  204.246588][ T5979] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  204.330869][ T9577] infiniband syz0: set down
[  204.336622][ T9577] tipc: Resetting bearer <eth:team0>
[  204.361354][ T9578] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.363676][ T9578] infiniband syz0: set active
[  204.365408][ T9578] infiniband syz0: set active
[  204.367170][ T9578] 8021q: adding VLAN 0 to HW filter on device team0
[  204.369556][ T9578] tipc: Resetting bearer <eth:team0>
[  204.373897][ T9578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  204.453976][ T9568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.456774][ T9568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.667556][ T9568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.671144][ T9568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.693282][ T9568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.697029][ T9568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.754686][  T146] usb 6-1: USB disconnect, device number 14
[  212.976335][ T9628] netlink: 'syz.1.832': attribute type 4 has an invalid length.
[  212.991833][ T9632] netlink: 'syz.6.833': attribute type 12 has an invalid length.
[  212.994120][ T9632] netlink: 'syz.6.833': attribute type 29 has an invalid length.
[  212.996370][ T9632] netlink: 'syz.6.833': attribute type 2 has an invalid length.
[  212.998697][ T9632] netlink: 'syz.6.833': attribute type 2 has an invalid length.
[  213.000932][ T9632] netlink: 'syz.6.833': attribute type 1 has an invalid length.
[  213.003817][ T9632] netlink: 'syz.6.833': attribute type 37 has an invalid length.
[  213.006116][ T9632] netlink: 'syz.6.833': attribute type 2 has an invalid length.
[  213.008305][ T9632] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.054602][ T9643] netlink: 20 bytes leftover after parsing attributes in process `syz.1.836'.
[  213.443684][ T9625] program syz.0.831 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  214.230445][ T9661] netlink: 'syz.1.841': attribute type 33 has an invalid length.
[  214.371634][ T9630] input: syz1 as /devices/virtual/input/input41
[  215.358874][ T9681] netdevsim netdevsim6: Direct firmware load for .
[  215.358874][ T9681]  failed with error -2
[  215.363489][ T9681] netdevsim netdevsim6: Falling back to sysfs fallback for: .
[  215.363489][ T9681] 
[  215.834523][ T9690] siw: device registration error -23
[  215.866657][ T9689] input: syz1 as /devices/virtual/input/input43
[  216.111592][ T9701] syz0: rxe_newlink: already configured on bond0
[  216.553559][ T9708] tipc: Started in network mode
[  216.555181][ T9708] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  216.558483][ T9708] tipc: Enabled bearer <eth:team0>, priority 0
[  216.677088][ T9715] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢
…D£øUDŒw˜}�z
[  217.225695][ T5979] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  217.583961][ T7547] tipc: Node number set to 11578026
[  217.685711][ T5979] usb 5-1: Using ep0 maxpacket: 32
[  217.688449][ T5979] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  217.690925][ T5979] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  217.696043][ T5979] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  217.699377][ T5979] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  217.703682][ T5979] usb 5-1: config 0 interface 0 has no altsetting 0
[  217.707546][ T5979] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  217.710233][ T5979] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  217.712926][ T5979] usb 5-1: Product: syz
[  217.714231][ T5979] usb 5-1: Manufacturer: syz
[  217.715923][ T5979] usb 5-1: SerialNumber: syz
[  217.727472][ T5979] usb 5-1: config 0 descriptor??
[  217.735215][ T5979] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  217.740702][ T5979] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  217.912692][ T9715] dvmrp0: entered allmulticast mode
[  218.313942][ T9777] netlink: zone id is out of range
[  218.315522][ T9777] netlink: zone id is out of range
[  218.317401][ T9777] netlink: del zone limit has 4 unknown bytes
[  218.723943][ T9785] sp0: Synchronizing with TNC
[  218.755611][ T9790] infiniband syz0: set active
[  218.761332][ T9790] tipc: Resetting bearer <eth:team0>
[  219.021439][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.861'.
[  219.309777][ T9795] cgroup: Invalid name
[  219.478318][ T9797] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  219.879073][   T59] usb 5-1: USB disconnect, device number 8
[  219.883038][   T59] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  220.480573][ T9822] netlink: 'syz.6.867': attribute type 1 has an invalid length.
[  220.482821][ T9822] netlink: 224 bytes leftover after parsing attributes in process `syz.6.867'.
[  221.020128][ T9842] capability: warning: `syz.1.873' uses deprecated v2 capabilities in a way that may be insecure
[  221.111093][ T9846] Bluetooth: Invalid esc byte 0x00
[  221.138918][  T103] Bluetooth: (null): Invalid header checksum
[  221.140884][  T103] Bluetooth: (null): Invalid header checksum
[  221.258037][   T11] Bluetooth: (null): Invalid header checksum
[  221.371373][ T1137] Bluetooth: (null): Invalid header checksum
[  221.490939][ T1137] Bluetooth: (null): Invalid header checksum
[  221.598227][ T1139] Bluetooth: (null): Invalid header checksum
[  221.708800][ T1137] Bluetooth: (null): Invalid header checksum
[  221.817707][  T100] Bluetooth: (null): Invalid header checksum
[  222.005120][  T100] Bluetooth: (null): Invalid header checksum
[  222.096937][ T1139] Bluetooth: (null): Invalid header checksum
[  222.146860][ T1137] Bluetooth: (null): Invalid header checksum
[  223.107673][ T9890] vlan2: entered promiscuous mode
[  223.126020][ T9888] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[  223.286298][ T9896] netlink: 'syz.1.884': attribute type 4 has an invalid length.
[  224.284499][ T5294] Bluetooth: hci2: command 0x0c1a tx timeout
[  224.489748][ T9921] Bluetooth: Invalid esc byte 0x00
[  224.494629][ T9923] netlink: 'syz.1.892': attribute type 33 has an invalid length.
[  224.544917][  T103] Bluetooth: (null): Invalid header checksum
[  224.546733][  T103] Bluetooth: (null): Invalid header checksum
[  224.671356][ T1137] Bluetooth: (null): Invalid header checksum
[  224.875642][ T1137] Bluetooth: (null): Invalid header checksum
[  224.883963][   T11] Bluetooth: (null): Invalid header checksum
[  224.994004][ T1137] Bluetooth: (null): Invalid header checksum
[  225.104292][   T11] Bluetooth: (null): Invalid header checksum
[  225.215349][ T1137] Bluetooth: (null): Invalid header checksum
[  225.696577][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.901'.
[  226.097067][ T9971] syz.1.903: attempt to access beyond end of device
[  226.097067][ T9971] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0
[  226.103206][ T9960] nbd1: detected capacity change from 0 to 67108884
[  226.113703][ T9802] block nbd1: Send control failed (result -89)
[  226.115699][ T9802] block nbd1: Request send failed, requeueing
[  226.119437][ T9802] block nbd1: Dead connection, failed to find a fallback
[  226.125880][ T5294] block nbd1: Receive control failed (result -32)
[  226.126143][ T9971] block nbd1: Dead connection, failed to find a fallback
[  226.131475][ T9971] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  226.133425][   T26] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  226.136512][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  226.137617][ T9802] block nbd1: shutting down sockets
[  226.140945][ T9971] I/O error, dev nbd1, sector 67108882 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  226.142335][   T26] Buffer I/O error on dev nbd1, logical block 0, async page read
[  226.145450][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554441, location=33554441
[  226.154069][ T9971] I/O error, dev nbd1, sector 67108370 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  226.156148][ T9802] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  226.157187][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554185, location=33554185
[  226.160311][ T9802] Buffer I/O error on dev nbd1, logical block 1, async page read
[  226.163293][ T9971] I/O error, dev nbd1, sector 67108880 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  226.165599][ T9802] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  226.168662][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554440, location=33554440
[  226.171547][ T9802] Buffer I/O error on dev nbd1, logical block 2, async page read
[  226.174411][ T9971] I/O error, dev nbd1, sector 67108368 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  226.179842][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554184, location=33554184
[  226.181194][ T9802] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  226.186533][ T9971] I/O error, dev nbd1, sector 67108878 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  226.190296][ T9802] Buffer I/O error on dev nbd1, logical block 3, async page read
[  226.190393][ T9802] Buffer I/O error on dev nbd1, logical block 0, async page read
[  226.195492][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554439, location=33554439
[  226.198048][ T9802] Buffer I/O error on dev nbd1, logical block 1, async page read
[  226.202062][ T9802] Buffer I/O error on dev nbd1, logical block 2, async page read
[  226.205286][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554183, location=33554183
[  226.209513][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554291, location=33554291
[  226.214707][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554035, location=33554035
[  226.219195][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554289, location=33554289
[  226.222592][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554033, location=33554033
[  226.226428][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  226.227474][ T9802] Buffer I/O error on dev nbd1, logical block 3, async page read
[  226.261530][ T9802] Buffer I/O error on dev nbd1, logical block 0, async page read
[  226.268679][ T9802] Buffer I/O error on dev nbd1, logical block 1, async page read
[  226.272578][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  226.272947][ T9802] ldm_validate_partition_table(): Disk read failed.
[  226.277258][ T9802] Dev nbd1: unable to read RDB block 0
[  226.280265][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777220, location=16777220
[  226.288871][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776964, location=16776964
[  226.297463][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777219, location=16777219
[  226.302774][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776963, location=16776963
[  226.308087][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777218, location=16777218
[  226.311849][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776962, location=16776962
[  226.318418][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777070, location=16777070
[  226.322956][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776814, location=16776814
[  226.327954][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777068, location=16777068
[  226.331799][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776812, location=16776812
[  226.333558][ T9802]  nbd1: unable to read partition table
[  226.338699][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  226.354502][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  226.358712][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388609, location=8388609
[  226.373944][ T9802] ldm_validate_partition_table(): Disk read failed.
[  226.379433][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388353, location=8388353
[  226.387364][ T9802] Dev nbd1: unable to read RDB block 0
[  226.389991][ T9802]  nbd1: unable to read partition table
[  226.390075][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388608, location=8388608
[  226.398797][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388352, location=8388352
[  226.403140][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388607, location=8388607
[  226.409891][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388351, location=8388351
[  226.422408][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388459, location=8388459
[  226.427470][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388203, location=8388203
[  226.431773][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388457, location=8388457
[  226.436237][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388201, location=8388201
[  226.439783][ T9971] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  226.443105][ T9971] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1)
[  226.825181][ T9975] syz_tun: entered allmulticast mode
[  226.827221][ T9975] syz_tun: left allmulticast mode
[  226.876313][ T9978] netlink: 52 bytes leftover after parsing attributes in process `syz.6.909'.
[  226.881001][ T9978] capability: warning: `syz.6.909' uses 32-bit capabilities (legacy support in use)
[  226.932866][ T9983] FAULT_INJECTION: forcing a failure.
[  226.932866][ T9983] name failslab, interval 1, probability 0, space 0, times 0
[  226.938746][ T9983] CPU: 1 UID: 0 PID: 9983 Comm: syz.4.910 Not tainted 6.13.0-rc6-syzkaller-00290-gbe548645527a #0
[  226.944106][ T9983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  226.948337][ T9983] Call Trace:
[  226.949680][ T9983]  <TASK>
[  226.950890][ T9983]  dump_stack_lvl+0x16c/0x1f0
[  226.952763][ T9983]  should_fail_ex+0x497/0x5b0
[  226.954549][ T9983]  ? fs_reclaim_acquire+0xae/0x150
[  226.956585][ T9983]  should_failslab+0xc2/0x120
[  226.958449][ T9983]  kmem_cache_alloc_noprof+0x6e/0x3b0
[  226.960597][ T9983]  ? ptlock_alloc+0x1f/0x70
[  226.962407][ T9983]  ptlock_alloc+0x1f/0x70
[  226.964084][ T9983]  pte_alloc_one+0x74/0x390
[  226.965830][ T9983]  __pte_alloc+0x6e/0x3b0
[  226.967483][ T9983]  ? __pfx___pte_alloc+0x10/0x10
[  226.969472][ T9983]  ? __pfx___might_resched+0x10/0x10
[  226.971519][ T9983]  copy_page_range+0x371f/0x5650
[  226.973432][ T9983]  ? __pfx_copy_page_range+0x10/0x10
[  226.975536][ T9983]  ? find_held_lock+0x2d/0x110
[  226.977469][ T9983]  ? __pfx_lock_release+0x10/0x10
[  226.979496][ T9983]  ? lock_acquire+0x2f/0xb0
[  226.981241][ T9983]  ? copy_mm+0x118f/0x25b0
[  226.983004][ T9983]  ? down_write+0x14e/0x200
[  226.984854][ T9983]  ? up_write+0x1b2/0x520
[  226.986600][ T9983]  copy_mm+0x1237/0x25b0
[  226.988333][ T9983]  ? __pfx_copy_mm+0x10/0x10
[  226.990218][ T9983]  ? copy_process+0x3ca7/0x6f20
[  226.992178][ T9983]  ? __raw_spin_lock_init+0x3a/0x110
[  226.994260][ T9983]  copy_process+0x3e6d/0x6f20
[  226.996092][ T9983]  ? __pfx_copy_process+0x10/0x10
[  226.998068][ T9983]  ? find_held_lock+0x2d/0x110
[  226.999057][ T9992] input: syz1 as /devices/virtual/input/input45
[  226.999972][ T9983]  kernel_clone+0xfd/0x960
[  226.999998][ T9983]  ? __pfx_kernel_clone+0x10/0x10
[  227.006067][ T9983]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  227.008392][ T9983]  __do_compat_sys_ia32_clone+0xb7/0x100
[  227.010620][ T9983]  ? __pfx___do_compat_sys_ia32_clone+0x10/0x10
[  227.013231][ T9983]  __do_fast_syscall_32+0x73/0x120
[  227.015210][ T9983]  do_fast_syscall_32+0x32/0x80
[  227.017119][ T9983]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  227.019616][ T9983] RIP: 0023:0xf7fd0579
[  227.021274][ T9983] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  227.028648][ T9983] RSP: 002b:00000000f510550c EFLAGS: 00000246 ORIG_RAX: 0000000000000078
[  227.031886][ T9983] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000
[  227.034899][ T9983] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  227.037987][ T9983] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  227.041034][ T9983] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  227.044119][ T9983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  227.047240][ T9983]  </TASK>
[  227.533132][T10014] netlink: 'syz.0.920': attribute type 10 has an invalid length.
[  228.265494][T10032] netlink: 56 bytes leftover after parsing attributes in process `syz.4.926'.
[  228.304463][ T7547] IPVS: starting estimator thread 0...
[  228.390902][T10038] IPVS: using max 37 ests per chain, 88800 per kthread
[  228.407184][T10043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'.
[  228.409908][T10043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'.
[  228.412848][T10043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'.
[  228.428846][T10046] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  228.859362][T10057] overlayfs: missing 'lowerdir'
[  228.871043][T10057] xt_limit: Overflow, try lower: 0/0
[  229.637178][T10060] netlink: 'syz.0.933': attribute type 2 has an invalid length.
[  230.227644][T10075] netlink: 88 bytes leftover after parsing attributes in process `syz.1.935'.
[  230.231591][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.935'.
[  230.473307][T10083] netlink: 'syz.0.936': attribute type 1 has an invalid length.
[  230.476355][T10083] netlink: 224 bytes leftover after parsing attributes in process `syz.0.936'.
[  230.823580][T10100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.939'.
[  230.826714][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.939'.
[  230.872712][T10100] overlayfs: missing 'workdir'
[  231.153249][T10117] overlay: Bad value for 'workdir'
[  231.382253][T10122] input: syz1 as /devices/virtual/input/input46
[  232.286051][T10135] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  232.574073][T10150] Cannot find del_set index 0 as target
[  232.614437][T10152] vlan2: entered promiscuous mode
[  232.626459][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'.
[  233.016550][T10176] input: syz1 as /devices/virtual/input/input48
[  233.713633][T10184] syz0: rxe_newlink: already configured on bond0
[  234.000871][T10196] vxcan1: tx address claim with dest, not broadcast
[  234.071083][T10194] siw: device registration error -23
[  234.262344][T10203] netdevsim netdevsim1: Direct firmware load for .
[  234.262344][T10203]  failed with error -2
[  234.266565][T10203] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  234.266565][T10203] 
[  235.156077][T10217] netlink: 20 bytes leftover after parsing attributes in process `syz.0.972'.
[  235.215189][T10220] netlink: 'syz.6.973': attribute type 27 has an invalid length.
[  235.473678][T10227] input: syz1 as /devices/virtual/input/input49
[  235.698398][T10220] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.736127][T10220] tipc: Resetting bearer <eth:team0>
[  236.103477][T10220] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  236.118638][T10220] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  236.288244][T10220] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.292136][T10220] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.295834][T10220] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.300155][T10220] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.375755][T10225] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.378971][T10225] 8021q: adding VLAN 0 to HW filter on device team0
[  236.381187][T10225] tipc: Resetting bearer <eth:team0>
[  236.384581][T10225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  236.404261][ T1139] tipc: Resetting bearer <eth:team0>
[  236.450347][T10231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.977'.
[  236.490393][T10233] netlink: 4 bytes leftover after parsing attributes in process `syz.6.976'.
[  236.509529][   T39] audit: type=1326 audit(1736757308.996:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10230 comm="syz.1.977" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x0
[  236.676430][T10241] netlink: 20 bytes leftover after parsing attributes in process `syz.0.975'.
[  236.685893][T10241] netlink: 20 bytes leftover after parsing attributes in process `syz.0.975'.
[  237.041316][T10245] vlan2: entered promiscuous mode
[  237.043684][T10245] bond0: entered promiscuous mode
[  237.045943][T10245] bond_slave_0: entered promiscuous mode
[  237.048219][T10245] bond_slave_1: entered promiscuous mode
[  237.052340][T10245] bond0: left promiscuous mode
[  237.054275][T10245] bond_slave_0: left promiscuous mode
[  237.058981][T10245] bond_slave_1: left promiscuous mode
[  237.373128][T10251] Bluetooth: Invalid esc byte 0x00
[  237.425933][   T11] Bluetooth: (null): Invalid header checksum
[  237.428541][   T11] Bluetooth: (null): Invalid header checksum
[  237.555881][   T12] Bluetooth: (null): Invalid header checksum
[  237.645944][   T75] Bluetooth: (null): Invalid header checksum
[  237.759881][   T75] Bluetooth: (null): Invalid header checksum
[  237.888486][ T1139] Bluetooth: (null): Invalid header checksum
[  237.987651][   T12] Bluetooth: (null): Invalid header checksum
[  238.086060][ T1139] Bluetooth: (null): Invalid header checksum
[  238.250534][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'.
[  239.104550][T10281] netlink: 'syz.0.990': attribute type 1 has an invalid length.
[  239.108444][T10281] netlink: 224 bytes leftover after parsing attributes in process `syz.0.990'.
[  239.300752][T10305] vlan2: entered promiscuous mode
[  239.426665][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.995'.
[  239.426893][T10317] netlink: 'syz.4.996': attribute type 33 has an invalid length.
[  239.432512][T10317] tipc: Resetting bearer <eth:team0>
[  240.849576][T10350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  240.861152][T10350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  241.568722][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1011'.
[  241.649416][T10366] tipc: Resetting bearer <eth:team0>
[  241.739344][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1009'.
[  243.184376][T10413] netlink: 'syz.0.1016': attribute type 1 has an invalid length.
[  243.189083][T10413] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1016'.
[  243.367805][T10426] Cannot find del_set index 0 as target
[  244.623207][T10452] cgroup: Invalid name
[  245.187966][T10460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  246.334973][T10486] netlink: 'syz.6.1040': attribute type 12 has an invalid length.
[  246.337746][T10486] netlink: 'syz.6.1040': attribute type 29 has an invalid length.
[  246.340335][T10486] netlink: 'syz.6.1040': attribute type 2 has an invalid length.
[  246.343351][T10486] netlink: 'syz.6.1040': attribute type 2 has an invalid length.
[  246.345445][T10486] netlink: 'syz.6.1040': attribute type 1 has an invalid length.
[  246.347573][T10486] netlink: 'syz.6.1040': attribute type 37 has an invalid length.
[  246.350526][T10486] netlink: 'syz.6.1040': attribute type 2 has an invalid length.
[  246.441432][T10493] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  246.495691][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1041'.
[  246.498961][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1041'.
[  246.501572][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1041'.
[  247.365863][T10516] vlan2: entered promiscuous mode
[  247.527389][T10520] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  247.662043][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1055'.
[  247.870140][T10546] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1060'.
[  247.877501][T10551] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  247.920504][T10556] vlan2: entered promiscuous mode
[  247.923108][T10556] bond0: entered promiscuous mode
[  247.924985][T10556] bond_slave_0: entered promiscuous mode
[  247.926843][T10556] bond_slave_1: entered promiscuous mode
[  247.928691][T10556] batadv0: entered promiscuous mode
[  247.933977][T10556] bond0: left promiscuous mode
[  247.935564][T10556] bond_slave_0: left promiscuous mode
[  247.937278][T10556] bond_slave_1: left promiscuous mode
[  247.952043][T10556] batadv0: left promiscuous mode
[  248.948911][T10583] netlink: 'syz.6.1070': attribute type 10 has an invalid length.
[  248.951361][T10583] tipc: Resetting bearer <eth:team0>
[  248.954324][T10583] tipc: Resetting bearer <eth:team0>
[  248.957167][T10583] 8021q: adding VLAN 0 to HW filter on device team0
[  248.960674][T10583] bond0: (slave team0): Enslaving as an active interface with an up link
[  249.194343][T10588] syz.6.1071[10588] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  249.194418][T10588] syz.6.1071[10588] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  249.198888][T10588] syz.6.1071[10588] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  249.286782][T10594] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  249.536203][T10604] input: syz1 as /devices/virtual/input/input51
[  249.561448][T10603] netdevsim netdevsim6: Direct firmware load for .
[  249.561448][T10603]  failed with error -2
[  249.566726][T10603] netdevsim netdevsim6: Falling back to sysfs fallback for: .
[  249.566726][T10603] 
[  250.589648][T10626] loop9: detected capacity change from 0 to 7
[  250.596374][T10626] Dev loop9: unable to read RDB block 7
[  250.598596][T10626]  loop9: unable to read partition table
[  250.600722][T10626] loop9: partition table beyond EOD, truncated
[  250.605358][T10626] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  250.605358][T10626] 
) failed (rc=-5)
[  251.835651][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1095'.
[  252.411451][ T7547] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  252.584701][T10673] input: syz1 as /devices/virtual/input/input52
[  253.139878][T10676] input: syz1 as /devices/virtual/input/input53
[  254.371175][ T8083] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  254.531062][ T8083] usb 9-1: Using ep0 maxpacket: 8
[  254.534266][ T8083] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  254.537932][ T8083] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  254.541514][ T8083] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  254.545481][ T8083] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  254.550600][ T8083] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  254.553795][ T8083] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.592924][ T1412] ieee802154 phy0 wpan0: encryption failed: -22
[  254.734438][T10711] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  254.761798][ T8083] usb 9-1: GET_CAPABILITIES returned 0
[  254.763439][ T8083] usbtmc 9-1:16.0: can't read capabilities
[  254.777148][T10713] vlan2: entered promiscuous mode
[  255.220663][T10726] SET target dimension over the limit!
[  255.277911][T10728] net veth1_virt_wifi virt_wifi0: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  255.651247][ T8083] usb 9-1: USB disconnect, device number 4
[  257.205041][T10767] input: syz1 as /devices/virtual/input/input54
[  257.588712][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1125'.
[  257.597085][T10771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1125'.
[  258.567338][T10800] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  259.057848][T10839] siw: device registration error -23
[  259.614358][T10856] netlink: 'syz.1.1141': attribute type 21 has an invalid length.
[  259.617530][T10856] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1141'.
[  259.646600][T10850] mkiss: ax0: crc mode is auto.
[  259.692223][T10864] Bluetooth: Invalid esc byte 0x00
[  259.740647][ T1147] Bluetooth: (null): Invalid header checksum
[  259.743265][ T1147] Bluetooth: (null): Invalid header checksum
[  259.850608][ T1147] Bluetooth: (null): Invalid header checksum
[  259.960804][ T1137] Bluetooth: (null): Invalid header checksum
[  260.071037][T10831] Bluetooth: (null): Invalid header checksum
[  260.180572][ T1137] Bluetooth: (null): Invalid header checksum
[  260.300711][ T1137] Bluetooth: (null): Invalid header checksum
[  260.411651][T10818] Bluetooth: (null): Invalid header checksum
[  262.051851][T10901] netlink: 'syz.4.1156': attribute type 10 has an invalid length.
[  262.054155][T10901] macvlan0: entered promiscuous mode
[  262.055694][T10901] macvlan0: entered allmulticast mode
[  262.068198][T10901] veth1_vlan: entered allmulticast mode
[  262.073612][T10901] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  262.147138][T10905] tun0: tun_chr_ioctl cmd 1074812118
[  262.242250][T10907] netdevsim netdevsim6: Direct firmware load for .
[  262.242250][T10907]  failed with error -2
[  262.245304][T10907] netdevsim netdevsim6: Falling back to sysfs fallback for: .
[  262.245304][T10907] 
[  262.450423][T10894] netlink: 'syz.1.1153': attribute type 1 has an invalid length.
[  262.453502][T10894] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1153'.
[  262.504406][T10915] xt_TCPMSS: Only works on TCP SYN packets
[  263.470240][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  263.824167][T10934] vlan2: entered promiscuous mode
[  263.924413][T10944] netlink: 'syz.0.1169': attribute type 27 has an invalid length.
[  264.039384][T10944] tipc: Resetting bearer <eth:team0>
[  264.048905][T10944] geneve0: left allmulticast mode
[  264.077411][T10949] 8021q: adding VLAN 0 to HW filter on device bond0
[  264.080935][T10949] 8021q: adding VLAN 0 to HW filter on device team0
[  264.083190][T10949] tipc: Resetting bearer <eth:team0>
[  264.085948][T10949] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  265.072255][T10978] input: syz1 as /devices/virtual/input/input57
[  265.288535][T10988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1179'.
[  266.140038][T11007] dvmrp0: entered allmulticast mode
[  266.155654][   T39] audit: type=1326 audit(1736757338.642:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11005 comm="syz.4.1185" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000
[  266.165881][   T39] audit: type=1326 audit(1736757338.642:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11005 comm="syz.4.1185" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000
[  266.179295][   T39] audit: type=1326 audit(1736757338.652:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11005 comm="syz.4.1185" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fd0579 code=0x7ffc0000
[  266.191696][   T39] audit: type=1326 audit(1736757338.652:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11005 comm="syz.4.1185" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000
[  266.201086][   T39] audit: type=1326 audit(1736757338.652:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11005 comm="syz.4.1185" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000
[  266.210545][   T39] audit: type=1326 audit(1736757338.652:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11005 comm="syz.4.1185" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd0579 code=0x7ffc0000
[  266.218988][   T39] audit: type=1326 audit(1736757338.652:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11005 comm="syz.4.1185" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000
[  266.228474][   T39] audit: type=1326 audit(1736757338.652:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11005 comm="syz.4.1185" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000
[  266.238010][   T39] audit: type=1326 audit(1736757338.652:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11005 comm="syz.4.1185" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7fd0579 code=0x7ffc0000
[  266.246377][   T39] audit: type=1326 audit(1736757338.652:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11005 comm="syz.4.1185" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x7ffc0000
[  267.100865][T11031] input: syz1 as /devices/virtual/input/input58
[  267.990392][T11056] random: crng reseeded on system resumption
[  268.046312][T11057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  268.050751][T11057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  268.054610][T11057] bond0 (unregistering): (slave team0): Releasing backup interface
[  268.063838][T11057] tipc: Resetting bearer <eth:team0>
[  268.066545][T11057] tipc: Resetting bearer <eth:team0>
[  268.068335][T11057] bond0 (unregistering): Released all slaves
[  268.649744][ T1477] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  268.819934][ T1477] usb 9-1: Using ep0 maxpacket: 32
[  268.830111][ T1477] usb 9-1: config index 0 descriptor too short (expected 156, got 27)
[  268.839869][ T1477] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  268.850218][ T1477] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  268.855034][ T1477] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  268.858934][ T1477] usb 9-1: config 0 interface 0 has no altsetting 0
[  268.865376][ T1477] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  268.869145][ T1477] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  268.875989][ T1477] usb 9-1: Product: syz
[  268.878402][ T1477] usb 9-1: Manufacturer: syz
[  268.880978][ T1477] usb 9-1: SerialNumber: syz
[  268.884509][ T1477] usb 9-1: config 0 descriptor??
[  268.889816][ T1477] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  268.895529][ T1477] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  269.547265][T11082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1207'.
[  269.550548][T11082] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1207'.
[  269.553410][T11082] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  269.563862][T11082] bond1: entered allmulticast mode
[  269.565895][T11082] 8021q: adding VLAN 0 to HW filter on device bond1
[  269.630777][T11086] netlink: zone id is out of range
[  269.633056][T11086] netlink: zone id is out of range
[  269.636170][T11086] netlink: del zone limit has 4 unknown bytes
[  269.943623][T11090] syzkaller1: entered promiscuous mode
[  269.945329][T11090] syzkaller1: entered allmulticast mode
[  271.385110][ T1477] usb 9-1: USB disconnect, device number 5
[  271.396915][ T1477] ldusb 9-1:0.0: LD USB Device #0 now disconnected
[  271.994833][T11146] netlink: 'syz.0.1221': attribute type 10 has an invalid length.
[  272.018173][T11150] SET target dimension over the limit!
[  272.084101][T11157] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1225'.
[  272.203378][T11161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  272.351189][T11162] input: syz1 as /devices/virtual/input/input61
[  272.720886][T11172] Bluetooth: Invalid esc byte 0x00
[  272.770227][T10831] Bluetooth: (null): Invalid header checksum
[  272.772952][T10831] Bluetooth: (null): Invalid header checksum
[  272.822656][ T7547] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  272.891157][T10817] Bluetooth: (null): Invalid header checksum
[  272.969576][ T7547] usb 6-1: Using ep0 maxpacket: 32
[  272.973584][ T7547] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  272.976040][ T7547] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  272.979661][ T7547] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  272.982910][ T7547] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  272.986682][ T7547] usb 6-1: config 0 interface 0 has no altsetting 0
[  272.990289][ T7547] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  272.993046][ T7547] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  272.995480][ T7547] usb 6-1: Product: syz
[  272.996722][ T7547] usb 6-1: Manufacturer: syz
[  272.998198][ T7547] usb 6-1: SerialNumber: syz
[  273.001142][ T7547] usb 6-1: config 0 descriptor??
[  273.004096][ T7547] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  273.008729][ T7547] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  273.009781][ T1137] Bluetooth: (null): Invalid header checksum
[  273.111119][T10831] Bluetooth: (null): Invalid header checksum
[  273.219828][T10818] Bluetooth: (null): Invalid header checksum
[  273.329804][T10817] Bluetooth: (null): Invalid header checksum
[  273.489038][T11178] netlink: zone id is out of range
[  273.490583][T11178] netlink: zone id is out of range
[  273.492539][T11178] netlink: del zone limit has 4 unknown bytes
[  273.740163][T11180] overlayfs: failed to clone upperpath
[  274.141710][T11186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1234'.
[  274.225493][T11187] netlink: 'syz.4.1234': attribute type 12 has an invalid length.
[  274.897513][T11224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1242'.
[  275.649169][ T1477] usb 6-1: USB disconnect, device number 15
[  275.652820][ T1477] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  275.714876][T11254] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1253'.
[  275.928961][T11266] hsr0: entered promiscuous mode
[  275.933638][T11265] hsr0: left promiscuous mode
[  276.196685][T11276] netdevsim netdevsim6: Direct firmware load for .
[  276.196685][T11276]  failed with error -2
[  276.201398][T11276] netdevsim netdevsim6: Falling back to sysfs fallback for: .
[  276.201398][T11276] 
[  276.619879][T11283] netlink: 'syz.0.1262': attribute type 1 has an invalid length.
[  276.622235][T11283] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1262'.
[  276.897617][T11291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1264'.
[  276.900386][T11291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1264'.
[  276.903108][T11291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1264'.
[  277.488777][T11303] loop2: detected capacity change from 0 to 7
[  277.492425][T11303] Dev loop2: unable to read RDB block 7
[  277.494691][T11303]  loop2: unable to read partition table
[  277.497131][T11303] loop2: partition table beyond EOD, truncated
[  277.504548][T11303] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  278.213121][T11316] input: syz1 as /devices/virtual/input/input65
[  278.978690][T11343] rdma_rxe: rxe_newlink: failed to add bond0
[  279.053521][T11346] random: crng reseeded on system resumption
[  279.098053][T11346] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  279.502007][T11353] wireguard0: entered promiscuous mode
[  279.503726][T11353] wireguard0: entered allmulticast mode
[  280.349457][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1289'.
[  280.472676][T11376] fuse: Unknown parameter '0x00000000000000030x0000000000000003'
[  280.907008][T11392] syzkaller1: entered promiscuous mode
[  280.908714][T11392] syzkaller1: entered allmulticast mode
[  281.935604][T11423] input: syz1 as /devices/virtual/input/input68
[  282.069563][T11428] siw: device registration error -23
[  282.577247][T11447] 9pnet_fd: Insufficient options for proto=fd
[  282.632951][T11449] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1314'.
[  282.636594][T11449] geneve0: entered allmulticast mode
[  282.927196][T11461] SET target dimension over the limit!
[  283.180917][T11471] sctp: [Deprecated]: syz.6.1322 (pid 11471) Use of int in maxseg socket option.
[  283.180917][T11471] Use struct sctp_assoc_value instead
[  283.277967][T11472] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  283.429779][T11486] netlink: 'syz.6.1323': attribute type 10 has an invalid length.
[  283.653701][T11495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1329'.
[  283.660013][T11495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1329'.
[  284.029384][ T8083] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  284.329193][ T8083] usb 5-1: Using ep0 maxpacket: 32
[  284.332862][ T8083] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  284.336104][ T8083] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  284.339572][ T8083] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  284.343191][ T8083] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  284.347513][ T8083] usb 5-1: config 0 interface 0 has no altsetting 0
[  284.352472][ T8083] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  284.356197][ T8083] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  284.359404][ T8083] usb 5-1: Product: syz
[  284.360985][ T8083] usb 5-1: Manufacturer: syz
[  284.362740][ T8083] usb 5-1: SerialNumber: syz
[  284.366102][ T8083] usb 5-1: config 0 descriptor??
[  284.371879][ T8083] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  284.375319][ T8083] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  284.589240][ T5294] Bluetooth: hci2: command 0x0c1a tx timeout
[  285.151480][T11528] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  285.461638][T11541] cgroup: Invalid name
[  285.722162][T11548] input: syz1 as /devices/virtual/input/input69
[  285.878509][T11552] netlink: zone id is out of range
[  285.880533][T11552] netlink: zone id is out of range
[  285.884381][T11552] netlink: del zone limit has 4 unknown bytes
[  286.823703][ T1477] usb 5-1: USB disconnect, device number 9
[  286.838179][ T1477] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  286.854648][T11563] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  287.151880][T11568] netlink: 'syz.0.1351': attribute type 1 has an invalid length.
[  287.154175][T11568] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1351'.
[  287.676377][T11577] netlink: 'syz.1.1354': attribute type 27 has an invalid length.
[  287.950837][T11577] batadv_slave_0: left promiscuous mode
[  288.063181][T11577] geneve0: left allmulticast mode
[  288.065644][T11577] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  288.068238][T11577] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  288.071724][T11577] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  288.074363][T11577] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  288.104601][T11586] input: syz1 as /devices/virtual/input/input70
[  288.105486][T11577] bond1: left allmulticast mode
[  288.124198][T11578] 8021q: adding VLAN 0 to HW filter on device bond0
[  288.128979][T11578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  288.209193][  T146] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  288.230141][T11592] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  288.359191][  T146] usb 5-1: Using ep0 maxpacket: 32
[  288.363077][  T146] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  288.365435][  T146] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  288.368526][  T146] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  288.371856][  T146] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  288.375566][  T146] usb 5-1: config 0 interface 0 has no altsetting 0
[  288.380623][  T146] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  288.383965][  T146] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  288.386379][  T146] usb 5-1: Product: syz
[  288.387936][  T146] usb 5-1: Manufacturer: syz
[  288.390141][  T146] usb 5-1: SerialNumber: syz
[  288.394567][  T146] usb 5-1: config 0 descriptor??
[  288.398065][  T146] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  288.401944][  T146] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  288.861620][T11597] input: syz1 as /devices/virtual/input/input71
[  289.720914][T11629] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1370'.
[  289.835325][T11632] syz.6.1371[11632] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  289.835377][T11632] syz.6.1371[11632] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  289.838758][T11632] syz.6.1371[11632] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  289.872678][T11634] syz.6.1371[11634] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  289.875902][T11634] syz.6.1371[11634] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  289.879095][T11634] syz.6.1371[11634] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  289.914242][T11635] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1369'.
[  290.385119][T11644] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1374'.
[  290.387787][T11644] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1374'.
[  290.390542][T11644] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1374'.
[  290.394259][T11644] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1374'.
[  290.904281][ T5943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  290.907675][ T5943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  290.914459][ T5943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  290.917559][ T5943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  290.920720][ T5943] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  290.923370][ T5943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  291.030910][T11652] chnl_net:caif_netlink_parms(): no params data found
[  291.048774][   T30] usb 5-1: USB disconnect, device number 10
[  291.059552][   T30] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  291.112686][T11652] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.114771][T11652] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.116925][T11652] bridge_slave_0: entered allmulticast mode
[  291.121380][T11652] bridge_slave_0: entered promiscuous mode
[  291.129722][T11652] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.132132][T11652] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.141353][T11652] bridge_slave_1: entered allmulticast mode
[  291.143790][T11652] bridge_slave_1: entered promiscuous mode
[  291.180682][T11652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.187896][T11652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  291.234455][T11652] team0: Port device team_slave_0 added
[  291.237725][T11652] team0: Port device team_slave_1 added
[  291.281645][T11652] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.283775][T11652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.326945][T11652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.331878][T11652] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.334519][T11652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.347541][T11652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.444554][T11652] hsr_slave_0: entered promiscuous mode
[  291.446928][T11652] hsr_slave_1: entered promiscuous mode
[  291.450572][T11652] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  291.452828][T11652] Cannot create hsr debugfs directory
[  291.608812][T11667] input: syz1 as /devices/virtual/input/input72
[  291.662574][T11652] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  291.742699][T11652] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  291.748204][T11652] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  291.755432][T11652] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  291.783803][T11652] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.785919][T11652] bridge0: port 2(bridge_slave_1) entered forwarding state
[  291.788196][T11652] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.790318][T11652] bridge0: port 1(bridge_slave_0) entered forwarding state
[  291.853165][T11652] 8021q: adding VLAN 0 to HW filter on device bond0
[  291.867234][T10831] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.871361][T10831] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.892366][T11652] 8021q: adding VLAN 0 to HW filter on device team0
[  291.914099][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.916228][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  291.918835][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.920951][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  292.053074][T11652] 8021q: adding VLAN 0 to HW filter on device batadv0
[  292.061220][T11689] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  292.162750][T11652] veth0_vlan: entered promiscuous mode
[  292.166824][T11652] veth1_vlan: entered promiscuous mode
[  292.178317][T11652] veth0_macvtap: entered promiscuous mode
[  292.182014][T11652] veth1_macvtap: entered promiscuous mode
[  292.188370][T11652] batman_adv: batadv0: Interface activated: batadv_slave_0
[  292.194056][T11652] batman_adv: batadv0: Interface activated: batadv_slave_1
[  292.197977][T11652] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  292.200930][T11652] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  292.203482][T11652] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  292.206011][T11652] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  292.232246][T10818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.235312][T10818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.249883][T10818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.252121][T10818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.329570][    T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  292.349179][ T6345] usb 5-1: new low-speed USB device number 11 using dummy_hcd
[  292.489270][    T9] usb 9-1: Using ep0 maxpacket: 32
[  292.494410][    T9] usb 9-1: config index 0 descriptor too short (expected 156, got 27)
[  292.496852][    T9] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  292.554124][    T9] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  292.557481][    T9] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  292.562970][    T9] usb 9-1: config 0 interface 0 has no altsetting 0
[  292.568106][ T6345] usb 5-1: config 8 has an invalid interface number: 53 but max is 0
[  292.570610][ T6345] usb 5-1: config 8 has no interface number 0
[  292.572387][ T6345] usb 5-1: config 8 interface 53 altsetting 8 endpoint 0x6 has invalid maxpacket 1024, setting to 8
[  292.575777][ T6345] usb 5-1: config 8 interface 53 altsetting 8 endpoint 0xF is Bulk; changing to Interrupt
[  292.578716][ T6345] usb 5-1: config 8 interface 53 altsetting 8 has a duplicate endpoint with address 0xF, skipping
[  292.582423][ T6345] usb 5-1: config 8 interface 53 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  292.585589][ T6345] usb 5-1: config 8 interface 53 has no altsetting 0
[  292.587903][    T9] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  292.591781][    T9] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  292.594272][    T9] usb 9-1: Product: syz
[  292.595643][    T9] usb 9-1: Manufacturer: syz
[  292.597076][    T9] usb 9-1: SerialNumber: syz
[  292.600063][    T9] usb 9-1: config 0 descriptor??
[  292.604528][    T9] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  292.608128][    T9] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  292.989339][ T5294] Bluetooth: hci0: command tx timeout
[  293.883467][T11724] tipc: Started in network mode
[  293.884979][T11724] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  293.887219][T11724] tipc: Enabled bearer <eth:team0>, priority 0
[  295.019266][    T8] tipc: Node number set to 11578026
[  295.061869][T11752] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  295.071343][ T5294] Bluetooth: hci0: command tx timeout
[  295.137869][   T30] usb 9-1: USB disconnect, device number 6
[  295.169873][   T30] ldusb 9-1:0.0: LD USB Device #0 now disconnected
[  295.186984][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1407'.
[  295.191379][ T6345] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae1, bcdDevice=7b.9e
[  295.194112][ T6345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.203706][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1407'.
[  295.206554][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1407'.
[  295.209576][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1407'.
[  295.212295][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1407'.
[  295.215893][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1407'.
[  295.219480][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1407'.
[  295.222097][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1407'.
[  295.224941][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1407'.
[  295.227578][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1407'.
[  295.232356][ T6345] usb 5-1: can't set config #8, error -71
[  295.251789][T11762] netlink: 'syz.6.1404': attribute type 10 has an invalid length.
[  295.251938][ T6345] usb 5-1: USB disconnect, device number 11
[  295.411099][T11770] input: syz1 as /devices/virtual/input/input73
[  295.587051][T11772] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0
[  296.037107][T11777] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  296.619020][   T59] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  296.779229][   T59] usb 5-1: Using ep0 maxpacket: 32
[  296.782006][   T59] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  296.784373][   T59] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  296.787841][   T59] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  296.793907][   T59] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  296.811604][   T59] usb 5-1: config 0 interface 0 has no altsetting 0
[  296.815379][   T59] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  296.817985][   T59] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  296.820562][   T59] usb 5-1: Product: syz
[  296.821780][   T59] usb 5-1: Manufacturer: syz
[  296.823532][   T59] usb 5-1: SerialNumber: syz
[  296.825937][   T59] usb 5-1: config 0 descriptor??
[  296.834513][   T59] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  296.847147][   T59] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  297.148996][ T5294] Bluetooth: hci0: command tx timeout
[  298.051874][T11811] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  299.235074][ T5294] Bluetooth: hci0: command tx timeout
[  299.401798][   T30] usb 5-1: USB disconnect, device number 12
[  299.408418][   T30] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  299.419988][T11836] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  299.939957][T11853] overlay: Unknown parameter 'context'
[  300.704746][T11841] syz.4.1431 (11841): drop_caches: 2
[  302.636455][T11893] input: syz1 as /devices/virtual/input/input74
[  302.886605][T11896] input: syz1 as /devices/virtual/input/input75
[  303.525752][T11903] __nla_validate_parse: 26 callbacks suppressed
[  303.525764][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1449'.
[  303.532051][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1449'.
[  303.536801][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1449'.
[  303.646801][T11905] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1451'.
[  303.650271][T11907] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1452'.
[  303.650489][T11905] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1451'.
[  303.656033][T11905] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1451'.
[  303.659559][T11905] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1451'.
[  303.809986][T10830] Bluetooth: (null): Invalid header checksum
[  303.812161][T10818] Bluetooth: (null): Invalid header checksum
[  304.177341][T11917] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1454'.
[  304.189733][T11917] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1454'.
[  304.364833][T11924] netlink: 'syz.6.1457': attribute type 21 has an invalid length.
[  305.226471][T11953] netlink: 'syz.4.1465': attribute type 4 has an invalid length.
[  305.231882][T11955] netlink: 'syz.4.1465': attribute type 4 has an invalid length.
[  307.738548][T12003] netlink: 'syz.0.1478': attribute type 33 has an invalid length.
[  307.742804][T12003] tipc: Resetting bearer <eth:team0>
[  308.011693][T12007] bridge0: entered allmulticast mode
[  309.555426][T12029] Cannot find add_set index 0 as target
[  309.829855][T12036] input: syz1 as /devices/virtual/input/input79
[  310.152924][T12044] 9pnet_fd: Insufficient options for proto=fd
[  310.623212][T12058] netlink: 'syz.7.1496': attribute type 10 has an invalid length.
[  310.716484][T12059] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  311.281766][T12067] __nla_validate_parse: 6 callbacks suppressed
[  311.281782][T12067] netlink: 1116 bytes leftover after parsing attributes in process `syz.0.1499'.
[  311.288119][T12067] netlink: 1116 bytes leftover after parsing attributes in process `syz.0.1499'.
[  311.383925][T12074] netlink: 'syz.7.1501': attribute type 27 has an invalid length.
[  311.410407][T12074] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.412621][T12074] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.420418][T12074] tipc: Resetting bearer <eth:team0>
[  311.525913][T12074] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  311.537209][T12074] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  311.596329][T12074] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  311.599229][T12074] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  311.601959][T12074] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  311.604693][T12074] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  311.654573][T12077] 8021q: adding VLAN 0 to HW filter on device bond0
[  311.659237][T12077] 8021q: adding VLAN 0 to HW filter on device team0
[  311.661400][T12077] tipc: Resetting bearer <eth:team0>
[  311.664183][T12077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  312.049709][T10830] tipc: Resetting bearer <eth:team0>
[  312.348982][ T5294] Bluetooth: hci2: command 0x0c1a tx timeout
[  312.751060][T12096] input: syz1 as /devices/virtual/input/input80
[  312.897409][T12102] 8021q: adding VLAN 0 to HW filter on device bond1
[  312.926263][T12102] bond0: (slave bond1): Enslaving as an active interface with an up link
[  313.349050][T12110] random: crng reseeded on system resumption
[  313.468957][ T8083] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  313.619050][ T8083] usb 5-1: Using ep0 maxpacket: 32
[  313.622664][ T8083] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  313.625186][ T8083] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  313.628457][ T8083] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  313.692166][ T8083] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  313.697595][ T8083] usb 5-1: config 0 interface 0 has no altsetting 0
[  313.732466][ T8083] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  313.736314][ T8083] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  313.740400][ T8083] usb 5-1: Product: syz
[  313.743194][ T8083] usb 5-1: Manufacturer: syz
[  313.745055][ T8083] usb 5-1: SerialNumber: syz
[  313.752589][ T8083] usb 5-1: config 0 descriptor??
[  313.757101][ T8083] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  313.766677][ T8083] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  314.169633][T12124] netlink: zone id is out of range
[  314.171210][T12124] netlink: zone id is out of range
[  314.173293][T12124] netlink: del zone limit has 4 unknown bytes
[  314.572294][T12128] netdevsim netdevsim4: Direct firmware load for .
[  314.572294][T12128]  failed with error -2
[  314.580293][T12128] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  314.580293][T12128] 
[  315.460057][T12143] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[  315.462143][T12143] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  315.466616][T12143] vhci_hcd vhci_hcd.0: Device attached
[  315.555756][T12155] vlan2: entered promiscuous mode
[  315.731092][ T7547] usb 46-1: SetAddress Request (2) to port 0
[  315.733254][ T7547] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd
[  315.748964][ T5983] usb 12-1: new high-speed USB device number 2 using dummy_hcd
[  315.790528][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1526'.
[  315.899008][ T5983] usb 12-1: Using ep0 maxpacket: 8
[  315.902650][ T5983] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  315.905631][ T5983] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  315.908296][ T5983] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.912329][ T5983] usb 12-1: config 0 descriptor??
[  315.916286][ T5983] iowarrior 12-1:0.0: no interrupt-in endpoint found
[  316.004924][T12145] vhci_hcd: connection reset by peer
[  316.013603][T10813] vhci_hcd: stop threads
[  316.014924][T10813] vhci_hcd: release socket
[  316.020425][T10813] vhci_hcd: disconnect device
[  316.031103][ T1412] ieee802154 phy0 wpan0: encryption failed: -22
[  316.057131][T12166] netlink: 'syz.4.1528': attribute type 7 has an invalid length.
[  316.145471][  T146] usb 12-1: USB disconnect, device number 2
[  316.243029][ T8083] usb 5-1: USB disconnect, device number 13
[  316.255299][ T8083] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  316.375837][T12181] netlink: 'syz.7.1532': attribute type 1 has an invalid length.
[  316.378199][T12181] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1532'.
[  316.537445][T12185] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  316.852061][T12196] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1536'.
[  316.855309][T12194] can: request_module (can-proto-3) failed.
[  317.176316][ T5294] Bluetooth: hci2: unexpected event for opcode 0x041b
[  317.546643][T12215] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1540'.
[  317.549730][T12215] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1540'.
[  317.641954][T12217] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  317.684440][T12219] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  318.484162][T12232] input: syz1 as /devices/virtual/input/input81
[  318.832239][T12247] tc_dump_action: action bad kind
[  318.835195][T12247] netlink: 830 bytes leftover after parsing attributes in process `syz.7.1550'.
[  318.838268][T12247] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1550'.
[  318.845326][T12249] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  318.894915][T12255] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1555'.
[  319.103231][T12263] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  319.108274][T12263] batman_adv: batadv0: Adding interface: gretap1
[  319.110272][T12263] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.117326][T12263] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  319.396508][T12274] netlink: 'syz.0.1558': attribute type 1 has an invalid length.
[  319.398640][T12274] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1558'.
[  319.569233][T12272] netlink: 'syz.7.1554': attribute type 1 has an invalid length.
[  319.572379][T12272] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1554'.
[  319.775004][T12287] batadv_slave_0: entered promiscuous mode
[  320.038750][T12299] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  320.527492][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1570'.
[  320.829259][ T7547] usb 46-1: device descriptor read/8, error -110
[  321.220902][ T7547] usb usb46-port1: attempt power cycle
[  321.235478][ T5943] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  321.239079][ T5943] Bluetooth: hci2: Injecting HCI hardware error event
[  321.243500][ T5943] Bluetooth: hci2: hardware error 0x00
[  321.448466][T12329] IPVS: set_ctl: invalid protocol: 119 255.255.255.255:20004
[  321.592887][T12331] netlink: 'syz.7.1573': attribute type 33 has an invalid length.
[  321.599002][T12331] tipc: Resetting bearer <eth:team0>
[  321.664359][T12333] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  321.798028][ T7547] usb usb46-port1: unable to enumerate USB device
[  322.344271][T12341] loop6: detected capacity change from 0 to 524287999
[  322.348757][    C0] blk_print_req_error: 82 callbacks suppressed
[  322.348767][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[  322.354458][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  322.357123][    C0] buffer_io_error: 43 callbacks suppressed
[  322.357129][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  322.361424][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  322.364509][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  322.368684][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  322.371960][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  322.375422][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  322.378697][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  322.381821][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  322.384416][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  322.479150][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1581'.
[  322.483191][T12350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1581'.
[  322.599546][T12354] fuse: Unknown parameter '0x00000000000000030x0000000000000003'
[  322.848216][T12366] input: syz1 as /devices/virtual/input/input82
[  323.228957][   T66] Bluetooth: hci4: command 0x0406 tx timeout
[  323.309092][ T5943] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  323.603461][T12372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1587'.
[  323.639449][T12374] mkiss: ax0: crc mode is auto.
[  323.811085][T12388] input: syz1 as /devices/virtual/input/input83
[  324.226125][T12401] fuse: Unknown parameter '€1
[  324.226125][T12401] ™]‰`u‡–î!”'
[  324.932491][T12410] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  325.062211][T12411] siw: device registration error -23
[  325.119686][T12414] can0: slcan on ttyS3.
[  325.379701][T12420] input: syz1 as /devices/virtual/input/input84
[  325.468417][T12431] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1604'.
[  325.471576][T12431] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1604'.
[  325.712334][T12407] can0 (unregistered): slcan off ttyS3.
[  326.439056][ T8083] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  326.601842][ T8083] usb 5-1: Using ep0 maxpacket: 8
[  326.798419][ T8083] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  326.850251][ T8083] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  326.853116][ T8083] usb 5-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00
[  326.855760][ T8083] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.859009][ T8083] usb 5-1: config 0 descriptor??
[  327.149783][T12467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.153234][T12467] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.194701][T12490] input: syz1 as /devices/virtual/input/input85
[  327.619016][ T6345] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  327.768889][ T6345] usb 9-1: Using ep0 maxpacket: 32
[  327.775265][ T6345] usb 9-1: config index 0 descriptor too short (expected 156, got 27)
[  327.778245][ T6345] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  327.782675][ T6345] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  327.787674][ T6345] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  327.792374][ T6345] usb 9-1: config 0 interface 0 has no altsetting 0
[  327.805142][ T6345] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  327.807803][ T6345] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  327.810626][ T6345] usb 9-1: Product: syz
[  327.811984][ T6345] usb 9-1: Manufacturer: syz
[  327.813717][ T6345] usb 9-1: SerialNumber: syz
[  327.821828][ T6345] usb 9-1: config 0 descriptor??
[  327.836650][ T6345] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  327.842726][ T6345] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  328.256028][T12495] netlink: zone id is out of range
[  328.258124][T12495] netlink: zone id is out of range
[  328.260516][T12495] netlink: del zone limit has 4 unknown bytes
[  328.305461][ T6345] usb 9-1: USB disconnect, device number 7
[  328.311855][ T6345] ldusb 9-1:0.0: LD USB Device #0 now disconnected
[  328.378463][T12507] trusted_key: syz.6.1616 sent an empty control message without MSG_MORE.
[  328.949611][   T39] kauditd_printk_skb: 19 callbacks suppressed
[  328.949627][   T39] audit: type=1326 audit(2000000010.220:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12522 comm="syz.6.1623" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x0
[  328.965660][ T8083] usbhid 5-1:0.0: can't add hid device: -71
[  328.967568][ T8083] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  328.978269][ T8083] usb 5-1: USB disconnect, device number 14
[  329.079313][T12530] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1624'.
[  329.088246][T12530] sctp: [Deprecated]: syz.0.1624 (pid 12530) Use of struct sctp_assoc_value in delayed_ack socket option.
[  329.088246][T12530] Use struct sctp_sack_info instead
[  329.090592][T12532] vlan2: entered promiscuous mode
[  329.202706][T12537] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1627'.
[  329.206187][T12537] geneve0: entered allmulticast mode
[  329.224756][T12539] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  329.396102][T12543] netlink: 'syz.4.1629': attribute type 4 has an invalid length.
[  329.759240][ T6345] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  329.767438][T12548] input: syz1 as /devices/virtual/input/input86
[  329.919143][ T6345] usb 9-1: Using ep0 maxpacket: 32
[  329.944564][ T6345] usb 9-1: config index 0 descriptor too short (expected 156, got 27)
[  329.947681][ T6345] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  329.967799][ T6345] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  329.973173][ T6345] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  329.977056][ T6345] usb 9-1: config 0 interface 0 has no altsetting 0
[  329.980910][ T6345] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  329.983615][ T6345] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  329.986045][ T6345] usb 9-1: Product: syz
[  329.987290][ T6345] usb 9-1: Manufacturer: syz
[  329.988674][ T6345] usb 9-1: SerialNumber: syz
[  329.999831][ T6345] usb 9-1: config 0 descriptor??
[  330.008426][ T6345] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  330.020826][ T6345] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  330.032826][T12558] loop2: detected capacity change from 0 to 7
[  330.035804][T12558] Dev loop2: unable to read RDB block 7
[  330.037702][T12558]  loop2: unable to read partition table
[  330.040088][T12558] loop2: partition table beyond EOD, truncated
[  330.042955][T12558] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  330.305621][T12545] netlink: zone id is out of range
[  330.307224][T12545] netlink: zone id is out of range
[  330.309354][T12545] netlink: del zone limit has 4 unknown bytes
[  330.335157][T11589] usb 9-1: USB disconnect, device number 8
[  330.347358][T11589] ldusb 9-1:0.0: LD USB Device #0 now disconnected
[  330.560438][T12572] netlink: 'syz.0.1639': attribute type 1 has an invalid length.
[  330.562765][T12572] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1639'.
[  330.613076][T12574] netlink: 'syz.7.1641': attribute type 12 has an invalid length.
[  330.615390][T12574] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1641'.
[  330.778024][T12580] input: syz1 as /devices/virtual/input/input87
[  331.301352][T12589] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1644'.
[  331.316057][T12589] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1644'.
[  331.530987][T12600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1648'.
[  331.534970][T12600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1648'.
[  331.925731][T12631] FAULT_INJECTION: forcing a failure.
[  331.925731][T12631] name failslab, interval 1, probability 0, space 0, times 0
[  331.930442][T12631] CPU: 1 UID: 0 PID: 12631 Comm: syz.4.1656 Not tainted 6.13.0-rc6-syzkaller-00290-gbe548645527a #0
[  331.933832][T12631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  331.937811][T12631] Call Trace:
[  331.939042][T12631]  <TASK>
[  331.940174][T12631]  dump_stack_lvl+0x16c/0x1f0
[  331.941785][T12631]  should_fail_ex+0x497/0x5b0
[  331.943176][T12631]  ? fs_reclaim_acquire+0xae/0x150
[  331.944657][T12631]  should_failslab+0xc2/0x120
[  331.946033][T12631]  __kmalloc_noprof+0xce/0x4f0
[  331.947671][T12631]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  331.949811][T12631]  ? tomoyo_realpath_from_path+0xbf/0x710
[  331.951966][T12631]  tomoyo_realpath_from_path+0xbf/0x710
[  331.954039][T12631]  ? tomoyo_path_number_perm+0x235/0x5b0
[  331.955750][T12631]  tomoyo_path_number_perm+0x248/0x5b0
[  331.957582][T12631]  ? tomoyo_path_number_perm+0x235/0x5b0
[  331.959713][T12631]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  331.961978][T12631]  ? __pfx_lock_release+0x10/0x10
[  331.963653][T12631]  ? trace_lock_acquire+0x14e/0x1f0
[  331.965420][T12631]  ? __pfx___schedule+0x10/0x10
[  331.967103][T12631]  ? lock_acquire+0x2f/0xb0
[  331.968420][T12631]  ? __fget_files+0x40/0x3a0
[  331.969778][T12631]  ? __fget_files+0x206/0x3a0
[  331.971196][T12631]  security_file_ioctl_compat+0x9b/0x240
[  331.972829][T12631]  __do_compat_sys_ioctl+0x4e/0x2c0
[  331.974312][T12631]  __do_fast_syscall_32+0x73/0x120
[  331.975780][T12631]  do_fast_syscall_32+0x32/0x80
[  331.977186][T12631]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  331.979053][T12631] RIP: 0023:0xf7fd0579
[  331.980205][T12631] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  331.985646][T12631] RSP: 002b:00000000f50e455c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  331.988059][T12631] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000406855c9
[  331.990354][T12631] RDX: 0000000020000480 RSI: 0000000000000000 RDI: 0000000000000000
[  331.992624][T12631] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  331.994894][T12631] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  331.997215][T12631] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  331.999563][T12631]  </TASK>
[  332.000686][T12631] ERROR: Out of memory at tomoyo_realpath_from_path.
[  333.278908][ T7547] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  333.417345][T12655] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1666'.
[  333.424563][T12655] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1666'.
[  333.438961][ T7547] usb 5-1: Using ep0 maxpacket: 16
[  333.441865][ T7547] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  333.447136][ T7547] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  333.450168][ T7547] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.452585][ T7547] usb 5-1: Product: syz
[  333.454059][ T7547] usb 5-1: Manufacturer: syz
[  333.455577][ T7547] usb 5-1: SerialNumber: syz
[  333.461147][ T7547] usb 5-1: config 0 descriptor??
[  333.465870][ T7547] hub 5-1:0.0: bad descriptor, ignoring hub
[  333.468321][ T7547] hub 5-1:0.0: probe with driver hub failed with error -5
[  333.474044][ T7547] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input89
[  333.630159][ T5943] Bluetooth: hci0: command tx timeout
[  333.683899][T12660] syzkaller1: entered promiscuous mode
[  333.688323][T12660] syzkaller1: entered allmulticast mode
[  334.729237][ T1477] libceph: connect (1)[c::]:6789 error -101
[  334.732748][ T1477] libceph: mon0 (1)[c::]:6789 connect error
[  334.737684][ T1477] libceph: connect (1)[c::]:6789 error -101
[  334.740447][ T1477] libceph: mon0 (1)[c::]:6789 connect error
[  334.866012][T12689] input: syz1 as /devices/virtual/input/input91
[  335.089166][ T1477] libceph: connect (1)[c::]:6789 error -101
[  335.091250][ T1477] libceph: mon0 (1)[c::]:6789 connect error
[  335.157018][T12697] netlink: 'syz.4.1671': attribute type 1 has an invalid length.
[  335.159991][T12697] __nla_validate_parse: 1 callbacks suppressed
[  335.159999][T12697] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1671'.
[  335.521174][T12674] ceph: No mds server is up or the cluster is laggy
[  335.681512][ T1477] usb 5-1: USB disconnect, device number 15
[  335.692724][T12721] FAULT_INJECTION: forcing a failure.
[  335.692724][T12721] name failslab, interval 1, probability 0, space 0, times 0
[  335.707026][T12721] CPU: 2 UID: 0 PID: 12721 Comm: syz.0.1678 Not tainted 6.13.0-rc6-syzkaller-00290-gbe548645527a #0
[  335.710050][T12721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  335.710061][T12721] Call Trace:
[  335.710065][T12721]  <TASK>
[  335.710070][T12721]  dump_stack_lvl+0x16c/0x1f0
[  335.710087][T12721]  should_fail_ex+0x497/0x5b0
[  335.710101][T12721]  ? fs_reclaim_acquire+0xae/0x150
[  335.719212][T12721]  should_failslab+0xc2/0x120
[  335.720611][T12721]  kmem_cache_alloc_noprof+0x6e/0x3b0
[  335.722170][T12721]  ? vm_area_dup+0x53/0x300
[  335.723499][T12721]  vm_area_dup+0x53/0x300
[  335.724757][T12721]  copy_mm+0xd89/0x25b0
[  335.725978][T12721]  ? __pfx_copy_mm+0x10/0x10
[  335.727310][T12721]  ? copy_process+0x3ca7/0x6f20
[  335.728698][T12721]  ? __raw_spin_lock_init+0x3a/0x110
[  335.730246][T12721]  copy_process+0x3e6d/0x6f20
[  335.731634][T12721]  ? __pfx_copy_process+0x10/0x10
[  335.733092][T12721]  ? find_held_lock+0x2d/0x110
[  335.734485][T12721]  kernel_clone+0xfd/0x960
[  335.735787][T12721]  ? __pfx_kernel_clone+0x10/0x10
[  335.737252][T12721]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  335.739015][T12721]  __do_compat_sys_ia32_clone+0xb7/0x100
[  335.740650][T12721]  ? __pfx___do_compat_sys_ia32_clone+0x10/0x10
[  335.742464][T12721]  __do_fast_syscall_32+0x73/0x120
[  335.743950][T12721]  do_fast_syscall_32+0x32/0x80
[  335.745357][T12721]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  335.747184][T12721] RIP: 0023:0xf70ce579
[  335.748368][T12721] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  335.753856][T12721] RSP: 002b:00000000f509f50c EFLAGS: 00000246 ORIG_RAX: 0000000000000078
[  335.756248][T12721] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000
[  335.758530][T12721] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  335.760805][T12721] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  335.763068][T12721] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  335.765339][T12721] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  335.767612][T12721]  </TASK>
[  335.768695][    C2] vkms_vblank_simulate: vblank timer overrun
[  335.848187][T12740] netlink: 'syz.4.1684': attribute type 33 has an invalid length.
[  336.603313][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1692'.
[  336.676433][T12772] SET target dimension over the limit!
[  336.686049][T12774] fuse: Unknown parameter '0x00000000000000030x0000000000000003'
[  336.805841][T12780] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1697'.
[  336.942883][T12793] [U] 
[  336.944341][T12793] [U] 
[  336.945442][T12793] [U] 
[  336.946520][T12793] [U] 
[  336.947913][T12793] [U] 
[  336.949090][T12793] [U] 
[  336.950069][T12793] [U] 
[  336.951059][T12793] [U] 
[  336.952325][T12793] [U] 
[  336.953449][T12793] [U] 
[  336.954669][T12793] [U] 
[  336.955509][T12793] [U] 
[  336.956419][T12793] [U] 
[  336.956837][T12794] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  336.957227][T12793] [U] 
[  336.961270][T12793] [U] 
[  336.962240][T12793] [U] 
[  336.964739][T12793] [U] 
[  336.965926][T12793] [U] 
[  336.967080][T12793] [U] 
[  336.968198][T12793] [U] 
[  336.970661][T12793] [U] 
[  336.971882][T12793] [U] 
[  336.972994][T12793] [U] 
[  336.974111][T12793] [U] 
[  336.976781][T12793] [U] 
[  336.977987][T12793] [U] 
[  336.979162][T12793] [U] 
[  336.980283][T12793] [U] 
[  336.982819][T12793] [U] 
[  336.984021][T12793] [U] 
[  336.985185][T12793] [U] 
[  336.986326][T12793] [U] 
[  337.000165][T12793] [U] 
[  337.001302][T12793] [U] 
[  337.002394][T12793] [U] 
[  337.003488][T12793] [U] 
[  337.004744][T12793] [U] 
[  337.005842][T12793] [U] 
[  337.006943][T12793] [U] 
[  337.008030][T12793] [U] 
[  337.011459][T12793] [U] 
[  337.012586][T12793] [U] 
[  337.013680][T12793] [U] 
[  337.014765][T12793] [U] 
[  337.016017][T12793] [U] 
[  337.017104][T12793] [U] 
[  337.018229][T12793] [U] 
[  337.019368][T12793] [U] 
[  337.021072][T12793] [U] 
[  337.022141][T12793] [U] 
[  337.023197][T12793] [U] 
[  337.024297][T12793] [U] 
[  337.025570][T12793] [U] 
[  337.026690][T12793] [U] 
[  337.027794][T12793] [U] 
[  337.028921][T12793] [U] 
[  337.032411][T12793] [U] 
[  337.033593][T12793] [U] 
[  337.034712][T12793] [U] 
[  337.035840][T12793] [U] 
[  337.037201][T12793] [U] 
[  337.038342][T12793] [U] 
[  337.039501][T12793] [U] 
[  337.040625][T12793] [U] 
[  337.043066][T12793] [U] 
[  337.044218][T12793] [U] 
[  337.045326][T12793] [U] 
[  337.046443][T12793] [U] 
[  337.047714][T12793] [U] 
[  337.048862][T12793] [U] 
[  337.049980][T12793] [U] 
[  337.050947][T12793] [U] 
[  337.052627][T12793] [U] 
[  337.053769][T12793] [U] 
[  337.054885][T12793] [U] 
[  337.055991][T12793] [U] 
[  337.057533][T12793] [U] 
[  337.058669][T12793] [U] 
[  337.059790][T12793] [U] 
[  337.060777][T12793] [U] 
[  337.062704][T12793] [U] 
[  337.063839][T12793] [U] 
[  337.064930][T12793] [U] 
[  337.066034][T12793] [U] 
[  337.067318][T12793] [U] 
[  337.068433][T12793] [U] 
[  337.069535][T12793] [U] 
[  337.070628][T12793] [U] 
[  337.072140][T12793] [U] 
[  337.073286][T12793] [U] 
[  337.074317][T12793] [U] 
[  337.075444][T12793] [U] 
[  337.076713][T12793] [U] 
[  337.077846][T12793] [U] 
[  337.079013][T12793] [U] 
[  337.080015][T12793] [U] 
[  337.085385][T12793] [U] 
[  337.086287][T12793] [U] 
[  337.087144][T12793] [U] 
[  337.088212][T12793] [U] 
[  337.090107][T12793] [U] 
[  337.090967][T12793] [U] 
[  337.091783][T12793] [U] 
[  337.092604][T12793] [U] 
[  337.093616][T12793] [U] 
[  337.094587][T12793] [U] 
[  337.095496][T12793] [U] 
[  337.096389][T12793] [U] 
[  337.097471][T12793] [U] 
[  337.098296][T12793] [U] 
[  337.099161][T12793] [U] 
[  337.099968][T12793] [U] 
[  337.102631][T12793] [U] 
[  337.103484][T12793] [U] 
[  337.104309][T12793] [U] 
[  337.105123][T12793] [U] 
[  337.106033][T12793] [U] 
[  337.106869][T12793] [U] 
[  337.107919][T12793] [U] 
[  337.109005][T12793] [U] 
[  337.110368][T12793] [U] 
[  337.111213][T12793] [U] 
[  337.112050][T12793] [U] 
[  337.112860][T12793] [U] 
[  337.113711][T12793] [U] 
[  337.114526][T12793] [U] 
[  337.115353][T12793] [U] 
[  337.215868][T12800] can0: slcan on ttyS3.
[  337.772695][T12791] [U] 
[  337.791319][    C3] ata1: illegal qc_active transition (00000000->00018000)
[  337.830210][T12791] can0 (unregistered): slcan off ttyS3.
[  337.981769][T12828] input: syz1 as /devices/virtual/input/input92
[  338.085034][T12839] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  338.112580][ T1107] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[  338.119054][ T1107] ata1.00: configured for UDMA/100
[  338.173981][ T6345] 
[  338.174842][ T6345] ======================================================
[  338.177184][ T6345] WARNING: possible circular locking dependency detected
[  338.179593][ T6345] 6.13.0-rc6-syzkaller-00290-gbe548645527a #0 Not tainted
[  338.183161][ T6345] ------------------------------------------------------
[  338.186366][ T6345] kworker/0:4/6345 is trying to acquire lock:
[  338.188239][ T6345] ffff8880216f00e0 (&q->q_usage_counter(queue)#51){++++}-{0:0}, at: blk_mq_alloc_request+0x59b/0x950
[  338.191524][ T6345] 
[  338.191524][ T6345] but task is already holding lock:
[  338.193644][ T6345] ffff8880216f06f8 (&q->limits_lock){+.+.}-{4:4}, at: sd_revalidate_disk.isra.0+0x52c/0xa8d0
[  338.196548][ T6345] 
[  338.196548][ T6345] which lock already depends on the new lock.
[  338.196548][ T6345] 
[  338.199499][ T6345] 
[  338.199499][ T6345] the existing dependency chain (in reverse order) is:
[  338.202044][ T6345] 
[  338.202044][ T6345] -> #5 (&q->limits_lock){+.+.}-{4:4}:
[  338.204247][ T6345]        __mutex_lock+0x19b/0xa60
[  338.205703][ T6345]        __nbd_set_size+0x2c0/0x730
[  338.207211][ T6345]        nbd_start_device+0x8fd/0xd70
[  338.208757][ T6345]        nbd_ioctl+0x21a/0xfd0
[  338.210138][ T6345]        compat_blkdev_ioctl+0x2f7/0x750
[  338.211760][ T6345]        __do_compat_sys_ioctl+0x1cb/0x2c0
[  338.213434][ T6345]        __do_fast_syscall_32+0x73/0x120
[  338.215052][ T6345]        do_fast_syscall_32+0x32/0x80
[  338.216693][ T6345]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  338.218675][ T6345] 
[  338.218675][ T6345] -> #4 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  338.221132][ T6345]        blk_mq_submit_bio+0x1fb6/0x24c0
[  338.222740][ T6345]        __submit_bio+0x384/0x540
[  338.224211][ T6345]        submit_bio_noacct_nocheck+0x698/0xd70
[  338.225971][ T6345]        submit_bio_noacct+0x93a/0x1e20
[  338.227572][ T6345]        mpage_readahead+0x41d/0x590
[  338.229082][ T6345]        read_pages+0x1a8/0xdc0
[  338.230497][ T6345]        page_cache_ra_unbounded+0x3dc/0x750
[  338.232214][ T6345]        force_page_cache_ra+0x24b/0x340
[  338.233816][ T6345]        page_cache_sync_ra+0x110/0x9c0
[  338.235458][ T6345]        filemap_get_pages+0xd7b/0x1be0
[  338.237363][ T6345]        filemap_read+0x3ca/0xd70
[  338.238729][ T6345]        blkdev_read_iter+0x187/0x480
[  338.240320][ T6345]        vfs_read+0x87f/0xbe0
[  338.241642][ T6345]        ksys_read+0x12b/0x250
[  338.242967][ T6345]        do_syscall_64+0xcd/0x250
[  338.244386][ T6345]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.246152][ T6345] 
[  338.246152][ T6345] -> #3 (mapping.invalidate_lock#2){.+.+}-{4:4}:
[  338.248564][ T6345]        down_read+0x9a/0x330
[  338.249920][ T6345]        filemap_fault+0x2e0/0x2820
[  338.251409][ T6345]        __do_fault+0x10a/0x490
[  338.252804][ T6345]        do_pte_missing+0xebd/0x3e00
[  338.254320][ T6345]        __handle_mm_fault+0x103c/0x2a40
[  338.255925][ T6345]        handle_mm_fault+0x3fa/0xaa0
[  338.257439][ T6345]        __get_user_pages+0x8d9/0x3b50
[  338.259016][ T6345]        __gup_longterm_locked+0x3b7/0x1870
[  338.260706][ T6345]        gup_fast_fallback+0x1802/0x2690
[  338.262272][ T6345]        get_user_pages_fast+0xa8/0x100
[  338.263781][ T6345]        __iov_iter_get_pages_alloc+0x8ed/0x2280
[  338.265649][ T6345]        iov_iter_get_pages2+0xa4/0x100
[  338.267464][ T6345]        fuse_copy_fill+0x670/0x880
[  338.269046][ T6345]        fuse_copy_one+0xe1/0x230
[  338.270498][ T6345]        fuse_dev_do_write+0x18b/0x3100
[  338.272092][ T6345]        fuse_dev_write+0x160/0x1f0
[  338.273606][ T6345]        vfs_write+0x5ae/0x1150
[  338.275013][ T6345]        ksys_write+0x12b/0x250
[  338.276407][ T6345]        __do_fast_syscall_32+0x73/0x120
[  338.278008][ T6345]        do_fast_syscall_32+0x32/0x80
[  338.279559][ T6345]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  338.281491][ T6345] 
[  338.281491][ T6345] -> #2 (&mm->mmap_lock){++++}-{4:4}:
[  338.283638][ T6345]        __might_fault+0x11b/0x190
[  338.285095][ T6345]        _copy_from_user+0x29/0xd0
[  338.286554][ T6345]        __blk_trace_setup+0xa8/0x180
[  338.288090][ T6345]        blk_trace_setup+0x47/0x70
[  338.289575][ T6345]        sg_ioctl+0x7a3/0x26b0
[  338.290968][ T6345]        compat_ptr_ioctl+0x6b/0xa0
[  338.292457][ T6345]        __do_compat_sys_ioctl+0x1cb/0x2c0
[  338.294112][ T6345]        __do_fast_syscall_32+0x73/0x120
[  338.295720][ T6345]        do_fast_syscall_32+0x32/0x80
[  338.297288][ T6345]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  338.299230][ T6345] 
[  338.299230][ T6345] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}:
[  338.301454][ T6345]        __mutex_lock+0x19b/0xa60
[  338.302907][ T6345]        blk_mq_init_sched+0x42b/0x640
[  338.304586][ T6345]        elevator_init_mq+0x2cd/0x420
[  338.306118][ T6345]        add_disk_fwnode+0x113/0x1300
[  338.307658][ T6345]        sd_probe+0xa66/0xfa0
[  338.309018][ T6345]        really_probe+0x23e/0xa90
[  338.310466][ T6345]        __driver_probe_device+0x1de/0x440
[  338.312124][ T6345]        driver_probe_device+0x4c/0x1b0
[  338.313693][ T6345]        __device_attach_driver+0x1df/0x310
[  338.315380][ T6345]        bus_for_each_drv+0x157/0x1e0
[  338.316908][ T6345]        __device_attach_async_helper+0x1d3/0x290
[  338.318769][ T6345]        async_run_entry_fn+0x9c/0x530
[  338.320328][ T6345]        process_one_work+0x958/0x1b30
[  338.322044][ T6345]        worker_thread+0x6c8/0xf00
[  338.323674][ T6345]        kthread+0x2c1/0x3a0
[  338.325111][ T6345]        ret_from_fork+0x45/0x80
[  338.326604][ T6345]        ret_from_fork_asm+0x1a/0x30
[  338.328166][ T6345] 
[  338.328166][ T6345] -> #0 (&q->q_usage_counter(queue)#51){++++}-{0:0}:
[  338.330714][ T6345]        __lock_acquire+0x249e/0x3c40
[  338.332249][ T6345]        lock_acquire.part.0+0x11b/0x380
[  338.333848][ T6345]        blk_queue_enter+0x50f/0x640
[  338.335362][ T6345]        blk_mq_alloc_request+0x59b/0x950
[  338.336984][ T6345]        scsi_execute_cmd+0x1f1/0xff0
[  338.338521][ T6345]        read_capacity_16+0x21a/0xe20
[  338.340056][ T6345]        sd_revalidate_disk.isra.0+0x1a06/0xa8d0
[  338.341854][ T6345]        scsi_rescan_device+0x243/0x340
[  338.343433][ T6345]        ata_scsi_dev_rescan+0x1cb/0x470
[  338.345028][ T6345]        process_one_work+0x958/0x1b30
[  338.346577][ T6345]        worker_thread+0x6c8/0xf00
[  338.348042][ T6345]        kthread+0x2c1/0x3a0
[  338.349401][ T6345]        ret_from_fork+0x45/0x80
[  338.350830][ T6345]        ret_from_fork_asm+0x1a/0x30
[  338.352337][ T6345] 
[  338.352337][ T6345] other info that might help us debug this:
[  338.352337][ T6345] 
[  338.355223][ T6345] Chain exists of:
[  338.355223][ T6345]   &q->q_usage_counter(queue)#51 --> &q->q_usage_counter(io)#50 --> &q->limits_lock
[  338.355223][ T6345] 
[  338.359394][ T6345]  Possible unsafe locking scenario:
[  338.359394][ T6345] 
[  338.361520][ T6345]        CPU0                    CPU1
[  338.363053][ T6345]        ----                    ----
[  338.364579][ T6345]   lock(&q->limits_lock);
[  338.365854][ T6345]                                lock(&q->q_usage_counter(io)#50);
[  338.368105][ T6345]                                lock(&q->limits_lock);
[  338.370069][ T6345]   rlock(&q->q_usage_counter(queue)#51);
[  338.371724][ T6345] 
[  338.371724][ T6345]  *** DEADLOCK ***
[  338.371724][ T6345] 
[  338.374111][ T6345] 5 locks held by kworker/0:4/6345:
[  338.375758][ T6345]  #0: ffff88801ac88948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12cd/0x1b30
[  338.379052][ T6345]  #1: ffffc9000e27fd80 ((work_completion)(&(&ap->scsi_rescan_task)->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30
[  338.382656][ T6345]  #2: ffff888024e1c358 (&ap->scsi_scan_mutex){+.+.}-{4:4}, at: ata_scsi_dev_rescan+0x3e/0x470
[  338.385599][ T6345]  #3: ffff8880214c4378 (&dev->mutex){....}-{4:4}, at: scsi_rescan_device+0x27/0x340
[  338.388294][ T6345]  #4: ffff8880216f06f8 (&q->limits_lock){+.+.}-{4:4}, at: sd_revalidate_disk.isra.0+0x52c/0xa8d0
[  338.391345][ T6345] 
[  338.391345][ T6345] stack backtrace:
[  338.393035][ T6345] CPU: 0 UID: 0 PID: 6345 Comm: kworker/0:4 Not tainted 6.13.0-rc6-syzkaller-00290-gbe548645527a #0
[  338.396061][ T6345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  338.399387][ T6345] Workqueue: events ata_scsi_dev_rescan
[  338.400976][ T6345] Call Trace:
[  338.401944][ T6345]  <TASK>
[  338.402806][ T6345]  dump_stack_lvl+0x116/0x1f0
[  338.404160][ T6345]  print_circular_bug+0x41c/0x610
[  338.405608][ T6345]  check_noncircular+0x31a/0x400
[  338.407043][ T6345]  ? __pfx_check_noncircular+0x10/0x10
[  338.408616][ T6345]  ? __pfx___schedule+0x10/0x10
[  338.410038][ T6345]  ? __pfx_try_to_wake_up+0x10/0x10
[  338.411535][ T6345]  ? lockdep_lock+0xc6/0x200
[  338.412866][ T6345]  ? __pfx_lockdep_lock+0x10/0x10
[  338.414318][ T6345]  __lock_acquire+0x249e/0x3c40
[  338.415735][ T6345]  ? __pfx___lock_acquire+0x10/0x10
[  338.417421][ T6345]  lock_acquire.part.0+0x11b/0x380
[  338.419041][ T6345]  ? blk_mq_alloc_request+0x59b/0x950
[  338.420656][ T6345]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  338.422327][ T6345]  ? rcu_is_watching+0x12/0xc0
[  338.423740][ T6345]  ? trace_lock_acquire+0x14e/0x1f0
[  338.425274][ T6345]  ? blk_mq_alloc_request+0x59b/0x950
[  338.426945][ T6345]  ? lock_acquire+0x2f/0xb0
[  338.428321][ T6345]  ? blk_mq_alloc_request+0x59b/0x950
[  338.429954][ T6345]  blk_queue_enter+0x50f/0x640
[  338.431431][ T6345]  ? blk_mq_alloc_request+0x59b/0x950
[  338.433065][ T6345]  ? __pfx_blk_queue_enter+0x10/0x10
[  338.434657][ T6345]  ? __pfx___lock_acquire+0x10/0x10
[  338.436233][ T6345]  blk_mq_alloc_request+0x59b/0x950
[  338.438011][ T6345]  ? lock_acquire.part.0+0x11b/0x380
[  338.439637][ T6345]  ? __pfx_blk_mq_alloc_request+0x10/0x10
[  338.441364][ T6345]  ? __pfx_lock_release+0x10/0x10
[  338.442898][ T6345]  ? trace_lock_acquire+0x14e/0x1f0
[  338.444432][ T6345]  scsi_execute_cmd+0x1f1/0xff0
[  338.445932][ T6345]  ? bpf_trace_run2+0x2a6/0x590
[  338.447404][ T6345]  ? __pfx_scsi_execute_cmd+0x10/0x10
[  338.448960][ T6345]  ? sd_revalidate_disk.isra.0+0x52c/0xa8d0
[  338.450655][ T6345]  ? rcu_is_watching+0x12/0xc0
[  338.452056][ T6345]  read_capacity_16+0x21a/0xe20
[  338.453467][ T6345]  ? __pfx_read_capacity_16+0x10/0x10
[  338.455015][ T6345]  ? __pfx___mutex_lock+0x10/0x10
[  338.456455][ T6345]  ? __pfx_scsi_execute_cmd+0x10/0x10
[  338.458243][ T6345]  sd_revalidate_disk.isra.0+0x1a06/0xa8d0
[  338.459933][ T6345]  ? find_held_lock+0x2d/0x110
[  338.461304][ T6345]  ? mark_held_locks+0x9f/0xe0
[  338.462679][ T6345]  ? __pfx_sd_revalidate_disk.isra.0+0x10/0x10
[  338.464442][ T6345]  ? kasan_save_stack+0x42/0x60
[  338.465821][ T6345]  ? kasan_save_stack+0x33/0x60
[  338.467258][ T6345]  ? kasan_save_track+0x14/0x30
[  338.468673][ T6345]  ? kasan_save_free_info+0x3b/0x60
[  338.470162][ T6345]  ? __kasan_slab_free+0x51/0x70
[  338.471586][ T6345]  ? kfree+0x14f/0x4b0
[  338.472757][ T6345]  ? scsi_attach_vpd+0x4dc/0x580
[  338.474178][ T6345]  ? scsi_rescan_device+0xf5/0x340
[  338.475649][ T6345]  ? ata_scsi_dev_rescan+0x1cb/0x470
[  338.477340][ T6345]  ? process_one_work+0x958/0x1b30
[  338.478879][ T6345]  ? worker_thread+0x6c8/0xf00
[  338.480244][ T6345]  ? hlock_class+0x4e/0x130
[  338.481593][ T6345]  ? mark_lock+0xb5/0xc60
[  338.482950][ T6345]  ? mark_held_locks+0x9f/0xe0
[  338.484803][ T6345]  ? kasan_quarantine_put+0x10a/0x240
[  338.486337][ T6345]  ? lockdep_hardirqs_on+0x7c/0x110
[  338.488106][ T6345]  ? kfree+0x14f/0x4b0
[  338.489289][ T6345]  ? lockdep_hardirqs_on+0x7c/0x110
[  338.490785][ T6345]  ? scsi_attach_vpd+0x4dc/0x580
[  338.492203][ T6345]  ? scsi_attach_vpd+0x4dc/0x580
[  338.493660][ T6345]  ? __pfx_sd_rescan+0x10/0x10
[  338.495188][ T6345]  scsi_rescan_device+0x243/0x340
[  338.496814][ T6345]  ata_scsi_dev_rescan+0x1cb/0x470
[  338.498594][ T6345]  process_one_work+0x958/0x1b30
[  338.500042][ T6345]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  338.501635][ T6345]  ? __pfx_process_one_work+0x10/0x10
[  338.503407][ T6345]  ? rcu_is_watching+0x12/0xc0
[  338.505078][ T6345]  ? assign_work+0x1a0/0x250
[  338.506703][ T6345]  worker_thread+0x6c8/0xf00
[  338.508140][ T6345]  ? __kthread_parkme+0x148/0x220
[  338.509774][ T6345]  ? __pfx_worker_thread+0x10/0x10
[  338.511375][ T6345]  kthread+0x2c1/0x3a0
[  338.512649][ T6345]  ? _raw_spin_unlock_irq+0x23/0x50
[  338.514235][ T6345]  ? __pfx_kthread+0x10/0x10
[  338.515701][ T6345]  ret_from_fork+0x45/0x80
[  338.517203][ T6345]  ? __pfx_kthread+0x10/0x10
[  338.518838][ T6345]  ret_from_fork_asm+0x1a/0x30
[  338.520527][ T6345]  </TASK>
[  338.542988][T12851] overlayfs: overlapping lowerdir path
[  338.547045][   T39] audit: type=1326 audit(2000000019.820:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12850 comm="syz.0.1714" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x0

VM DIAGNOSIS:
08:36:50  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000023 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85145025 RDI=ffffffff9a667200 RBP=ffffffff9a6671c0 RSP=ffffc9000e27ea60
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e33312e36
R12=0000000000000000 R13=0000000000000023 R14=ffffffff85144fc0 R15=0000000000000000
RIP=ffffffff8514504f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b400000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7f155c0 CR3=0000000073bde000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e92cc113c1c40ca6 312ed9a72ec26fba
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bd49bdb8df8caeb3 50695b70ede2182f
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b204ce836daf550b 2b77483f59528de8
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a8d073ea24c4e366 987b4e11e1367d2c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001c40
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8001000080010000 a8857c0080010000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000cdda0000cdda 0000cdda80010000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8f0452000000cdda 800100008ce32a00
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000cddaac400200 aa7c6e000000cdda
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2027075fb6cfaecb 0ba4f61a1b50eb82
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4cb8a867356edbf1 42f069254106e966
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000f469a4 RBX=0000000000000001 RCX=ffffffff8b1a6889 RDX=ffffed10056a6fee
RSI=ffffffff8bb170c0 RDI=ffffffff81703039 RBP=ffffed10039dc910 RSP=ffffc9000047fe08
R8 =0000000000000000 R9 =ffffed10056a6fed R10=ffff88802b537f6b R11=0000000000000001
R12=0000000000000001 R13=ffff88801cee4880 R14=ffffffff901cf290 R15=0000000000000000
RIP=ffffffff8b1a7c6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b500000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000002ea20220 CR3=000000005b99c000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffffffff84c769eb RDX=ffff888025da4880
RSI=00000000c9362800 RDI=0000000000000004 RBP=0000000000000012 RSP=ffffc900005486e0
R8 =0000000000000004 R9 =00000000c9362800 R10=00000000c9362845 R11=00000000000a2001
R12=00000000c9362845 R13=ffff88804ce02450 R14=0000000000000000 R15=ffff88804ce02454
RIP=ffffffff81994751 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe6d7d6dd00 ffffffff 00c00000
GS =0000 ffff88802b600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f3ef0218 CR3=0000000027c86000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865
ZMM17=8a68f11a5f599615 19b34d8fbbf631c7 8a68f11a5f599615 19b34d8fbbf631c7 8a68f11a5f599615 19b34d8fbbf631c7 8a68f11a5f599615 19b34d8fbbf631c7
ZMM18=bc73f8cd39474a9f 2c0b381bdc07261d bc73f8cd39474a9f 2c0b381bdc07261d bc73f8cd39474a9f 2c0b381bdc07261d bc73f8cd39474a9f 2c0b381bdc07261d
ZMM19=7513000000000000 0000000000000204 7513000000000000 0000000000000203 7513000000000000 0000000000000202 7513000000000000 0000000000000201
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=19b34d8f19b34d8f 19b34d8f19b34d8f 19b34d8f19b34d8f 19b34d8f19b34d8f 19b34d8f19b34d8f 19b34d8f19b34d8f 19b34d8f19b34d8f 19b34d8f19b34d8f
ZMM22=5f5996155f599615 5f5996155f599615 5f5996155f599615 5f5996155f599615 5f5996155f599615 5f5996155f599615 5f5996155f599615 5f5996155f599615
ZMM23=8a68f11a8a68f11a 8a68f11a8a68f11a 8a68f11a8a68f11a 8a68f11a8a68f11a 8a68f11a8a68f11a 8a68f11a8a68f11a 8a68f11a8a68f11a 8a68f11a8a68f11a
ZMM24=dc07261ddc07261d dc07261ddc07261d dc07261ddc07261d dc07261ddc07261d dc07261ddc07261d dc07261ddc07261d dc07261ddc07261d dc07261ddc07261d
ZMM25=2c0b381b2c0b381b 2c0b381b2c0b381b 2c0b381b2c0b381b 2c0b381b2c0b381b 2c0b381b2c0b381b 2c0b381b2c0b381b 2c0b381b2c0b381b 2c0b381b2c0b381b
ZMM26=39474a9f39474a9f 39474a9f39474a9f 39474a9f39474a9f 39474a9f39474a9f 39474a9f39474a9f 39474a9f39474a9f 39474a9f39474a9f 39474a9f39474a9f
ZMM27=bc73f8cdbc73f8cd bc73f8cdbc73f8cd bc73f8cdbc73f8cd bc73f8cdbc73f8cd bc73f8cdbc73f8cd bc73f8cdbc73f8cd bc73f8cdbc73f8cd bc73f8cdbc73f8cd
ZMM28=00000200000001ff 000001fe000001fd 000001fc000001fb 000001fa000001f9 000001f8000001f7 000001f6000001f5 000001f4000001f3 000001f2000001f1
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=7513000075130000 7513000075130000 7513000075130000 7513000075130000 7513000075130000 7513000075130000 7513000075130000 7513000075130000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=ffff88802b73ff00 RCX=ffffffff818d70c4 RDX=ffff88801cee0000
RSI=0000000000000000 RDI=0000000000000005 RBP=ffffc9000045fd78 RSP=ffffc9000045fca0
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1bb8bee
R12=1ffff9200008bf98 R13=0000000000000001 R14=0000000000000003 R15=ffffed10056e7fe1
RIP=ffffffff818d709a RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000583099bc CR3=000000004c5fa000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000