last executing test programs:

1m45.970579178s ago: executing program 2 (id=219):
mkdir(&(0x7f0000000180)='./file1\x00', 0x0) (async)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) (async)
chdir(&(0x7f0000000140)='./bus\x00')
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) (async)
open(&(0x7f00000000c0)='./file0\x00', 0x4008040, 0x0) (async)
unlink(&(0x7f0000000040)='./file0\x00')

1m45.968913841s ago: executing program 2 (id=220):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x7, 0x4)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x8c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
mmap(&(0x7f0000562000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x16, 0x0, &(0x7f0000000200)='asymmetric\x00', 0x0)
prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0x408c5333, &(0x7f0000000100)={{}, 'port0\x00', 0x2, 0xc0000})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13)
r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f00000001c0)={0x2, 0x0, @raw_data})
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>r1, {0x9}}, './file0\x00'})
mmap(&(0x7f00002d5000/0x4000)=nil, 0x4000, 0x4, 0x30, r5, 0xb15f4000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x1, 0x12, r6, 0x0)
r7 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r7, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x11)

1m45.850236215s ago: executing program 2 (id=222):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0))
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
unshare(0x20020680)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40087447, &(0x7f0000000280)={0x8, &(0x7f0000000040)=[{0x81, 0x2, 0x2, 0x80000001}, {0x101, 0xb, 0xa, 0x40}, {0xb, 0x1, 0x4, 0xe7}, {0x1, 0x30, 0x3, 0x2}, {0x1, 0x1, 0xff}, {0x101, 0x86, 0x7, 0x400}, {0x700, 0x10, 0x9, 0x1f}, {0x101, 0x4, 0x6, 0x7}]})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
unshare(0x22020600)
unshare(0x2a020480)
read$FUSE(0xffffffffffffffff, &(0x7f000000c400)={0x2020}, 0x2020)

1m44.640702215s ago: executing program 2 (id=234):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000d51991e448e4e2af309b1ec100"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060005000000001000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
connect(r3, &(0x7f0000001780)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7}, 0x80)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r4}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r5, &(0x7f0000000180), 0x40010)

1m44.640293534s ago: executing program 2 (id=235):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0x0, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x3c}}, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
io_setup(0x5, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000640)={{}, 0x0, 0x0, @inherit={0x0, 0x0}, @name="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"})
r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x101840, 0x0)
ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x0, 0x0, "c6000000004000"})
r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0)
writev(r7, &(0x7f0000000000)=[{&(0x7f0000000380)='\r', 0x160a}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRES8=0x0], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
getegid()
read$eventfd(r8, &(0x7f0000000080), 0x51)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r4)

1m43.832190326s ago: executing program 2 (id=239):
socket$nl_route(0x10, 0x3, 0x0) (async)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0xf}, 0x1c) (async)
rseq(0x0, 0x0, 0x1, 0x0) (async, rerun: 64)
r0 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x181000, 0x0) (rerun: 64)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8090) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x8040)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
socket$nl_netfilter(0x10, 0x3, 0xc)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000040)=@base={0x5, 0x1, 0x6c02, 0x41, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x20000, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

1m43.792407164s ago: executing program 32 (id=239):
socket$nl_route(0x10, 0x3, 0x0) (async)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0xf}, 0x1c) (async)
rseq(0x0, 0x0, 0x1, 0x0) (async, rerun: 64)
r0 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x181000, 0x0) (rerun: 64)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8090) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x8040)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
socket$nl_netfilter(0x10, 0x3, 0xc)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000040)=@base={0x5, 0x1, 0x6c02, 0x41, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x20000, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

59.460122802s ago: executing program 3 (id=423):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be2896", 0x3}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @local, @private=0xa010101}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x2}}], 0x28}, 0x80) (async)
r1 = socket$kcm(0x10, 0x2, 0x0) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@newtfilter={0x1520, 0x2c, 0x4, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x10, 0x5}, {0x1}, {0x9, 0x10}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14a4, 0x2, [@TCA_CGROUP_EMATCHES={0x14a0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x81}}, @TCA_EMATCH_TREE_LIST={0xb8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x8, 0x0, 0x6}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x216b, 0x2, 0x4}, {0x4, 0x5, 0x1, '})Q13'}}}, @TCF_EM_IPT={0x24, 0x2, 0x0, 0x0, {{0x4, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x81}]}}, @TCF_EM_IPT={0x58, 0x2, 0x0, 0x0, {{0xcf, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x81}]}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x1, 0x2, 0x3}, {0x400, 0x3, 0x2, "a11d0b"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x69a}, {0x1, 0x3, 0x2, "26e1e9"}}}]}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x7}, {{0x4, 0x0, 0x1, 0x1}, {0x2}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x606, 0x7, 0x7}, {{0x0, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x117c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x38, 0x2, 0x0, 0x0, {{0x10, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_VAR="e68d7e5753", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="6d3ab30fd4fb125d", @TCF_META_TYPE_VAR="66d0e9", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="94", @TCF_META_TYPE_INT]}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x6}, {0x1, 0x7fffffff, 0x8, 0x0, 0xd, 0x2, 0x2}}}, @TCF_EM_META={0x24, 0x3, 0x0, 0x0, {{0x1, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="d44ec6f02748336c"]}]}}, @TCF_EM_META={0x5c, 0x1, 0x0, 0x0, {{0xd, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x200, 0x1, 0x1}, {0xe, 0xf9, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x2d, 0x1}, {0x3, 0x6, 0x2}}}, @TCA_EM_META_RVALUE={0x25, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xffffffff, @TCF_META_TYPE_VAR="5e5566147f69a7e2ca", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="9557d36dd4c41c8b6259"]}]}}, @TCF_EM_META={0x50, 0x2, 0x0, 0x0, {{0x7, 0x4, 0xfffc}, [@TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1000, 0x0, 0x1}, {0xdcf, 0x80}}}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="f5ee15742e", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x4, 0x2}, {0xfff3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x80, 0x6}, {0x3, 0xc9, 0x2}}}]}}, @TCF_EM_IPT={0x1058, 0x1, 0x0, 0x0, {{0x7, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "fa22c5a731ac77f5239416cfa4cc840ddb47c6540d8fb8088fbed3698c5449c33d0de03600168394e04fea1c7681e0625f34cba914e2a2877708f1749b0064f58ee5fddb7d73eac3d00b8da59894be44d6d07ba1dd8705ead985f07cb28ba821bd4e2bcafa21748e2bc2bb5a9e313d4a8b7e19056a7d257bb1d025cf140e01ac4a637e6b12d57273a571505305e7c23f6e2f22e3777ceec557f54c7ed9e4c3f7863de0cd16628befc635b1333142b70da4dd6813e0d1d13fc581e667663ea7d6e01bf8ed551ee75b446e73f1841891efe4697cc6db46d2e4930d4a33cf1a705448ca367b96fa263f9b52f88f2a1ee438aac0f041d3ab888a52373cda25ace0815ecead1349879b4a03c201fc343732cc6f68d9a4be8444262c326b2525d15e808d586a02d749c7c85707c8c211fa9acaf9e6d6b8edefec8faf9910da375dda58df0682b77ebc9536ea27ea1248273a0bdf6c78a4594a1d03e298753e0dadbf1d9a3de5fb0a856ad0f871f7ca60ba12fdf28119dddf867f343eddd0dfbd7223bb2fa614a354933645a54727f93ce9d21e38adbdc0754268b0bb99c9c31d88930e41019f6f35538177a2750952bddf3b4139f4918e5c2b66d70d93f493dc1f586ee9c2d11341c6e7a6ac59bc8f0a0e5e4a614209146a25dabe58353e1ea5762596b4b05e5da80f1fd33500b03a5cf2f80f86458183d18ea01b2eb1c726aac08a39f480b50553bfbc52492b14558ffe9d1139aadd89d60e7dee3a233df312cbbca31aec93334fabf34067fb76922ba5cb63c6e2a631bce5b641681cab2ac4f2f1bd93faf64b5acc789688bb5c0862cfc999f4553fd95275f88324ad17d6607423352ea414aa50d13f4097f9671a0b91ba9a646092f38ac28df98fccda831ea97d4f0bd3b81af4621b5f8429fa46619dd583f0fb4f2885f61bad4e96bcc3f9a0de610335883b345f0539bc483f6158dccd6adfbca27cf73b3d5afd92f2bbdd6600f89065be8cb0d1ba9199c9ed92c41a6ae3ed03c73b9166429877d228d19d0bbba8ade0ad1ce9dd987f30a888440568b694c6d694d6da96d477c8817e8a1f1fea7e4d661297e55d7d6750dfe4f96861ce2f165c9495d625fe81d430927a9337d57d2d319732a7be6ac25cae14c10ba4baa00c97b36f79228f864db22f45ac9cfa132efc5d3d2be225519360acd548a82b9c7d833bcaf7e257cbcdc49582b542512868a2698961edc0fc4625aa4c0e9340939d0749d22f95f86c72021f8ceb6a1248f2ce636a3d528be501578eeb7eb9747635e18ba609e1f2caf9940331a33bf6b48a73b3cee41a2d06d538a905ea34acbdce7cdae1855162e8d131874c0f17f968a8c5b7ad01610c36ccf45c5275ef63f37aaa439d122f05f86e69a9aa04e8d69a8a01a61bcfc8ace7e09ecb64ba7029f3556ba1235e528d5419f96ca6cd9976f7956546c9295c0e77ecd2d43b695a612472def56fc34c348bfa4473c118c0d0b7f1e770d55cbdcbabda90bf9c89f28137c037450257827dc2f79bccba38303b6f516af45b7e98f5c587feed8b38a5ab8058af7f2fcbcbfd54035b865696d3e11f1d33898f89b435a1f6e21a258052548ad3452b3f98dfdbfa1f8418bc17ca375a80313b987d22d55f67e9954a32b6cdd92a99001f50f393f302ad8252de707607712c2de67382777a85559c65016dd5eb09ca4c0544dd9e51b4ec0f0a790e69da62e2272bb3c491fae2394c92decab15ec93ab842708f5b9b02a6787afcf33f6fc633c437002d8f8a2168b00b48d96cc695da292b12eb75fa7e9c62c50598d22d29dea6d582648b499c595bc4839a0356b438e13d0566b70b09de8eb1a16a53f289316aa5407dddce54e7d638dc82a4bdbbb823023b9f56437d03625da8449b2f186e532fdff001ad6a80e0d223efc40146e540cff2530fbd4706890cab2324f9e76b47658c48324e34e854efb76402f87cb1c960b488350ad1895cad5c56d081bc6b78d3fe02a138a934452361d16b43f133a0b4ba0da92311962f41e62ccafcd588d62c0175452753ae83cbfb090cf48bacf625c9cb4d453e1bd752a752953d8d7253adf304d9e4775e381d9db9a207e2abb556c0ab3104fc01c637fcf112a32d2ca4f695fb745df39192f733706a745052d9ce18f2f8891e259a54463e8ef73948a80e4640f14b3327a14df9b156a0aa03bf2b26e54c5d7b23a66adb7c02ab1b6ce6e39f119d8300653103a1055ece9ccdce7dd546764c38fe92db21b21c2ebe61d4f2cae88636e249671ccdd237f19ab991b2816d441ba6d727ad6b9ae65a668cae692b00cbfc901b41f2670d4796d7dcda0bb1c1d32c92a7aa6caf881cf3dfed86261d8033109a9026e6a0de8e90b8016dd0557bc499d475ef7e549c41bdaee68e1f4dafd33022fe2268e792ac23ab55b7a2f7ffca4882da05199edd292928143b80d9ff6c4427584058a4fcdc6983b9b2ec8ccffff969901b50e8d41422391d433378950a98ee914cf8eecaca3d3d2d4bf4ea29ee770a75e37167aa77dba17e394d51906c7ddfbb8a9bc11c2997c1854eecebe492a63743311a5c638cb883d12e73f0b8df2e96c7b684358cdbcbe5d4af5672fbac9f2a79e02df7e07424016104ceab64d098b5e809dbb58e79b208e88de7dd3fe305d2440e6db5a0ff61cf418e14160cb6e175029baa476ff09b9348cab4d0e30cd4db1ecde35dbbffd1c742811b898f8f281469e086ef5345d7ac02efc2c574c3b013fdedce2a3b0da6fe0c314dc057292f1ab448126d199d87a2efb681735d6d1b36ab0bcd8b0b8b948ef3ba43eb2a4dfe31d6c9bc7da1d5a6daf174ef080f093dcd84069daf757d98d4fc8cb0ee2e08a82dafb47c2254180655d9d1fe4022b91c2f1dd33325b9c6a0c514594c6a305042258d40de7a749f028898a302189ed6ab98b70d32ed575ab70a153341f1c5c909047060cfd4fe6b6f633827ee1e21bddc305dffb376483008f88acb4451e758a030bd71149d6155c577db2f1dc0a3edefbd4f3d501a4385b2fab1f6d327cf8b172c7492081f0b41a9648f6cb5f9626932051b6d77274a1b0c07792b6ac56d660d3a0c226ee9bb899b9e96bf5762ffdbc727a74501390c82033881f5b9aa4baaa5f97b19bba0622ca85f90beb2bb0573d0064161b4ad547304145159e2813e59fd37789e72dad2a1637069fe6c04bf57e0a6db4379459994b5936017926f3b1fa4cef36ba77c3d05369a42cde22cb3c8dc1e1d2d09186311c7ece4f81fae1452db1b5186bac6d2dc72f57cb6514b3478d31c2ba6dfbca39dc717c3187d0184e3fe04d90fb22ecac0de70bc02c011f1be329a1fc049a4e821a48ca76b9f8429baac6d7c55ee7e40856d36437eb56d405f6215142ed8be153df743b02980ae2d21ccab48eafe6c44db4738489de2b8b975c35a5e8eee6cabc3c47a93025d6ed89100fabb9fa204021601e0b6cf9e65720d90871a39194f5ddf8bfca2646abb339890b03182fb8fb2be8bebc668d3f98e517de907e8ce5ca0c3fce9eea4d5bf72e7e8d2a2eba9239def074cde0529c58e12351c045cfb2dd9a369a5f28588fb94e86c49866133cd8a7041b88222dc0633ec33a1bbc295e28ae30443cb908d3a55e3e29066309b22b6eab4b6a3656c7c1b2f8986261f11c552666b66b0c0a27c9833aaaae6e72480914978b88cb3218c0bc2b0830b77bf27ac6395dafd6df0ee199aece24f9be29ebdee767d5ea6acc13d46e9c941af7ba744e04b818f90e8e5be8284ef56f3a84c5d18c58fe7b3411f84d9ba83b97bd856c6fbe55d6b8a8fa782c37a33bb2e62edd71a27fca182217e2bb4c15dfa6f15eb340a0e8babfb2186bd123e4df82ed77ba52357672cc0250ea92356dfed819c3e1464b93ce29990a284a57df17c1008d99d4a288b56a39d3728a4ec033f1912f43faaf6817849ca972b9b4c423e7345b6b77541006549e788d65c0f138f879b3f4f8ea9c3ad3ccd28b1d8e5aeba7763f80f324395017e4b93ae25ea23f21bddf096bafe050f85e7aad61967012499f9e467b5d7d5651cc561d478d985ed602dbd1547ddd9d01e235cabaf90a4eeb2f3fd2de3fdd7a7e09aa4b6f5b80a0f58b445b084db5b767d54c01419613b4ffb764e84b7d5c738e1db1c5e929faf9635af4cea252f89a764b5c50283dd93936baaa317a46ba15f2b9b8066b55d99f404d34a0e7ba7ce6741074b38d7223eb3e8ed5671a2405209616861e52028527bd1edecb99c660890ac6e532f75ce9fcaeceee0195b9d02d9c452491847ffdc806a7cb39d61c4bc8eb31276c9299ea7a3e21e140b408aad5117ae3da4bc23677c58c3a3964272e465d0051b20670d40968a174dfeda7a6f2b81365c792fc2ed9789d304bc0c1c3139d73dbd7a96f88c0f9b3e7bdf9d07dd0a394a75bd0b366b5d1fc6d388d15bca5aed17594940c260e7202db72e56ff60fbad255649de514c6783957de03226c967351af08798861f3aab7a6b30643b7ec0e2f970f09da0885a61c1c8b5ef1e8588db5e7450083c8697bab6419662debb3cc9f0c088b206e90a53935706ac7f690f501ab51a5397ad35d7a3913985f906741303459122a163ee2f903236bc24d0e2f24627e46a107e46241d4b047e2b4ebbd1ccf32ce9f9871aa342b4dcfeb9088c696cd40d927bba0be35853cec45d663eaf323d2a8b869916b9cd521f19cb36a8729e6c4fe20a1b9553d468c6eda99fa58adeae3e7646fac233c92bb2b7175c09bb24bb01f7203efe9f63704ee59772d5d60e6662669a37a6218f7d25d61e8026d5d076110a4e75dfa3d67d49cad1c0144275eeb6595452e882607d45d819ad9dc9d6d62e2f8d0bc3cb7ca5b024c72847b3c9c81672bc783a179b10262f694b03a78dd08a579fc5215446297d8cc483a24d3c32ed298d29e6c478cb88733bafda60269c701857f49bfe50c03a03832749a9f4d0abd35da705ea1c531514e07083c9d4185ef25ef15f647d14e90c845db2be0ea4b9841aa6b4f57108703407d3b27097ce76097d8cf3c546595948a0183428e9d2896b2c6fbfde2e66cf7593c4a845fa6b154dc93a81040f3ef5606cd49711d4848c773585ec823f8d052df5394c14de0e240c1611e7b014e3874fbaf1215c053c0301d4a1a97a5300d113a12626e74dd88f010e3e19c4369abeb0847098d51275323471cacda2466cc0bcaf3790195d9555c399eaddffcf5f58bf48452ed3254f06f11d259597cf39b1cc5500ff8470445f0effcb1479937bae2d0d74844e1d4adbc0c3fce5e828cefad8571f70baa78673b089754a147ca72288d4375cffb66f7bc164bf78317b31f260cdeb5c649a7c6931f397527f554db85192a0537d39c5b6fe7ab853212c320407920c3810325eadf50ab2616a37076b4fef449da3301f817cf288df861c4c06d9b1b0684fde042520186246636f67ebc87c08d8ac8a8c8db7b1b869113646fa1a314ec6de38b9ef9cf67baa0ace440c317bb10b18070af81d9430b42965f0e24058475a8d3012cf7ebcdf8401ce21c52f79dfd558257763169a25f7e61755b489e62ce2364162573c4f071da20b0c5a695b54c26ec89b0c9cbe5b1ea62b81176f1c5201528e2747262f1bc5f8071d1e493f2bd70eead3aafa45a6eda3f7b852cdae344a55c42e552a35a3a0bb667298cc996b62e6a85ddfc70271f7ab91c27f3c35710132d6e59e09cd278af4d72b55ba89149e262db0ee26aa2eafee907b7d219c9648e04dc31d55c39c0d994aaabfc98b3459754320883a1ff177d936bf7ba6fe"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x34, 0x5, "4756508a00fb5a5c1f89d882c71d4d63b6857bcb3900d2adc4e97eeba8101ce6261f537f77e30cd582f23d0942ab711b"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1fc, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7fff, 0x1, 0x9ac}, {0xfff, 0x3, 0x8, 0x2, 0x6, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x6, 0x2, 0x8}, {0x3, 0x1, 0x0, "82"}}}, @TCF_EM_META={0x74, 0x1, 0x0, 0x0, {{0x4, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_VAR="693fa9", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="8435674483", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="a4fc3149192a27e5", @TCF_META_TYPE_VAR="342fe748"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0xfe, 0x2}, {0x6, 0x6, 0x2}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x2, 0x1}, {0xfffe, 0xe, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xd, 0x6c, 0x1}, {0x5, 0x5, 0x1}}}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x40}, {0x9, 0x3, 0x6, 0xb1}}}, @TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x7}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xe1}]}}, @TCF_EM_IPT={0x104, 0x2, 0x0, 0x0, {{0x0, 0x9, 0x7fff}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_DATA={0xb9, 0x5, "6ccbcf90cfac95b2957bf3d8f3b21ae524375fbd6a0739347d4c699e248b32fc6511f2f9406c9584ba5569981498e58d1efbd72107a2b2ac9996b4951f9f14337a9399db3d9b8602a0547fa19f9ecb7cfbdf69adb4ad7c7a8858971a4f48e32251a6efbeeab3c3495d522f5bef4cb588fe2a99965bff61baff4101d217fccdc41682746178e08a09386b8f30149dcd40d739199aaff6ee5870d4622dd234320565153903ac4884e002114f18f2b9dcc889456577e5"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x8}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xd6, 0x7, 0x4584}, {{}, {0x3}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x73f}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xffffffff, 0xffffff00, 0x0, 0xffffffff]}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x8}]}}]}, 0x1520}}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401040016004000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

59.410397145s ago: executing program 3 (id=425):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000080)=0x10000, 0x4)
connect$ax25(r0, &(0x7f0000000100)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='oom_score_adj_update\x00', r2}, 0x11)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r5, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40818)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x0)

59.408538388s ago: executing program 3 (id=426):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000ff02"])
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
getpgrp(r5)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc0bc5310, &(0x7f0000000300)={0x18, 0xffffffff, 0x0, 'queue1\x00'})
syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x4000, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0))
pipe(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r7 = syz_io_uring_setup(0x1111, &(0x7f0000000300), &(0x7f0000000040)=<r8=>0x0, &(0x7f0000000180)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x8, 0x0, 0x7, 0x0, 0x0})
io_uring_enter(r7, 0x47fa, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='contention_end\x00'}, 0x18)

58.849968884s ago: executing program 3 (id=429):
mkdir(&(0x7f0000000180)='./file0\x00', 0xa8)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020)
mkdir(&(0x7f0000000040)='./file0\x00', 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000001180)='./bus\x00')
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10)
getegid()
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x1805c61, 0x0)
ptrace(0x10, r3)
ptrace$cont(0x20, r3, 0x0, 0x0)
ptrace$getregs(0xc, r3, 0xb, &(0x7f0000000000)=""/5)
getsockopt$MRT6(r0, 0x29, 0xd0, &(0x7f0000000100), &(0x7f0000000240)=0x4)
rmdir(&(0x7f00000001c0)='./file0\x00')
mkdir(&(0x7f0000000040)='./file0\x00', 0x112)
write$UHID_CREATE2(r0, &(0x7f0000002440)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0xa7, 0x6, 0x5, 0x8001, 0xfffffffc, 0xad5, "2c80563b00b23c0595c8308739ba4b0794729fc1bd0129f863051fcc58af5067fa9a39d37dbf0aae75380d6f2ada436765b1331d583f7265b3b8824e4362e2090456f7be111928119a547b999cba4936018d80982105a40c3f1d2f8e7b6a33fc8e868c919bc5a0482229497fa365281e81c513dd24bbfcb619b57672c658024db79806f5acd0c173a03682e27de7b59e1337de12a85164985413aa5f2489744f9049574257c106"}}, 0x1bf)

58.789482422s ago: executing program 3 (id=431):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000018000000100000900000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38)
r1 = syz_open_dev$vim2m(&(0x7f0000000c00), 0x6eb, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x15, 0x1, 0x0, "6906007722366ccee4ba568eb4f80102f5372f2c74f6024305f11fd3454ad23d"})

58.468978313s ago: executing program 3 (id=435):
r0 = socket$inet(0x2, 0x6, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='bond0\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={0x2, 0x0, @multicast1=0xe0000306}, 0x10)

58.385324976s ago: executing program 33 (id=435):
r0 = socket$inet(0x2, 0x6, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='bond0\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={0x2, 0x0, @multicast1=0xe0000306}, 0x10)

39.380065368s ago: executing program 5 (id=580):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
eventfd(0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200840, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f00000000c0)=0x5, 0x4)
syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbb3b86dd6012000800103aff00000000000000000000000000000000ff020000000000000000000000000001"], 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, &(0x7f0000000040)={0xed, 0x0, 0x1})
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x100000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000580))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x8000000)
unlinkat$binderfs_device(0xffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00')
r6 = dup2(r0, r0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r8, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20010046}, 0x4000400)
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f00000003c0)=0x5)
read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0x2020)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000140))

37.490058336s ago: executing program 5 (id=590):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x8, &(0x7f0000000000), 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
close_range(r2, 0xffffffffffffffff, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0)
r3 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2}, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780, 0x23456})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
r7 = openat$nmem0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x0, &(0x7f0000000280)={0x80, {{0xa, 0x4e24, 0xe000, @private1, 0x5}}, {{0xa, 0x4e20, 0xde8e, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}}}, 0x104)
r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81)
r9 = syz_io_uring_setup(0x19fa, &(0x7f0000000400)={0x0, 0x597c, 0x224, 0x1, 0x3e3, 0x0, r7}, &(0x7f00000000c0), &(0x7f0000000580))
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r9, 0xc, 0x0, 0x0)
ioctl$USBDEVFS_CONTROL(r8, 0x4004550c, 0x0)

37.269904979s ago: executing program 5 (id=594):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan1\x00'}) (async, rerun: 32)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) (async, rerun: 32)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0xb7, &(0x7f0000000140)=""/183, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2008, 0x1}, 0x8, 0x10, &(0x7f0000000080)={0x3, 0x14, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x2, 0x1000002, 0xf, 0x7}], 0x10, 0x37, @void, @value}, 0x94) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'})
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async, rerun: 64)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (rerun: 64)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async, rerun: 32)
chdir(&(0x7f0000000140)='./file0\x00') (async, rerun: 32)
r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r6 = openat$cgroup_pressure(r5, &(0x7f0000001000)='cpu.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r6, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000080), 0x12)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8, 0x0) (async, rerun: 32)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) (rerun: 32)

37.269590668s ago: executing program 5 (id=595):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
set_mempolicy(0x2, &(0x7f0000000000)=0x1, 0x4)
syz_io_uring_setup(0x7ab9, &(0x7f00000005c0)={0x0, 0x20000021, 0x10100, 0x1, 0xfffffffd}, &(0x7f0000000100), &(0x7f0000000180))
sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
syz_usb_connect(0x0, 0xfffffffffffffcd0, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0xbd, 0x99, 0x2d, 0x40, 0x1943, 0x2250, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x84, 0x6d, 0xcf}}]}}]}}, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5c)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r2, &(0x7f00000004c0)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)}, {&(0x7f00000002c0)=""/16, 0x10}, {&(0x7f0000000300)=""/79, 0x4f}], 0x3, &(0x7f00000003c0)=""/243, 0xf3}, 0x2000)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000002080)={0x16, {"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", 0xfffffffffffffcd2}}, 0x1006)
shutdown(r2, 0x1)
pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/200, 0xc8, 0x0)
r5 = socket$inet(0x2, 0x80000, 0xed4f)
r6 = openat$ndctl0(0xffffff9c, &(0x7f0000000000), 0x440, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000640)={<r7=>0x0, 0xcf, "fabc305f84e7b57c3d0244aac828eb464f7f8943f964b6485c268d31149d38b5284203b003ade3d128c2ebfec65d7e1f4febbfd18dddb5c40bfac36e54d696f92148dfce04090dfa1945f888712ccfcce3e90248d3b3bcacb640ad5b2102f1de6617b95c536916d1533aa136679721fc71288ebf5485c89791036007110e1e0cbbf1678f55458a250d7a7fb391dcd7a13167307834e582afe182128f46899d2d5901ba14fca1c689d2ee6aec2aa7282545270f06ea30fae80b09617d3aaec840026f6da11504e8c10236ee44b55eeb"}, &(0x7f0000000500)=0xd7)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000540)={r7, 0xffff, 0x9, [0x4, 0x0, 0x2, 0x3, 0x3, 0x1, 0xfff5, 0x1c, 0xbaca]}, &(0x7f0000000580)=0x1a)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000080)=@req={0xcf3, 0x1, 0xfffffbff, 0x2}, 0x10)

34.224907643s ago: executing program 5 (id=620):
syz_io_uring_setup(0x2ddf, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x2000000000000376, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2008, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x57c91000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x800005d, 0x4810)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0)
sendfile(r3, r3, 0x0, 0x40008)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[0xffffffffffffffff], 0x0, 0x10, 0x0, @void, @value}, 0x80)
close(0x3)
syz_open_dev$sg(0x0, 0x0, 0x8002)
mount(&(0x7f0000000000)=@nullb, 0x0, &(0x7f0000000140)='btrfs\x00', 0x4880, 0x0)

34.0300634s ago: executing program 5 (id=621):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6)
sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0xf4, r7, 0xe701ac47a3d23ccd, 0x0, 0x2, {}, [@NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}]}, 0x30}}, 0x0) (async)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x190, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d76697274696f2c616e616d653d39300000000e0000000000000000000000002c008912e1e5d7ea3134e16ad4057cf841d64981f158e8ebefcfca01e3cda294fd0bae6196ce453b257643d5e99ca5606ab61d6e2e6870975d64ec239a66201a14641bcdaad700617caf2a96b13f5ddc1115c5b2ade72ea3cca7588d08d8b093ee2578fd8292b92f0b9a08fd956687e844898d7b0da5f52634cbae000000000000"])
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (async)
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
r9 = syz_open_dev$I2C(&(0x7f0000000180), 0x200, 0x0)
ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000b80)={&(0x7f0000000b40)=[{0x3, 0x0, 0x3d, &(0x7f0000000900)="60e438821e4e492904e89723b4ec1f8644fdffc361793dde77a1645a839334dda1464646051f5ff03f108ea8732d3a33343b0300d584ada221d4456917"}], 0x1}) (async)
pread64(r8, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) (async)
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)={0x18, 0x1, 0x2, 0x3, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0)

34.012504874s ago: executing program 34 (id=621):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6)
sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0xf4, r7, 0xe701ac47a3d23ccd, 0x0, 0x2, {}, [@NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}]}, 0x30}}, 0x0) (async)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x190, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d76697274696f2c616e616d653d39300000000e0000000000000000000000002c008912e1e5d7ea3134e16ad4057cf841d64981f158e8ebefcfca01e3cda294fd0bae6196ce453b257643d5e99ca5606ab61d6e2e6870975d64ec239a66201a14641bcdaad700617caf2a96b13f5ddc1115c5b2ade72ea3cca7588d08d8b093ee2578fd8292b92f0b9a08fd956687e844898d7b0da5f52634cbae000000000000"])
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (async)
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
r9 = syz_open_dev$I2C(&(0x7f0000000180), 0x200, 0x0)
ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000b80)={&(0x7f0000000b40)=[{0x3, 0x0, 0x3d, &(0x7f0000000900)="60e438821e4e492904e89723b4ec1f8644fdffc361793dde77a1645a839334dda1464646051f5ff03f108ea8732d3a33343b0300d584ada221d4456917"}], 0x1}) (async)
pread64(r8, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) (async)
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)={0x18, 0x1, 0x2, 0x3, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0)

4.893938734s ago: executing program 0 (id=860):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0x9, 0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0xdc)
socket$packet(0x11, 0x2, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r6, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0xc000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0xfe, @empty}, 0x10)
io_setup(0x81, &(0x7f0000000180))

4.649770798s ago: executing program 4 (id=864):
r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x2000000)

4.649431144s ago: executing program 4 (id=865):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nfc_llcp(r1, &(0x7f0000000980)={&(0x7f0000000600)={0x27, 0x0, 0x0, 0x4, 0x8, 0xf9, "bf25027bee42e13cf43b0205f8446aca0db03accce446a58bbb4b4b6020dc0534948c9267e68fda1e4794548f9af6b83f41331b1d46d01f3bb45ce344c43bf", 0x34}, 0x58, &(0x7f00000001c0)=[{&(0x7f00000007c0)="0612d8234e893e9da86dbbd4dcf0b1497e27412bc3ffd3d03085fc140799914193ce88a8c6bc8c514e9b90c1d18391e4cd9ad576be24caab459b33298f3e06d4bfc919fa4d5b4c741da83f73abc681555ef0aed4a19cd1b9f59ecf1818396d617f12923f02a4f37253741e2e44954206290ebabea16a54e39a205f9665", 0x7d}], 0x1, &(0x7f0000000880)={0xd4, 0x10c, 0x8, "9ce2e2f89fe3f1ddbdf72f1d09fe406affce4fd2e50b0a95c4d190a767e8f36ea0a3880ddf73120a2893e0e65416beded6c728552724894be7f219e8c141d90ae03503c91dbc3f739493d5b0113ffeb85f22b8e7022985dad8d066f09116c4a0f0f9b7eb57874e25701c540407b69d2fccc8b824f0cf7f458d90108c5d75da90d6d97c4cc028d081c1921617ede8bd149d97917c59b0737ac91cd85c20315a31309de9931f5e71375339071dd74f84b6b237050f31f71aa83377f7b6b797af922ec53da25ab1a0"}, 0xd4, 0x800}, 0x80)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x2]}]}}]}]}]}}]}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)={0x20, r2, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)=[0x0], &(0x7f0000000240), 0x0, 0x46, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x58, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x84, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00'})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)={0x14c, r2, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xf8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x4}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8325}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xd4, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'tls\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8b, 0x2, 'lo\x00\xd1\x01R\x805\xaa\x85=\x13T\x98\x16\xab\xf61E\xa8[_j\xe781\xe6\x06\x18\x8a%\x92\x85%\x1c`\xc7\xc9\x7fR\xc4\x1a\xb2\x1cd\xf9\x80\x81SJ\xaa\xba}\xfd\xe3\\Z\xa9K\x82wU~\x19\xba\xb9A\xfb+\xd5z\x06\xfc\xe0%\x9d#\x8a\xe3\xe1\x01\xe97\x0ee)}\xd6\xdc,\xa6i\xfb\x81\xb0\x99\x9a\x8ax\x98\xa3\xb91\x02\xa5\x8a\x11\xea\x806\x8a 8\xf9\xcav\xc5N\xf4v7]:\x7f\xed)\x96\x90G\xe9U\xd7\xb8\xb3@'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[!!\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x253}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40011)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x11a, 0x1, &(0x7f0000000100)=0x9, 0x17)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x2, 0x0, 0x0, 0xe, 0x3}]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002c00010000000000000000000400008010000c"], 0x24}], 0x1}, 0x0)

4.519885174s ago: executing program 4 (id=866):
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r1, 0x0, r0, 0x0, 0x6, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff)
fcntl$setstatus(r0, 0x4, 0x7c00)
sendmsg$IPSET_CMD_RENAME(r1, 0x0, 0x800)

3.431715944s ago: executing program 0 (id=878):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xb, &(0x7f00000002c0)={[{@quota}]})
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
fstat(r1, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_BT_SNDMTU(r3, 0x112, 0x13, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfe3c)
dup2(r5, r4)
setxattr$security_ima(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB], 0x2, 0x0)
finit_module(r5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0x12)
sendto$inet6(r2, 0x0, 0xfffffffffffffd2f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2042, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe47, 0x0, &(0x7f0000000300)="89", 0x0, 0x3, 0x0, 0x2}, 0x32)
r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSKEYCODE_V2(r7, 0x40284504, &(0x7f0000000100)={0x1, 0x18, 0x6, 0x2ff, "56cfe30c486e5a643e11194e35a0156eaa7e2a5dc66f32f33ef0701953be82e2"})

2.857896667s ago: executing program 1 (id=873):
r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r2=>0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r3, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r3, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r3}], 0x1, 0x800)
sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
shutdown(r3, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002540)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r4=>0x0}})
bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000640)={r4, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x104000001, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x800]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, r2, 0x0, @inherit={0x58, 0x0}, @devid=r4})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000280)={{r0}, r1, 0x2, @unused=[0x7, 0xfff, 0x1ff, 0x1], @devid=r4})
fsmount(r0, 0x0, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000680), r5)
sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r6, 0x21, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x200080c0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

2.823176542s ago: executing program 1 (id=874):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nfc_llcp(r1, &(0x7f0000000980)={&(0x7f0000000600)={0x27, 0x0, 0x0, 0x4, 0x8, 0xf9, "bf25027bee42e13cf43b0205f8446aca0db03accce446a58bbb4b4b6020dc0534948c9267e68fda1e4794548f9af6b83f41331b1d46d01f3bb45ce344c43bf", 0x34}, 0x58, &(0x7f00000001c0)=[{&(0x7f00000007c0)="0612d8234e893e9da86dbbd4dcf0b1497e27412bc3ffd3d03085fc140799914193ce88a8c6bc8c514e9b90c1d18391e4cd9ad576be24caab459b33298f3e06d4bfc919fa4d5b4c741da83f73abc681555ef0aed4a19cd1b9f59ecf1818396d617f12923f02a4f37253741e2e44954206290ebabea16a54e39a205f9665", 0x7d}], 0x1, &(0x7f0000000880)={0xd4, 0x10c, 0x8, "9ce2e2f89fe3f1ddbdf72f1d09fe406affce4fd2e50b0a95c4d190a767e8f36ea0a3880ddf73120a2893e0e65416beded6c728552724894be7f219e8c141d90ae03503c91dbc3f739493d5b0113ffeb85f22b8e7022985dad8d066f09116c4a0f0f9b7eb57874e25701c540407b69d2fccc8b824f0cf7f458d90108c5d75da90d6d97c4cc028d081c1921617ede8bd149d97917c59b0737ac91cd85c20315a31309de9931f5e71375339071dd74f84b6b237050f31f71aa83377f7b6b797af922ec53da25ab1a0"}, 0xd4, 0x800}, 0x80)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x2]}]}}]}]}]}}]}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)={0x20, r2, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)=[0x0], &(0x7f0000000240), 0x0, 0x46, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x58, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x84, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00'})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)={0x14c, r2, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xf8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x4}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8325}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xd4, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'tls\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8b, 0x2, 'lo\x00\xd1\x01R\x805\xaa\x85=\x13T\x98\x16\xab\xf61E\xa8[_j\xe781\xe6\x06\x18\x8a%\x92\x85%\x1c`\xc7\xc9\x7fR\xc4\x1a\xb2\x1cd\xf9\x80\x81SJ\xaa\xba}\xfd\xe3\\Z\xa9K\x82wU~\x19\xba\xb9A\xfb+\xd5z\x06\xfc\xe0%\x9d#\x8a\xe3\xe1\x01\xe97\x0ee)}\xd6\xdc,\xa6i\xfb\x81\xb0\x99\x9a\x8ax\x98\xa3\xb91\x02\xa5\x8a\x11\xea\x806\x8a 8\xf9\xcav\xc5N\xf4v7]:\x7f\xed)\x96\x90G\xe9U\xd7\xb8\xb3@'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[!!\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x253}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40011)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x11a, 0x1, &(0x7f0000000100)=0x9, 0x17)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x2, 0x0, 0x0, 0xe, 0x3}]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002c00010000000000000000000400008010000c"], 0x24}], 0x1}, 0x0)

2.679763841s ago: executing program 1 (id=875):
r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x40000000)

2.629842017s ago: executing program 1 (id=876):
r0 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = epoll_create1(0x0)
r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f00000000c0)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x12, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0x7, 0x8, 0x8, 0x722, 0xe72, 0x7, 0x8, 0x2e, 0x8, {0xffff945a, 0x1}, 0x3, 0xed}})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001})
r6 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r6, 0x8957)
r7 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r7, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4364902a12139c5c}, 0x1)
epoll_wait(r4, &(0x7f0000000340)=[{}], 0x1, 0x1000)

2.398526047s ago: executing program 6 (id=877):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
set_tid_address(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0xc, 0x117, 0x4}}], 0xc}}], 0x2, 0xc0)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x8}, 0x18)
getdents64(r5, &(0x7f0000000300)=""/154, 0x9a)

2.323532249s ago: executing program 6 (id=879):
socket(0x23, 0x805, 0x0)
r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000280), 0x420002, 0x0)
r1 = syz_io_uring_setup(0x16c2, &(0x7f0000000480)={0x0, 0xbd12, 0x10100, 0x1, 0x327, 0x0, r0}, &(0x7f0000000300)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x3d)
r4 = syz_io_uring_setup(0x48be, &(0x7f0000000000), 0x0, &(0x7f0000ff4000))
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0)
pipe(&(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f5c64000000000c000280060019"], 0x3c}}, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
close(r7)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x6, 0x16, 0x1, 0x0, [0x0, 0x0]}]}, 0x70}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="fd00000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc)
splice(r5, 0x0, r7, 0x0, 0x4ffe2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r10, 0x4605, &(0x7f00000002c0)={0x0, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000140)=[0xec32]})
rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0xf, 0x5, 0x10, 0xc}]})
ioctl$RNDGETENTCNT(r9, 0x80045200, &(0x7f0000000080))
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1.915617523s ago: executing program 0 (id=880):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0x9, 0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0xdc)
socket$packet(0x11, 0x2, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r6, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0xc000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0xfe, @empty}, 0x10)
io_setup(0x81, &(0x7f0000000180))

1.695003256s ago: executing program 1 (id=881):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
io_setup(0x3ff, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f00000002c0)="0b47544bc226964248", 0x9}])
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x2)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x11)
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000840), &(0x7f0000000880)=0x4)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r9 = dup(r3)
recvmmsg(r9, &(0x7f0000009340)=[{{&(0x7f0000000040)=@rc={0x1f, @none}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000380)=""/223, 0xdf}, {&(0x7f0000000480)=""/159, 0x9f}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000140)=""/107, 0x6b}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/138, 0x8a}], 0x6, &(0x7f0000002600)=""/38, 0x26}, 0x3}, {{&(0x7f0000002640)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000027c0)=[{&(0x7f00000026c0)=""/4, 0x4}, {&(0x7f0000002700)=""/107, 0x6b}, {&(0x7f0000002780)=""/50, 0x32}], 0x3, &(0x7f0000002800)=""/87, 0x57}, 0x3}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000002880)=""/233, 0xe9}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/23, 0x17}, {&(0x7f00000039c0)=""/160, 0xa0}, {&(0x7f0000003a80)=""/123, 0x7b}], 0x5, &(0x7f0000003b40)=""/132, 0x84}, 0x7}, {{&(0x7f0000003c00)=@caif=@dgm, 0x80, &(0x7f0000004080)=[{&(0x7f0000003c80)=""/47, 0x2f}, {&(0x7f0000003cc0)=""/223, 0xdf}, {&(0x7f0000003dc0)=""/233, 0xe9}, {&(0x7f0000003ec0)=""/211, 0xd3}, {&(0x7f0000003fc0)=""/143, 0x8f}], 0x5, &(0x7f00000040c0)=""/163, 0xa3}, 0x10a4}, {{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000004200)=""/211, 0xd3}, {&(0x7f0000004300)=""/100, 0x64}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/172, 0xac}, {&(0x7f0000005440)=""/209, 0xd1}, {&(0x7f0000005540)=""/200, 0xc8}, {&(0x7f0000005640)=""/80, 0x50}], 0x7, &(0x7f0000005700)=""/236, 0xec}, 0xd9}, {{&(0x7f0000005800)=@nfc_llcp, 0x80, &(0x7f0000006b80)=[{&(0x7f0000005880)=""/166, 0xa6}, {&(0x7f0000005940)=""/4096, 0x1000}, {&(0x7f0000006940)=""/153, 0x99}, {&(0x7f0000006a00)=""/148, 0x94}, {&(0x7f0000006ac0)=""/136, 0x88}], 0x5, &(0x7f0000006bc0)=""/51, 0x33}, 0x981}, {{&(0x7f0000006c00)=@rc={0x1f, @none}, 0x80, &(0x7f0000007e00)=[{&(0x7f0000006c80)=""/57, 0x39}, {&(0x7f0000007cc0)=""/23, 0x17}, {&(0x7f0000007d00)=""/222, 0xde}], 0x3, &(0x7f0000007e40)=""/229, 0xe5}, 0x7}], 0x7, 0x142, &(0x7f0000009440))
syz_open_dev$tty20(0xc, 0x4, 0x1)

1.489419186s ago: executing program 0 (id=882):
mkdir(&(0x7f0000000180)='./file0\x00', 0xa8)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020)
mkdir(&(0x7f0000000040)='./file0\x00', 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000001180)='./bus\x00')
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10)
getegid()
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x1805c61, 0x0)
ptrace(0x10, r3)
ptrace$cont(0x20, r3, 0x0, 0x0)
ptrace$getregs(0xc, r3, 0xb, &(0x7f0000000000)=""/5)
getsockopt$MRT6(r0, 0x29, 0xd0, &(0x7f0000000100), &(0x7f0000000240)=0x4)
rmdir(&(0x7f00000001c0)='./file0\x00')
mkdir(&(0x7f0000000040)='./file0\x00', 0x112)
write$UHID_CREATE2(r0, &(0x7f0000002440)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0xa7, 0x6, 0x5, 0x8001, 0xfffffffc, 0xad5, "2c80563b00b23c0595c8308739ba4b0794729fc1bd0129f863051fcc58af5067fa9a39d37dbf0aae75380d6f2ada436765b1331d583f7265b3b8824e4362e2090456f7be111928119a547b999cba4936018d80982105a40c3f1d2f8e7b6a33fc8e868c919bc5a0482229497fa365281e81c513dd24bbfcb619b57672c658024db79806f5acd0c173a03682e27de7b59e1337de12a85164985413aa5f2489744f9049574257c106"}}, 0x1bf)

1.488996313s ago: executing program 6 (id=883):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
set_tid_address(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0xc, 0x117, 0x4}}], 0xc}}], 0x2, 0xc0)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
getdents64(0xffffffffffffffff, &(0x7f0000000300)=""/154, 0x9a)

1.486710786s ago: executing program 4 (id=890):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0x9, 0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0xdc)
socket$packet(0x11, 0x2, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r5, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0xc000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0xfe, @empty}, 0x10)
io_setup(0x81, &(0x7f0000000180))

1.397161818s ago: executing program 0 (id=884):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nfc_llcp(r1, &(0x7f0000000980)={&(0x7f0000000600)={0x27, 0x0, 0x0, 0x4, 0x8, 0xf9, "bf25027bee42e13cf43b0205f8446aca0db03accce446a58bbb4b4b6020dc0534948c9267e68fda1e4794548f9af6b83f41331b1d46d01f3bb45ce344c43bf", 0x34}, 0x58, &(0x7f00000001c0)=[{&(0x7f00000007c0)="0612d8234e893e9da86dbbd4dcf0b1497e27412bc3ffd3d03085fc140799914193ce88a8c6bc8c514e9b90c1d18391e4cd9ad576be24caab459b33298f3e06d4bfc919fa4d5b4c741da83f73abc681555ef0aed4a19cd1b9f59ecf1818396d617f12923f02a4f37253741e2e44954206290ebabea16a54e39a205f9665", 0x7d}], 0x1, &(0x7f0000000880)={0xd4, 0x10c, 0x8, "9ce2e2f89fe3f1ddbdf72f1d09fe406affce4fd2e50b0a95c4d190a767e8f36ea0a3880ddf73120a2893e0e65416beded6c728552724894be7f219e8c141d90ae03503c91dbc3f739493d5b0113ffeb85f22b8e7022985dad8d066f09116c4a0f0f9b7eb57874e25701c540407b69d2fccc8b824f0cf7f458d90108c5d75da90d6d97c4cc028d081c1921617ede8bd149d97917c59b0737ac91cd85c20315a31309de9931f5e71375339071dd74f84b6b237050f31f71aa83377f7b6b797af922ec53da25ab1a0"}, 0xd4, 0x800}, 0x80)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x2]}]}}]}]}]}}]}, 0x74}}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)={0x20, r2, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)=[0x0], &(0x7f0000000240), 0x0, 0x46, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x58, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x84, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00'})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)={0x14c, r2, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xf8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x4}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8325}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xd4, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'tls\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8b, 0x2, 'lo\x00\xd1\x01R\x805\xaa\x85=\x13T\x98\x16\xab\xf61E\xa8[_j\xe781\xe6\x06\x18\x8a%\x92\x85%\x1c`\xc7\xc9\x7fR\xc4\x1a\xb2\x1cd\xf9\x80\x81SJ\xaa\xba}\xfd\xe3\\Z\xa9K\x82wU~\x19\xba\xb9A\xfb+\xd5z\x06\xfc\xe0%\x9d#\x8a\xe3\xe1\x01\xe97\x0ee)}\xd6\xdc,\xa6i\xfb\x81\xb0\x99\x9a\x8ax\x98\xa3\xb91\x02\xa5\x8a\x11\xea\x806\x8a 8\xf9\xcav\xc5N\xf4v7]:\x7f\xed)\x96\x90G\xe9U\xd7\xb8\xb3@'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[!!\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x253}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40011)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x11a, 0x1, &(0x7f0000000100)=0x9, 0x17)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x2, 0x0, 0x0, 0xe, 0x3}]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002c00010000000000000000000400008010000c"], 0x24}], 0x1}, 0x0)

1.279978137s ago: executing program 6 (id=885):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x4000000)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="54ad0db7", @ANYBLOB="010027bd7000fcdbdf250100000008000800000000000600060000000000080009000000000014000c000000000000000000000000000000000014"], 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x44)
ioctl$TCSETA(r4, 0x5406, &(0x7f0000000400)={0xfefe, 0x3, 0x3, 0xea, 0x8, "05000000a81300"})
ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)=0x1)
r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd)
setresuid(0xee01, 0xee01, 0x0)
keyctl$setperm(0x5, r6, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000006c0)=0xa)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="4000000010001ffff9d004000000000000000000", @ANYRES32=0x0, @ANYBLOB="00110400440a01001800120600000000697036746e6c79a4b32c6bba63d4130008000a00", @ANYRES32=r3, @ANYBLOB], 0x40}}, 0x0)

1.199481423s ago: executing program 4 (id=886):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r7, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r8, @ANYBLOB="0a000600080211000000000038005080080003000bac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)

1.009142441s ago: executing program 0 (id=887):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0x9, 0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0xdc)
socket$packet(0x11, 0x2, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x0)
recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r5, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r7, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0xc000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0xfe, @empty}, 0x10)
io_setup(0x81, &(0x7f0000000180))

1.008834411s ago: executing program 6 (id=888):
socket(0x23, 0x805, 0x0)
r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000280), 0x420002, 0x0)
r1 = syz_io_uring_setup(0x16c2, &(0x7f0000000480)={0x0, 0xbd12, 0x10100, 0x1, 0x327, 0x0, r0}, &(0x7f0000000300)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = openat2$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mkdirat(r4, &(0x7f0000000240)='./file0\x00', 0x3d)
r5 = syz_io_uring_setup(0x48be, &(0x7f0000000000), 0x0, &(0x7f0000ff4000))
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0)
pipe(&(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f5c64000000000c000280060019"], 0x3c}}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x6, 0x16, 0x1, 0x0, [0x0, 0x0]}]}, 0x70}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="fd00000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc)
splice(r6, 0x0, r8, 0x0, 0x4ffe2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r11, 0x4605, &(0x7f00000002c0)={0x0, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000140)=[0xec32]})
rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0xf, 0x5, 0x10, 0xc}]})
ioctl$RNDGETENTCNT(r10, 0x80045200, &(0x7f0000000080))
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

991.237337ms ago: executing program 35 (id=887):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0x9, 0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0xdc)
socket$packet(0x11, 0x2, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x0)
recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r5, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r7, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0xc000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0xfe, @empty}, 0x10)
io_setup(0x81, &(0x7f0000000180))

672.195908ms ago: executing program 1 (id=891):
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r1, 0x0, r0, 0x0, 0x6, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff)
fcntl$setstatus(r0, 0x4, 0x7c00)
sendmsg$IPSET_CMD_RENAME(r1, 0x0, 0x800)

323.284875ms ago: executing program 4 (id=892):
socket(0x23, 0x805, 0x0)
r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000280), 0x420002, 0x0)
r1 = syz_io_uring_setup(0x16c2, &(0x7f0000000480)={0x0, 0xbd12, 0x10100, 0x1, 0x327, 0x0, r0}, &(0x7f0000000300)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x3d)
r4 = syz_io_uring_setup(0x48be, &(0x7f0000000000), 0x0, &(0x7f0000ff4000))
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0)
pipe(&(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f5c64000000000c000280060019"], 0x3c}}, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
close(r7)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x6, 0x16, 0x1, 0x0, [0x0, 0x0]}]}, 0x70}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="fd00000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc)
splice(r5, 0x0, r7, 0x0, 0x4ffe2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r10, 0x4605, &(0x7f00000002c0)={0x0, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000140)=[0xec32]})
rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0xf, 0x5, 0x10, 0xc}]})
ioctl$RNDGETENTCNT(r9, 0x80045200, &(0x7f0000000080))
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

182.982751ms ago: executing program 6 (id=893):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prctl$PR_SET_MM_MAP(0x35, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@ifindex, 0x32, 0x4bb11a8cf0efaf80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0x2, 0x8001, 0x8, 0x9, 0x0, 0x40, 0x5, 0x4}, 0x20)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="b356f965bdfd3314372e80c1a5c1492ef825a7cb6f3b5ab515ba5f683157e09b584bd4aab97b21eaee0acd20a70a3d9424f3eeae0d031db8f912100238cd6aa31c22822b4cb2645f83a5df52e79b04759ae36d3bef73420b569386052ceee6328e525e49b4f0ec241039bb966db320088878d7d01efeb4fcbe01436805c0516b782d415ed3890b276003faeba0d62f8f6445c99bbbf6a462758ae414de64a66e4304c5519edbfee962654cceb89b2b446c827064af129a0c", 0xb8}], 0x1}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
r7 = getpid()
sched_setscheduler(r7, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r8=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000200001039a9100000000000002000000000000003c80000014001100626f6e643000"/48], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850)

0s ago: executing program 7 (id=889):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0x9, 0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0xdc)
socket$packet(0x11, 0x2, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r6, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0xc000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0xfe, @empty}, 0x10)
io_setup(0x81, &(0x7f0000000180))

kernel console output (not intermixed with test programs):

66.836180][ T6517]  dump_stack_lvl+0x16c/0x1f0
[   66.838222][ T6517]  should_fail_ex+0x497/0x5b0
[   66.840268][ T6517]  _copy_to_user+0x32/0xd0
[   66.842210][ T6517]  simple_read_from_buffer+0xd0/0x160
[   66.844503][ T6517]  proc_fail_nth_read+0x198/0x270
[   66.846660][ T6517]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   66.848975][ T6517]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   66.850919][ T6517]  vfs_read+0x1df/0xbe0
[   66.852188][ T6517]  ? __fget_files+0x1fc/0x3a0
[   66.853608][ T6517]  ? __pfx___mutex_lock+0x10/0x10
[   66.855170][ T6517]  ? __pfx_vfs_read+0x10/0x10
[   66.856640][ T6517]  ? __fget_files+0x206/0x3a0
[   66.858092][ T6517]  ksys_read+0x12b/0x250
[   66.859392][ T6517]  ? __pfx_ksys_read+0x10/0x10
[   66.860852][ T6517]  __do_fast_syscall_32+0x73/0x120
[   66.862547][ T6517]  do_fast_syscall_32+0x32/0x80
[   66.863903][ T6517]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   66.865810][ T6517] RIP: 0023:0xf714e579
[   66.867074][ T6517] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   66.872884][ T6517] RSP: 002b:00000000f5140590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[   66.875410][ T6517] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5140620
[   66.877848][ T6517] RDX: 000000000000000f RSI: 00000000f7483ff4 RDI: 0000000000000000
[   66.880380][ T6517] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[   66.882786][ T6517] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[   66.885192][ T6517] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   66.888022][ T6517]  </TASK>
[   67.160925][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'.
[   67.238084][ T6550] mkiss: ax0: crc mode is auto.
[   67.396318][ T6560] loop2: detected capacity change from 0 to 7
[   67.401240][ T6560] Dev loop2: unable to read RDB block 7
[   67.402991][ T6560]  loop2: unable to read partition table
[   67.404776][ T6560] loop2: partition table beyond EOD, truncated
[   67.406735][ T6560] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[   68.105450][    T9] IPVS: starting estimator thread 0...
[   68.203914][ T6602] cgroup: fork rejected by pids controller in /syz3
[   68.207211][ T6601] IPVS: using max 37 ests per chain, 88800 per kthread
[   68.244902][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.126'.
[   68.249689][ T6733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.127'.
[   68.308975][ T6738] netlink: 'syz.0.126': attribute type 25 has an invalid length.
[   68.317291][ T6738] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   68.320686][ T6738] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   68.324052][ T6738] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   68.328291][ T6738] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   68.695516][ T6756] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   68.704175][ T6756] CIFS mount error: No usable UNC path provided in device string!
[   68.704175][ T6756] 
[   68.715244][ T6756] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   69.137410][ T6761] xt_CT: No such helper "snmp_trap"
[   69.156389][ T6767] mkiss: ax0: crc mode is auto.
[   69.814696][ T6796] netlink: 'syz.1.138': attribute type 10 has an invalid length.
[   69.835286][ T6796] batman_adv: batadv0: Adding interface: team0
[   69.837392][ T6796] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.845090][ T6796] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   69.861230][ T6796] netlink: 'syz.1.138': attribute type 10 has an invalid length.
[   69.866999][ T6796] team0: entered promiscuous mode
[   69.868612][ T6796] team_slave_0: entered promiscuous mode
[   69.870572][ T6796] team_slave_1: entered promiscuous mode
[   69.876607][ T6796] 8021q: adding VLAN 0 to HW filter on device team0
[   69.879174][ T6796] batman_adv: batadv0: Interface activated: team0
[   69.881250][ T6796] batman_adv: batadv0: Interface deactivated: team0
[   69.886918][ T6796] batman_adv: batadv0: Removing interface: team0
[   69.935572][ T6796] bridge0: port 3(team0) entered blocking state
[   69.937645][ T6796] bridge0: port 3(team0) entered disabled state
[   69.939636][ T6796] team0: entered allmulticast mode
[   69.941214][ T6796] team_slave_0: entered allmulticast mode
[   69.943414][ T6796] team_slave_1: entered allmulticast mode
[   70.730363][ T6817] bridge1: entered promiscuous mode
[   70.801581][ T1414] ieee802154 phy0 wpan0: encryption failed: -22
[   70.804450][ T1414] ieee802154 phy1 wpan1: encryption failed: -22
[   70.831495][ T6826] __nla_validate_parse: 3 callbacks suppressed
[   70.831505][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.145'.
[   70.837709][ T6826] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.840603][ T6826] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.843901][ T6826] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.847395][ T6826] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.112507][ T6837] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.258483][ T6844] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[   71.258483][ T6844]    program syz.1.147 not setting count and/or reply_len properly
[   71.290502][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.147'.
[   71.303225][ T6846] mkiss: ax0: crc mode is auto.
[   71.314726][ T6848] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[   71.316316][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.149'.
[   71.988999][ T5949] Bluetooth: hci3: unexpected event for opcode 0x2028
[   72.003419][ T6887] netlink: 'syz.1.154': attribute type 10 has an invalid length.
[   72.009483][ T6887] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   72.043708][ T5949] Bluetooth: hci3: unexpected event 0x3e length: 263 > 260
[   72.043737][ T5949] Bluetooth: hci3: unexpected subevent 0x0d length: 262 > 260
[   72.050113][ T5949] Bluetooth: hci3: adv larger than maximum supported
[   72.271625][ T6898] netlink: 40 bytes leftover after parsing attributes in process `syz.2.157'.
[   72.971307][ T5949] Bluetooth: to_multiplier 0 < 10
[   73.004051][ T6925] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[   73.073726][ T6925] UDF-fs: Scanning with blocksize 2048 failed
[   73.115045][ T6925] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[   73.136834][ T6925] UDF-fs: Scanning with blocksize 4096 failed
[   73.596889][   T35] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   73.751211][ T6947] mkiss: ax0: crc mode is auto.
[   73.816907][   T35] usb 6-1: Using ep0 maxpacket: 32
[   73.830459][   T35] usb 6-1: unable to get BOS descriptor or descriptor too short
[   73.834384][   T35] usb 6-1: unable to read config index 0 descriptor/start: -71
[   73.839127][   T35] usb 6-1: can't read configurations, error -71
[   74.003331][ T6964] Driver unsupported XDP return value 0 on prog  (id 22) dev N/A, expect packet loss!
[   74.335634][ T6969] 9pnet_virtio: no channels available for device syz
[   74.347831][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.169'.
[   74.961649][ T6978] syz.1.170 uses obsolete (PF_INET,SOCK_PACKET)
[   75.037053][ T5949] Bluetooth: hci3: command 0x0405 tx timeout
[   75.097480][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'.
[   75.119207][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'.
[   75.121936][ T6988] netlink: 3 bytes leftover after parsing attributes in process `syz.0.172'.
[   76.083998][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.178'.
[   76.124159][ T7006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.139623][ T7013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.178'.
[   76.143313][ T7013] netlink: 'syz.2.178': attribute type 25 has an invalid length.
[   76.267053][ T7015] mkiss: ax0: crc mode is auto.
[   77.022255][ T7058] warning: `syz.2.184' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   77.026428][ T7060] netlink: 'syz.2.184': attribute type 7 has an invalid length.
[   77.553205][ T7083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'.
[   77.608324][ T7084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.191'.
[   77.611085][ T7084] netlink: 'syz.2.191': attribute type 25 has an invalid length.
[   77.631337][   T40] audit: type=1326 audit(1735818105.666:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.3.192" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000
[   77.638482][ T7086] random: crng reseeded on system resumption
[   77.640150][   T40] audit: type=1326 audit(1735818105.676:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.3.192" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000
[   77.664437][   T40] audit: type=1326 audit(1735818105.676:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.3.192" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70be579 code=0x7ffc0000
[   77.680364][   T40] audit: type=1326 audit(1735818105.686:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.3.192" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000
[   77.693478][   T40] audit: type=1326 audit(1735818105.686:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.3.192" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000
[   77.707713][   T40] audit: type=1326 audit(1735818105.686:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.3.192" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70be579 code=0x7ffc0000
[   77.727563][   T40] audit: type=1326 audit(1735818105.686:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.3.192" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000
[   77.740744][   T40] audit: type=1326 audit(1735818105.686:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.3.192" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000
[   77.758281][   T40] audit: type=1326 audit(1735818105.686:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.3.192" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf70be579 code=0x7ffc0000
[   77.772505][   T40] audit: type=1326 audit(1735818105.686:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.3.192" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000
[   77.847899][ T7097] mkiss: ax0: crc mode is auto.
[   78.789079][ T7155] ERROR: device name not specified.
[   78.798267][   T35] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   78.811970][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'.
[   78.866547][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.205'.
[   78.871027][ T7172] netlink: 'syz.1.205': attribute type 25 has an invalid length.
[   78.875123][ T7172] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   78.877826][ T7172] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   78.880385][ T7172] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   78.882924][ T7172] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   78.900925][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'.
[   78.956881][   T35] usb 7-1: Using ep0 maxpacket: 16
[   78.959633][   T35] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[   78.962165][   T35] usb 7-1: config 0 has no interface number 0
[   78.964067][   T35] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   78.967510][   T35] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   78.978976][   T35] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[   78.981689][   T35] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   78.984095][   T35] usb 7-1: Product: syz
[   78.985351][   T35] usb 7-1: SerialNumber: syz
[   78.990959][   T35] usb 7-1: config 0 descriptor??
[   78.995852][   T35] cm109 7-1:0.8: invalid payload size 0, expected 4
[   78.999000][   T35] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input5
[   79.078280][ T7183] syz.3.208: attempt to access beyond end of device
[   79.078280][ T7183] loop3: rw=0, sector=1, nr_sectors = 1 limit=0
[   79.082541][ T7183] VFS: unable to read V7 FS superblock on device loop3.
[   79.085680][ T7183] VFS: could not find a valid V7 on loop3.
[   79.110819][ T7186] usb usb1: usbfs: process 7186 (syz.3.209) did not claim interface 27 before use
[   79.240589][    C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[   79.243962][    C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[   79.246614][    C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[   79.248849][   T35] usb 7-1: USB disconnect, device number 2
[   79.250767][    C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[   79.250778][    C3] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[   79.262046][   T35] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[   79.268531][ T7193] mkiss: ax0: crc mode is auto.
[   80.232434][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.221'.
[   80.287776][ T7255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.221'.
[   80.290736][ T7255] netlink: 'syz.3.221': attribute type 25 has an invalid length.
[   80.304562][ T7255] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   80.307350][ T7255] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   80.309978][ T7255] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   80.312601][ T7255] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   80.555990][ T7269] capability: warning: `syz.1.223' uses deprecated v2 capabilities in a way that may be insecure
[   80.608570][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.610932][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.613167][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.616246][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.621550][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.623882][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.626346][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.628808][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.631083][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.633331][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.635588][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.642076][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.646662][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.650461][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.652738][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.655114][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.657599][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.659855][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.662112][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.665385][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.668012][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.670284][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.672849][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.675341][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.677904][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.680505][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.682773][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.685039][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.687610][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.689887][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.692128][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.694540][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.697394][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.701225][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.703510][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.705749][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.709226][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.711479][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.713729][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.716011][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.719139][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.721559][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.723850][   T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   80.729077][   T35] hid-generic 0000:0000:0000.0003: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   80.775415][ T7271] 9pnet_fd: Insufficient options for proto=fd
[   80.779242][ T7271] No such timeout policy "syz1"
[   81.052972][  T143] cfg80211: failed to load regulatory.db
[   81.306332][   T56] libceph: connect (1)[c::]:6789 error -101
[   81.308309][   T56] libceph: mon0 (1)[c::]:6789 connect error
[   81.316934][ T7296] ceph: No mds server is up or the cluster is laggy
[   81.573842][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'.
[   81.745050][ T7318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.237'.
[   81.747851][ T7318] netlink: 'syz.1.237': attribute type 25 has an invalid length.
[   82.471996][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   82.496899][ T5947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   82.518564][ T5947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   82.524281][ T5947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   82.549020][ T5947] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   82.551987][ T5947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   82.901517][ T7339] chnl_net:caif_netlink_parms(): no params data found
[   82.964037][ T7369] Sensor A: =================  START STATUS  =================
[   82.964864][ T7362] Sensor A: =================  START STATUS  =================
[   82.966492][ T7369] Sensor A: Test Pattern: 75% Colorbar
[   82.974196][ T7369] Sensor A: Show Information: All
[   82.976156][ T7369] Sensor A: Vertical Flip: false
[   82.978215][ T7369] Sensor A: Horizontal Flip: false
[   82.979810][ T7369] Sensor A: Brightness: 128
[   82.981218][ T7369] Sensor A: Contrast: 128
[   82.982601][ T7369] Sensor A: Hue: 0
[   82.983794][ T7369] Sensor A: Saturation: 128
[   82.985231][ T7369] Sensor A: ==================  END STATUS  ==================
[   82.985305][ T7362] Sensor A: Test Pattern: 75% Colorbar
[   82.990021][ T7362] Sensor A: Show Information: All
[   82.990621][ T7339] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.991815][ T7362] Sensor A: Vertical Flip: false
[   82.995505][ T7362] Sensor A: Horizontal Flip: false
[   82.997309][ T7362] Sensor A: Brightness: 128
[   82.997807][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.998881][ T7362] Sensor A: Contrast: 
[   83.000910][ T7339] bridge_slave_0: entered allmulticast mode
[   83.000922][ T7362] 128
[   83.002589][ T7339] bridge_slave_0: entered promiscuous mode
[   83.004074][ T7362] 
[   83.005653][ T7339] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.006727][ T7362] Sensor A: Hue: 
[   83.007580][ T7339] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.009923][ T7362] 0
[   83.010636][ T7339] bridge_slave_1: entered allmulticast mode
[   83.012745][ T7362] 
[   83.013816][ T7339] bridge_slave_1: entered promiscuous mode
[   83.015423][ T7362] Sensor A: Saturation: 128
[   83.020172][ T7362] Sensor A: ==================  END STATUS  ==================
[   83.035587][ T7339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.039583][ T7339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.066583][ T7339] team0: Port device team_slave_0 added
[   83.073388][ T7339] team0: Port device team_slave_1 added
[   83.109569][ T7339] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.112467][ T7339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.120803][ T7339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.125618][ T7339] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.128179][ T7339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.138634][ T7339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.166566][ T7339] hsr_slave_0: entered promiscuous mode
[   83.170323][ T7339] hsr_slave_1: entered promiscuous mode
[   83.227064][ T7339] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   83.230497][ T7339] Cannot create hsr debugfs directory
[   83.423090][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.250'.
[   83.458602][ T7339] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   83.464538][ T7339] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   83.473360][ T7339] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   83.478002][ T7339] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   83.484506][ T7379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.250'.
[   83.487923][ T7379] netlink: 'syz.0.250': attribute type 25 has an invalid length.
[   83.492795][ T7339] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.495267][ T7339] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.498030][ T7339] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.500197][ T7339] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.537693][ T7339] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.545601][   T75] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.550225][   T75] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.565920][ T7339] 8021q: adding VLAN 0 to HW filter on device team0
[   83.578750][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.581649][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.589079][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.591863][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.696034][ T7339] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.872013][ T7339] veth0_vlan: entered promiscuous mode
[   83.883342][ T7339] veth1_vlan: entered promiscuous mode
[   83.893686][ T7339] veth0_macvtap: entered promiscuous mode
[   83.905876][ T7339] veth1_macvtap: entered promiscuous mode
[   83.920294][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.923421][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.926330][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.930484][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.933753][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.937419][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.941211][ T7339] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.945351][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.948849][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.951980][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.955247][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.958452][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.962116][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.965587][ T7339] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.973310][ T7339] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.976712][ T7339] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.980300][ T7339] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.983991][ T7339] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.033808][   T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.036179][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.058297][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.061009][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.303526][ T7417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.256'.
[   84.307251][ T7417] netlink: 'syz.3.256': attribute type 8 has an invalid length.
[   84.310328][ T7417] netlink: 16 bytes leftover after parsing attributes in process `syz.3.256'.
[   84.351998][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.258'.
[   84.368778][ T7419] bond1: entered promiscuous mode
[   84.371254][ T7419] 8021q: adding VLAN 0 to HW filter on device bond1
[   84.438813][ T7419] 8021q: adding VLAN 0 to HW filter on device bond1
[   84.444290][ T7419] bond1: (slave gtp0): The slave device specified does not support setting the MAC address
[   84.448075][ T7419] bond1: (slave gtp0): Error -95 calling set_mac_address
[   84.796984][ T5949] Bluetooth: hci2: command tx timeout
[   85.122591][ T7416] syz.0.257 (7416) used greatest stack depth: 20384 bytes left
[   85.235423][   T40] kauditd_printk_skb: 61 callbacks suppressed
[   85.235437][   T40] audit: type=1326 audit(1735818113.266:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.0.261" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf714e579 code=0x0
[   85.251371][   T40] audit: type=1800 audit(1735818113.276:76): pid=7439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.260" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[   85.726478][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.265'.
[   86.047891][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'.
[   86.197103][ T7482] misc userio: Invalid payload size
[   86.199926][ T7482] misc userio: No port type given on /dev/userio
[   86.202205][ T7482] misc userio: The device must be registered before sending interrupts
[   86.821139][ T7497] syzkaller1: entered promiscuous mode
[   86.823313][ T7497] syzkaller1: entered allmulticast mode
[   86.876907][ T5949] Bluetooth: hci2: command tx timeout
[   86.890811][ T7499] netlink: 256 bytes leftover after parsing attributes in process `syz.3.276'.
[   87.097762][ T6010] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[   87.335253][ T7517] vcan0: entered allmulticast mode
[   87.363931][ T7520] mkiss: ax0: crc mode is auto.
[   87.452643][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'.
[   87.559574][ T7543] 9pnet: Unknown protocol version 9p2000.
[   88.957050][ T5949] Bluetooth: hci2: command tx timeout
[   91.036989][ T5949] Bluetooth: hci2: command tx timeout
[  101.119954][  T143] libceph: connect (1)[c::]:6789 error -101
[  101.122302][  T143] libceph: mon0 (1)[c::]:6789 connect error
[  101.176710][ T7616] ceph: No mds server is up or the cluster is laggy
[  101.480338][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.293'.
[  101.511696][ T7634] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  101.516275][ T7634] 9pnet_fd: Insufficient options for proto=fd
[  101.838253][ T7639] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.875313][ T7639] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.369574][   T40] audit: type=1326 audit(1735818130.406:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.3.299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000
[  102.375979][   T40] audit: type=1326 audit(1735818130.406:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.3.299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000
[  102.383474][   T40] audit: type=1326 audit(1735818130.406:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.3.299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000
[  102.390094][   T40] audit: type=1326 audit(1735818130.406:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.3.299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000
[  102.396628][   T40] audit: type=1326 audit(1735818130.406:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.3.299" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf70be579 code=0x7ffc0000
[  102.403055][   T40] audit: type=1326 audit(1735818130.406:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.3.299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000
[  102.409710][   T40] audit: type=1326 audit(1735818130.406:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.3.299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000
[  102.416113][   T40] audit: type=1326 audit(1735818130.406:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.3.299" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70be579 code=0x7ffc0000
[  102.422411][   T40] audit: type=1326 audit(1735818130.406:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.3.299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000
[  102.429731][   T40] audit: type=1326 audit(1735818130.406:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.3.299" exe="/syz-executor" sig=0 arch=40000003 syscall=443 compat=1 ip=0xf70be579 code=0x7ffc0000
[  102.886249][ T7671] afs: Unknown parameter 'dyn
[  102.886249][ T7671] ò“8mB¶¦NcâÕÆ®é£;²Õ8˜õí)SC)–Hè›à–‡Ç¦AèÒxŸ±xÜÜ4ÛçÂ'
[  102.977482][ T7673] netlink: 16 bytes leftover after parsing attributes in process `syz.0.303'.
[  103.264981][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'.
[  103.920731][ T7713] block device autoloading is deprecated and will be removed.
[  104.085912][ T7720] xt_TPROXY: Can be used only with -p tcp or -p udp
[  104.298899][ T7741] pim6reg: entered allmulticast mode
[  104.300647][ T7741] pim6reg: left allmulticast mode
[  104.447184][ T2292] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  104.504659][ T7758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'.
[  104.699804][  T143] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  104.700143][ T2292] usb 5-1: device descriptor read/64, error -71
[  104.709227][ T7759] bond0: entered promiscuous mode
[  104.711293][ T7759] bond_slave_0: entered promiscuous mode
[  104.713621][ T7759] bond_slave_1: entered promiscuous mode
[  104.766904][ T6007] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  104.899406][ T6007] usb 8-1: device descriptor read/64, error -71
[  104.946872][ T2292] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  105.140171][ T6007] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  105.154429][ T2292] usb 5-1: device descriptor read/64, error -71
[  105.257181][ T2292] usb usb5-port1: attempt power cycle
[  105.276921][ T6007] usb 8-1: device descriptor read/64, error -71
[  105.399495][ T6007] usb usb8-port1: attempt power cycle
[  105.597954][ T2292] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  105.617916][ T2292] usb 5-1: device descriptor read/8, error -71
[  105.767053][ T6007] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  105.790758][ T6007] usb 8-1: device descriptor read/8, error -71
[  105.856931][ T2292] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  105.879305][ T2292] usb 5-1: device descriptor read/8, error -71
[  105.987946][ T2292] usb usb5-port1: unable to enumerate USB device
[  106.036848][ T6007] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  106.062841][ T6007] usb 8-1: device descriptor read/8, error -71
[  106.183143][ T6007] usb usb8-port1: unable to enumerate USB device
[  106.305171][ T7800] dlm: no locking on control device
[  106.309933][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'.
[  106.362195][ T7802] dlm: no locking on control device
[  115.734582][ T7819] PKCS7: Unknown OID: [5] (bad)
[  115.736216][ T7819] PKCS7: Only support pkcs7_signedData type
[  115.740779][ T7819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.331'.
[  115.809298][ T7829] netlink: 40 bytes leftover after parsing attributes in process `syz.3.334'.
[  115.823290][ T7828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.332'.
[  116.767239][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.338'.
[  116.941702][ T7842] nftables ruleset with unbound set
[  117.468162][ T7868] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun!
[  117.572926][ T7874] fuse: Unknown parameter '0x00000000000000060x0000000000000008'
[  117.619918][ T7880] netlink: 124 bytes leftover after parsing attributes in process `syz.0.347'.
[  119.963264][ T7950] Bluetooth: MGMT ver 1.23
[  120.001450][ T7950] netlink: 'syz.3.363': attribute type 10 has an invalid length.
[  120.028006][ T7950] veth0_vlan: left promiscuous mode
[  120.030833][ T7950] veth0_vlan: entered promiscuous mode
[  120.038790][ T7950] team0: Device veth0_vlan failed to register rx_handler
[  120.135257][ T7955] ptm ptm1: ldisc open failed (-12), clearing slot 1
[  120.282524][   T40] kauditd_printk_skb: 3 callbacks suppressed
[  120.282534][   T40] audit: type=1326 audit(1735818148.316:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.4.366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000
[  120.292633][   T40] audit: type=1326 audit(1735818148.316:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.4.366" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf70de579 code=0x7ffc0000
[  120.305277][   T40] audit: type=1326 audit(1735818148.316:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.4.366" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf70de579 code=0x7ffc0000
[  120.313640][   T40] audit: type=1326 audit(1735818148.316:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.4.366" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf70de579 code=0x7ffc0000
[  120.324304][   T40] audit: type=1326 audit(1735818148.316:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.4.366" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf70de579 code=0x7ffc0000
[  120.344027][   T40] audit: type=1326 audit(1735818148.316:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.4.366" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70de579 code=0x7ffc0000
[  120.358139][   T40] audit: type=1326 audit(1735818148.316:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.4.366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000
[  120.370735][   T40] audit: type=1326 audit(1735818148.316:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.4.366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000
[  120.384744][   T40] audit: type=1326 audit(1735818148.316:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.4.366" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70de579 code=0x7ffc0000
[  120.394952][   T40] audit: type=1326 audit(1735818148.316:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.4.366" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf70de579 code=0x7ffc0000
[  120.408800][ T7964] netlink: 88 bytes leftover after parsing attributes in process `syz.4.367'.
[  120.412178][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'.
[  120.495697][ T7968] sg_write: data in/out 1769968139/86 bytes for SCSI command 0x2f-- guessing data in;
[  120.495697][ T7968]    program syz.3.368 not setting count and/or reply_len properly
[  120.890548][   T39] Bluetooth: Error in BCSP hdr checksum
[  120.961766][ T7983] binder: 7973:7983 ioctl 40046205 0 returned -22
[  121.020792][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'.
[  121.030135][ T7985] IPVS: Error joining to the multicast group
[  122.642715][ T5949] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  123.691318][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.389'.
[  123.694016][ T8055] netlink: 'syz.4.389': attribute type 25 has an invalid length.
[  123.699859][ T8055] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  123.702542][ T8055] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  123.705136][ T8055] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  123.707882][ T8055] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  123.729065][ T8062] netlink: 'syz.3.393': attribute type 10 has an invalid length.
[  123.733980][ T8062] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.738182][ T8062] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.744753][ T8062] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.747539][ T8062] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.750208][ T8062] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.752810][ T8062] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.758698][ T8062] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  124.494304][ T8068] tipc: Started in network mode
[  124.496629][ T8068] tipc: Node identity 7, cluster identity 5
[  124.498636][ T8068] tipc: Node number set to 7
[  124.826282][ T8099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.402'.
[  124.831524][ T8099] netlink: 'syz.3.402': attribute type 25 has an invalid length.
[  125.546872][ T7501] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  125.619026][ T8129] virtio-fs: tag <./file0> not found
[  125.621271][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.411'.
[  125.696960][ T7501] usb 5-1: Using ep0 maxpacket: 8
[  125.701725][ T7501] usb 5-1: config 167 has too many interfaces: 202, using maximum allowed: 32
[  125.704791][ T7501] usb 5-1: config 167 has 1 interface, different from the descriptor's value: 202
[  125.709783][ T7501] usb 5-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29
[  125.712168][ T7501] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.714319][ T7501] usb 5-1: Product: syz
[  125.715414][ T7501] usb 5-1: Manufacturer: syz
[  125.716634][ T7501] usb 5-1: SerialNumber: syz
[  125.721384][ T7501] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state.
[  125.724576][ T7501] dvb-usb: bulk message failed: -22 (3/0)
[  125.743057][ T7501] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  125.747289][ T7501] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author)
[  125.750662][ T7501] usb 5-1: media controller created
[  125.761290][ T7501] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  125.773219][ T7501] dvb-usb: bulk message failed: -22 (6/0)
[  125.775433][ T7501] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author'
[  125.781665][ T7501] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input7
[  125.787541][ T7501] dvb-usb: schedule remote query interval to 150 msecs.
[  125.789883][ T7501] dvb-usb: bulk message failed: -22 (3/0)
[  125.806911][ T7501] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected.
[  125.959764][ T7501] dvb-usb: bulk message failed: -22 (1/0)
[  125.961639][ T7501] dvb-usb: error while querying for an remote control event.
[  126.118086][ T7501] dvb-usb: bulk message failed: -22 (1/0)
[  126.119842][ T7501] dvb-usb: error while querying for an remote control event.
[  126.277220][ T7501] dvb-usb: bulk message failed: -22 (1/0)
[  126.278933][ T7501] dvb-usb: error while querying for an remote control event.
[  126.427289][  T143] usb 5-1: USB disconnect, device number 7
[  126.442871][  T143] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected.
[  126.462161][ T8144] binder: 8143:8144 ioctl c0306201 200002c0 returned -14
[  126.645110][ T8168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.419'.
[  126.650078][ T8168] netlink: 'syz.4.419': attribute type 25 has an invalid length.
[  126.658994][ T8169] netlink: 'syz.3.423': attribute type 21 has an invalid length.
[  126.661317][ T8169] netlink: 'syz.3.423': attribute type 1 has an invalid length.
[  126.663641][ T8169] netlink: 100 bytes leftover after parsing attributes in process `syz.3.423'.
[  126.703758][ T8176] ax25_connect(): syz.3.425 uses autobind, please contact jreuter@yaina.de
[  127.254659][ T8190] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  127.257762][ T8190] overlayfs: failed to set xattr on upper
[  127.259949][ T8190] overlayfs: ...falling back to redirect_dir=nofollow.
[  127.262555][ T8190] overlayfs: ...falling back to index=off.
[  127.266411][ T8190] overlayfs: ...falling back to uuid=null.
[  127.302666][ T8191] evm: overlay not supported
[  127.678242][ T8205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.727332][ T1134] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.730451][ T1134] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.852296][ T1134] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.855459][ T1134] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.969851][ T1134] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.976880][ T1134] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.035072][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  128.046562][ T5947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  128.050624][ T5947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  128.050741][ T1134] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.057561][ T5947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  128.057580][ T1134] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.060998][ T5947] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  128.070944][ T5947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  128.118245][ T8209] can0: slcan on ttyS3.
[  128.151785][ T8207] chnl_net:caif_netlink_parms(): no params data found
[  128.187667][ T8203] can0 (unregistered): slcan off ttyS3.
[  128.234981][ T1134] bridge_slave_1: left allmulticast mode
[  128.241177][ T1134] bridge_slave_1: left promiscuous mode
[  128.248798][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.254761][ T1134] bridge_slave_0: left allmulticast mode
[  128.257417][ T1134] bridge_slave_0: left promiscuous mode
[  128.260606][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.308516][ T8228] 9pnet_fd: Insufficient options for proto=fd
[  128.437372][ T1134] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  128.468506][ T8243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.441'.
[  128.471252][ T8243] netlink: 'syz.0.441': attribute type 25 has an invalid length.
[  128.581368][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  128.586282][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  128.591048][ T1134] bond0 (unregistering): Released all slaves
[  128.616980][ T8207] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.619592][ T8207] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.621861][ T8207] bridge_slave_0: entered allmulticast mode
[  128.624158][ T8207] bridge_slave_0: entered promiscuous mode
[  128.629156][ T8207] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.631462][ T8207] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.633785][ T8207] bridge_slave_1: entered allmulticast mode
[  128.636098][ T8207] bridge_slave_1: entered promiscuous mode
[  128.700823][ T8207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.705336][ T8207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.751883][ T8207] team0: Port device team_slave_0 added
[  128.755000][ T8207] team0: Port device team_slave_1 added
[  128.857585][ T8207] batman_adv: batadv0: Adding interface: batadv_slave_0
[  128.859654][ T8207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.870163][ T8207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  128.875861][ T8207] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.878323][ T8207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.885781][ T8207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.888943][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.443'.
[  128.922818][ T1134] hsr_slave_0: left promiscuous mode
[  128.951737][ T1134] veth1_macvtap: left promiscuous mode
[  128.956104][ T1134] veth0_macvtap: left promiscuous mode
[  128.959518][ T1134] veth1_vlan: left promiscuous mode
[  129.106068][ T8254] block device autoloading is deprecated and will be removed.
[  129.421801][ T8269] fuse: Bad value for 'fd'
[  129.588958][ T1134] team0 (unregistering): Port device team_slave_1 removed
[  129.659492][ T1134] team0 (unregistering): Port device team_slave_0 removed
[  129.857863][ T8260] orangefs_mount: mount request failed with -4
[  130.157111][ T5949] Bluetooth: hci1: command tx timeout
[  130.167425][ T1134] vcan0 (unregistering): left allmulticast mode
[  130.192820][ T8273] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.195052][ T8273] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.202770][ T8273] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  130.227311][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.449'.
[  130.272879][ T8284] binder: BINDER_SET_CONTEXT_MGR already set
[  130.286945][ T8284] binder: 8283:8284 ioctl 4018620d 20000040 returned -16
[  130.351103][ T8293] netlink: 'syz.0.452': attribute type 1 has an invalid length.
[  130.388965][ T8207] hsr_slave_0: entered promiscuous mode
[  130.393132][ T8207] hsr_slave_1: entered promiscuous mode
[  130.395189][ T8207] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  130.400715][ T8207] Cannot create hsr debugfs directory
[  130.422985][ T8293] bond2: entered promiscuous mode
[  130.424999][ T8293] bond2: entered allmulticast mode
[  130.450134][ T8300] batadv1: entered promiscuous mode
[  130.452375][ T8300] batadv1: entered allmulticast mode
[  130.455623][ T8300] 8021q: adding VLAN 0 to HW filter on device batadv1
[  130.464696][ T8300] bond2: (slave batadv1): making interface the new active one
[  130.468394][ T8300] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  130.494332][ T8304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.453'.
[  130.497819][ T8304] netlink: 'syz.1.453': attribute type 25 has an invalid length.
[  130.551806][ T8207] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  130.556090][ T8207] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  130.560243][ T8207] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  130.563582][ T8207] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  130.608550][ T8207] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.624921][ T8207] 8021q: adding VLAN 0 to HW filter on device team0
[  130.631003][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.633099][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.638763][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.640838][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.751111][ T8207] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.851616][ T8207] veth0_vlan: entered promiscuous mode
[  130.857530][ T8207] veth1_vlan: entered promiscuous mode
[  130.872792][ T8207] veth0_macvtap: entered promiscuous mode
[  130.874582][ T8207] veth1_macvtap: entered promiscuous mode
[  130.885798][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.890007][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.894330][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.897288][ T5949] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  130.898346][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.901118][ T5949] CPU: 2 UID: 0 PID: 5949 Comm: kworker/u33:3 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0
[  130.904170][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.907380][ T5949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  130.907391][ T5949] Workqueue: hci2 hci_rx_work
[  130.907410][ T5949] Call Trace:
[  130.907415][ T5949]  <TASK>
[  130.907420][ T5949]  dump_stack_lvl+0x16c/0x1f0
[  130.907436][ T5949]  sysfs_warn_dup+0x7f/0xa0
[  130.907454][ T5949]  sysfs_create_dir_ns+0x24d/0x2b0
[  130.907471][ T5949]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  130.907489][ T5949]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  130.907503][ T5949]  ? kobject_add_internal+0x12d/0x990
[  130.911355][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.914701][ T5949]  ? do_raw_spin_unlock+0x172/0x230
[  130.917899][ T8207] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.918357][ T5949]  kobject_add_internal+0x2c8/0x990
[  130.921936][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.923171][ T5949]  kobject_add+0x16f/0x240
[  130.925477][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.927080][ T5949]  ? __pfx_kobject_add+0x10/0x10
[  130.927098][ T5949]  ? class_to_subsys+0x3e/0x160
[  130.927111][ T5949]  ? do_raw_spin_unlock+0x172/0x230
[  130.927126][ T5949]  ? kobject_put+0xab/0x5a0
[  130.929288][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.932896][ T5949]  device_add+0x289/0x1a70
[  130.934979][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.937678][ T5949]  ? __pfx_dev_set_name+0x10/0x10
[  130.937702][ T5949]  ? __pfx_device_add+0x10/0x10
[  130.937721][ T5949]  ? mgmt_send_event_skb+0x2f2/0x460
[  130.939811][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.943652][ T5949]  hci_conn_add_sysfs+0x17e/0x230
[  130.945501][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.949096][ T5949]  le_conn_complete_evt+0xfce/0x1d10
[  130.949128][ T5949]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  130.949149][ T5949]  ? __mutex_lock+0x1cc/0xa60
[  130.949183][ T5949]  hci_le_enh_conn_complete_evt+0x23d/0x380
[  130.949205][ T5949]  ? skb_pull_data+0x166/0x210
[  130.949234][ T5949]  hci_le_meta_evt+0x2e2/0x5d0
[  130.949257][ T5949]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  130.949303][ T5949]  hci_event_packet+0x666/0x1190
[  130.952147][ T8207] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.952818][ T5949]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  130.956046][ T8207] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.956225][ T5949]  ? __pfx_hci_event_packet+0x10/0x10
[  130.960173][ T8207] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.961211][ T5949]  ? mark_held_locks+0x9f/0xe0
[  130.965035][ T8207] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.966629][ T5949]  ? kcov_remote_start+0x3cf/0x6e0
[  130.968657][ T8207] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.970116][ T5949]  ? lockdep_hardirqs_on+0x7c/0x110
[  131.013730][ T5949]  hci_rx_work+0x2c5/0x16b0
[  131.015123][ T5949]  ? process_one_work+0x8bb/0x1b30
[  131.016695][ T5949]  process_one_work+0x958/0x1b30
[  131.018197][ T5949]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  131.019909][ T5949]  ? __pfx_process_one_work+0x10/0x10
[  131.021505][ T5949]  ? rcu_is_watching+0x12/0xc0
[  131.023036][ T5949]  ? assign_work+0x1a0/0x250
[  131.024412][ T5949]  worker_thread+0x6c8/0xf00
[  131.025888][ T5949]  ? __pfx_worker_thread+0x10/0x10
[  131.027389][ T5949]  kthread+0x2c1/0x3a0
[  131.028713][ T5949]  ? _raw_spin_unlock_irq+0x23/0x50
[  131.030241][ T5949]  ? __pfx_kthread+0x10/0x10
[  131.031613][ T5949]  ret_from_fork+0x45/0x80
[  131.032933][ T5949]  ? __pfx_kthread+0x10/0x10
[  131.034316][ T5949]  ret_from_fork_asm+0x1a/0x30
[  131.036110][ T5949]  </TASK>
[  131.037703][ T5949] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  131.042151][ T5949] Bluetooth: hci2: failed to register connection device
[  131.069325][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.071757][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.081826][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.088002][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.281681][  T833] libceph: connect (1)[c::]:6789 error -101
[  131.283774][  T833] libceph: mon0 (1)[c::]:6789 connect error
[  131.395809][ T8349] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5
[  131.588133][  T833] libceph: connect (1)[c::]:6789 error -101
[  131.590167][  T833] libceph: mon0 (1)[c::]:6789 connect error
[  131.987528][ T8344] ceph: No mds server is up or the cluster is laggy
[  132.107195][  T833] libceph: connect (1)[c::]:6789 error -101
[  132.110136][  T833] libceph: mon0 (1)[c::]:6789 connect error
[  132.150463][ T8337] orangefs_mount: mount request failed with -4
[  132.226470][ T8365] netlink: 'syz.4.465': attribute type 1 has an invalid length.
[  132.247879][ T5949] Bluetooth: hci1: command tx timeout
[  132.248607][ T8365] 8021q: adding VLAN 0 to HW filter on device bond1
[  132.248621][ T1414] ieee802154 phy0 wpan0: encryption failed: -22
[  132.248666][ T1414] ieee802154 phy1 wpan1: encryption failed: -22
[  132.264090][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.464'.
[  132.344818][ T5947] Bluetooth: hci4: sending frame failed (-49)
[  132.347725][ T5949] Bluetooth: hci4: Entering manufacturer mode failed (-49)
[  132.548322][ T1134] IPVS: stop unused estimator thread 0...
[  132.563796][ T8378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.469'.
[  132.567068][ T8378] netlink: 'syz.4.469': attribute type 25 has an invalid length.
[  132.970391][ T8383] netlink: 'syz.5.471': attribute type 1 has an invalid length.
[  133.126926][ T5949] Bluetooth: hci2: command tx timeout
[  133.191549][ T8389] sctp: [Deprecated]: syz.0.473 (pid 8389) Use of int in max_burst socket option deprecated.
[  133.191549][ T8389] Use struct sctp_assoc_value instead
[  133.440166][ T5949] Bluetooth: hci1: ACL packet for unknown connection handle 158
[  133.482751][ T8414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  133.736921][ T6007] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  133.886901][ T6007] usb 10-1: Using ep0 maxpacket: 8
[  133.889971][ T6007] usb 10-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  133.892654][ T6007] usb 10-1: config 246 descriptor has 1 excess byte, ignoring
[  133.894993][ T6007] usb 10-1: config 246 has 1 interface, different from the descriptor's value: 42
[  133.945563][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.485'.
[  134.001360][ T8431] netlink: 52 bytes leftover after parsing attributes in process `syz.1.485'.
[  134.016979][ T6007] usb 10-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  134.020546][ T6007] usb 10-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  134.023954][ T6007] usb 10-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  134.028156][ T6007] usb 10-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  134.033831][ T6007] usb 10-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  134.036615][ T6007] usb 10-1: config 246 descriptor has 1 excess byte, ignoring
[  134.039313][ T6007] usb 10-1: config 246 has 1 interface, different from the descriptor's value: 42
[  134.044035][ T6007] usb 10-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  134.047836][ T6007] usb 10-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  134.050587][ T8426] syzkaller0: entered promiscuous mode
[  134.051534][ T6007] usb 10-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  134.052866][ T8426] syzkaller0: entered allmulticast mode
[  134.058290][ T6007] usb 10-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  134.062592][ T6007] usb 10-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  134.065308][ T6007] usb 10-1: config 246 descriptor has 1 excess byte, ignoring
[  134.067942][ T6007] usb 10-1: config 246 has 1 interface, different from the descriptor's value: 42
[  134.070980][ T6007] usb 10-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  134.074510][ T6007] usb 10-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11
[  134.078421][ T6007] usb 10-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  134.082009][ T6007] usb 10-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  134.088549][ T6007] usb 10-1: string descriptor 0 read error: -22
[  134.090518][ T6007] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  134.093407][ T6007] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.106196][ T6007] adutux 10-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  134.326914][ T5949] Bluetooth: hci1: command tx timeout
[  134.415565][ T8435] netlink: 16215 bytes leftover after parsing attributes in process `syz.5.481'.
[  134.425316][ T8435] netlink: 228 bytes leftover after parsing attributes in process `syz.5.481'.
[  134.429216][ T8435] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  135.114944][ T8447] ebtables: wrong size: *len 120, entries_size 48, replsz 48
[  136.336456][    T9] usb 10-1: USB disconnect, device number 2
[  136.413483][ T5949] Bluetooth: hci1: command tx timeout
[  136.809095][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.495'.
[  137.288909][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'.
[  137.343635][ T8494] netlink: 52 bytes leftover after parsing attributes in process `syz.0.502'.
[  138.147118][  T143] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  138.256978][ T6007] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  138.640022][ T8515] netlink: 36 bytes leftover after parsing attributes in process `syz.4.508'.
[  138.642862][ T8515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.508'.
[  138.645533][ T8515] netlink: 36 bytes leftover after parsing attributes in process `syz.4.508'.
[  138.648638][ T8515] netlink: 36 bytes leftover after parsing attributes in process `syz.4.508'.
[  138.738379][ T6007] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  138.741614][ T6007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.746140][ T6007] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  138.750019][ T6007] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  138.753093][ T6007] usb 6-1: Manufacturer: syz
[  138.755748][ T6007] usb 6-1: config 0 descriptor??
[  138.816845][ T6007] rc_core: IR keymap rc-hauppauge not found
[  138.819137][ T6007] Registered IR keymap rc-empty
[  138.824601][ T6007] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0
[  138.829167][ T6007] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input9
[  138.892837][ T8526] bond0: entered allmulticast mode
[  138.994355][   T30] usb 6-1: USB disconnect, device number 5
[  139.127691][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'.
[  139.182275][ T8560] netlink: 52 bytes leftover after parsing attributes in process `syz.0.515'.
[  139.935007][ T8575] netlink: 36 bytes leftover after parsing attributes in process `syz.5.518'.
[  139.939352][ T8575] netlink: 16 bytes leftover after parsing attributes in process `syz.5.518'.
[  140.142666][ T8586] overlayfs: failed to resolve './file0': -2
[  140.246903][  T143] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  140.406875][  T143] usb 9-1: Using ep0 maxpacket: 8
[  140.410215][  T143] usb 9-1: unable to get BOS descriptor or descriptor too short
[  140.413368][  T143] usb 9-1: config index 0 descriptor too short (expected 57874, got 18)
[  140.415894][  T143] usb 9-1: config 7 has no interfaces?
[  140.420382][  T143] usb 9-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=2a.0e
[  140.423188][  T143] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.425629][  T143] usb 9-1: Product: syz
[  140.427888][  T143] usb 9-1: Manufacturer: syz
[  140.429442][  T143] usb 9-1: SerialNumber: syz
[  140.709465][  T143] usb 9-1: USB disconnect, device number 2
[  141.430330][ T8617] netlink: 'syz.5.530': attribute type 6 has an invalid length.
[  142.492188][ T8650] vxcan1: Master is either lo or non-ether device
[  142.856738][ T8658] Invalid/unusable pipe
[  143.356878][ T8681] __nla_validate_parse: 12 callbacks suppressed
[  143.356889][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.547'.
[  143.620121][ T8691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.549'.
[  143.651856][   T40] kauditd_printk_skb: 12 callbacks suppressed
[  143.651867][   T40] audit: type=1326 audit(1735818171.686:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8693 comm="syz.1.550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000
[  143.660763][   T40] audit: type=1326 audit(1735818171.686:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8693 comm="syz.1.550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000
[  143.684506][   T40] audit: type=1326 audit(1735818171.696:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8693 comm="syz.1.550" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf709e579 code=0x7ffc0000
[  143.846518][ T8703] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  143.862463][ T8703] overlay: Bad value for 'xino'
[  143.953882][ T8708] netlink: 128 bytes leftover after parsing attributes in process `syz.1.554'.
[  143.957138][ T8708] netlink: 20 bytes leftover after parsing attributes in process `syz.1.554'.
[  143.959978][ T8709] netlink: 128 bytes leftover after parsing attributes in process `syz.1.554'.
[  143.962939][ T8709] netlink: 20 bytes leftover after parsing attributes in process `syz.1.554'.
[  144.315781][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.563'.
[  144.566158][ T8728] fuse: Unknown parameter 'b°'
[  144.994839][ T8739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'.
[  145.000981][   T56] libceph: connect (1)[c::]:6789 error -101
[  145.002866][   T56] libceph: mon0 (1)[c::]:6789 connect error
[  145.171854][ T8746] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  145.184430][ T8746] overlay: Bad value for 'xino'
[  145.267067][   T56] libceph: connect (1)[c::]:6789 error -101
[  145.268961][   T56] libceph: mon0 (1)[c::]:6789 connect error
[  145.306870][ T8750] netlink: 'syz.0.566': attribute type 10 has an invalid length.
[  145.317671][ T8750] team0: Port device netdevsim0 added
[  145.420748][ T8754] CIFS: Unable to determine destination address
[  145.463054][ T8736] ceph: No mds server is up or the cluster is laggy
[  146.145235][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.571'.
[  146.460652][ T8781] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  146.473344][ T8781] overlay: Bad value for 'xino'
[  146.697039][ T8790] 9pnet_fd: Insufficient options for proto=fd
[  147.001318][ T8800] netlink: 224 bytes leftover after parsing attributes in process `syz.0.581'.
[  147.545974][ T8817] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  148.621488][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.589'.
[  148.792156][ T8846] XFS (nullb0): Invalid superblock magic number
[  149.156880][ T6007] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  149.229674][ T8860] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  149.309136][ T6007] usb 10-1: config index 0 descriptor too short (expected 9, got 0)
[  149.311643][ T6007] usb 10-1: can't read configurations, error -22
[  149.436858][ T6007] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  149.528927][ T8873] openvswitch: netlink: nsh attribute has 65512 unknown bytes.
[  149.531273][ T8873] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.591038][ T6007] usb 10-1: config index 0 descriptor too short (expected 9, got 0)
[  149.593534][ T6007] usb 10-1: can't read configurations, error -22
[  149.595593][ T6007] usb usb10-port1: attempt power cycle
[  149.776626][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'.
[  150.109529][ T6007] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  150.129496][ T6007] usb 10-1: config index 0 descriptor too short (expected 9, got 0)
[  150.131770][ T6007] usb 10-1: can't read configurations, error -22
[  150.269217][ T6007] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  150.290123][ T6007] usb 10-1: config index 0 descriptor too short (expected 9, got 0)
[  150.293455][ T6007] usb 10-1: can't read configurations, error -22
[  150.296326][ T6007] usb usb10-port1: unable to enumerate USB device
[  151.450407][ T8919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.613'.
[  151.453508][ T8919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.613'.
[  151.612519][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'.
[  152.080794][ T1061] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.170890][ T1061] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.220998][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  152.224130][ T5947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  152.232346][ T5947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  152.233289][ T1061] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.237164][ T5947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  152.240379][ T5947] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  152.242882][ T5947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  152.289026][ T1061] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.332078][ T8942] chnl_net:caif_netlink_parms(): no params data found
[  152.410365][ T8942] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.412528][ T8942] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.414635][ T8942] bridge_slave_0: entered allmulticast mode
[  152.416900][ T8942] bridge_slave_0: entered promiscuous mode
[  152.425401][ T8942] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.427653][ T8942] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.429859][ T8942] bridge_slave_1: entered allmulticast mode
[  152.432040][ T8942] bridge_slave_1: entered promiscuous mode
[  152.446555][ T1061] bridge_slave_1: left allmulticast mode
[  152.451834][ T1061] bridge_slave_1: left promiscuous mode
[  152.453774][ T1061] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.462329][ T1061] bridge_slave_0: left allmulticast mode
[  152.464085][ T1061] bridge_slave_0: left promiscuous mode
[  152.465890][ T1061] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.522288][ T8955] netlink: 'syz.1.624': attribute type 1 has an invalid length.
[  152.524608][ T8955] netlink: 228 bytes leftover after parsing attributes in process `syz.1.624'.
[  152.527573][ T8955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.624'.
[  152.747145][ T1061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.752372][ T1061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.757239][ T1061] bond0 (unregistering): Released all slaves
[  152.764259][ T1061] bond1 (unregistering): Released all slaves
[  152.803278][ T8942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.809534][ T8942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  152.853248][ T8942] team0: Port device team_slave_0 added
[  152.856101][ T8942] team0: Port device team_slave_1 added
[  152.873962][ T8942] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.876074][ T8942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.885754][ T8942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.902193][ T8942] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.904315][ T8942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.912299][ T8942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.967627][ T8942] hsr_slave_0: entered promiscuous mode
[  152.970584][ T8942] hsr_slave_1: entered promiscuous mode
[  152.973785][ T8942] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  152.976520][ T8942] Cannot create hsr debugfs directory
[  153.023633][ T1061] hsr_slave_0: left promiscuous mode
[  153.026044][ T1061] hsr_slave_1: left promiscuous mode
[  153.028277][ T1061] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.030557][ T1061] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.033127][ T1061] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.035447][ T1061] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.055625][ T1061] veth1_macvtap: left promiscuous mode
[  153.057645][ T1061] veth0_macvtap: left promiscuous mode
[  153.059399][ T1061] veth1_vlan: left promiscuous mode
[  153.061333][ T1061] veth0_vlan: left promiscuous mode
[  153.675711][ T1061] team0 (unregistering): Port device team_slave_1 removed
[  153.745468][ T1061] team0 (unregistering): Port device team_slave_0 removed
[  154.317001][ T5947] Bluetooth: hci1: command tx timeout
[  154.359266][ T8942] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  154.370986][ T8942] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  154.376399][ T8942] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  154.381015][ T8942] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  154.427431][ T8942] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.445342][ T8942] 8021q: adding VLAN 0 to HW filter on device team0
[  154.450569][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.452721][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.457586][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.459686][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.550150][ T8942] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.677875][ T8979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.681818][ T8979] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.700241][ T8942] veth0_vlan: entered promiscuous mode
[  154.706174][ T8942] veth1_vlan: entered promiscuous mode
[  154.716897][ T5949] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  154.723490][ T8942] veth0_macvtap: entered promiscuous mode
[  154.734382][ T8942] veth1_macvtap: entered promiscuous mode
[  154.745485][ T8942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.754834][ T8942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.760590][ T8942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.764996][ T8942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.776894][ T8942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.780199][ T8942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.783691][ T8942] batman_adv: batadv0: Interface activated: batadv_slave_0
[  154.798389][ T8942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.802715][ T8942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.807084][ T8942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.811555][ T8942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.814485][ T8942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.817788][ T8942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.821152][ T8942] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.837990][ T8942] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.840663][ T8942] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.843351][ T8942] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.845977][ T8942] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.885800][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.894556][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.909140][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.914901][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.947348][   T62] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  155.031924][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.036849][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.039255][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.041476][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.043716][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.046059][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.050528][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.052943][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.055168][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.057758][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.060039][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.062321][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.064611][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.070011][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.075039][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.080352][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.085552][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.094131][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.096333][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.098985][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.101224][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.103452][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.106879][   T62] usb 5-1: Using ep0 maxpacket: 32
[  155.107565][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.110811][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.111105][   T62] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  155.112983][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.121196][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.122301][   T62] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  155.123477][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.126327][   T62] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  155.126341][   T62] usb 5-1: Product: syz
[  155.129167][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.136962][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.139199][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.143105][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.143211][   T62] usb 5-1: Manufacturer: syz
[  155.145334][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.146690][   T62] usb 5-1: SerialNumber: syz
[  155.150743][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.151281][   T62] usb 5-1: config 0 descriptor??
[  155.153358][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.157858][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.160144][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.162491][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.164702][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.172486][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.174861][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.177719][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.179959][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.182320][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.184539][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.186744][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.189126][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.631'.
[  155.189434][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.194130][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.196336][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.203865][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.206166][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.208900][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.211120][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.213326][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.215511][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.222759][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.225503][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.228438][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.230668][  T143] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  155.236011][  T143] hid-generic 0000:0000:0000.0004: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  155.357374][  T143] usb 5-1: USB disconnect, device number 8
[  155.596479][ T8984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.004888][ T9023] input: syz1 as /devices/virtual/input/input12
[  156.234737][ T9032] libceph: resolve '400' (ret=-3): failed
[  156.366907][  T143] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  156.397053][ T5949] Bluetooth: hci1: command tx timeout
[  156.519772][  T143] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  156.526123][  T143] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.528812][  T143] usb 6-1: Product: syz
[  156.531235][  T143] usb 6-1: Manufacturer: syz
[  156.532668][  T143] usb 6-1: SerialNumber: syz
[  156.536645][  T143] usb 6-1: config 0 descriptor??
[  156.715502][ T9054] binder: BINDER_SET_CONTEXT_MGR already set
[  156.718230][ T9054] binder: 9053:9054 ioctl 4018620d 200001c0 returned -16
[  156.755788][   T30] usb 6-1: USB disconnect, device number 6
[  156.766595][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.6.647'.
[  157.808326][ T9060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.215219][ T9091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.656'.
[  158.476925][ T5947] Bluetooth: hci1: command tx timeout
[  158.603426][ T9104] binder_alloc: 9099: binder_alloc_buf, no vma
[  159.270716][ T9114] rose0: entered allmulticast mode
[  159.273092][ T9114] bond0: (slave rose0): Enslaving as an active interface with an up link
[  159.302855][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.665'.
[  159.385556][ T9130] netlink: 84 bytes leftover after parsing attributes in process `syz.0.667'.
[  159.946847][ T9138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.670'.
[  159.950931][ T9138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.670'.
[  160.092472][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'.
[  160.147463][ T9159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.674'.
[  160.151296][ T9159] netlink: 'syz.1.674': attribute type 25 has an invalid length.
[  160.398453][ T5949] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  160.616903][ T5949] Bluetooth: hci1: command tx timeout
[  160.850061][ T9139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  160.977905][ T9175] netlink: 'syz.1.678': attribute type 10 has an invalid length.
[  160.984977][ T9175] bridge0: port 3(team0) entered blocking state
[  160.987005][ T9175] bridge0: port 3(team0) entered forwarding state
[  160.989088][ T9175] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.991232][ T9175] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.993488][ T9175] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.995668][ T9175] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.001665][ T9175] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  161.768960][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.684'.
[  161.814068][ T9194] sit0: entered promiscuous mode
[  161.817987][ T9194] vlan2: entered promiscuous mode
[  161.820318][ T9194] vlan2: entered allmulticast mode
[  161.822573][ T9194] sit0: entered allmulticast mode
[  162.110222][ T9206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.686'.
[  162.164396][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.686'.
[  162.167965][ T9213] netlink: 'syz.1.686': attribute type 25 has an invalid length.
[  162.636962][ T5949] Bluetooth: hci1: command 0x0405 tx timeout
[  164.270999][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.706'.
[  164.327379][ T9301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.706'.
[  164.330047][ T9301] netlink: 'syz.0.706': attribute type 25 has an invalid length.
[  165.287086][ T9321] netlink: 32 bytes leftover after parsing attributes in process `syz.1.715'.
[  165.311779][ T9321] netlink: 32 bytes leftover after parsing attributes in process `syz.1.715'.
[  165.828451][   T40] audit: type=1326 audit(1735818449.862:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.4.718" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70de579 code=0x0
[  165.883834][ T9335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.718'.
[  165.949463][ T5947] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  165.951992][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.718'.
[  165.952261][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: kworker/u33:2 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0
[  165.958008][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  165.961198][ T5947] Workqueue: hci2 hci_rx_work
[  165.962615][ T5947] Call Trace:
[  165.963650][ T5947]  <TASK>
[  165.964538][ T5947]  dump_stack_lvl+0x16c/0x1f0
[  165.965957][ T5947]  sysfs_warn_dup+0x7f/0xa0
[  165.967319][ T5947]  sysfs_create_dir_ns+0x24d/0x2b0
[  165.968865][ T5947]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  165.970566][ T5947]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  165.972175][ T5947]  ? kobject_add_internal+0x12d/0x990
[  165.973805][ T5947]  ? do_raw_spin_unlock+0x172/0x230
[  165.975351][ T5947]  kobject_add_internal+0x2c8/0x990
[  165.976952][ T5947]  kobject_add+0x16f/0x240
[  165.978274][ T5947]  ? __pfx_kobject_add+0x10/0x10
[  165.979748][ T5947]  ? class_to_subsys+0x3e/0x160
[  165.981173][ T5947]  ? do_raw_spin_unlock+0x172/0x230
[  165.982711][ T5947]  ? kobject_put+0xab/0x5a0
[  165.984095][ T5947]  device_add+0x289/0x1a70
[  165.985403][ T5947]  ? __pfx_dev_set_name+0x10/0x10
[  165.986856][ T5947]  ? __pfx_device_add+0x10/0x10
[  165.988492][ T5947]  ? mgmt_send_event_skb+0x2f2/0x460
[  165.990527][ T5947]  hci_conn_add_sysfs+0x17e/0x230
[  165.992457][ T5947]  le_conn_complete_evt+0xfce/0x1d10
[  165.994189][ T5947]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  165.995863][ T5947]  ? __mutex_lock+0x1cc/0xa60
[  165.997258][ T5947]  hci_le_conn_complete_evt+0x23c/0x370
[  165.998864][ T5947]  hci_le_meta_evt+0x2e2/0x5d0
[  166.000297][ T5947]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  166.002073][ T5947]  hci_event_packet+0x666/0x1190
[  166.003551][ T5947]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  166.005112][ T5947]  ? __pfx_hci_event_packet+0x10/0x10
[  166.006719][ T5947]  ? mark_held_locks+0x9f/0xe0
[  166.008167][ T5947]  ? kcov_remote_start+0x3cf/0x6e0
[  166.009690][ T5947]  ? lockdep_hardirqs_on+0x7c/0x110
[  166.011210][ T5947]  hci_rx_work+0x2c5/0x16b0
[  166.012539][ T5947]  ? process_one_work+0x8bb/0x1b30
[  166.014058][ T5947]  process_one_work+0x958/0x1b30
[  166.015552][ T5947]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  166.017331][ T5947]  ? __pfx_process_one_work+0x10/0x10
[  166.018915][ T5947]  ? rcu_is_watching+0x12/0xc0
[  166.020349][ T5947]  ? assign_work+0x1a0/0x250
[  166.021752][ T5947]  worker_thread+0x6c8/0xf00
[  166.023151][ T5947]  ? __kthread_parkme+0x148/0x220
[  166.024669][ T5947]  ? __pfx_worker_thread+0x10/0x10
[  166.026197][ T5947]  kthread+0x2c1/0x3a0
[  166.027396][ T5947]  ? _raw_spin_unlock_irq+0x23/0x50
[  166.028928][ T5947]  ? __pfx_kthread+0x10/0x10
[  166.030333][ T5947]  ret_from_fork+0x45/0x80
[  166.031651][ T5947]  ? __pfx_kthread+0x10/0x10
[  166.033025][ T5947]  ret_from_fork_asm+0x1a/0x30
[  166.034472][ T5947]  </TASK>
[  166.039723][ T5947] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  166.043826][ T5947] Bluetooth: hci2: failed to register connection device
[  166.078782][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.720'.
[  166.109769][ T9344] FAULT_INJECTION: forcing a failure.
[  166.109769][ T9344] name failslab, interval 1, probability 0, space 0, times 1
[  166.114630][ T9344] CPU: 2 UID: 0 PID: 9344 Comm: syz.6.722 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0
[  166.118020][ T9344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  166.122405][ T9344] Call Trace:
[  166.123822][ T9344]  <TASK>
[  166.125069][ T9344]  dump_stack_lvl+0x16c/0x1f0
[  166.126754][ T9344]  should_fail_ex+0x497/0x5b0
[  166.128621][ T9344]  ? fs_reclaim_acquire+0xae/0x150
[  166.130359][ T9344]  should_failslab+0xc2/0x120
[  166.131645][ T9344]  __kmalloc_cache_noprof+0x68/0x420
[  166.133829][ T9344]  ? __fget_files+0x206/0x3a0
[  166.135298][ T9344]  finish_clean_context+0x140/0x200
[  166.137200][ T9344]  __do_sys_fsconfig+0x768/0xbe0
[  166.139273][ T9344]  ? __pfx___do_sys_fsconfig+0x10/0x10
[  166.141556][ T9344]  __do_fast_syscall_32+0x73/0x120
[  166.143694][ T9344]  do_fast_syscall_32+0x32/0x80
[  166.145711][ T9344]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  166.148202][ T9344] RIP: 0023:0xf7ff7579
[  166.149862][ T9344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  166.156395][ T9344] RSP: 002b:00000000f514655c EFLAGS: 00000296 ORIG_RAX: 00000000000001af
[  166.159748][ T9344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000007
[  166.162915][ T9344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  166.166136][ T9344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  166.168824][ T9344] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  166.171371][ T9344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  166.173778][ T9344]  </TASK>
[  166.183807][ T9345] netlink: 'syz.1.720': attribute type 25 has an invalid length.
[  166.946323][ T9367] ax25_connect(): syz.0.728 uses autobind, please contact jreuter@yaina.de
[  166.960769][ T9365] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  166.977842][   T39] Bluetooth: hci4: Frame reassembly failed (-84)
[  166.984713][   T39] Bluetooth: hci4: Frame reassembly failed (-84)
[  167.024768][ T9376] futex_wake_op: syz.0.730 tries to shift op by -1; fix this program
[  167.153941][ T9384] FAULT_INJECTION: forcing a failure.
[  167.153941][ T9384] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  167.158137][ T9384] CPU: 0 UID: 0 PID: 9384 Comm: syz.1.732 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0
[  167.162392][ T9384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  167.166495][ T9384] Call Trace:
[  167.167797][ T9384]  <TASK>
[  167.168937][ T9384]  dump_stack_lvl+0x16c/0x1f0
[  167.170838][ T9384]  should_fail_ex+0x497/0x5b0
[  167.172781][ T9384]  _copy_to_user+0x32/0xd0
[  167.174563][ T9384]  simple_read_from_buffer+0xd0/0x160
[  167.176706][ T9384]  proc_fail_nth_read+0x198/0x270
[  167.178766][ T9384]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  167.181063][ T9384]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  167.183369][ T9384]  vfs_read+0x1df/0xbe0
[  167.185073][ T9384]  ? __fget_files+0x1fc/0x3a0
[  167.187086][ T9384]  ? __pfx___mutex_lock+0x10/0x10
[  167.189406][ T9384]  ? __pfx_vfs_read+0x10/0x10
[  167.191367][ T9384]  ? __fget_files+0x206/0x3a0
[  167.193320][ T9384]  ksys_read+0x12b/0x250
[  167.195077][ T9384]  ? __pfx_ksys_read+0x10/0x10
[  167.197069][ T9384]  __do_fast_syscall_32+0x73/0x120
[  167.199209][ T9384]  do_fast_syscall_32+0x32/0x80
[  167.201223][ T9384]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  167.203782][ T9384] RIP: 0023:0xf709e579
[  167.205583][ T9384] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  167.212439][ T9384] RSP: 002b:00000000f5090590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  167.214867][ T9384] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5090620
[  167.217151][ T9384] RDX: 000000000000000f RSI: 00000000f73d3ff4 RDI: 0000000000000000
[  167.219457][ T9384] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  167.221748][ T9384] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  167.224068][ T9384] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  167.226341][ T9384]  </TASK>
[  167.257924][ T9386] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253
[  167.259673][ T9386] PKCS7: Only support pkcs7_signedData type
[  167.291919][ T1337] IPVS: starting estimator thread 0...
[  167.296058][ T9386] tipc: Started in network mode
[  167.297800][ T9386] tipc: Node identity ac1414aa, cluster identity 4711
[  167.300978][ T9386] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  167.303258][ T9386] tipc: Enabled bearer <udp:s>, priority 10
[  167.386954][ T9390] IPVS: using max 37 ests per chain, 88800 per kthread
[  167.439713][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  167.576915][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  167.726843][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  167.866865][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  167.951102][ T9404] __nla_validate_parse: 1 callbacks suppressed
[  167.951113][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.737'.
[  168.006840][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  168.007680][ T9405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.737'.
[  168.012119][ T9405] netlink: 'syz.0.737': attribute type 25 has an invalid length.
[  168.025941][ T9407] 9pnet_fd: Insufficient options for proto=fd
[  168.146930][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  168.286941][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  168.396937][ T5959] Bluetooth: hci1: command 0x0405 tx timeout
[  168.430076][ T5987] tipc: Node number set to 2886997162
[  168.566927][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  168.862994][ T9431] netlink: 40 bytes leftover after parsing attributes in process `syz.0.745'.
[  168.873078][ T9431] veth0_virt_wifi: entered promiscuous mode
[  168.878151][ T9431] veth0_virt_wifi: left promiscuous mode
[  169.036969][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  169.037183][ T5949] Bluetooth: hci4: command 0x1003 tx timeout
[  169.085126][ T9434] mkiss: ax0: crc mode is auto.
[  169.192652][   T40] audit: type=1326 audit(1735818453.222:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.4.747" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000
[  169.199263][   T40] audit: type=1326 audit(1735818453.222:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.4.747" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000
[  169.203338][ T5947] Bluetooth: hci2: unexpected Set CIG Parameters response data
[  169.205477][   T40] audit: type=1326 audit(1735818453.222:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.4.747" exe="/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf70de579 code=0x7ffc0000
[  169.215196][   T40] audit: type=1326 audit(1735818453.222:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.4.747" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000
[  169.223076][   T40] audit: type=1326 audit(1735818453.222:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.4.747" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000
[  169.229580][   T40] audit: type=1326 audit(1735818453.222:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.4.747" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf70de579 code=0x7ffc0000
[  169.246930][   T40] audit: type=1326 audit(1735818453.222:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.4.747" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000
[  169.253343][   T40] audit: type=1326 audit(1735818453.222:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.4.747" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70de579 code=0x7ffc0000
[  169.266856][   T40] audit: type=1326 audit(1735818453.222:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.4.747" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf70de579 code=0x7ffc0000
[  169.301480][ T9449] binder: 9448:9449 ioctl c00c6211 0 returned -14
[  169.335392][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.751'.
[  169.338540][ T9454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.751'.
[  169.360942][ T9454] netlink: 'syz.4.751': attribute type 12 has an invalid length.
[  169.463241][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.754'.
[  169.496885][ T7501] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[  169.519673][ T9463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.754'.
[  169.522824][ T9463] netlink: 'syz.4.754': attribute type 25 has an invalid length.
[  169.539000][ T9464] netlink: 36 bytes leftover after parsing attributes in process `syz.1.755'.
[  169.542465][ T9464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.755'.
[  169.545932][ T9464] netlink: 36 bytes leftover after parsing attributes in process `syz.1.755'.
[  169.648381][ T7501] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  169.652696][ T7501] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  169.656664][ T7501] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  169.662377][ T7501] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.670784][ T9447] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  169.679403][ T7501] usb 11-1: Quirk or no altset; falling back to MIDI 1.0
[  169.868705][ T9432] rtc_cmos 00:05: Alarms can be up to one day in the future
[  169.911528][ T5987] usb 11-1: USB disconnect, device number 2
[  169.961750][  T143] rtc_cmos 00:05: Alarms can be up to one day in the future
[  169.964757][  T143] rtc_cmos 00:05: Alarms can be up to one day in the future
[  169.977539][  T143] rtc_cmos 00:05: Alarms can be up to one day in the future
[  169.980422][  T143] rtc_cmos 00:05: Alarms can be up to one day in the future
[  169.982627][  T143] rtc rtc0: __rtc_set_alarm: err=-22
[  170.415756][ T9476] netlink: 'syz.4.759': attribute type 25 has an invalid length.
[  171.116497][ T9489] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  171.116497][ T9489]    program syz.0.762 not setting count and/or reply_len properly
[  171.248948][ T9491] netlink: 'syz.4.763': attribute type 12 has an invalid length.
[  171.682474][ T9510] netlink: 'syz.6.768': attribute type 25 has an invalid length.
[  171.688474][ T9510] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  171.691444][ T9510] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  171.694302][ T9510] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  171.697088][ T9510] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  171.938370][ T9517] netlink: 'syz.1.774': attribute type 25 has an invalid length.
[  172.211486][ T9520] netlink: 'syz.0.773': attribute type 10 has an invalid length.
[  172.227165][ T9520] batman_adv: batadv0: Adding interface: team0
[  172.231133][ T9520] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.249927][ T9520] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  172.265600][ T9520] netlink: 'syz.0.773': attribute type 10 has an invalid length.
[  172.268864][ T9520] team0: entered promiscuous mode
[  172.272165][ T9520] team_slave_0: entered promiscuous mode
[  172.274121][ T9520] team_slave_1: entered promiscuous mode
[  172.278802][ T9520] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  172.285333][ T9520] 8021q: adding VLAN 0 to HW filter on device team0
[  172.291707][ T9520] batman_adv: batadv0: Interface activated: team0
[  172.299291][ T9520] batman_adv: batadv0: Interface deactivated: team0
[  172.305010][ T9520] batman_adv: batadv0: Removing interface: team0
[  172.311427][ T9520] bridge0: port 3(team0) entered blocking state
[  172.315760][ T9520] bridge0: port 3(team0) entered disabled state
[  172.323142][ T9520] team0: entered allmulticast mode
[  172.338013][ T9520] team_slave_0: entered allmulticast mode
[  172.341201][ T9520] team_slave_1: entered allmulticast mode
[  172.345456][ T9520] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  172.352670][ T9520] bridge0: port 3(team0) entered blocking state
[  172.355076][ T9520] bridge0: port 3(team0) entered forwarding state
[  172.476884][    C0] net_ratelimit: 4 callbacks suppressed
[  172.476896][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  172.558804][ T9524] netlink: 'syz.6.775': attribute type 12 has an invalid length.
[  172.785034][ T9534] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.046948][  T833] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  173.278021][ T5949] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  173.281634][ T5949] Bluetooth: hci2: Injecting HCI hardware error event
[  173.284363][ T5949] Bluetooth: hci2: hardware error 0x00
[  173.299288][  T833] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  173.305591][  T833] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  173.310076][  T833] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  173.313709][  T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.320695][ T9535] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  173.333286][  T833] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  173.516956][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  173.570635][  T833] usb 5-1: USB disconnect, device number 10
[  173.978822][ T9547] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  173.978822][ T9547]    program syz.6.783 not setting count and/or reply_len properly
[  173.987797][ T9547] __nla_validate_parse: 19 callbacks suppressed
[  173.987807][ T9547] netlink: 4 bytes leftover after parsing attributes in process `syz.6.783'.
[  174.051159][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.784'.
[  174.112745][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.785'.
[  174.117011][ T9554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.785'.
[  174.141912][ T9554] netlink: 'syz.0.785': attribute type 12 has an invalid length.
[  174.242166][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.786'.
[  174.296551][ T9557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.786'.
[  174.299955][ T9557] netlink: 'syz.0.786': attribute type 25 has an invalid length.
[  174.368933][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'.
[  174.423808][ T9560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.787'.
[  174.426574][ T9560] netlink: 'syz.1.787': attribute type 25 has an invalid length.
[  174.556939][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  174.653436][ T9570] netlink: 36 bytes leftover after parsing attributes in process `syz.4.790'.
[  174.656905][ T9570] netlink: 16 bytes leftover after parsing attributes in process `syz.4.790'.
[  174.664334][ T9573] netlink: 'syz.6.791': attribute type 10 has an invalid length.
[  174.683492][ T9573] batman_adv: batadv0: Adding interface: team0
[  174.687738][ T9573] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.704101][ T9573] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  174.735831][ T9573] team0: entered promiscuous mode
[  174.743490][ T9573] team_slave_0: entered promiscuous mode
[  174.748432][ T9573] team_slave_1: entered promiscuous mode
[  174.764126][ T9573] 8021q: adding VLAN 0 to HW filter on device team0
[  174.766261][ T9573] batman_adv: batadv0: Interface activated: team0
[  174.768631][ T9573] batman_adv: batadv0: Interface deactivated: team0
[  174.776970][ T9573] batman_adv: batadv0: Removing interface: team0
[  174.784131][ T9573] bridge0: port 3(team0) entered blocking state
[  174.792188][ T9573] bridge0: port 3(team0) entered disabled state
[  174.794990][ T9573] team0: entered allmulticast mode
[  174.797340][ T9573] team_slave_0: entered allmulticast mode
[  174.799751][ T9573] team_slave_1: entered allmulticast mode
[  174.803601][ T9573] bridge0: port 3(team0) entered blocking state
[  174.806297][ T9573] bridge0: port 3(team0) entered forwarding state
[  175.116346][ T9587] tipc: MTU too low for tipc bearer
[  175.357083][ T5949] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  175.596886][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  176.176159][ T9607] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  176.176159][ T9607]    program syz.4.799 not setting count and/or reply_len properly
[  176.636949][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  176.676957][ T1337] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  176.702853][ T9620] validate_nla: 3 callbacks suppressed
[  176.702869][ T9620] netlink: 'syz.6.808': attribute type 12 has an invalid length.
[  176.848133][ T1337] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  176.851461][ T1337] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  176.854755][ T1337] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  176.858163][ T1337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.863277][ T9610] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  176.867103][ T1337] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  177.119579][  T833] usb 5-1: USB disconnect, device number 11
[  177.686860][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  177.709592][ T9653] netlink: 'syz.0.818': attribute type 25 has an invalid length.
[  177.714343][ T9652] netlink: 'syz.6.819': attribute type 12 has an invalid length.
[  177.827202][ T9660] No control pipe specified
[  177.930287][ T9666] macvlan1: entered promiscuous mode
[  177.943137][ T9666] macvlan1 (unregistering): left promiscuous mode
[  178.660406][ T9684] netlink: 'syz.4.831': attribute type 12 has an invalid length.
[  178.726921][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  178.767039][ T6007] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  178.932335][ T6007] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  178.936205][ T6007] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  178.944737][ T6007] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  178.947509][ T6007] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.956046][ T9682] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  178.963382][ T6007] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  179.036498][ T9700] __nla_validate_parse: 34 callbacks suppressed
[  179.036516][ T9700] netlink: 36 bytes leftover after parsing attributes in process `syz.6.836'.
[  179.042080][ T9700] netlink: 16 bytes leftover after parsing attributes in process `syz.6.836'.
[  179.045124][ T9700] netlink: 36 bytes leftover after parsing attributes in process `syz.6.836'.
[  179.048647][ T9700] netlink: 36 bytes leftover after parsing attributes in process `syz.6.836'.
[  179.055536][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.837'.
[  179.110367][ T9704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.837'.
[  179.112779][ T9704] netlink: 'syz.4.837': attribute type 25 has an invalid length.
[  179.191101][   T62] usb 5-1: USB disconnect, device number 12
[  179.221633][ T9708] program syz.1.839 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  179.224382][ T9709] program syz.1.839 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  179.335506][ T9713] netlink: 4 bytes leftover after parsing attributes in process `syz.6.840'.
[  179.339235][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.6.840'.
[  179.364886][ T9713] netlink: 'syz.6.840': attribute type 12 has an invalid length.
[  179.699814][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.844'.
[  179.756941][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  180.063218][ T9737] netlink: 36 bytes leftover after parsing attributes in process `syz.4.848'.
[  180.064714][ T9739] bridge0: port 4(hsr_slave_1) entered blocking state
[  180.068861][ T9739] bridge0: port 4(hsr_slave_1) entered disabled state
[  180.072250][ T9739] hsr_slave_1: entered allmulticast mode
[  180.076514][ T9739] hsr_slave_1: left allmulticast mode
[  180.397091][ T5949] Bluetooth: hci3: command 0x0405 tx timeout
[  180.416307][ T9741] netlink: 'syz.4.850': attribute type 12 has an invalid length.
[  180.573562][ T9764] netlink: 'syz.1.856': attribute type 25 has an invalid length.
[  180.796845][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  180.847122][   T63] usb 11-1: new high-speed USB device number 3 using dummy_hcd
[  181.018739][   T63] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  181.022026][   T63] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  181.024898][   T63] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  181.027857][   T63] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.031863][ T9768] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  181.035320][   T63] usb 11-1: Quirk or no altset; falling back to MIDI 1.0
[  181.269747][   T35] usb 11-1: USB disconnect, device number 3
[  181.521777][ T9787] netlink: 'syz.4.865': attribute type 12 has an invalid length.
[  181.836905][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  181.919075][ T9800] netlink: 'syz.1.869': attribute type 25 has an invalid length.
[  182.109513][ T9801] bridge0: port 4(hsr_slave_1) entered blocking state
[  182.112582][ T9801] bridge0: port 4(hsr_slave_1) entered disabled state
[  182.114635][ T9801] hsr_slave_1: entered allmulticast mode
[  182.116723][ T9801] hsr_slave_1: left allmulticast mode
[  182.876879][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  182.966996][  T833] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  183.346041][ T9822] netlink: 'syz.1.874': attribute type 12 has an invalid length.
[  183.416997][  T833] usb 5-1: Using ep0 maxpacket: 16
[  183.419673][  T833] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  183.422612][  T833] usb 5-1: config 0 has no interface number 0
[  183.425001][  T833] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  183.429740][  T833] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  183.439066][  T833] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  183.442747][  T833] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  183.448237][  T833] usb 5-1: Product: syz
[  183.449602][  T833] usb 5-1: SerialNumber: syz
[  183.452780][  T833] usb 5-1: config 0 descriptor??
[  183.456621][  T833] cm109 5-1:0.8: invalid payload size 0, expected 4
[  183.460577][  T833] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input13
[  183.692118][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  183.692237][  T143] usb 5-1: USB disconnect, device number 13
[  183.694252][    C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  183.707716][  T143] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  183.852872][ T9835] netlink: 'syz.6.879': attribute type 25 has an invalid length.
[  183.916879][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  184.298510][ T9838] __nla_validate_parse: 22 callbacks suppressed
[  184.298583][ T9838] netlink: 36 bytes leftover after parsing attributes in process `syz.0.880'.
[  184.305058][ T9838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.880'.
[  184.309707][ T9838] netlink: 36 bytes leftover after parsing attributes in process `syz.0.880'.
[  184.313543][ T9838] netlink: 36 bytes leftover after parsing attributes in process `syz.0.880'.
[  184.614893][ T9843] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  184.617184][ T9843] overlayfs: failed to set xattr on upper
[  184.618877][ T9843] overlayfs: ...falling back to redirect_dir=nofollow.
[  184.622735][ T9843] overlayfs: ...falling back to index=off.
[  184.624539][ T9843] overlayfs: ...falling back to uuid=null.
[  184.689319][ T9848] bridge0: port 4(hsr_slave_1) entered blocking state
[  184.691743][ T9848] bridge0: port 4(hsr_slave_1) entered disabled state
[  184.694416][ T9848] hsr_slave_1: entered allmulticast mode
[  184.700375][ T9848] hsr_slave_1: left allmulticast mode
[  184.821999][ T9849] netlink: 36 bytes leftover after parsing attributes in process `syz.4.890'.
[  184.828436][ T9849] netlink: 16 bytes leftover after parsing attributes in process `syz.4.890'.
[  184.831732][ T9849] netlink: 36 bytes leftover after parsing attributes in process `syz.4.890'.
[  184.835818][ T9849] netlink: 36 bytes leftover after parsing attributes in process `syz.4.890'.
[  184.905215][ T9852] netlink: 'syz.6.885': attribute type 1 has an invalid length.
[  184.912903][ T9852] 8021q: adding VLAN 0 to HW filter on device bond1
[  184.956903][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  185.107138][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.6.888'.
[  185.112903][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.886'.
[  185.260394][ T5949] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  185.264230][ T5949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  185.266945][ T5949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  185.271214][ T5949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  185.276065][ T5949] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  185.279765][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  185.355936][ T9862] chnl_net:caif_netlink_parms(): no params data found
[  185.424232][ T9862] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.427634][ T9862] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.429749][ T9862] bridge_slave_0: entered allmulticast mode
[  185.431919][ T9862] bridge_slave_0: entered promiscuous mode
[  185.434792][ T9862] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.437266][ T9862] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.439489][ T9862] bridge_slave_1: entered allmulticast mode
[  185.441685][ T9862] bridge_slave_1: entered promiscuous mode
[  185.466196][ T9862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.470625][ T9862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  185.493985][ T9862] team0: Port device team_slave_0 added
[  185.497824][ T9862] team0: Port device team_slave_1 added
[  185.517438][ T9862] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.519517][ T9862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.528569][ T9862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.533193][ T9862] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.535688][ T9862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.545333][ T9862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  185.569407][ T9862] hsr_slave_0: entered promiscuous mode
[  185.572236][ T9862] hsr_slave_1: entered promiscuous mode
[  185.574939][ T9862] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  185.578085][ T9862] Cannot create hsr debugfs directory
[  185.651391][ T9862] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  185.654628][ T9862] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  185.658779][ T9862] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  185.662467][ T9862] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  185.671582][ T9862] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.673749][ T9862] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.675954][ T9862] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.678149][ T9862] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.699153][ T9862] 8021q: adding VLAN 0 to HW filter on device bond0
[  185.710434][ T1206] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.714586][ T1206] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.729085][ T9862] 8021q: adding VLAN 0 to HW filter on device team0
[  185.736289][ T1206] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.738864][ T1206] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.743636][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.745934][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.829395][ T9862] 8021q: adding VLAN 0 to HW filter on device batadv0
[  185.882433][ T9885] netlink: 'syz.4.892': attribute type 25 has an invalid length.
[  185.929748][ T9862] veth0_vlan: entered promiscuous mode
[  185.936674][ T9862] veth1_vlan: entered promiscuous mode
[  185.949077][ T9862] veth0_macvtap: entered promiscuous mode
[  185.954499][ T9862] veth1_macvtap: entered promiscuous mode
[  185.971060][ T9862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.975380][ T9862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.979586][ T9862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.983089][ T9862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.987279][ T9862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.991636][ T9862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.995652][ T9862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.000690][ T9862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.005662][ T9862] batman_adv: batadv0: Interface activated: batadv_slave_0
[  186.006890][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  186.009639][ T9862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.014467][ T9862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.017567][ T9862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.020691][ T9862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.023530][ T9862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.026581][ T9862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.029687][ T9862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.032797][ T9862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.036106][ T9862] batman_adv: batadv0: Interface activated: batadv_slave_1
[  186.042410][ T9862] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.044995][ T9862] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.047771][ T9862] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.050559][ T9862] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.091227][ T1206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.096967][ T1206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.110461][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.112893][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.647584][    C3] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN NOPTI
[  186.652304][    C3] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[  186.655901][    C3] CPU: 3 UID: 0 PID: 34 Comm: ksoftirqd/3 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0
[  186.660434][    C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  186.663656][    C3] RIP: 0010:put_page+0x21/0x280
[  186.665150][    C3] Code: 90 90 90 90 90 90 90 90 90 41 54 55 53 48 89 fb e8 d4 d7 a2 f8 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 20 02 00 00 4c 8b 63 08 31 ff 4c 89 e5 83 e5 01
[  186.670974][    C3] RSP: 0018:ffffc900005cf2d8 EFLAGS: 00010202
[  186.672858][    C3] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff88f7ff98
[  186.675229][    C3] RDX: 0000000000000001 RSI: ffffffff88f677ec RDI: 0000000000000008
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  186.677636][    C3] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[  186.680217][    C3] R10: 0000000000000000 R11: 0000000000000003 R12: ffff88805f14b700
[  186.682647][    C3] R13: ffff888011e13440 R14: ffff888011e13470 R15: 0000000000000007
[  186.684943][    C3] FS:  0000000000000000(0000) GS:ffff88802b700000(0000) knlGS:0000000000000000
[  186.687465][    C3] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  186.689195][    C3] CR2: 000000002c5e4ffc CR3: 000000000db7e000 CR4: 0000000000352ef0
[  186.691386][    C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  186.693762][    C3] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  186.696080][    C3] Call Trace:
[  186.697063][    C3]  <TASK>
[  186.697949][    C3]  ? die_addr+0x3b/0xa0
[  186.699171][    C3]  ? exc_general_protection+0x155/0x230
[  186.700816][    C3]  ? asm_exc_general_protection+0x26/0x30
[  186.702534][    C3]  ? skb_release_data+0x4b8/0x730
[  186.704069][    C3]  ? put_page+0xc/0x280
[  186.705330][    C3]  ? put_page+0x21/0x280
[  186.706606][    C3]  ? put_page+0xc/0x280
[  186.707860][    C3]  skb_release_data+0x4d7/0x730
[  186.709343][    C3]  __kfree_skb+0x4f/0x70
[  186.710620][    C3]  tcp_ack+0x1eb7/0x5ba0
[  186.711905][    C3]  ? __pfx_tcp_ack+0x10/0x10
[  186.713322][    C3]  ? tcp_validate_incoming+0x662/0x1d00
[  186.714984][    C3]  ? read_tsc+0x9/0x20
[  186.716216][    C3]  tcp_rcv_state_process+0xdd4/0x4c40
[  186.717827][    C3]  ? __pfx___lock_acquire+0x10/0x10
[  186.719386][    C3]  ? sk_filter_trim_cap+0x50b/0xb90
[  186.720991][    C3]  ? __pfx_lock_release+0x10/0x10
[  186.722525][    C3]  ? __pfx_tcp_rcv_state_process+0x10/0x10
[  186.724271][    C3]  ? lock_acquire.part.0+0x11b/0x380
[  186.725867][    C3]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  186.727597][    C3]  ? rcu_is_watching+0x12/0xc0
[  186.729024][    C3]  ? do_raw_spin_lock+0x12d/0x2c0
[  186.730570][    C3]  ? tcp_v4_do_rcv+0x1ad/0xa90
[  186.732001][    C3]  tcp_v4_do_rcv+0x1ad/0xa90
[  186.733420][    C3]  tcp_v4_rcv+0x33b4/0x43a0
[  186.734790][    C3]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  186.736255][    C3]  ? __pfx_raw_local_deliver+0x10/0x10
[  186.737887][    C3]  ? rcu_is_watching+0x12/0xc0
[  186.739331][    C3]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  186.740808][    C3]  ip_protocol_deliver_rcu+0xba/0x4c0
[  186.742430][    C3]  ip_local_deliver_finish+0x316/0x570
[  186.744072][    C3]  ip_local_deliver+0x18e/0x1f0
[  186.745541][    C3]  ? __pfx_ip_local_deliver+0x10/0x10
[  186.747166][    C3]  ip_rcv+0x2c3/0x5d0
[  186.748370][    C3]  ? __pfx_ip_rcv+0x10/0x10
[  186.749745][    C3]  __netif_receive_skb_one_core+0x199/0x1e0
[  186.751514][    C3]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[  186.753351][    C3]  ? rcu_is_watching+0x12/0xc0
[  186.754723][    C3]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  186.756342][    C3]  ? process_backlog+0x3f1/0x15f0
[  186.757856][    C3]  ? process_backlog+0x3f1/0x15f0
[  186.759370][    C3]  __netif_receive_skb+0x1d/0x160
[  186.760887][    C3]  process_backlog+0x443/0x15f0
[  186.762353][    C3]  __napi_poll.constprop.0+0xb7/0x550
[  186.763974][    C3]  net_rx_action+0xa94/0x1010
[  186.765396][    C3]  ? __pfx_net_rx_action+0x10/0x10
[  186.766939][    C3]  ? __switch_to+0x749/0x1190
[  186.768355][    C3]  ? kvm_sched_clock_read+0x11/0x20
[  186.769954][    C3]  ? sched_clock+0x38/0x60
[  186.771298][    C3]  ? sched_clock_cpu+0x6d/0x4d0
[  186.772782][    C3]  handle_softirqs+0x213/0x8f0
[  186.774229][    C3]  ? __pfx_handle_softirqs+0x10/0x10
[  186.775816][    C3]  ? rcu_is_watching+0x12/0xc0
[  186.777260][    C3]  ? __pfx_run_ksoftirqd+0x10/0x10
[  186.778802][    C3]  ? smpboot_thread_fn+0x59d/0xa30
[  186.780342][    C3]  run_ksoftirqd+0x3a/0x60
[  186.781690][    C3]  smpboot_thread_fn+0x661/0xa30
[  186.783253][    C3]  ? __kthread_parkme+0x148/0x220
[  186.784772][    C3]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  186.786402][    C3]  kthread+0x2c1/0x3a0
[  186.787622][    C3]  ? _raw_spin_unlock_irq+0x23/0x50
[  186.789195][    C3]  ? __pfx_kthread+0x10/0x10
[  186.790587][    C3]  ret_from_fork+0x45/0x80
[  186.791932][    C3]  ? __pfx_kthread+0x10/0x10
[  186.793345][    C3]  ret_from_fork_asm+0x1a/0x30
[  186.794836][    C3]  </TASK>
[  186.795769][    C3] Modules linked in:
[  186.797200][    C3] ---[ end trace 0000000000000000 ]---
[  186.798819][    C3] RIP: 0010:put_page+0x21/0x280
[  186.800300][    C3] Code: 90 90 90 90 90 90 90 90 90 41 54 55 53 48 89 fb e8 d4 d7 a2 f8 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 20 02 00 00 4c 8b 63 08 31 ff 4c 89 e5 83 e5 01
[  186.806043][    C3] RSP: 0018:ffffc900005cf2d8 EFLAGS: 00010202
[  186.807902][    C3] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff88f7ff98
[  186.810266][    C3] RDX: 0000000000000001 RSI: ffffffff88f677ec RDI: 0000000000000008
[  186.812626][    C3] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[  186.815012][    C3] R10: 0000000000000000 R11: 0000000000000003 R12: ffff88805f14b700
[  186.817420][    C3] R13: ffff888011e13440 R14: ffff888011e13470 R15: 0000000000000007
[  186.819778][    C3] FS:  0000000000000000(0000) GS:ffff88802b700000(0000) knlGS:0000000000000000
[  186.822432][    C3] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  186.824416][    C3] CR2: 000000002c5e4ffc CR3: 000000000db7e000 CR4: 0000000000352ef0
[  186.826838][    C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  186.829202][    C3] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  186.831547][    C3] Kernel panic - not syncing: Fatal exception in interrupt
[  186.834206][    C3] Kernel Offset: disabled
[  186.835342][    C3] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:43:34  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000007 RBX=ffff88801be96284 RCX=ffffffff818d4e25 RDX=0000000000000000
RSI=00000000000000fb RDI=0000000000000002 RBP=0000000000000001 RSP=ffffc90000007e18
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=ffffc90000007ff8
R12=0000000000000001 R13=0000000000000000 R14=ffff88802b53ed00 R15=ffff88801302cc01
RIP=ffffffff8147ac19 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b400000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000055ad89e39d38 CR3=0000000076a54000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fefeffd0 Opmask01=0000000000004211 Opmask02=000000000000ffdf Opmask03=0000000000000000
Opmask04=00000000ffffffdf Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde66167d0 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ff000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ff000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c7fe659fc6977bc6 737326dba04a0ef1
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373e2 7373737373737373
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000281 0000000000000000 37706f6f6c2f6b63 6f6c622f6c617574
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 455300373d524f4e 494d00373d524f4a 414d0034323d5145 534b534944006b73
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 14165337791e0011 011941676b170b4a 7c094c7b6d750504 031d160d443d253c
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 77367f3f7d7f7f77 3f3d7f777b577f7f 7f3f7f7f7f7f7777 7f7f373f7f3f3f7f
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3b2433273f397b27 697a787c69303b7e 69305f474f5b647c 69303b2433273f39
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65633d4550592f3d 4544003756454400 2f6b636f6c2f2f65 612f3d454d412f56
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 455300373d002f3d 454400373d454400 2f4d003432002f34 302f323d44002f51
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000010001 RBX=ffff88802b528400 RCX=ffffffff818a2be9 RDX=ffff88801cee4880
RSI=0000000000000000 RDI=0000000000000007 RBP=0000002b6f3f1980 RSP=ffffc900005a0ec0
R8 =0000000000000007 R9 =0000000000000000 R10=0000002b6f3f1980 R11=ffff88802b53f638
R12=0000000000000000 R13=0000000000000003 R14=0000000000000000 R15=0000002b6f9a5fbe
RIP=ffffffff81994fcc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b500000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000020032680 CR3=000000006afba000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00c800a400000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000200000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=dffffc0000000000 RCX=ffffffff89863382 RDX=ffff888022cc0000
RSI=0000000000000000 RDI=0000000000000001 RBP=ffff88801bf0c400 RSP=ffffc900005486d0
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=00000000000a2001
R12=ffffc90000548738 R13=ffff888022abf400 R14=0000000000000001 R15=ffffc90000548800
RIP=ffffffff81994fcc RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9f68ab7d00 ffffffff 00c00000
GS =0000 ffff88802b600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000202bc000 CR3=000000004c95e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865
ZMM17=6e7ea41282547ef2 d43828344ec446bd 6e7ea41282547ef2 d43828344ec446bd 6e7ea41282547ef2 d43828344ec446bd 6e7ea41282547ef2 d43828344ec446bd
ZMM18=09869d55999afbe2 b7e858ed62de2a47 09869d55999afbe2 b7e858ed62de2a47 09869d55999afbe2 b7e858ed62de2a47 09869d55999afbe2 b7e858ed62de2a47
ZMM19=db09000000000000 0000000000000204 db09000000000000 0000000000000203 db09000000000000 0000000000000202 db09000000000000 0000000000000201
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=d4382834d4382834 d4382834d4382834 d4382834d4382834 d4382834d4382834 d4382834d4382834 d4382834d4382834 d4382834d4382834 d4382834d4382834
ZMM22=82547ef282547ef2 82547ef282547ef2 82547ef282547ef2 82547ef282547ef2 82547ef282547ef2 82547ef282547ef2 82547ef282547ef2 82547ef282547ef2
ZMM23=6e7ea4126e7ea412 6e7ea4126e7ea412 6e7ea4126e7ea412 6e7ea4126e7ea412 6e7ea4126e7ea412 6e7ea4126e7ea412 6e7ea4126e7ea412 6e7ea4126e7ea412
ZMM24=62de2a4762de2a47 62de2a4762de2a47 62de2a4762de2a47 62de2a4762de2a47 62de2a4762de2a47 62de2a4762de2a47 62de2a4762de2a47 62de2a4762de2a47
ZMM25=b7e858edb7e858ed b7e858edb7e858ed b7e858edb7e858ed b7e858edb7e858ed b7e858edb7e858ed b7e858edb7e858ed b7e858edb7e858ed b7e858edb7e858ed
ZMM26=999afbe2999afbe2 999afbe2999afbe2 999afbe2999afbe2 999afbe2999afbe2 999afbe2999afbe2 999afbe2999afbe2 999afbe2999afbe2 999afbe2999afbe2
ZMM27=09869d5509869d55 09869d5509869d55 09869d5509869d55 09869d5509869d55 09869d5509869d55 09869d5509869d55 09869d5509869d55 09869d5509869d55
ZMM28=00000200000001ff 000001fe000001fd 000001fc000001fb 000001fa000001f9 000001f8000001f7 000001f6000001f5 000001f4000001f3 000001f2000001f1
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=db090000db090000 db090000db090000 db090000db090000 db090000db090000 db090000db090000 db090000db090000 db090000db090000 db090000db090000
info registers vcpu 3

CPU#3
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85143475 RDI=ffffffff9a667200 RBP=ffffffff9a6671c0 RSP=ffffc900005cec30
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043
R12=0000000000000000 R13=0000000000000020 R14=ffffffff85143410 R15=0000000000000000
RIP=ffffffff8514349f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802b700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000002c5e4ffc CR3=000000000db7e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c19b558dd34aa966 fa4ae9c51c6777f0
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e6ed7f42e76bc6b9 1f132fa9a351a15f
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 080f612ba97e9d03 c322934628416818
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d3d795ff40390452 bd8c24da98691b1b
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000009040
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8edf7300db2bdc00 000071f700007221
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 49395186398dc800 5337f1003a2d2c00
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 72e5ecbe000071eb 04465df06da68ae7
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000007221 3f0aab00000071dd
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 47241273413bb826 1ceb76ad214eedc2
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f8219b435f1f7c3 751357afe9bb8b2a
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000