last executing test programs:

15m0.469180393s ago: executing program 0 (id=512):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r2, &(0x7f0000000080), 0x10)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b, 0x8000000000002})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0x2020)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r9=>0xffffffffffffffff})
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000480)={<r10=>0x0, @broadcast, @multicast1}, &(0x7f0000000500)=0xc)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r10, 0x25, 0x14, @val=@kprobe_multi=@addrs={0x1, 0x2, 0x0, &(0x7f0000000540)=[0x4, 0x8], 0x2}}, 0x30)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r11=>0xffffffffffffffff})
r12 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r12, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc)
bind$xdp(r12, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x1c}, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x154, r8, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x8d}, 0x40020)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="0232", 0x2}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0xfb1ff000)
r13 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r13, 0x84, 0x22, 0x0, &(0x7f00000000c0))

15m0.419269065s ago: executing program 0 (id=513):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/comedi4\x00', 0x0, 0x0)
ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000001b80)={0x1, 0x2, 0x2, 0x4})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044040}, 0x8842)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, 0x0, 0x20000000)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_genetlink_get_family_id$tipc2(0x0, r4)
sendmsg$TIPC_NL_NET_SET(r4, 0x0, 0x4004044)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4048044}, 0x20000100)
write$char_usb(0xffffffffffffffff, &(0x7f0000000200)="e1", 0x1)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
close(0x3)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f00000002c0)=0x3df, 0x4)
getsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, 0x0, &(0x7f0000000080))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10)

15m0.385350391s ago: executing program 0 (id=514):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
socket(0x1e, 0x4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000001e00)='./file0\x00', 0x58)
mount$9p_tcp(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', &(0x7f0000002540), 0x0, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}})
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000)
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})

14m59.080661505s ago: executing program 0 (id=525):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
connect$unix(r0, 0x0, 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
statfs(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000d80)=""/4096)

14m59.020414904s ago: executing program 0 (id=528):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)={{0x14, 0x10, 0x1, 0x0, 0x1000000}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0)

14m58.888860852s ago: executing program 0 (id=530):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fb00fb030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r0, &(0x7f0000000000)=""/172, 0xac)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000040000000100ba2f", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x200408cc}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x56a9, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xb, 0xa0002f5})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x20008080)
bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x50)

14m58.801134026s ago: executing program 32 (id=530):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fb00fb030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r0, &(0x7f0000000000)=""/172, 0xac)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000040000000100ba2f", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x200408cc}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x56a9, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xb, 0xa0002f5})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x20008080)
bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x50)

12m35.687894196s ago: executing program 1 (id=1465):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', 0x0, 0x8002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102)
writev(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)="94", 0x1}, {0x0, 0xe5}], 0x2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r1, &(0x7f0000000280)="96", 0x1, 0x1, &(0x7f0000000240)={0xa, 0x0, 0x3, @private0}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4)
close(0x3)
setrlimit(0x6, 0x0)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
gettid()
timer_create(0x0, &(0x7f0000000080)={0x0, 0x1c, 0x2, @thr={&(0x7f00000003c0)="4296704f5963eae6c84ac72a03625a5f45b6ac4a5bc46ed3b31796189108fea2e6323ef1cf71c3548bf4db8448fbd6b0b3b61f2bd7c062bcc16c1939e27abfb78f4678df25577ac14ab1b82a6f4b5c9ccc7ed85996b27510d1f5114c3d3984ed6fd5e083e33d092ffb2a92fc6b90", &(0x7f00000004c0)="7c9f7b07f3f530273ced0f7670a4263afb198c47f226075ad48b4a840f9836c247f7b06f1e90c175cd00f953603fbfac0a7b5f33db08f69d23d9dc4a461cef29fa5d0a57fb254e02c05354c0007d59bd40db35c7659b82e6e06fceec3b01dfb170a013cad4ceba6c700d91d4ec78570bdb161a840f8a74d05193eeb3ce9ba29854a06e3fec5d1fa736f3b8c403b0f9efac78c66abe5d9ef621ce4a11d8c0ebf02478c7023b94724e7dc3fc511b0238fd5beda2f14328243bab0860ca8080785d3694fd663621c35a819e028388a49cdf245233bc3d"}}, &(0x7f0000bbdffc))
r3 = socket$kcm(0x2, 0x1000000000000005, 0x0)
sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x20, @rand_addr=0xa9fe0000}, 0x10, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff09)
unshare(0x4a070200)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94)

12m34.818935856s ago: executing program 1 (id=1474):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
accept4$unix(r0, 0x0, 0x0, 0x0) (fail_nth: 7)

12m34.52469614s ago: executing program 1 (id=1480):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @remote, 0x2}, 0x1c, 0x0}, 0x20008814)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in=@broadcast, {0x0, 0x9, 0x0, 0x0, 0x8, 0x0, 0x4, 0x8}, {0x0, 0x0, 0x40000000000, 0x9}, {0x0, 0x1}, 0x0, 0x0, 0xa}}}, 0xf8}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)=0x4, 0x4)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf4, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in=@empty, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf4}}, 0x8841)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0)
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000380)='./bus\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000000)='usrquota')
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450e00280064000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES16=r0], 0x0)

12m33.655499373s ago: executing program 1 (id=1486):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1c5008, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (fail_nth: 7)

12m33.557601667s ago: executing program 1 (id=1490):
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
open(&(0x7f0000000140)='./file1\x00', 0x44480, 0x10b)
fcntl$setlease(r0, 0x400, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x41)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file1\x00')
close(0x3)

12m33.178662381s ago: executing program 1 (id=1494):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmmsg$inet(r0, &(0x7f0000001340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4800)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000100)=0x1, 0x4)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400)={0x77359400}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = dup(0xffffffffffffffff)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004080)=@delchain={0x27e8, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xb}, {0x9, 0x2}, {0x5, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_flow={{0x9}, {0x25f8, 0x2, [@TCA_FLOW_ACT={0x16c0, 0x9, 0x0, 0x1, [@m_xt={0x11c, 0x20, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0xc7, 0x6, "05b3613fd57f024a5e55158674e57f5790659b0f5bea3934f07980cb0e51cb7dbd0f6ec0ec6f5f6ef5166003242e13abe89b935b5b2e6a634f6a049cffbad88a45e9bf0c2688251f8dc48ace7aabaf21e93e2cca30d9ea13c5cfe122ec3e82e08ffd398aac214e2e703ebdd351aaaf17352d26b5be82ecb1acb96e290da53906f1f01627a9cd75ba61c4653a527e4b4a705a1b6f551e4cb65e5972de828311e6cbabb4e1413d07ee98f6a4f1f6a7b19911f1690ea92c49f635dbecb6757264f027bb4e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x13c, 0x14, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1, 0x8}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x3, 0x7, 0x9, 0xffffffff}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0x3}}]}, {0xbf, 0x6, "2f75cca4df701777041140ae4859c1d9fac62f40c6b5ad0f6826a6293d5b596cd5ef4ab56d0e4922b67344b4b1229f3a981b3521c2969c6fefe72068b94c93e06b785d098bfd336b3acfa09b8fbeb62cc195677b6363106eff9dfa2ce052fcb02b39e9b3259bfd311a8c484f6ccc7f5385a26e4e30e795b192953274360824389c880722104c213210cd4a2d6ec0cef2a9786f1cafa471643708e2f5211fc9868e5a682439c13a5c167324912e4ab863e899b4d549eda5773ff770"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_ife={0x12c, 0x8, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0xf9, 0x6, "f78b5d8468d013e3691cc334fb1fb94680bb6133a46339ac1b45db355d3fccce126d50c91e2d4f447efa68027f858bc6339c29c87165527858b9699197eace15cbad17e9f189dabc89e605aba92c4a4485fdac827d892a1adda9d1796759f1e36f4edbc9a47d7c93823dd571531b079f10a256cc9c23654c30ce05114269e7758773b15b18bb8789302410f62fce762182f3e748eeaea1d6010bc49648001bdeb33004c80d35839758618f318fe9b135a41ae9a3e897ffd5ab5c1b22a6df1e046ab905e3aea3f875aaeefabb80f60465537b6115e3d8e407a5f668db3efee923374709395ead1c31bee47b1b7a95d8721005ec619d"}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}, @m_mirred={0x1050, 0xb, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x0, 0x7, 0xffffffae, 0x72d}, 0x4}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0x1cc, 0x14, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x0, 0x6, 0xfffffffe}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x0, 0x6, 0xfffffff8, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x40, 0x5, 0x100, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x7f, 0x20000000, 0x1ff, 0x7}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0x8, 0x7, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x7fff, 0x5, 0x6, 0x3}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x5, 0x7, 0x57, 0x81}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x6, 0xfffffffffffffffc, 0xffffffff, 0x3}, 0x1}}]}, {0x9e, 0x6, "9026e4e502409d1fa5e73301a7b7aee9832095f656b52eda0a60c848ed05fa956ea2f51303665312bfedd244ee28db2c67556b50d9f81e61eefe96f35ba4c50b168be82bb36052ce500bbd1c6523575afeae64c64e6bd616b5d947619f29107c089f01fe52634a0fa6ea2571ec63c265bc06c5165b20a27ee76817aaa9ec21f5d98b01f343c94cca78ef02f88c5c00adb7c58e88db410b0b2884"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0x84, 0x7, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @remote}}]}, {0x20, 0x6, "448aef1b9b4c505eece8e89efb322a604d5463b80c22bdda471fb7a0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x98, 0xe, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x96, 0x3, 0xffffffffffffffff, 0x400, 0x6}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x2, 0x2, 0xa, 0xfa9b}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6ca}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x80000001}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x80000001}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2a773250, 0x0, 0x5, 0x0, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x16b68}, @TCA_FLOW_EMATCHES={0x60, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x5, 0x2, 0x2}, {0x8, 0x8, 0x1, "60f8f7d151ef43e4"}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x7, 0x2, 0x5}, {0x4, 0x2, 0x0, 'Vc'}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xa, 0x7, 0x4}, {{0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7f, 0x8, 0xfffa}, {0x1, 0x4, 0x1}}}]}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_MASK={0x8, 0x6, 0x7}, @TCA_FLOW_MASK={0x8}, @TCA_FLOW_ACT={0xeac, 0x9, 0x0, 0x1, [@m_nat={0x130, 0x17, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfa3, 0x5804e574, 0x7, 0x40bd, 0x61e}, @remote, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x47fff, 0x10000000, 0xc05, 0x7}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x1}}]}, {0xb6, 0x6, "eefa69958fcd17771f96b9c9d9a36cd5f0fd519647525a5762c285644f66ff996981e4c5de2f63a11e10164158428d8879287a567923384ec8ad416caaeb20a12a8076b27c54012bc02c7a4cb4131de54d6cbda400a2d7b112989550411d4efe9690e4b9be687814f5a1464dad8130837ab67ebfef058175c704b1778ff75152cd8840be25ec5fba16727bae1a99a3c1ec83d26495f1ddc0ba01336e6e518f4ce436d7be419ae9892373f3a4d67a9805d322"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x11c, 0x1d, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x7, 0xe, 0xa}, 0x69}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd5e, 0x1, 0x3, 0x1, 0xb}, 0xe}}]}, {0xb5, 0x6, "dc66be532eb0e7ab17c0e85a483e8e0c313dde139dc6a11ba98f21264b430f26c125c1ef124346a3871d46cfc652139b64552f3eb404b20b245fc1150b70fee0e279571f78292c26b145d0ea6b24d3df3297a2e6ce3c48a18382646f8595a792d2c3a64649a20973d4e6b73c30d76f36a6814ea778864a044092516f0a9daf269b501f9f712fe8ea6c36e5d3f675cab9eb277287421567c527e74c007be3b4f20f9ee6bcce972dcd4bbe53d184fe4e6cb5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0xc8, 0x1c, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0x0, 0x4aea, 0x0, 0x8, 0x4}, 0xc}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}]}, {0x6f, 0x6, "d9c9f09ac92dc40341983ace70a027291499ffb4bc2ed71e8696d1028f25b7298115223bbbe5a7f251a77d2b68093833d1144cdd82c388f8bcbe5300d7669b45c221de87d7c32c960ec718d5898eed436f0487e79e9ca60e162ebefefaca84ff3ef67349d14f23ece666a9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x16c, 0x7, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xff}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x10000, 0xe, 0xfffffff8, 0x3}}]}, {0xfd, 0x6, "26b6af630d771de33f725fc067d85723e1f96d202a4df4ed36933d238a2ca0e05e7ce18eea958e9d69676585b147c74003522af020892913654e742623a9ab6c8447a076ea07733a95e45ea550e001dfd45ab62552a1581a3b8d8014063a82e0206fcb684a794f1297ac7a46a68a1c9dac13d361ed0022b1212ae9bc5942622428f24770812c872fefe6e81de1070275a60229cb83673b737cf48975293678b4b18d709a4a73a836e5d16bfdf38adb50bc240183d949f16e9cca99ef920b52b50ee8abfc3e5af57a9058474e74b45414a2166d36d785ff3d3285bcb4969e8f4089773c579537b8840e6152b4fb815d68a697ba7ebdc0f61f9f"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_simple={0xc4, 0x5, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '('}, @TCA_DEF_PARMS={0x18, 0x2, {0x101, 0x0, 0x7, 0x6, 0x5}}, @TCA_DEF_DATA={0xb, 0x3, 'flower\x00'}]}, {0x6b, 0x6, "3bee480b746454fecc7af59adf8816e5fd7127eeeb3d1da5cb30bb97035b2bb00f3ccbf790c215837fda5b31e9899697e9e5bde10521024f589f048303afca0b9d183a4e47c570770b247706fd8ea1c671927d69327bef53f929746e28fa5fc0bd36590edf420c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x21c, 0x19, 0x0, 0x0, {{0x7}, {0x1d0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xbe, 0x6, {0x0, 'security\x00', 0x93, 0x0, "4da94132f25f5e822861a7d16c101a13e4ea15469eda355ef548c6cb471b5f831479b62113f922307a4826f9030b88cba426b4121052d033a56bc1580c044b60b4b4f368caadb8f7b28ff58e7b0a95ddf363a93a0d49f1bb5a88b35c624faf6b559930c5809b08c4dba5f8880b488a749da8a261022965dc958ee97fe3295ad91991a5b463bb3e56feacce8bf4da6559031e9af4"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x2a, 0x6, {0xff80, 'security\x00', 0x81, 0xfc00}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x3e, 0x6, {0x5, 'mangle\x00', 0xc4, 0xc83, "c49e1875c3403508594248cf736aada3df101cfe"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x4000000}, @TCA_IPT_TARG={0x5b, 0x6, {0x3, 'nat\x00', 0x6, 0x1732, "744f7d9645c10d2f7df7c19d86e90c5f82c5e3b93a1faa5e69136340b030ed3e6230a50ae55dd0db6cd27462c64caeb740"}}]}, {0x25, 0x6, "9d9a9490a43eccc851b2f78b43aa3d25a4762afab6ba74e39b9b59447c5bd9233b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x134, 0x1, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0xbc64, 0x6, 0x3ff, 0xea}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x42}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff, 0xc}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x14, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}]}, {0xbf, 0x6, "47b989456abadbf3270ad814eb89075b1c3094333386ef071b3731141e71ffe208741f5d96f990f16a253fdbfe35f6f7eb36906b99e6ff6dad36011d4ecb3c6859a3644d1ae6d715c04b9e947a7e7fb30ec913b89a68adf302491e8a4584e1e899a23cb790821ac315ee7a72f7a0902f8ca0ed4b6e97bc56a6b1bd9df8c0f6c24dcc8da9426cb0e211f9be11c977da8e4b3de3b9e21a79ddce676e437ea2a17b0cbd3662c2961673d3a10cbbcd4ab14df716c2754fd4d8867fe1d9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_csum={0x11c, 0x14, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1, 0xf762ca838f977c66, 0x9, 0x4}, 0x6a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xbaa1, 0x1ff, 0x6, 0x6b8df251, 0x8001}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x343781d, 0x3, 0x10000000, 0x5, 0x80000001}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6b, 0x80000001, 0x3, 0x100, 0x7}, 0x7f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x698f, 0xc32, 0x6, 0x6}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xffff5940, 0x5, 0x2, 0xd}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff9, 0xc0, 0x8, 0x401, 0x4f}, 0x71}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x10000007, 0x1, 0x6}, 0x1c}}]}, {0x10, 0x6, "3d3618a5f3a280399db55ef0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xa0, 0x13, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x17, 0x3, './binderfs/binder0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6d2, 0x4, 0x2, 0x72}}]}, {0x42, 0x6, "0cf9caebb4eab6597593fed54a36bbd3ffb8d7bc318e4cc2c8d4a6ea8898ea30d35b7a847bc8845488690b6e3731f505f80f4a3acd06e43cc33b03ab3a8d"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_police={0x458, 0x1e, 0x0, 0x0, {{0xb}, {0x42c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x65, 0x8000, 0x200, 0xfffffffe, 0x7fff, 0x44f, 0x5, 0x0, 0xfb5b, 0x6, 0x401, 0x6, 0x1, 0x9, 0x0, 0xd860, 0xd, 0x4, 0x7, 0xffffffff, 0x9, 0x9, 0x1, 0x2, 0x2, 0x6, 0x8, 0x6, 0x9, 0x3, 0xa, 0x6, 0x2, 0xfffffff9, 0x6, 0xa, 0x5, 0x8, 0x8, 0x7f, 0x5, 0x2, 0x7, 0x4, 0x0, 0x9, 0x0, 0x29, 0x80, 0x53c, 0x9, 0x8000, 0x4, 0xfffffff9, 0x8, 0x3ff, 0x9, 0xffffffff, 0x8, 0x2, 0x6, 0x2, 0x96, 0xb, 0x8, 0x4, 0x9, 0x40000, 0x7, 0x40, 0x8, 0x9, 0x48, 0x4, 0x2, 0x4, 0x0, 0x398, 0xd, 0x81, 0xe, 0x91b, 0x2, 0x7, 0x81, 0x2, 0x400, 0xfffffffd, 0x5, 0x7, 0xffffffff, 0xfffffffd, 0x7, 0x8000, 0x7225, 0xff, 0x7, 0xbb, 0x0, 0x10000000, 0x4, 0x7, 0x7, 0x3, 0x5, 0xd, 0x4, 0x6, 0x81, 0x6, 0x7e5, 0x10000, 0x2, 0x4, 0xc00000, 0x6, 0x4, 0x4, 0x0, 0x9, 0x5, 0x7ff, 0x66c, 0x0, 0x200, 0x9b, 0x8, 0x10, 0x7, 0x3, 0x2, 0x3, 0x2, 0x4, 0x4d1, 0x8, 0x2, 0x89c8, 0x0, 0x80, 0x5, 0x0, 0x7, 0x3, 0xfffffc01, 0x800, 0xd, 0x3, 0xb, 0x0, 0x0, 0x2, 0x2, 0xc3, 0xffff8000, 0x5, 0x8, 0x3157, 0x7fff, 0x6, 0x8, 0x1ff, 0x200, 0xffffffff, 0x8, 0x200, 0x7fffffff, 0x8, 0x4, 0x2, 0x2, 0xff, 0x5, 0x9, 0x3, 0xb6, 0x9, 0x3, 0x74, 0x1ff, 0x4b0e, 0x0, 0x8, 0x8, 0x418a, 0x5, 0x5, 0x2, 0x80000000, 0x7ff, 0x9, 0x9, 0x2, 0xc, 0x2, 0x54822000, 0x4, 0x1, 0x9, 0x9, 0x32ed, 0x1, 0x6, 0xf9a, 0x6, 0x2, 0x3ff, 0xffffffff, 0x7f, 0x800, 0x4, 0x3, 0x0, 0xfffeffff, 0x8, 0xfff, 0xf5, 0x1, 0x81, 0x8, 0x31d3aef4, 0x3, 0xe, 0x6, 0x9, 0x0, 0xf9, 0x4a9a8c29, 0xd78f, 0x3, 0x3, 0xffffff09, 0x6, 0x7f, 0x38f1456a, 0x5, 0xfffffffd, 0x3, 0x7, 0xa, 0x8001, 0x2a, 0x8, 0x5f9cb127, 0x1, 0x0, 0x1, 0x1, 0x7ff, 0x7fff, 0x4, 0x7fffffff, 0x4, 0xfff, 0x2, 0x4]}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x6}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x1a8, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x3}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0x7}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xfff3}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0x6}}, @TCA_MATCHALL_ACT={0x184, 0x2, [@m_vlan={0x180, 0x12, 0x0, 0x0, {{0x9}, {0xa8, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x800, 0x0, 0x0, 0xffffffff}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x6, 0x4, 0x1ff, 0x8}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xbde}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x3aa}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x401, 0x3, 0x2, 0x10000, 0x6}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xffff5126, 0x16b, 0xffffffffffffffff, 0x8}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x80, 0x9, 0x3, 0x80000001, 0x7fffffff}, 0x2}}]}, {0xae, 0x6, "3d82f9ccd64affb0f38e742c3c17bee8a933fed31ecab0c4c0767d05d785b375910ebef7c65e43d2bec4905b64f45797b65435248f29a0f67b42a4a5d00a44d46415802cee700994fd36049dc15b1304b8371b1cbf53fd011840d27c103ceb074807f23c7517a761659272676c1881878526ef90e416503866b64dd2b931e6471111cc2cd12fcc5856f0100f9dfe666fd1556113759c2ff312a607a477fccd9a230d4db422949439f641"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x27e8}}, 0x20004800)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004040)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8004, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @remote}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r5, 0x0)
r6 = socket(0xa, 0x3, 0xff)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @loopback, 0xffffcd0b}, 0x1c)
sendmsg$unix(r6, &(0x7f0000001680)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000180)="655be7c09841f6a9e16c7f5cda3a2f5af70a1666e57ab0ee706e8c4dd4a39b587fbe9e11185603f7", 0x28}], 0x1, 0x0, 0x0, 0x40051}, 0x2)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001900010000000000fbdbdf250a0109b23411e9e300c5d97b2fb25ba2ca44ce9094"], 0x30}, 0x1, 0x0, 0x0, 0x45}, 0x0)
io_setup(0x2279, &(0x7f0000000280))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))

12m33.138624682s ago: executing program 33 (id=1494):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmmsg$inet(r0, &(0x7f0000001340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4800)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000100)=0x1, 0x4)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400)={0x77359400}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = dup(0xffffffffffffffff)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004080)=@delchain={0x27e8, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xb}, {0x9, 0x2}, {0x5, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_flow={{0x9}, {0x25f8, 0x2, [@TCA_FLOW_ACT={0x16c0, 0x9, 0x0, 0x1, [@m_xt={0x11c, 0x20, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0xc7, 0x6, "05b3613fd57f024a5e55158674e57f5790659b0f5bea3934f07980cb0e51cb7dbd0f6ec0ec6f5f6ef5166003242e13abe89b935b5b2e6a634f6a049cffbad88a45e9bf0c2688251f8dc48ace7aabaf21e93e2cca30d9ea13c5cfe122ec3e82e08ffd398aac214e2e703ebdd351aaaf17352d26b5be82ecb1acb96e290da53906f1f01627a9cd75ba61c4653a527e4b4a705a1b6f551e4cb65e5972de828311e6cbabb4e1413d07ee98f6a4f1f6a7b19911f1690ea92c49f635dbecb6757264f027bb4e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x13c, 0x14, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1, 0x8}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x3, 0x7, 0x9, 0xffffffff}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0x3}}]}, {0xbf, 0x6, "2f75cca4df701777041140ae4859c1d9fac62f40c6b5ad0f6826a6293d5b596cd5ef4ab56d0e4922b67344b4b1229f3a981b3521c2969c6fefe72068b94c93e06b785d098bfd336b3acfa09b8fbeb62cc195677b6363106eff9dfa2ce052fcb02b39e9b3259bfd311a8c484f6ccc7f5385a26e4e30e795b192953274360824389c880722104c213210cd4a2d6ec0cef2a9786f1cafa471643708e2f5211fc9868e5a682439c13a5c167324912e4ab863e899b4d549eda5773ff770"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_ife={0x12c, 0x8, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0xf9, 0x6, "f78b5d8468d013e3691cc334fb1fb94680bb6133a46339ac1b45db355d3fccce126d50c91e2d4f447efa68027f858bc6339c29c87165527858b9699197eace15cbad17e9f189dabc89e605aba92c4a4485fdac827d892a1adda9d1796759f1e36f4edbc9a47d7c93823dd571531b079f10a256cc9c23654c30ce05114269e7758773b15b18bb8789302410f62fce762182f3e748eeaea1d6010bc49648001bdeb33004c80d35839758618f318fe9b135a41ae9a3e897ffd5ab5c1b22a6df1e046ab905e3aea3f875aaeefabb80f60465537b6115e3d8e407a5f668db3efee923374709395ead1c31bee47b1b7a95d8721005ec619d"}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}, @m_mirred={0x1050, 0xb, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x0, 0x7, 0xffffffae, 0x72d}, 0x4}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0x1cc, 0x14, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x0, 0x6, 0xfffffffe}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x0, 0x6, 0xfffffff8, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x40, 0x5, 0x100, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x7f, 0x20000000, 0x1ff, 0x7}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0x8, 0x7, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x7fff, 0x5, 0x6, 0x3}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x5, 0x7, 0x57, 0x81}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x6, 0xfffffffffffffffc, 0xffffffff, 0x3}, 0x1}}]}, {0x9e, 0x6, "9026e4e502409d1fa5e73301a7b7aee9832095f656b52eda0a60c848ed05fa956ea2f51303665312bfedd244ee28db2c67556b50d9f81e61eefe96f35ba4c50b168be82bb36052ce500bbd1c6523575afeae64c64e6bd616b5d947619f29107c089f01fe52634a0fa6ea2571ec63c265bc06c5165b20a27ee76817aaa9ec21f5d98b01f343c94cca78ef02f88c5c00adb7c58e88db410b0b2884"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0x84, 0x7, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @remote}}]}, {0x20, 0x6, "448aef1b9b4c505eece8e89efb322a604d5463b80c22bdda471fb7a0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x98, 0xe, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x96, 0x3, 0xffffffffffffffff, 0x400, 0x6}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x2, 0x2, 0xa, 0xfa9b}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6ca}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x80000001}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x80000001}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2a773250, 0x0, 0x5, 0x0, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x16b68}, @TCA_FLOW_EMATCHES={0x60, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x5, 0x2, 0x2}, {0x8, 0x8, 0x1, "60f8f7d151ef43e4"}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x7, 0x2, 0x5}, {0x4, 0x2, 0x0, 'Vc'}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xa, 0x7, 0x4}, {{0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7f, 0x8, 0xfffa}, {0x1, 0x4, 0x1}}}]}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_MASK={0x8, 0x6, 0x7}, @TCA_FLOW_MASK={0x8}, @TCA_FLOW_ACT={0xeac, 0x9, 0x0, 0x1, [@m_nat={0x130, 0x17, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfa3, 0x5804e574, 0x7, 0x40bd, 0x61e}, @remote, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x47fff, 0x10000000, 0xc05, 0x7}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x1}}]}, {0xb6, 0x6, "eefa69958fcd17771f96b9c9d9a36cd5f0fd519647525a5762c285644f66ff996981e4c5de2f63a11e10164158428d8879287a567923384ec8ad416caaeb20a12a8076b27c54012bc02c7a4cb4131de54d6cbda400a2d7b112989550411d4efe9690e4b9be687814f5a1464dad8130837ab67ebfef058175c704b1778ff75152cd8840be25ec5fba16727bae1a99a3c1ec83d26495f1ddc0ba01336e6e518f4ce436d7be419ae9892373f3a4d67a9805d322"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x11c, 0x1d, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x7, 0xe, 0xa}, 0x69}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd5e, 0x1, 0x3, 0x1, 0xb}, 0xe}}]}, {0xb5, 0x6, "dc66be532eb0e7ab17c0e85a483e8e0c313dde139dc6a11ba98f21264b430f26c125c1ef124346a3871d46cfc652139b64552f3eb404b20b245fc1150b70fee0e279571f78292c26b145d0ea6b24d3df3297a2e6ce3c48a18382646f8595a792d2c3a64649a20973d4e6b73c30d76f36a6814ea778864a044092516f0a9daf269b501f9f712fe8ea6c36e5d3f675cab9eb277287421567c527e74c007be3b4f20f9ee6bcce972dcd4bbe53d184fe4e6cb5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0xc8, 0x1c, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0x0, 0x4aea, 0x0, 0x8, 0x4}, 0xc}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}]}, {0x6f, 0x6, "d9c9f09ac92dc40341983ace70a027291499ffb4bc2ed71e8696d1028f25b7298115223bbbe5a7f251a77d2b68093833d1144cdd82c388f8bcbe5300d7669b45c221de87d7c32c960ec718d5898eed436f0487e79e9ca60e162ebefefaca84ff3ef67349d14f23ece666a9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x16c, 0x7, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xff}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x10000, 0xe, 0xfffffff8, 0x3}}]}, {0xfd, 0x6, "26b6af630d771de33f725fc067d85723e1f96d202a4df4ed36933d238a2ca0e05e7ce18eea958e9d69676585b147c74003522af020892913654e742623a9ab6c8447a076ea07733a95e45ea550e001dfd45ab62552a1581a3b8d8014063a82e0206fcb684a794f1297ac7a46a68a1c9dac13d361ed0022b1212ae9bc5942622428f24770812c872fefe6e81de1070275a60229cb83673b737cf48975293678b4b18d709a4a73a836e5d16bfdf38adb50bc240183d949f16e9cca99ef920b52b50ee8abfc3e5af57a9058474e74b45414a2166d36d785ff3d3285bcb4969e8f4089773c579537b8840e6152b4fb815d68a697ba7ebdc0f61f9f"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_simple={0xc4, 0x5, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '('}, @TCA_DEF_PARMS={0x18, 0x2, {0x101, 0x0, 0x7, 0x6, 0x5}}, @TCA_DEF_DATA={0xb, 0x3, 'flower\x00'}]}, {0x6b, 0x6, "3bee480b746454fecc7af59adf8816e5fd7127eeeb3d1da5cb30bb97035b2bb00f3ccbf790c215837fda5b31e9899697e9e5bde10521024f589f048303afca0b9d183a4e47c570770b247706fd8ea1c671927d69327bef53f929746e28fa5fc0bd36590edf420c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x21c, 0x19, 0x0, 0x0, {{0x7}, {0x1d0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xbe, 0x6, {0x0, 'security\x00', 0x93, 0x0, "4da94132f25f5e822861a7d16c101a13e4ea15469eda355ef548c6cb471b5f831479b62113f922307a4826f9030b88cba426b4121052d033a56bc1580c044b60b4b4f368caadb8f7b28ff58e7b0a95ddf363a93a0d49f1bb5a88b35c624faf6b559930c5809b08c4dba5f8880b488a749da8a261022965dc958ee97fe3295ad91991a5b463bb3e56feacce8bf4da6559031e9af4"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x2a, 0x6, {0xff80, 'security\x00', 0x81, 0xfc00}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x3e, 0x6, {0x5, 'mangle\x00', 0xc4, 0xc83, "c49e1875c3403508594248cf736aada3df101cfe"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x4000000}, @TCA_IPT_TARG={0x5b, 0x6, {0x3, 'nat\x00', 0x6, 0x1732, "744f7d9645c10d2f7df7c19d86e90c5f82c5e3b93a1faa5e69136340b030ed3e6230a50ae55dd0db6cd27462c64caeb740"}}]}, {0x25, 0x6, "9d9a9490a43eccc851b2f78b43aa3d25a4762afab6ba74e39b9b59447c5bd9233b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x134, 0x1, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0xbc64, 0x6, 0x3ff, 0xea}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x42}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff, 0xc}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x14, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}]}, {0xbf, 0x6, "47b989456abadbf3270ad814eb89075b1c3094333386ef071b3731141e71ffe208741f5d96f990f16a253fdbfe35f6f7eb36906b99e6ff6dad36011d4ecb3c6859a3644d1ae6d715c04b9e947a7e7fb30ec913b89a68adf302491e8a4584e1e899a23cb790821ac315ee7a72f7a0902f8ca0ed4b6e97bc56a6b1bd9df8c0f6c24dcc8da9426cb0e211f9be11c977da8e4b3de3b9e21a79ddce676e437ea2a17b0cbd3662c2961673d3a10cbbcd4ab14df716c2754fd4d8867fe1d9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_csum={0x11c, 0x14, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1, 0xf762ca838f977c66, 0x9, 0x4}, 0x6a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xbaa1, 0x1ff, 0x6, 0x6b8df251, 0x8001}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x343781d, 0x3, 0x10000000, 0x5, 0x80000001}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6b, 0x80000001, 0x3, 0x100, 0x7}, 0x7f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x698f, 0xc32, 0x6, 0x6}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xffff5940, 0x5, 0x2, 0xd}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff9, 0xc0, 0x8, 0x401, 0x4f}, 0x71}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x10000007, 0x1, 0x6}, 0x1c}}]}, {0x10, 0x6, "3d3618a5f3a280399db55ef0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xa0, 0x13, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x17, 0x3, './binderfs/binder0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6d2, 0x4, 0x2, 0x72}}]}, {0x42, 0x6, "0cf9caebb4eab6597593fed54a36bbd3ffb8d7bc318e4cc2c8d4a6ea8898ea30d35b7a847bc8845488690b6e3731f505f80f4a3acd06e43cc33b03ab3a8d"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_police={0x458, 0x1e, 0x0, 0x0, {{0xb}, {0x42c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x65, 0x8000, 0x200, 0xfffffffe, 0x7fff, 0x44f, 0x5, 0x0, 0xfb5b, 0x6, 0x401, 0x6, 0x1, 0x9, 0x0, 0xd860, 0xd, 0x4, 0x7, 0xffffffff, 0x9, 0x9, 0x1, 0x2, 0x2, 0x6, 0x8, 0x6, 0x9, 0x3, 0xa, 0x6, 0x2, 0xfffffff9, 0x6, 0xa, 0x5, 0x8, 0x8, 0x7f, 0x5, 0x2, 0x7, 0x4, 0x0, 0x9, 0x0, 0x29, 0x80, 0x53c, 0x9, 0x8000, 0x4, 0xfffffff9, 0x8, 0x3ff, 0x9, 0xffffffff, 0x8, 0x2, 0x6, 0x2, 0x96, 0xb, 0x8, 0x4, 0x9, 0x40000, 0x7, 0x40, 0x8, 0x9, 0x48, 0x4, 0x2, 0x4, 0x0, 0x398, 0xd, 0x81, 0xe, 0x91b, 0x2, 0x7, 0x81, 0x2, 0x400, 0xfffffffd, 0x5, 0x7, 0xffffffff, 0xfffffffd, 0x7, 0x8000, 0x7225, 0xff, 0x7, 0xbb, 0x0, 0x10000000, 0x4, 0x7, 0x7, 0x3, 0x5, 0xd, 0x4, 0x6, 0x81, 0x6, 0x7e5, 0x10000, 0x2, 0x4, 0xc00000, 0x6, 0x4, 0x4, 0x0, 0x9, 0x5, 0x7ff, 0x66c, 0x0, 0x200, 0x9b, 0x8, 0x10, 0x7, 0x3, 0x2, 0x3, 0x2, 0x4, 0x4d1, 0x8, 0x2, 0x89c8, 0x0, 0x80, 0x5, 0x0, 0x7, 0x3, 0xfffffc01, 0x800, 0xd, 0x3, 0xb, 0x0, 0x0, 0x2, 0x2, 0xc3, 0xffff8000, 0x5, 0x8, 0x3157, 0x7fff, 0x6, 0x8, 0x1ff, 0x200, 0xffffffff, 0x8, 0x200, 0x7fffffff, 0x8, 0x4, 0x2, 0x2, 0xff, 0x5, 0x9, 0x3, 0xb6, 0x9, 0x3, 0x74, 0x1ff, 0x4b0e, 0x0, 0x8, 0x8, 0x418a, 0x5, 0x5, 0x2, 0x80000000, 0x7ff, 0x9, 0x9, 0x2, 0xc, 0x2, 0x54822000, 0x4, 0x1, 0x9, 0x9, 0x32ed, 0x1, 0x6, 0xf9a, 0x6, 0x2, 0x3ff, 0xffffffff, 0x7f, 0x800, 0x4, 0x3, 0x0, 0xfffeffff, 0x8, 0xfff, 0xf5, 0x1, 0x81, 0x8, 0x31d3aef4, 0x3, 0xe, 0x6, 0x9, 0x0, 0xf9, 0x4a9a8c29, 0xd78f, 0x3, 0x3, 0xffffff09, 0x6, 0x7f, 0x38f1456a, 0x5, 0xfffffffd, 0x3, 0x7, 0xa, 0x8001, 0x2a, 0x8, 0x5f9cb127, 0x1, 0x0, 0x1, 0x1, 0x7ff, 0x7fff, 0x4, 0x7fffffff, 0x4, 0xfff, 0x2, 0x4]}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x6}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x1a8, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x3}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0x7}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xfff3}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0x6}}, @TCA_MATCHALL_ACT={0x184, 0x2, [@m_vlan={0x180, 0x12, 0x0, 0x0, {{0x9}, {0xa8, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x800, 0x0, 0x0, 0xffffffff}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x6, 0x4, 0x1ff, 0x8}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xbde}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x3aa}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x401, 0x3, 0x2, 0x10000, 0x6}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xffff5126, 0x16b, 0xffffffffffffffff, 0x8}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x80, 0x9, 0x3, 0x80000001, 0x7fffffff}, 0x2}}]}, {0xae, 0x6, "3d82f9ccd64affb0f38e742c3c17bee8a933fed31ecab0c4c0767d05d785b375910ebef7c65e43d2bec4905b64f45797b65435248f29a0f67b42a4a5d00a44d46415802cee700994fd36049dc15b1304b8371b1cbf53fd011840d27c103ceb074807f23c7517a761659272676c1881878526ef90e416503866b64dd2b931e6471111cc2cd12fcc5856f0100f9dfe666fd1556113759c2ff312a607a477fccd9a230d4db422949439f641"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x27e8}}, 0x20004800)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004040)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8004, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @remote}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r5, 0x0)
r6 = socket(0xa, 0x3, 0xff)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @loopback, 0xffffcd0b}, 0x1c)
sendmsg$unix(r6, &(0x7f0000001680)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000180)="655be7c09841f6a9e16c7f5cda3a2f5af70a1666e57ab0ee706e8c4dd4a39b587fbe9e11185603f7", 0x28}], 0x1, 0x0, 0x0, 0x40051}, 0x2)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001900010000000000fbdbdf250a0109b23411e9e300c5d97b2fb25ba2ca44ce9094"], 0x30}, 0x1, 0x0, 0x0, 0x45}, 0x0)
io_setup(0x2279, &(0x7f0000000280))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))

10m31.994803151s ago: executing program 2 (id=2404):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000740), 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc25c4111, &(0x7f0000000780)={0x3, [[0x9, 0xeb38, 0x9, 0x16, 0x3b33, 0x200, 0xb270], [0x1, 0x5, 0x9, 0x80000000, 0x9, 0xc, 0x2], [0x2, 0x2c, 0x4, 0x9, 0x1, 0xb, 0x7f]], '\x00', [{0x3, 0x8}, {0x5, 0xfffffff3}, {0x9, 0x7, 0x1, 0x1, 0x0, 0x1}, {0x3, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x10, 0x0, 0x1, 0x1}, {0x9, 0x6, 0x1, 0x0, 0x1}, {0x0, 0x9, 0x0, 0x0, 0x1}, {0x8, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x401, 0x1, 0x1, 0x1}, {0x2, 0x791, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x1000, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x7, 0x1, 0x1, 0x0, 0x1}], '\x00', 0x9e})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0)
recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd)
close(r2)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x4c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00')
pread64(r4, &(0x7f0000000040)=""/4096, 0x1000, 0x7ffffffffffff8)
ioctl$USBDEVFS_BULK(r4, 0xc0105502, &(0x7f00000004c0)={{{0x9, 0x1}}, 0xf5, 0x6, &(0x7f0000000380)="787e7abfd6519e19267835b7f36b0654d9864ed74c3b9cc36b7dbc9a5996b62cb6d31f15e42eb5b409b507c0262cc581765549b7bc1dd7806d4736ded50388114c6391005000306d7cc6eb705fae367d10a820f2666b5daaefdfb2b16486ad0d900e41cde3feb950454add2d806567c97a550883a3cb5b46bb75a42a5f5c68a84fb118784f61e614f34d658456ab186d7fe868298d0f17b917d6f5813aa0bb5cd942b182c5dbd59a0a1e6fd03414c601b0a19748988391bd402b8d850c1605bef2a1a817f32e4d3a7652d4a3673b0b8f08d7dae8adf897b096c0dbc0067746fe0a13b7a9b4a5d30d19379cbd506a73d1cbac9ed6b3"})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@newtclass={0x74, 0x28, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x9, 0x9}, {0x8, 0xffe0}, {0xb, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x91, 0x1}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3}}}, @tclass_kind_options=@c_prio={0x9}]}, 0x74}, 0x1, 0x0, 0x0, 0x884}, 0x4)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0)
fsetxattr$security_ima(r6, &(0x7f0000000080), &(0x7f0000000100)=@ng={0x4, 0x7}, 0x2, 0x1)
ioctl$BTRFS_IOC_GET_FEATURES(r6, 0x80189439, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80042, 0x0)
r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x4001015)
ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd16c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x7fff]}})
r9 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r9, 0xc06864b8, &(0x7f0000000580)={0x0, 0x15bd, 0x81, 0x20203843, 0x0, [0x2]})
r10 = dup(r8)
bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$UHID_INPUT(r10, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38)
ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r10, 0x0, 0xfefff000})

10m31.966383812s ago: executing program 2 (id=2405):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="86336d70b741f19e67e98b4015e3b0384d86a1ce9ae636554ebc9bd7aaf9d086e30b00"/44, 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="60f534fce4d72e7a05498492f586136f6959a01cd2a4c9be7dc5", 0x1a}], 0x1}}], 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @pic={0x74, 0x86, 0x79, 0x45, 0x7f, 0x80, 0x1, 0x4, 0x81, 0xa, 0x3, 0x9, 0x7, 0x3, 0x9, 0x9}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]})

10m31.844650548s ago: executing program 2 (id=2406):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) (fail_nth: 7)

10m31.647396359s ago: executing program 2 (id=2407):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = io_uring_setup(0x30df, &(0x7f0000000000)={0x0, 0x55d0, 0x800, 0x0, 0x1d})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f00000000c0)=""/19, 0x13}], 0x2}}], 0x2, 0x60, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x0, 0x6, 0x9a6, 0x8, 0x8})
r5 = accept4(r1, 0x0, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), r5)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', <r9=>0x0})
sendmsg$nl_route(r7, 0x0, 0x20008840)
r10 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x4, 0x1, 0x1}}}}]}, 0x40}}, 0x4000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r11=>0x0})
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r6, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x10}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r9}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r11}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000)
pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000000c0)="97", 0x1}], 0x1, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000340)={'vcan0\x00'})
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4)
sendto$unix(r5, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

10m31.549620176s ago: executing program 2 (id=2409):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0xf0ff, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

10m31.477278058s ago: executing program 2 (id=2411):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
pipe2$watch_queue(0x0, 0x80)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x278, 0x128, 0x0, 0x148, 0x128, 0x148, 0x300, 0x240, 0x240, 0x300, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'bond_slave_1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x9e4b, 0x8000, 0x0, 0x0, 0xed, 0x7}, {0x4}}}, @common=@unspec=@connmark={{0x30}, {0xfffffffc, 0x8}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xa, 0x3, 0x8, 0x1}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'veth0_virt_wifi\x00', {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000400)={0x2, 0x7fff, {0xffffffffffffffff}, {0xee01}, 0x1, 0x25480c01})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYRES8=r1], &(0x7f0000000040)='GPL\x00', 0x66c, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r3}, 0x10)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x10, @scatter={0x1, 0xcc, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/210, 0xd2}]}, &(0x7f0000000240)="128d7acf0800", 0x0, 0x0, 0x0, 0xffffffff, 0x0})
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r4}, 0x18)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
accept4(r2, 0x0, 0x0, 0x800)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x804)

10m16.180044597s ago: executing program 34 (id=2411):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
pipe2$watch_queue(0x0, 0x80)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x278, 0x128, 0x0, 0x148, 0x128, 0x148, 0x300, 0x240, 0x240, 0x300, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'bond_slave_1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x9e4b, 0x8000, 0x0, 0x0, 0xed, 0x7}, {0x4}}}, @common=@unspec=@connmark={{0x30}, {0xfffffffc, 0x8}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xa, 0x3, 0x8, 0x1}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'veth0_virt_wifi\x00', {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000400)={0x2, 0x7fff, {0xffffffffffffffff}, {0xee01}, 0x1, 0x25480c01})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYRES8=r1], &(0x7f0000000040)='GPL\x00', 0x66c, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r3}, 0x10)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x10, @scatter={0x1, 0xcc, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/210, 0xd2}]}, &(0x7f0000000240)="128d7acf0800", 0x0, 0x0, 0x0, 0xffffffff, 0x0})
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r4}, 0x18)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
accept4(r2, 0x0, 0x0, 0x800)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x804)

8.46853305s ago: executing program 6 (id=5483):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
r1 = socket$inet6(0xa, 0x3, 0x87)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_tracing={0x1a, 0xf, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x4, 0x0, 0x6, 0xf}, 0x10, 0x1a01c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1e}, 0x94)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, 0x0)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r8}, 0x18)
connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'})
ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000280)={r7, r7, 0x1, 0x0, 0x0, 0x9, 0x1, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x800)

7.611893352s ago: executing program 6 (id=5484):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000003c0)="b3eb21a5f90fe224ec293927d54e7986cb749ab6e79eeadb8d281e9c9f6baaec801b489a63a18dc5b8e122952238fa7383a6dc32891ee479a8337f76cf6da274fc444ae18942d3ba70170ebc032171348e0753c1", 0x54}, {&(0x7f0000000440)="632a39289910d35886db2f4805d13d142590994b88bb03c209f367", 0x1b}], 0x2, 0x4, 0x9)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4})
socket$netlink(0x10, 0x3, 0x15)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil)
shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
lseek(r7, 0x289e0cb5, 0x0)

7.270633818s ago: executing program 4 (id=5487):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usbip_server_init(0x1)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x38}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB], 0x34}}, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r8, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00', <r9=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000010001fff00000000000000000006", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r9, @ANYBLOB="a1c50602dd3d7c6622503d2b887e60756f81a58d3acba4be25bfcb4ef0bbb90bf6063a00a4"], 0x40}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

6.419646148s ago: executing program 6 (id=5488):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r2, 0x0, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100), 0x10)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r4 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffc, 0x6, 0x4, @buffer={0x0, 0x1000, &(0x7f0000001d80)=""/4096}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x0, 0x30, 0x0, 0x0})
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r5, r5, &(0x7f0000000080), 0x7f03)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_open_dev$video(0x0, 0x3, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)

5.801221289s ago: executing program 4 (id=5493):
syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201)

5.739309485s ago: executing program 4 (id=5494):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000fbffffff200000000300000085000000a0000000850000001100000095000000000000001a536fb4f8eb900d937f7cd889049b38d5018a43a1215e982c336e4171780605483b6ee30b5c8282cc16b631b33dc8bbcd884dedec8a97a3d17c4f8a858779ba7c296a21"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008d804dd0000000000000109022400010000a008090400fe010300010009"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0xfffffffc, 0xfffffffffffffffd, 0x0, 0x3, 0xfa11, 0xffffffff}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0)
write$sndseq(r4, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @time={0x80000000, 0xf}, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {0x0, 0x8}, {}, @control}, {0x0, 0x20, 0x0, 0x0, @tick=0x5, {}, {0x0, 0xbf}, @connect={{}, {0x0, 0x45}}}], 0x54)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119)
syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
pipe2$watch_queue(&(0x7f00000000c0), 0x80)
keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='ed:cb2e')
r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x185802, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800020041ffffff00000000080000009111b800000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r5], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x200000)
syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400308"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r6 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
pwritev2(r6, &(0x7f00000000c0)=[{&(0x7f00000001c0)="3ee4d7", 0x3}], 0x1, 0x4, 0x2, 0x0)
socket$kcm(0x29, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000020756c2500000000002020207b1af8ff00000008bfa10000000300000000000000ffffffb702000008000000b70300000104000085efffff05000000183000000200"/80], &(0x7f0000000000)='GPL\x00', 0x2, 0x1000, &(0x7f0000001080)=""/4096, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x1, 0x1, 0x1], &(0x7f0000000c80)=[{0x4, 0x1, 0x1, 0x5}], 0x10, 0x3}, 0x94)

5.010530396s ago: executing program 6 (id=5503):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
r1 = socket$inet6(0xa, 0x3, 0x87)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_tracing={0x1a, 0xf, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x4, 0x0, 0x6, 0xf}, 0x10, 0x1a01c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1e}, 0x94)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, 0x0)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r8}, 0x18)
connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'})
ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000280)={r7, r7, 0x1, 0x0, 0x0, 0x9, 0x1, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x800)

4.151174199s ago: executing program 6 (id=5497):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4})
r4 = socket$netlink(0x10, 0x3, 0x15)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r6, 0x0, 0x1}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil)
shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
lseek(r8, 0x289e0cb5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000340)='qgroup_update_reserve\x00', r4, 0x0, 0x1}, 0x18)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x810)

3.93329181s ago: executing program 3 (id=5498):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
r1 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251b", 0x4, 0xfffffffffffffffb)
keyctl$revoke(0x3, r1)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040)=0x6, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
read$FUSE(0xffffffffffffffff, &(0x7f00000009c0)={0x2020}, 0x2020)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)
sched_getattr(0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0)
unshare(0x40020000)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10)
sendto$inet(r2, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d828553e1719de91aa29cb5bf187a0162d50e234b6207725486c9e828d756ff9b6d4f5c4960469dd3a48b4e525f0cbf7158f95d603a", 0xf1, 0x4040004, 0x0, 0x0)

3.875735968s ago: executing program 5 (id=5499):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0)
ioctl$TIOCMGET(r0, 0x5415, 0x0) (async, rerun: 64)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64)
syz_clone3(&(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, &(0x7f0000002340)=[0x0], 0x1}, 0x58) (async)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xfffffffffffffffd, 0x2)
syz_clone(0x2228000, 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x200000, 0x0)
r1 = socket$key(0xf, 0x3, 0x2) (async, rerun: 32)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc}, 0x1c) (async)
listen(r2, 0x0) (async)
syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d2b653e0c9d32072c19dd6ca814b7d7b"}]}}}}}}}}, 0x0) (async, rerun: 64)
sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018", @ANYRES8=r0, @ANYRESDEC], 0x88}}, 0x4004000) (rerun: 64)
socket$inet6(0xa, 0x80800, 0x200) (async, rerun: 64)
r3 = openat$iommufd(0xffffff9c, &(0x7f00000000c0), 0x400040, 0x0) (async, rerun: 64)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r4=>0x0})
r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000001c0)={0x2, @vbi}) (async, rerun: 64)
r6 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) (rerun: 64)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf0eb}], 0x1) (async)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f0000000200)={0x1, [0x0]}) (async, rerun: 64)
sendto$inet(r6, &(0x7f0000000240)="c70b48a1f4cb376ac509337ddbb75bc280b4defc07f5fc289a9347caa709c10529df4fd14c0560aec3730c1d1a8587fc6762e9b14c599a74292774d8", 0x3c, 0x20008000, &(0x7f0000000280)={0x2, 0x4e24, @broadcast}, 0x10) (async, rerun: 64)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x1, r4, 0x0, 0x9, 0x55})

3.637943286s ago: executing program 5 (id=5500):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
r2 = mq_open(&(0x7f0000000680)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+\xbb \xcb\be\xf4\x87\xedl\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\xb0\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x9avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3M\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xc1m\x17\b\xe4\xb1b\x13\xc74Z#E\x91\xbe\x93\x0f\xaf\xa7\xf9\"\x02\xb2\x12\xc5A\x1e\xe2\xe1\x13\xfey8\xe1\xa8Zu\xf1\x0f\x1dC)T)Z\xec\x1d_)?\xbab\xda\xec\x81\xf7\x97\x1f\xc5\xa1T\xb9\x9e\xa3\xe1\x901[\xfa_Y\xa2\x1f\x1c\x7f\xf0\x0eW(\xdf\xc2\xc0p\xb2\xe4\xe4\xcd\'\x03\xaf\x8d\x1c_\xde\xa6\x9cV\x98\x06\x1e4R\xa0\xc9\xcfC\xf8\xaf\x14P\x15]\xa9#/w\x0elPo\x9c\x8c$\xb2t\b\x9atA1\xa6y\xd0\x19\x9e\x96\xaa\xb5\t\xe6cR~?\xb4T\xc0\xa1\xb2\x8a\xef\xc2|\x18p\x1f\xb7\xf5\xb5\x11{h\x8e\xab\b\x8e)\xc1\x12N\xea\x1a\x9e\xcf\x1f\xe5\xac\x9d\xb0?\xe1*D\xe3\a\x9b\x1el\xa6\xf2.VA\xc5\xef\x8a\xf2R\xd0\x9cu\xdat.U\x8c\xc1m\x14S\x8c%ll\x01\x82\xcc\x88a,n\xf9\xd0F\\', 0x42, 0xa8, 0x0)
mq_notify(r2, 0x0)

3.537787825s ago: executing program 5 (id=5501):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r2, 0x0, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100), 0x10)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r4 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffc, 0x6, 0x4, @buffer={0x0, 0x1000, &(0x7f0000001d80)=""/4096}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x0, 0x30, 0x0, 0x0})
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r5, r5, &(0x7f0000000080), 0x7f03)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_open_dev$video(0x0, 0x3, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)

2.978734055s ago: executing program 3 (id=5502):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usbip_server_init(0x1)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x38}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB], 0x34}}, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r8, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00', <r9=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000010001fff00000000000000000006", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r9, @ANYBLOB="a1c50602dd3d7c6622503d2b887e60756f81a58d3acba4be25bfcb4ef0bbb90bf6063a00a4"], 0x40}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

2.724086984s ago: executing program 4 (id=5504):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001ec0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x404c881)
close(r0)
socket$rds(0x15, 0x5, 0x0)

2.657006996s ago: executing program 5 (id=5505):
unshare(0x22020600)
unshare(0xc060080)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "7ee747104191b9db", "4f2ea38cdf597c597ae2238b7daf9958", "8f323727", "bb72dd54387863f2"}, 0x28)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7'])
chdir(&(0x7f0000000240)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xc)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x8000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000400))
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT, @ANYRES16=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x39}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
r5 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r5, &(0x7f0000000080)={0x11, 0x1a, 0x0, 0x1, 0x8, 0x6, @broadcast}, 0x14)
sendto$inet6(r3, &(0x7f00000002c0)="9e", 0x1, 0x10, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @local}, 0x1c)
listen(r0, 0x3)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f0000000180), 0x2ae, 0x0)

2.562429928s ago: executing program 5 (id=5506):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, 0x0, 0x0)
sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100), 0x10)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r4 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffc, 0x6, 0x4, @buffer={0x0, 0x1000, &(0x7f0000001d80)=""/4096}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x0, 0x30, 0x0, 0x0})
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r5, r5, &(0x7f0000000080), 0x7f03)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_open_dev$video(0x0, 0x3, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)

2.012168493s ago: executing program 6 (id=5507):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
socket$netlink(0x10, 0x3, 0x15)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000007e000000850000000e0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
clock_nanosleep(0x2, 0x1, &(0x7f0000000000), 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x40d5213120fe70bb)
syz_usbip_server_init(0x1)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x8, @remote}, 0x3)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket(0x3b, 0x3, 0x400)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
sendfile(r3, r4, 0x0, 0x106f)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0xba2, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0x5, 0x4})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="726177000000000000010000000000000000000000000000000000000000000000000000664717cf13829efadd416e78b01082fba1723496113f3045544f355998b07df8e9af6dd176ebf46e3984bcea38bc943a820a3cf7938481b102c864f336937d2592e0b52efa0be172116eba6341ba64a3f1a13d0e569517f96c086588d1f6c2ec30969aff7a594fc19e9800ef413032d4affe0643782151c01088aea1c832b15cc00f2fdf2284afab8e2f2ae51a3a6662132fb5c7a89824ea2754798a454d44dc436a27189c735d9cc38214b71de85d"], &(0x7f0000000080)=0x24)
ppoll(&(0x7f0000000300)=[{r5, 0x2007}], 0x1, 0x0, 0x0, 0x0)

1.950587637s ago: executing program 4 (id=5508):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket(0x1, 0x803, 0x0)
bind$unix(r4, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
r5 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8)
syz_io_uring_setup(0xddf, &(0x7f0000000300)={0x0, 0xd95f, 0x10100, 0x0, 0x242, 0x0, r5}, &(0x7f0000000100), &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x1010, r5, 0x0)
sendmmsg$unix(r4, &(0x7f0000009680)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x2, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8001, {0x0, 0x0, 0x0, r8, {0x7, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x4c004)

1.540213818s ago: executing program 3 (id=5509):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
ppoll(0x0, 0x0, &(0x7f0000002fc0)={0x7fffffffffffffff}, 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r2, &(0x7f0000000140)={0x1f, @none, 0x6}, 0xa)
bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r3 = io_uring_setup(0x485f, &(0x7f0000000280)={0x0, 0x3999, 0x1, 0x0, 0x2e7})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002"], 0x104}}, 0x0)
r5 = syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae, 0x0, r3}, &(0x7f0000000100)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000240)=0x5)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1})
setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000300)=0x1ff, 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x2b, 0xb, 0x70bd2a, 0x0, {0x5}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080c40)
io_uring_enter(r5, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140fa"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x4008891)

1.490780335s ago: executing program 3 (id=5510):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
r2 = mq_open(&(0x7f0000000680)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+\xbb \xcb\be\xf4\x87\xedl\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\xb0\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x9avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3M\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xc1m\x17\b\xe4\xb1b\x13\xc74Z#E\x91\xbe\x93\x0f\xaf\xa7\xf9\"\x02\xb2\x12\xc5A\x1e\xe2\xe1\x13\xfey8\xe1\xa8Zu\xf1\x0f\x1dC)T)Z\xec\x1d_)?\xbab\xda\xec\x81\xf7\x97\x1f\xc5\xa1T\xb9\x9e\xa3\xe1\x901[\xfa_Y\xa2\x1f\x1c\x7f\xf0\x0eW(\xdf\xc2\xc0p\xb2\xe4\xe4\xcd\'\x03\xaf\x8d\x1c_\xde\xa6\x9cV\x98\x06\x1e4R\xa0\xc9\xcfC\xf8\xaf\x14P\x15]\xa9#/w\x0elPo\x9c\x8c$\xb2t\b\x9atA1\xa6y\xd0\x19\x9e\x96\xaa\xb5\t\xe6cR~?\xb4T\xc0\xa1\xb2\x8a\xef\xc2|\x18p\x1f\xb7\xf5\xb5\x11{h\x8e\xab\b\x8e)\xc1\x12N\xea\x1a\x9e\xcf\x1f\xe5\xac\x9d\xb0?\xe1*D\xe3\a\x9b\x1el\xa6\xf2.VA\xc5\xef\x8a\xf2R\xd0\x9cu\xdat.U\x8c\xc1m\x14S\x8c%ll\x01\x82\xcc\x88a,n\xf9\xd0F\\', 0x42, 0xa8, 0x0)
mq_notify(r2, 0x0)

1.425044866s ago: executing program 3 (id=5511):
socket$inet6_tcp(0xa, 0x1, 0x0)
set_mempolicy(0x1, &(0x7f0000000000)=0x8, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x85)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r1 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0)
close(0xffffffffffffffff)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140))
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x5)
writev(r3, &(0x7f0000000040), 0x0)
r4 = openat$apparmor_task_exec(0xffffff9c, &(0x7f0000000200), 0x2, 0x0)
pread64(r4, 0x0, 0x0, 0x9d)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000008180)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000440)={0x87, 0x0, r5, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3)
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00')
getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8)
read$FUSE(r1, &(0x7f000000a1c0)={0x2020}, 0xff53)
syz_open_dev$loop(&(0x7f0000000240), 0x80000001, 0x100840)
io_setup(0x8, &(0x7f0000004200))

2.940018ms ago: executing program 5 (id=5512):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
r1 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251b", 0x4, 0xfffffffffffffffb)
keyctl$revoke(0x3, r1)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040)=0x6, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
read$FUSE(0xffffffffffffffff, &(0x7f00000009c0)={0x2020}, 0x2020)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)
sched_getattr(0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0)
unshare(0x40020000)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10)
sendto$inet(r2, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d828553e1719de91aa29cb5bf187a0162d50e234b6207725486c9e828d756ff9b6d4f5c4960469dd3a48b4e525f0cbf7158f95d603a", 0xf1, 0x4040004, 0x0, 0x0)

2.494256ms ago: executing program 3 (id=5513):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000fbffffff200000000300000085000000a0000000850000001100000095000000000000001a536fb4f8eb900d937f7cd889049b38d5018a43a1215e982c336e4171780605483b6ee30b5c8282cc16b631b33dc8bbcd884dedec8a97a3d17c4f8a858779ba7c296a21"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008d804dd0000000000000109022400010000a008090400fe010300010009"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0xfffffffc, 0xfffffffffffffffd, 0x0, 0x3, 0xfa11, 0xffffffff}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0)
write$sndseq(r4, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @time={0x80000000, 0xf}, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {0x0, 0x8}, {}, @control}, {0x0, 0x20, 0x0, 0x0, @tick=0x5, {}, {0x0, 0xbf}, @connect={{}, {0x0, 0x45}}}], 0x54)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119)
syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
pipe2$watch_queue(&(0x7f00000000c0), 0x80)
keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='ed:cb2e')
r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x185802, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800020041ffffff00000000080000009111b800000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r5], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x200000)
syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400308"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r6 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
pwritev2(r6, &(0x7f00000000c0)=[{&(0x7f00000001c0)="3ee4d7", 0x3}], 0x1, 0x4, 0x2, 0x0)
socket$kcm(0x29, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000020756c2500000000002020207b1af8ff00000008bfa10000000300000000000000ffffffb702000008000000b70300000104000085efffff05000000183000000200"/80], &(0x7f0000000000)='GPL\x00', 0x2, 0x1000, &(0x7f0000001080)=""/4096, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x1, 0x1, 0x1], &(0x7f0000000c80)=[{0x4, 0x1, 0x1, 0x5}], 0x10, 0x3}, 0x94)

0s ago: executing program 4 (id=5520):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000003c0)="b3eb21a5f90fe224ec293927d54e7986cb749ab6e79eeadb8d281e9c9f6baaec801b489a63a18dc5b8e122952238fa7383a6dc32891ee479a8337f76cf6da274fc444ae18942d3ba70170ebc032171348e0753c1", 0x54}, {&(0x7f0000000440)="632a39289910d35886db2f4805d13d142590994b88bb03c209f367", 0x1b}], 0x2, 0x4, 0x9)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4})
socket$netlink(0x10, 0x3, 0x15)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil)
shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
lseek(r7, 0x289e0cb5, 0x0)

kernel console output (not intermixed with test programs):

tdevsim6 netdevsim3: renamed from eth3
[  906.997759][T23422] 8021q: adding VLAN 0 to HW filter on device bond0
[  907.012419][T23422] 8021q: adding VLAN 0 to HW filter on device team0
[  907.019497][T19917] bridge0: port 1(bridge_slave_0) entered blocking state
[  907.021656][T19917] bridge0: port 1(bridge_slave_0) entered forwarding state
[  907.029264][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state
[  907.032054][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state
[  907.120969][ T5303] Bluetooth: hci4: command tx timeout
[  907.168308][T23422] 8021q: adding VLAN 0 to HW filter on device batadv0
[  907.321392][T23422] veth0_vlan: entered promiscuous mode
[  907.329687][T23422] veth1_vlan: entered promiscuous mode
[  907.351475][T23422] veth0_macvtap: entered promiscuous mode
[  907.357594][T23422] veth1_macvtap: entered promiscuous mode
[  907.367557][T23422] batman_adv: batadv0: Interface activated: batadv_slave_0
[  907.376520][T23422] batman_adv: batadv0: Interface activated: batadv_slave_1
[  907.395985][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  907.398951][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  907.403609][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  907.406646][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  907.455710][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  907.459118][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  907.473693][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  907.476984][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  907.785776][T23486] FAULT_INJECTION: forcing a failure.
[  907.785776][T23486] name failslab, interval 1, probability 0, space 0, times 0
[  907.789970][T23486] CPU: 2 UID: 0 PID: 23486 Comm: syz.6.4893 Not tainted syzkaller #0 PREEMPT(full) 
[  907.789994][T23486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  907.790005][T23486] Call Trace:
[  907.790012][T23486]  <TASK>
[  907.790019][T23486]  dump_stack_lvl+0x16c/0x1f0
[  907.790044][T23486]  should_fail_ex+0x512/0x640
[  907.790069][T23486]  ? __kmalloc_cache_noprof+0x5f/0x780
[  907.790106][T23486]  should_failslab+0xc2/0x120
[  907.790130][T23486]  __kmalloc_cache_noprof+0x72/0x780
[  907.790156][T23486]  ? __pfx___might_resched+0x10/0x10
[  907.790175][T23486]  ? vhost_task_create+0xe5/0x370
[  907.790200][T23486]  ? rcu_is_watching+0x12/0xc0
[  907.790219][T23486]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  907.790245][T23486]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  907.790266][T23486]  ? vhost_task_create+0xe5/0x370
[  907.790289][T23486]  vhost_task_create+0xe5/0x370
[  907.790313][T23486]  ? __pfx_vhost_task_create+0x10/0x10
[  907.790348][T23486]  ? __pfx_vhost_task_fn+0x10/0x10
[  907.790388][T23486]  kvm_mmu_post_init_vm+0x1b7/0x380
[  907.790408][T23486]  kvm_arch_vcpu_ioctl_run+0x66/0x1970
[  907.790428][T23486]  ? kvm_vcpu_ioctl+0x14c5/0x1690
[  907.790459][T23486]  kvm_vcpu_ioctl+0x5eb/0x1690
[  907.790487][T23486]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  907.790512][T23486]  ? tomoyo_path_number_perm+0x18d/0x580
[  907.790543][T23486]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  907.790597][T23486]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  907.790643][T23486]  ? do_vfs_ioctl+0x128/0x14f0
[  907.790669][T23486]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  907.790707][T23486]  kvm_vcpu_compat_ioctl+0x20f/0x3d0
[  907.790733][T23486]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  907.790758][T23486]  ? __fget_files+0x20e/0x3c0
[  907.790778][T23486]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  907.790801][T23486]  __ia32_compat_sys_ioctl+0x242/0x370
[  907.790844][T23486]  __do_fast_syscall_32+0x7c/0x300
[  907.790868][T23486]  do_fast_syscall_32+0x32/0x80
[  907.790888][T23486]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  907.790911][T23486] RIP: 0023:0xf70ed579
[  907.790924][T23486] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  907.790942][T23486] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  907.790959][T23486] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80
[  907.790969][T23486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  907.790978][T23486] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  907.790987][T23486] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  907.790997][T23486] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  907.791020][T23486]  </TASK>
[  908.020988][ T6022] usb 9-1: reset high-speed USB device number 59 using dummy_hcd
[  908.106387][T23499] program syz.6.4906 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  908.126185][T23502] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  908.497220][T23509] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  908.822453][ T5991] IPVS: starting estimator thread 0...
[  908.931837][T23516] IPVS: using max 41 ests per chain, 98400 per kthread
[  909.112188][T23531] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  909.200810][ T5303] Bluetooth: hci4: command tx timeout
[  909.530837][  T842] usb 9-1: USB disconnect, device number 59
[  910.042249][   T61] usb 10-1: new high-speed USB device number 41 using dummy_hcd
[  910.200690][   T61] usb 10-1: Using ep0 maxpacket: 8
[  910.218673][   T61] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  910.223163][   T61] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  910.230788][   T61] usb 10-1: config 0 interface 0 has no altsetting 0
[  910.233729][   T61] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  910.238495][   T61] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  910.261569][   T61] usb 10-1: config 0 descriptor??
[  910.797903][   T61] mcp2221 0003:04D8:00DD.003E: unknown main item tag 0x0
[  910.800126][   T61] mcp2221 0003:04D8:00DD.003E: unknown main item tag 0x0
[  910.810306][   T61] mcp2221 0003:04D8:00DD.003E: unknown main item tag 0x0
[  910.813571][   T61] mcp2221 0003:04D8:00DD.003E: unknown main item tag 0x0
[  910.816122][   T61] mcp2221 0003:04D8:00DD.003E: unknown main item tag 0x0
[  910.819000][   T61] mcp2221 0003:04D8:00DD.003E: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  911.280773][ T5303] Bluetooth: hci4: command tx timeout
[  912.070998][   T61] usb 10-1: reset high-speed USB device number 41 using dummy_hcd
[  912.559115][T23596] ata1.00: invalid cdb length 6
[  912.564248][T23596] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4934'.
[  912.611034][T23596] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4934'.
[  912.617954][T23596] batadv1: entered promiscuous mode
[  912.619776][T23596] batadv1: entered allmulticast mode
[  912.624206][T23596] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4934'.
[  912.635691][T23596] batadv2: entered promiscuous mode
[  912.637507][T23596] batadv2: entered allmulticast mode
[  913.362464][ T5303] Bluetooth: hci4: command tx timeout
[  913.611443][T22393] usb 10-1: USB disconnect, device number 41
[  913.784327][T23621] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  914.010993][T23626] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  914.013788][T23626] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  914.017410][T23626] vhci_hcd vhci_hcd.0: Device attached
[  914.130996][   T40] audit: type=1800 audit(1761185210.898:4864): pid=23626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4939" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  914.552200][ T5991] usb 44-1: SetAddress Request (30) to port 0
[  914.556906][ T5991] usb 44-1: new SuperSpeed USB device number 30 using vhci_hcd
[  914.583775][T23627] vhci_hcd: connection closed
[  914.588491][   T13] vhci_hcd: stop threads
[  914.591637][   T13] vhci_hcd: release socket
[  914.593135][   T13] vhci_hcd: disconnect device
[  914.770666][   T10] usb 11-1: new high-speed USB device number 44 using dummy_hcd
[  914.930730][   T10] usb 11-1: Using ep0 maxpacket: 8
[  914.933589][   T10] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  914.936850][   T10] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  914.939772][   T10] usb 11-1: config 0 interface 0 has no altsetting 0
[  914.941952][   T10] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  914.944603][   T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  914.948102][   T10] usb 11-1: config 0 descriptor??
[  915.444775][T23656] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  915.536390][   T10] mcp2221 0003:04D8:00DD.003F: unknown main item tag 0x0
[  915.538854][   T10] mcp2221 0003:04D8:00DD.003F: unknown main item tag 0x0
[  915.549719][   T10] mcp2221 0003:04D8:00DD.003F: unknown main item tag 0x0
[  915.552927][   T10] mcp2221 0003:04D8:00DD.003F: unknown main item tag 0x0
[  915.555685][   T10] mcp2221 0003:04D8:00DD.003F: unknown main item tag 0x0
[  915.559815][   T10] mcp2221 0003:04D8:00DD.003F: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0
[  916.146988][T23666] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  916.237077][   T40] audit: type=1326 audit(1761185212.998:4865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23668 comm="syz.4.4955" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f86579 code=0x0
[  916.910921][   T10] usb 11-1: reset high-speed USB device number 44 using dummy_hcd
[  917.160232][T23686] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  918.123103][T23717] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  918.410834][T22451] usb 11-1: USB disconnect, device number 44
[  918.547354][T23726] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  918.577702][T23728] netlink: 'syz.5.4972': attribute type 4 has an invalid length.
[  918.593763][T23728] netlink: 'syz.5.4972': attribute type 4 has an invalid length.
[  918.695897][   T40] audit: type=1326 audit(1761185215.458:4866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23733 comm="syz.3.4976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  918.703387][   T40] audit: type=1326 audit(1761185215.458:4867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23733 comm="syz.3.4976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  918.710235][   T40] audit: type=1326 audit(1761185215.458:4868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23733 comm="syz.3.4976" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  918.710263][   T40] audit: type=1326 audit(1761185215.458:4869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23733 comm="syz.3.4976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  918.710284][   T40] audit: type=1326 audit(1761185215.458:4870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23733 comm="syz.3.4976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  918.710305][   T40] audit: type=1326 audit(1761185215.458:4871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23733 comm="syz.3.4976" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  918.710326][   T40] audit: type=1326 audit(1761185215.458:4872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23733 comm="syz.3.4976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  918.710347][   T40] audit: type=1326 audit(1761185215.458:4873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23733 comm="syz.3.4976" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  918.890644][   T61] usb 11-1: new high-speed USB device number 45 using dummy_hcd
[  919.042144][   T61] usb 11-1: Using ep0 maxpacket: 8
[  919.045413][   T61] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  919.049778][   T61] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  919.053821][   T61] usb 11-1: config 0 interface 0 has no altsetting 0
[  919.056261][   T61] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  919.059920][   T61] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  919.065042][   T61] usb 11-1: config 0 descriptor??
[  919.587784][T23743] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  919.589907][T23743] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  919.593248][T23743] vhci_hcd vhci_hcd.0: Device attached
[  919.596927][   T61] mcp2221 0003:04D8:00DD.0040: unknown main item tag 0x0
[  919.599744][   T61] mcp2221 0003:04D8:00DD.0040: unknown main item tag 0x0
[  919.603091][   T61] mcp2221 0003:04D8:00DD.0040: unknown main item tag 0x0
[  919.605413][   T61] mcp2221 0003:04D8:00DD.0040: unknown main item tag 0x0
[  919.607709][   T61] mcp2221 0003:04D8:00DD.0040: unknown main item tag 0x0
[  919.610229][   T61] mcp2221 0003:04D8:00DD.0040: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0
[  919.617226][T23743] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4978'.
[  919.760812][ T5991] usb 44-1: device descriptor read/8, error -110
[  919.850822][T22451] usb 47-1: new low-speed USB device number 32 using vhci_hcd
[  920.260665][ T6022] usb 9-1: new high-speed USB device number 60 using dummy_hcd
[  920.410753][ T6022] usb 9-1: Using ep0 maxpacket: 32
[  920.415225][ T6022] usb 9-1: config index 0 descriptor too short (expected 29220, got 36)
[  920.418920][ T6022] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  920.422591][ T6022] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81
[  920.426473][ T6022] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  920.430725][ T6022] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  920.435303][ T6022] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024
[  920.439849][ T6022] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  920.442488][T23744] vhci_hcd: connection reset by peer
[  920.444126][ T6022] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  920.448215][   T72] vhci_hcd: stop threads
[  920.451147][ T6022] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  920.452570][   T72] vhci_hcd: release socket
[  920.456317][ T6022] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  920.457663][   T72] vhci_hcd: disconnect device
[  920.463522][ T6022] usb 9-1: config 0 descriptor??
[  920.465679][T23747] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  920.489914][ T5991] usb usb44-port1: attempt power cycle
[  920.673462][ T6022] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 60 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  920.851182][ T6530] usb 11-1: reset high-speed USB device number 45 using dummy_hcd
[  920.949054][ T6022] usb 9-1: USB disconnect, device number 60
[  920.952784][ T6022] usblp0: removed
[  921.131415][ T5991] usb usb44-port1: unable to enumerate USB device
[  921.566944][T23763] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  921.932035][T23768] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  921.992151][T23771] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  922.434000][T23780] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4987'.
[  922.471326][   T61] usb 11-1: USB disconnect, device number 45
[  922.960666][   T10] usb 9-1: new high-speed USB device number 61 using dummy_hcd
[  923.019664][T23800] syzkaller1: entered promiscuous mode
[  923.023021][T23800] syzkaller1: entered allmulticast mode
[  923.110838][   T10] usb 9-1: Using ep0 maxpacket: 8
[  923.117955][   T10] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  923.131952][   T10] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  923.136370][   T10] usb 9-1: config 0 interface 0 has no altsetting 0
[  923.139655][   T10] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  923.142804][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  923.146899][   T10] usb 9-1: config 0 descriptor??
[  923.665301][   T10] mcp2221 0003:04D8:00DD.0041: unknown main item tag 0x0
[  923.668161][   T10] mcp2221 0003:04D8:00DD.0041: unknown main item tag 0x0
[  923.670658][   T10] mcp2221 0003:04D8:00DD.0041: unknown main item tag 0x0
[  923.673045][   T10] mcp2221 0003:04D8:00DD.0041: unknown main item tag 0x0
[  923.675508][   T10] mcp2221 0003:04D8:00DD.0041: unknown main item tag 0x0
[  923.678656][   T10] mcp2221 0003:04D8:00DD.0041: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  923.871128][T23816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4999'.
[  923.873911][T23816] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4999'.
[  924.271240][T23824] futex_wake_op: syz.3.5001 tries to shift op by -1; fix this program
[  924.950848][T22451] vhci_hcd: vhci_device speed not set
[  924.952905][   T10] usb 9-1: reset high-speed USB device number 61 using dummy_hcd
[  924.976066][T23835] fuse: Unknown parameter '0x00000000000000040x000000000000000400000000000000000000'
[  925.342728][T23837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5005'.
[  925.372991][T23837] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  925.375491][T23837] IPv6: NLM_F_CREATE should be set when creating new route
[  925.378217][T23837] IPv6: NLM_F_CREATE should be set when creating new route
[  925.381385][T23837] IPv6: NLM_F_CREATE should be set when creating new route
[  925.597475][ T5991] libceph: connect (1)[c::]:6789 error -101
[  925.599424][ T5991] libceph: mon0 (1)[c::]:6789 connect error
[  925.637629][T23846] ceph: No mds server is up or the cluster is laggy
[  925.810665][T23854] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  925.812719][T23854] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  925.819981][T23854] vhci_hcd vhci_hcd.0: Device attached
[  925.943602][T23859] syz_tun: entered allmulticast mode
[  925.955476][T23859] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  925.958390][T23859] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  925.961414][T23859] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  925.964285][T23859] comedi comedi3: 8255: I/O port conflict (0xfff,4)
[  925.967077][T23859] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  925.970112][T23859] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  925.973284][T23859] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  925.976038][T23859] comedi comedi3: 8255: I/O port conflict (0x20802,4)
[  925.978949][T23859] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  925.987442][T23859] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  925.990205][T23859] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  925.998404][T23859] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  926.004183][T23859] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  926.009263][T23859] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  926.014034][T23859] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  926.016684][T23859] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  926.023590][T23859] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  926.026198][T23859] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4)
[  926.029412][T23859] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4)
[  926.033217][T23851] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5009'.
[  926.037758][T23859] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  926.040856][T23859] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  926.044736][T23859] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  926.047332][T23859] comedi comedi3: 8255: I/O port conflict (0x8000000,4)
[  926.050162][T23859] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4)
[  926.063074][T23855] vhci_hcd: connection closed
[  926.063333][   T12] vhci_hcd: stop threads
[  926.067118][   T12] vhci_hcd: release socket
[  926.069152][   T12] vhci_hcd: disconnect device
[  926.100756][   T61] vhci_hcd: vhci_device speed not set
[  926.248595][T23858] syz_tun: left allmulticast mode
[  926.327543][T23864] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  926.614519][ T7953] usb 9-1: USB disconnect, device number 61
[  926.622638][T23871] 9pnet_virtio: no channels available for device syz
[  926.818880][T23876] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5015'.
[  927.839425][T23886] fuse: Unknown parameter '0x00000000000000040x000000000000000400000000000000000000'
[  928.390698][   T10] usb 10-1: new high-speed USB device number 42 using dummy_hcd
[  928.542838][   T10] usb 10-1: Using ep0 maxpacket: 8
[  928.584042][   T10] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  928.612609][   T10] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  928.621164][   T10] usb 10-1: config 0 interface 0 has no altsetting 0
[  928.624163][   T10] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  928.627729][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  928.635423][   T10] usb 10-1: config 0 descriptor??
[  928.636455][T23893] syz_tun: entered allmulticast mode
[  928.642378][T23893] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  928.645176][T23893] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  928.647920][T23893] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  928.650170][T23893] comedi comedi3: 8255: I/O port conflict (0xfff,4)
[  928.652443][T23893] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  928.655400][T23893] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  928.657813][T23893] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  928.661062][T23893] comedi comedi3: 8255: I/O port conflict (0x20802,4)
[  928.663987][T23893] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  928.666688][T23893] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  928.669117][T23893] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  928.671507][T23893] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  928.674206][T23893] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  928.676824][T23893] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  928.679490][T23893] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  928.681908][T23893] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  928.684402][T23893] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  928.686489][T23893] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4)
[  928.688899][T23893] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4)
[  928.693244][T23893] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  928.695761][T23893] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  928.698420][T23893] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  928.702753][T23893] comedi comedi3: 8255: I/O port conflict (0x8000000,4)
[  928.705647][T23893] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4)
[  928.851439][T23892] syz_tun: left allmulticast mode
[  928.915756][T23899] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  928.918034][T23899] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  928.922251][T23899] vhci_hcd vhci_hcd.0: Device attached
[  928.938610][T23899] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5022'.
[  928.950485][T23902] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8)
[  928.952572][T23902] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  928.955182][T23902] vhci_hcd vhci_hcd.0: Device attached
[  929.099203][T23902] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5023'.
[  929.200707][ T7953] usb 49-1: new low-speed USB device number 27 using vhci_hcd
[  929.221798][   T10] mcp2221 0003:04D8:00DD.0042: unknown main item tag 0x0
[  929.229168][   T10] mcp2221 0003:04D8:00DD.0042: unknown main item tag 0x0
[  929.239759][   T10] mcp2221 0003:04D8:00DD.0042: unknown main item tag 0x0
[  929.253258][   T10] mcp2221 0003:04D8:00DD.0042: unknown main item tag 0x0
[  929.266565][   T10] mcp2221 0003:04D8:00DD.0042: unknown main item tag 0x0
[  929.290796][   T10] mcp2221 0003:04D8:00DD.0042: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  929.693570][T23900] vhci_hcd: connection closed
[  929.817587][T23903] vhci_hcd: connection reset by peer
[  929.971002][   T12] vhci_hcd: stop threads
[  929.972530][   T12] vhci_hcd: release socket
[  929.974279][   T12] vhci_hcd: disconnect device
[  929.977379][   T12] vhci_hcd: stop threads
[  929.978802][   T12] vhci_hcd: release socket
[  929.980791][   T12] vhci_hcd: disconnect device
[  930.245785][T23909] netlink: 'syz.3.5024': attribute type 11 has an invalid length.
[  930.381215][T23920] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  930.551009][T22451] usb 10-1: reset high-speed USB device number 42 using dummy_hcd
[  930.606752][T23931] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  930.949373][T23936] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  930.951327][T23936] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  930.954116][T23936] vhci_hcd vhci_hcd.0: Device attached
[  930.963540][ T1416] ieee802154 phy0 wpan0: encryption failed: -22
[  931.076495][   T40] kauditd_printk_skb: 50 callbacks suppressed
[  931.076511][   T40] audit: type=1800 audit(1761185227.838:4924): pid=23936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5031" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  931.229150][T23941] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  931.231149][T23941] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  931.233544][T23941] vhci_hcd vhci_hcd.0: Device attached
[  931.247047][T23941] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5032'.
[  932.031148][T23942] vhci_hcd: connection closed
[  932.031456][   T12] vhci_hcd: stop threads
[  932.034762][   T12] vhci_hcd: release socket
[  932.036415][   T12] vhci_hcd: disconnect device
[  932.348498][   T10] usb 10-1: USB disconnect, device number 42
[  932.636858][T16419] usb 44-1: SetAddress Request (34) to port 0
[  932.638760][T16419] usb 44-1: new SuperSpeed USB device number 34 using vhci_hcd
[  932.673014][T23950] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  932.675028][T23950] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  932.677666][T23950] vhci_hcd vhci_hcd.0: Device attached
[  932.690264][T23950] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5034'.
[  933.110777][  T842] usb 47-1: new low-speed USB device number 33 using vhci_hcd
[  933.171430][T23937] vhci_hcd: connection reset by peer
[  933.174389][   T13] vhci_hcd: stop threads
[  933.176351][   T13] vhci_hcd: release socket
[  933.178917][   T13] vhci_hcd: disconnect device
[  933.442746][T23951] vhci_hcd: connection reset by peer
[  933.447348][ T1152] vhci_hcd: stop threads
[  933.449771][ T1152] vhci_hcd: release socket
[  933.451413][ T1152] vhci_hcd: disconnect device
[  934.232734][T23967] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  934.233179][   T10] IPVS: starting estimator thread 0...
[  934.280850][ T6022] usb 10-1: new high-speed USB device number 43 using dummy_hcd
[  934.320739][ T7953] vhci_hcd: vhci_device speed not set
[  934.330779][T23969] IPVS: using max 42 ests per chain, 100800 per kthread
[  934.440896][ T6022] usb 10-1: Using ep0 maxpacket: 8
[  934.452389][ T6022] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  934.456504][ T6022] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  934.459354][ T6022] usb 10-1: config 0 interface 0 has no altsetting 0
[  934.462008][ T6022] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  934.465409][ T6022] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  934.480900][ T6022] usb 10-1: config 0 descriptor??
[  934.506774][T23975] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  934.540691][T22393] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  934.690689][T22393] usb 8-1: Using ep0 maxpacket: 8
[  935.082937][ T6022] mcp2221 0003:04D8:00DD.0043: unknown main item tag 0x0
[  935.085691][ T6022] mcp2221 0003:04D8:00DD.0043: unknown main item tag 0x0
[  935.087250][T22393] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  935.088502][ T6022] mcp2221 0003:04D8:00DD.0043: unknown main item tag 0x0
[  935.094516][ T6022] mcp2221 0003:04D8:00DD.0043: unknown main item tag 0x0
[  935.096950][ T6022] mcp2221 0003:04D8:00DD.0043: unknown main item tag 0x0
[  935.101360][ T6022] mcp2221 0003:04D8:00DD.0043: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  935.253468][T22393] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  935.256567][T22393] usb 8-1: config 0 interface 0 has no altsetting 0
[  935.258746][T22393] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  935.265146][T22393] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  935.269269][T22393] usb 8-1: config 0 descriptor??
[  935.542430][T23986] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode
[  935.808143][T22393] mcp2221 0003:04D8:00DD.0044: unknown main item tag 0x0
[  935.810451][T22393] mcp2221 0003:04D8:00DD.0044: unknown main item tag 0x0
[  935.812754][T22393] mcp2221 0003:04D8:00DD.0044: unknown main item tag 0x0
[  935.815349][T22393] mcp2221 0003:04D8:00DD.0044: unknown main item tag 0x0
[  935.817684][T22393] mcp2221 0003:04D8:00DD.0044: unknown main item tag 0x0
[  935.820856][T22393] mcp2221 0003:04D8:00DD.0044: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[  936.090794][T23991] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  936.351564][T14567] usb 10-1: reset high-speed USB device number 43 using dummy_hcd
[  936.361196][T23995] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  936.363937][T23995] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  936.367144][T23995] vhci_hcd vhci_hcd.0: Device attached
[  936.380014][T23995] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5045'.
[  936.690630][ T7953] usb 45-1: new low-speed USB device number 28 using vhci_hcd
[  937.060847][T22393] usb 8-1: reset high-speed USB device number 29 using dummy_hcd
[  937.137291][T23996] vhci_hcd: connection reset by peer
[  937.140043][  T220] vhci_hcd: stop threads
[  937.142007][  T220] vhci_hcd: release socket
[  937.143802][  T220] vhci_hcd: disconnect device
[  937.785027][T16419] usb 44-1: device descriptor read/8, error -110
[  937.821287][ T6022] usb 10-1: USB disconnect, device number 43
[  937.839729][T24016] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  937.842183][T24016] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  937.846408][T24016] vhci_hcd vhci_hcd.0: Device attached
[  938.071360][   T61] usb 8-1: USB disconnect, device number 29
[  938.100764][T16419] usb 44-1: SetAddress Request (35) to port 0
[  938.102902][T16419] usb 44-1: new SuperSpeed USB device number 35 using vhci_hcd
[  938.176581][T24019] vhci_hcd: connection reset by peer
[  938.178684][T19917] vhci_hcd: stop threads
[  938.180142][T19917] vhci_hcd: release socket
[  938.182555][T19917] vhci_hcd: disconnect device
[  938.230919][  T842] vhci_hcd: vhci_device speed not set
[  938.274784][T24025] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  938.276824][T24025] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  938.280090][T24025] vhci_hcd vhci_hcd.0: Device attached
[  938.303999][T24025] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5052'.
[  938.571056][  T842] usb 47-1: device descriptor read/64, error -110
[  938.811218][  T842] usb 47-1: new low-speed USB device number 34 using vhci_hcd
[  939.145551][T24026] vhci_hcd: connection reset by peer
[  939.147908][   T13] vhci_hcd: stop threads
[  939.149400][   T13] vhci_hcd: release socket
[  939.150952][   T13] vhci_hcd: disconnect device
[  939.322887][T24032] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  939.514848][T24037] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5056'.
[  939.553019][   T40] audit: type=1326 audit(1761185492.311:4925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24038 comm="syz.3.5057" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  939.559815][   T40] audit: type=1326 audit(1761185492.311:4926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24038 comm="syz.3.5057" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  939.567105][   T40] audit: type=1326 audit(1761185492.321:4927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24038 comm="syz.3.5057" exe="/syz-executor" sig=0 arch=40000003 syscall=323 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  939.578878][   T40] audit: type=1326 audit(1761185492.321:4928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24038 comm="syz.3.5057" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  939.588449][T24040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5057'.
[  939.592609][   T40] audit: type=1326 audit(1761185492.321:4929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24038 comm="syz.3.5057" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  939.615758][   T40] audit: type=1326 audit(1761185492.321:4930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24038 comm="syz.3.5057" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  939.623301][   T40] audit: type=1326 audit(1761185492.321:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24038 comm="syz.3.5057" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  939.629803][   T40] audit: type=1326 audit(1761185492.321:4932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24038 comm="syz.3.5057" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  939.636840][   T40] audit: type=1326 audit(1761185492.331:4933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24038 comm="syz.3.5057" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  939.643517][   T40] audit: type=1326 audit(1761185492.331:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24038 comm="syz.3.5057" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  939.840298][T24047] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  939.842594][T24047] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  939.845737][T24047] vhci_hcd vhci_hcd.0: Device attached
[  939.873951][T24051] netlink: 'syz.4.5060': attribute type 10 has an invalid length.
[  939.886547][T24051] syz_tun: entered promiscuous mode
[  939.906069][T24047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5059'.
[  940.571628][T24048] vhci_hcd: connection closed
[  940.573933][   T12] vhci_hcd: stop threads
[  940.577785][   T12] vhci_hcd: release socket
[  940.579874][   T12] vhci_hcd: disconnect device
[  940.843790][T24062] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  940.846004][T24062] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  940.848925][T24062] vhci_hcd vhci_hcd.0: Device attached
[  941.141130][T24066] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  941.613975][ T5984] usb 11-1: new high-speed USB device number 46 using dummy_hcd
[  941.696591][T24063] vhci_hcd: connection closed
[  941.696944][   T12] vhci_hcd: stop threads
[  941.704112][   T12] vhci_hcd: release socket
[  941.705625][   T12] vhci_hcd: disconnect device
[  941.774858][ T5984] usb 11-1: Using ep0 maxpacket: 8
[  941.778524][ T5984] usb 11-1: config 0 has an invalid interface number: 55 but max is 0
[  941.782232][ T5984] usb 11-1: config 0 has no interface number 0
[  941.786249][ T5984] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  941.790224][ T5984] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  941.794757][ T5984] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  941.798601][ T5984] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  941.803842][ T5984] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  941.807756][ T5984] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  941.813063][ T5984] usb 11-1: config 0 descriptor??
[  941.818819][ T5984] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  941.844237][ T7953] vhci_hcd: vhci_device speed not set
[  942.025663][ T5984] usb 11-1: USB disconnect, device number 46
[  942.029085][ T5984] ldusb 11-1:0.55: LD USB Device #0 now disconnected
[  942.429209][T24082] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  942.517269][T24086] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  942.519398][T24086] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  942.522006][T24086] vhci_hcd vhci_hcd.0: Device attached
[  942.663113][T24086] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5069'.
[  943.207040][T16419] usb 44-1: device descriptor read/8, error -110
[  943.257285][T21938] usb 11-1: new high-speed USB device number 47 using dummy_hcd
[  943.326792][T16419] usb usb44-port1: attempt power cycle
[  943.360744][T24087] vhci_hcd: connection closed
[  943.362838][  T220] vhci_hcd: stop threads
[  943.368604][  T220] vhci_hcd: release socket
[  943.370992][  T220] vhci_hcd: disconnect device
[  943.395654][ T6022] vhci_hcd: vhci_device speed not set
[  943.397530][T24100] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  943.399670][T24100] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  943.402273][T24100] vhci_hcd vhci_hcd.0: Device attached
[  943.409613][T24100] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5073'.
[  943.459268][T21938] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  943.462175][T21938] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  943.465529][T21938] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66
[  943.468603][T21938] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  943.472376][T21938] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  943.478092][T21938] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  943.481147][T21938] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  943.484144][T21938] usb 11-1: Product: syz
[  943.485590][T21938] usb 11-1: Manufacturer: syz
[  943.511685][T21938] cdc_wdm 11-1:1.0: skipping garbage
[  943.531174][T24101] vhci_hcd: connection closed
[  943.531347][T21938] cdc_wdm 11-1:1.0: skipping garbage
[  943.531393][   T12] vhci_hcd: stop threads
[  943.536394][T21938] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device
[  943.536676][   T12] vhci_hcd: release socket
[  943.538589][T21938] cdc_wdm 11-1:1.0: Unknown control protocol
[  943.540319][   T12] vhci_hcd: disconnect device
[  943.721153][T21938] usb 11-1: USB disconnect, device number 47
[  943.916285][  T842] vhci_hcd: vhci_device speed not set
[  943.955375][T24108] loop6: detected capacity change from 0 to 524279808
[  943.996251][T24108] loop6: detected capacity change from 524279808 to 1
[  943.999922][T24108] Dev loop6: unable to read RDB block 1
[  944.001904][T24108]  loop6: unable to read partition table
[  944.003526][T24108] loop6: partition table beyond EOD, truncated
[  944.005393][T24108] loop_reread_partitions: partition scan of loop6 (‰u0v°Ï	) failed (rc=-5)
[  944.107383][T24111] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  944.110170][T24111] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  944.113364][T24111] vhci_hcd vhci_hcd.0: Device attached
[  944.319692][T24119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5076'.
[  944.386783][ T6022] usb 43-1: new low-speed USB device number 30 using vhci_hcd
[  944.593630][T24123] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  944.596333][T24123] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  944.633504][T24123] vhci_hcd vhci_hcd.0: Device attached
[  944.792089][   T40] kauditd_printk_skb: 14 callbacks suppressed
[  944.792180][   T40] audit: type=1800 audit(1761185497.546:4949): pid=24123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5077" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0
[  944.900094][T24132] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5079'.
[  944.904854][T24132] netlink: 111 bytes leftover after parsing attributes in process `syz.6.5079'.
[  945.364681][T21938] usb 46-1: SetAddress Request (23) to port 0
[  945.367900][T24133] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  945.370504][T24133] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  945.370902][T21938] usb 46-1: new SuperSpeed USB device number 23 using vhci_hcd
[  945.373737][T24133] vhci_hcd vhci_hcd.0: Device attached
[  945.518649][T24112] vhci_hcd: connection reset by peer
[  945.568609][ T5991] usb usb48-port1: attempt power cycle
[  945.572365][   T13] vhci_hcd: stop threads
[  945.573796][   T13] vhci_hcd: release socket
[  945.575341][   T13] vhci_hcd: disconnect device
[  945.699870][  T842] usb 47-1: new low-speed USB device number 35 using vhci_hcd
[  945.744990][T24135] vhci_hcd: connection reset by peer
[  945.747333][   T13] vhci_hcd: stop threads
[  945.749040][   T13] vhci_hcd: release socket
[  945.750871][   T13] vhci_hcd: disconnect device
[  946.033705][T24141] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  946.776200][T24150] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  946.778360][T24150] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  946.781343][T24150] vhci_hcd vhci_hcd.0: Device attached
[  947.197622][T24151] vhci_hcd: connection closed
[  947.197988][ T1152] vhci_hcd: stop threads
[  947.202095][ T1152] vhci_hcd: release socket
[  947.204193][ T1152] vhci_hcd: disconnect device
[  947.651852][T24124] vhci_hcd: connection reset by peer
[  947.654581][   T60] vhci_hcd: stop threads
[  947.659873][   T60] vhci_hcd: release socket
[  947.661875][   T60] vhci_hcd: disconnect device
[  947.808769][T24161] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  947.811620][T24161] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  947.815896][T24161] vhci_hcd vhci_hcd.0: Device attached
[  947.980363][T24165] FAULT_INJECTION: forcing a failure.
[  947.980363][T24165] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  947.985597][T24165] CPU: 2 UID: 0 PID: 24165 Comm: syz.3.5087 Not tainted syzkaller #0 PREEMPT(full) 
[  947.985618][T24165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  947.985629][T24165] Call Trace:
[  947.985650][T24165]  <TASK>
[  947.985664][T24165]  dump_stack_lvl+0x16c/0x1f0
[  947.985702][T24165]  should_fail_ex+0x512/0x640
[  947.985738][T24165]  _copy_from_user+0x2e/0xd0
[  947.985767][T24165]  move_addr_to_kernel+0x65/0x170
[  947.985786][T24165]  __sys_sendto+0x1be/0x520
[  947.985803][T24165]  ? __pfx___sys_sendto+0x10/0x10
[  947.985831][T24165]  ? ksys_write+0x1ac/0x250
[  947.985844][T24165]  ? __pfx_ksys_write+0x10/0x10
[  947.985858][T24165]  __ia32_sys_sendto+0xdd/0x1b0
[  947.985875][T24165]  ? lockdep_hardirqs_on+0x7c/0x110
[  947.985887][T24165]  ? syscall_enter_from_user_mode_prepare+0x68/0xe0
[  947.985901][T24165]  __do_fast_syscall_32+0x7c/0x300
[  947.985916][T24165]  do_fast_syscall_32+0x32/0x80
[  947.985929][T24165]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  947.985943][T24165] RIP: 0023:0xf70ed579
[  947.985952][T24165] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  947.985963][T24165] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000171
[  947.985975][T24165] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0
[  947.985981][T24165] RDX: 000000000000e90c RSI: 0000000000000000 RDI: 0000000080000540
[  947.985988][T24165] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000
[  947.985995][T24165] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  947.986001][T24165] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  947.986015][T24165]  </TASK>
[  948.346813][T24162] vhci_hcd: connection closed
[  948.347073][T19917] vhci_hcd: stop threads
[  948.350437][   T61] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[  948.351141][T19917] vhci_hcd: release socket
[  948.355570][T19917] vhci_hcd: disconnect device
[  948.431736][T24175] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  948.434449][T24175] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  948.438029][T24175] vhci_hcd vhci_hcd.0: Device attached
[  948.545427][T24179] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5090'.
[  948.711528][   T53] usb 50-1: SetAddress Request (15) to port 0
[  948.714600][   T53] usb 50-1: new SuperSpeed USB device number 15 using vhci_hcd
[  948.931484][T24181] lo speed is unknown, defaulting to 1000
[  949.041406][   T61] usb 8-1: Using ep0 maxpacket: 8
[  949.522323][ T6022] vhci_hcd: vhci_device speed not set
[  949.580361][   T61] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  949.773106][T24176] vhci_hcd: connection reset by peer
[  949.776317][ T1152] vhci_hcd: stop threads
[  949.777866][ T1152] vhci_hcd: release socket
[  949.779222][   T61] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  949.782632][ T1152] vhci_hcd: disconnect device
[  949.782987][   T61] usb 8-1: config 0 interface 0 has no altsetting 0
[  949.787020][   T61] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  949.789903][   T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  949.798320][   T61] usb 8-1: config 0 descriptor??
[  950.091199][T16145] libceph: connect (1)[c::]:6789 error -101
[  950.094609][T16145] libceph: mon0 (1)[c::]:6789 connect error
[  950.128612][T24189] ceph: No mds server is up or the cluster is laggy
[  950.335002][   T61] mcp2221 0003:04D8:00DD.0045: unknown main item tag 0x0
[  950.337239][   T61] mcp2221 0003:04D8:00DD.0045: unknown main item tag 0x0
[  950.339422][   T61] mcp2221 0003:04D8:00DD.0045: unknown main item tag 0x0
[  950.341624][   T61] mcp2221 0003:04D8:00DD.0045: unknown main item tag 0x0
[  950.344000][   T61] mcp2221 0003:04D8:00DD.0045: unknown main item tag 0x0
[  950.346667][   T61] mcp2221 0003:04D8:00DD.0045: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[  950.423717][T21938] usb 46-1: device descriptor read/8, error -110
[  950.767507][T24197] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  950.781526][T24200] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  950.786075][T24200] syzkaller0: entered promiscuous mode
[  950.787952][T24200] syzkaller0: entered allmulticast mode
[  950.803073][T24200] syzkaller0: mtu less than device minimum
[  950.807227][T24199] tipc: Resetting bearer <eth:syzkaller0>
[  950.814227][  T842] vhci_hcd: vhci_device speed not set
[  950.820179][T24199] tipc: Disabling bearer <eth:syzkaller0>
[  950.954848][T21938] usb usb46-port1: attempt power cycle
[  951.046444][T24202] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input60
[  951.086011][T24202] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5095'.
[  951.254454][T16419] usb usb44-port1: unable to enumerate USB device
[  951.495440][ T6530] usb 8-1: reset high-speed USB device number 30 using dummy_hcd
[  951.688354][T24211] lo speed is unknown, defaulting to 1000
[  952.037977][T21938] usb usb46-port1: unable to enumerate USB device
[  952.077549][ T5991] usb usb48-port1: unable to enumerate USB device
[  952.217318][T24222] 9pnet_virtio: no channels available for device syz
[  952.337221][   T61] usb 8-1: USB disconnect, device number 30
[  952.713548][T24230] binder: 24227:24230 ioctl 0 80000040 returned -22
[  952.722343][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  952.728229][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  953.788418][   T53] usb 50-1: device descriptor read/8, error -110
[  953.901059][T24253] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8)
[  953.903134][T24253] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  953.905820][T24253] vhci_hcd vhci_hcd.0: Device attached
[  954.068959][   T53] usb 50-1: SetAddress Request (16) to port 0
[  954.070992][   T53] usb 50-1: new SuperSpeed USB device number 16 using vhci_hcd
[  954.490988][T24254] vhci_hcd: connection reset by peer
[  954.494015][   T60] vhci_hcd: stop threads
[  954.495400][   T60] vhci_hcd: release socket
[  954.497046][   T60] vhci_hcd: disconnect device
[  954.938679][T24276] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  954.941466][T24276] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  954.944905][T24276] vhci_hcd vhci_hcd.0: Device attached
[  954.984716][T24276] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5112'.
[  955.200466][   T61] usb 47-1: new low-speed USB device number 36 using vhci_hcd
[  955.288277][T24284] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input61
[  955.303682][T24284] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5114'.
[  955.366974][T24287] netlink: 212 bytes leftover after parsing attributes in process `syz.6.5115'.
[  955.410790][T24277] vhci_hcd: connection reset by peer
[  955.413272][   T60] vhci_hcd: stop threads
[  955.414710][   T60] vhci_hcd: release socket
[  955.416187][   T60] vhci_hcd: disconnect device
[  955.486226][T24283] binder: 24279:24283 ioctl 0 80000040 returned -22
[  955.496461][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  955.498940][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  956.050768][T24292] Cache volume key already in use (9p,syz,)
[  956.352566][T24309] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  957.367236][T24318] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input62
[  957.524622][T24327] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5124'.
[  958.197070][T24336] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input63
[  958.217333][T24336] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5129'.
[  958.449542][T24346] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  958.451560][T24346] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  958.454249][T24346] vhci_hcd vhci_hcd.0: Device attached
[  958.567391][T24343] binder: 24337:24343 ioctl 0 80000040 returned -22
[  958.594528][T24346] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5131'.
[  958.628748][   T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  958.637179][   T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  958.705816][ T7953] usb 43-1: new low-speed USB device number 31 using vhci_hcd
[  959.253075][T24347] vhci_hcd: connection reset by peer
[  959.256260][   T60] vhci_hcd: stop threads
[  959.257798][   T60] vhci_hcd: release socket
[  959.260851][   T60] vhci_hcd: disconnect device
[  959.265824][   T53] usb 50-1: device descriptor read/8, error -110
[  959.407449][   T53] usb usb50-port1: attempt power cycle
[  959.813947][T24361] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input64
[  959.859738][T24361] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5136'.
[  959.948692][T24364] Cache volume key already in use (9p,syz,)
[  960.090133][   T53] usb usb50-port1: unable to enumerate USB device
[  960.347305][   T61] vhci_hcd: vhci_device speed not set
[  960.399666][T24373] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  960.401747][T24373] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  960.406713][T24373] vhci_hcd vhci_hcd.0: Device attached
[  960.946408][T24374] vhci_hcd: connection closed
[  960.946673][   T72] vhci_hcd: stop threads
[  960.949693][   T72] vhci_hcd: release socket
[  960.958876][   T72] vhci_hcd: disconnect device
[  962.103566][T24389] 9pnet_virtio: no channels available for device syz
[  962.789067][T24394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5143'.
[  962.828166][T24403] KVM: debugfs: duplicate directory 24403-5
[  962.840068][T24404] overlay: ./file0 is not a directory
[  962.863872][T24406] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input65
[  962.871935][T24406] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5145'.
[  963.016121][T24412] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  963.062419][ T6022] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  963.691846][T24426] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input66
[  963.714574][T24426] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5149'.
[  963.825900][T24430] netlink: 212 bytes leftover after parsing attributes in process `syz.6.5151'.
[  963.922917][T24434] netlink: 372 bytes leftover after parsing attributes in process `syz.6.5153'.
[  964.103774][ T7953] vhci_hcd: vhci_device speed not set
[  964.178557][T24443] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input67
[  964.276896][T24448] overlayfs: failed to resolve './file1': -2
[  964.334325][T24443] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5156'.
[  964.456190][T24450] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  964.458354][T24450] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  964.461432][T24450] vhci_hcd vhci_hcd.0: Device attached
[  964.954725][ T5991] usb 44-1: SetAddress Request (38) to port 0
[  964.957307][ T5991] usb 44-1: new SuperSpeed USB device number 38 using vhci_hcd
[  965.054147][T24451] vhci_hcd: connection reset by peer
[  965.058812][T24464] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5162'.
[  965.065232][T19917] vhci_hcd: stop threads
[  965.066975][T19917] vhci_hcd: release socket
[  965.068965][T19917] vhci_hcd: disconnect device
[  966.398603][T24483] netlink: 'syz.6.5166': attribute type 10 has an invalid length.
[  966.402197][T24483] syz_tun: entered promiscuous mode
[  966.408011][T24483] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  966.559313][T24485] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input68
[  966.569169][T24485] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5167'.
[  966.709452][T24493] netlink: 'syz.4.5168': attribute type 1 has an invalid length.
[  967.563856][T24505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5172'.
[  967.757861][T24517] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  968.659545][T24540] bridge2: entered allmulticast mode
[  968.670014][T24541] ªªªªª»: renamed from hsr0 (while UP)
[  968.788964][T24553] FAULT_INJECTION: forcing a failure.
[  968.788964][T24553] name failslab, interval 1, probability 0, space 0, times 0
[  968.793175][T24553] CPU: 3 UID: 0 PID: 24553 Comm: syz.4.5188 Not tainted syzkaller #0 PREEMPT(full) 
[  968.793191][T24553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  968.793198][T24553] Call Trace:
[  968.793202][T24553]  <TASK>
[  968.793207][T24553]  dump_stack_lvl+0x16c/0x1f0
[  968.793225][T24553]  should_fail_ex+0x512/0x640
[  968.793243][T24553]  ? __kmalloc_noprof+0xca/0x880
[  968.793263][T24553]  should_failslab+0xc2/0x120
[  968.793279][T24553]  __kmalloc_noprof+0xdd/0x880
[  968.793297][T24553]  ? ioctl_standard_iw_point+0x414/0xca0
[  968.793313][T24553]  ? ioctl_standard_iw_point+0x414/0xca0
[  968.793325][T24553]  ioctl_standard_iw_point+0x414/0xca0
[  968.793338][T24553]  ? __pfx_cfg80211_wext_giwencode+0x10/0x10
[  968.793357][T24553]  ? __pfx_ioctl_standard_iw_point+0x10/0x10
[  968.793370][T24553]  ? rcu_is_watching+0x12/0xc0
[  968.793383][T24553]  ? trace_contention_end+0xdd/0x130
[  968.793400][T24553]  ? __mutex_lock+0x1c5/0x1060
[  968.793413][T24553]  ? __lock_acquire+0x622/0x1c90
[  968.793431][T24553]  compat_standard_call+0x20d/0x350
[  968.793443][T24553]  ? __pfx_cfg80211_wext_giwencode+0x10/0x10
[  968.793462][T24553]  ? __pfx_compat_standard_call+0x10/0x10
[  968.793478][T24553]  ? full_name_hash+0xbc/0x110
[  968.793494][T24553]  ? netdev_name_node_lookup+0x127/0x180
[  968.793512][T24553]  ? __pfx_compat_standard_call+0x10/0x10
[  968.793525][T24553]  ? __pfx_cfg80211_wext_giwencode+0x10/0x10
[  968.793542][T24553]  wireless_process_ioctl.constprop.0+0x291/0x3d0
[  968.793557][T24553]  compat_wext_handle_ioctl+0x284/0x310
[  968.793571][T24553]  ? __pfx_compat_wext_handle_ioctl+0x10/0x10
[  968.793584][T24553]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  968.793605][T24553]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  968.793627][T24553]  compat_sock_ioctl+0x320/0x730
[  968.793643][T24553]  ? __pfx_compat_sock_ioctl+0x10/0x10
[  968.793657][T24553]  ? hook_file_ioctl_common+0x145/0x410
[  968.793672][T24553]  ? __fget_files+0x20e/0x3c0
[  968.793687][T24553]  ? __pfx_compat_sock_ioctl+0x10/0x10
[  968.793701][T24553]  __ia32_compat_sys_ioctl+0x242/0x370
[  968.793720][T24553]  __do_fast_syscall_32+0x7c/0x300
[  968.793735][T24553]  do_fast_syscall_32+0x32/0x80
[  968.793748][T24553]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  968.793763][T24553] RIP: 0023:0xf7f86579
[  968.793772][T24553] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  968.793783][T24553] RSP: 002b:00000000f547655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  968.793794][T24553] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008b2b
[  968.793801][T24553] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000
[  968.793807][T24553] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  968.793814][T24553] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  968.793820][T24553] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  968.793834][T24553]  </TASK>
[  968.939269][T24559] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5190'.
[  969.175035][T24574] netlink: 'syz.4.5190': attribute type 83 has an invalid length.
[  969.521090][T24591] bridge_slave_0: left promiscuous mode
[  969.523176][T24591] bridge0: port 1(bridge_slave_0) entered disabled state
[  969.528335][T24591] bridge_slave_1: left allmulticast mode
[  969.531708][T24591] bridge_slave_1: left promiscuous mode
[  969.533719][T24591] bridge0: port 2(bridge_slave_1) entered disabled state
[  969.539620][T24591] bond0: (slave bond_slave_0): Releasing backup interface
[  969.546462][T24591] bond0: (slave bond_slave_1): Releasing backup interface
[  969.553808][T24591] team0: Port device team_slave_0 removed
[  969.557999][T24591] team0: Port device team_slave_1 removed
[  969.560849][T24591] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  969.663189][T24567] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  969.666097][T24567] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  969.671128][T24567] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  969.713859][T24584] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  970.042023][ T5991] usb 44-1: device descriptor read/8, error -110
[  970.446392][ T5991] usb usb44-port1: attempt power cycle
[  970.650946][T24621] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  970.924485][   T10] usb 8-1: new full-speed USB device number 31 using dummy_hcd
[  971.104248][ T5991] usb usb44-port1: unable to enumerate USB device
[  971.136764][   T10] usb 8-1: device descriptor read/64, error -71
[  971.163658][ T5303] Bluetooth: hci4: command 0x0c1a tx timeout
[  971.419116][   T10] usb 8-1: new full-speed USB device number 32 using dummy_hcd
[  971.624317][   T10] usb 8-1: device descriptor read/64, error -71
[  971.734857][   T10] usb usb8-port1: attempt power cycle
[  972.078889][   T10] usb 8-1: new full-speed USB device number 33 using dummy_hcd
[  972.107825][   T10] usb 8-1: device descriptor read/8, error -71
[  972.360399][   T10] usb 8-1: new full-speed USB device number 34 using dummy_hcd
[  972.376467][   T10] usb 8-1: device descriptor read/8, error -71
[  972.496206][   T10] usb usb8-port1: unable to enumerate USB device
[  972.815958][T24648] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  972.815974][T24648] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  972.816098][T24648] vhci_hcd vhci_hcd.0: Device attached
[  973.176599][ T5991] usb 48-1: SetAddress Request (38) to port 0
[  973.176636][ T5991] usb 48-1: new SuperSpeed USB device number 38 using vhci_hcd
[  973.246633][ T5303] Bluetooth: hci4: command 0x0c1a tx timeout
[  973.276996][T24658] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  973.440794][T24649] vhci_hcd: connection reset by peer
[  973.469576][   T12] vhci_hcd: stop threads
[  973.469589][   T12] vhci_hcd: release socket
[  973.469614][   T12] vhci_hcd: disconnect device
[  974.785461][T24681] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  974.787762][T24681] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  974.796934][T24684] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  974.799005][T24684] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  974.801647][T24684] vhci_hcd vhci_hcd.0: Device attached
[  974.812234][T24684] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5213'.
[  974.835301][T24681] vhci_hcd vhci_hcd.0: Device attached
[  975.119796][T16419] usb 46-1: SetAddress Request (27) to port 0
[  975.123187][T16419] usb 46-1: new SuperSpeed USB device number 27 using vhci_hcd
[  975.329825][ T5303] Bluetooth: hci4: command 0x0c1a tx timeout
[  975.581794][T24685] vhci_hcd: connection closed
[  975.583625][   T60] vhci_hcd: stop threads
[  975.587422][   T60] vhci_hcd: release socket
[  975.589118][   T60] vhci_hcd: disconnect device
[  975.870943][T24701] FAULT_INJECTION: forcing a failure.
[  975.870943][T24701] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  975.876021][T24701] CPU: 3 UID: 0 PID: 24701 Comm: syz.3.5217 Not tainted syzkaller #0 PREEMPT(full) 
[  975.876039][T24701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  975.876047][T24701] Call Trace:
[  975.876055][T24701]  <TASK>
[  975.876059][T24701]  dump_stack_lvl+0x16c/0x1f0
[  975.876075][T24701]  should_fail_ex+0x512/0x640
[  975.876096][T24701]  _copy_from_user+0x2e/0xd0
[  975.876114][T24701]  get_compat_msghdr+0xa7/0x170
[  975.876133][T24701]  ? __pfx_get_compat_msghdr+0x10/0x10
[  975.876156][T24701]  ___sys_sendmsg+0x1ae/0x1d0
[  975.876168][T24701]  ? __pfx____sys_sendmsg+0x10/0x10
[  975.876193][T24701]  ? find_held_lock+0x2b/0x80
[  975.876214][T24701]  __sys_sendmsg+0x16d/0x220
[  975.876224][T24701]  ? __pfx___sys_sendmsg+0x10/0x10
[  975.876241][T24701]  ? rcu_is_watching+0x12/0xc0
[  975.876268][T24701]  __do_fast_syscall_32+0x7c/0x300
[  975.876283][T24701]  do_fast_syscall_32+0x32/0x80
[  975.876297][T24701]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  975.876311][T24701] RIP: 0023:0xf70ed579
[  975.876320][T24701] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  975.876331][T24701] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  975.876342][T24701] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000b80
[  975.876349][T24701] RDX: 0000000000048000 RSI: 0000000000000000 RDI: 0000000000000000
[  975.876355][T24701] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  975.876361][T24701] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  975.876368][T24701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  975.876382][T24701]  </TASK>
[  976.597983][T24706] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  976.600261][T24706] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  976.608553][T24706] vhci_hcd vhci_hcd.0: Device attached
[  976.814195][T24711] vhci_hcd: connection closed
[  976.821789][   T13] vhci_hcd: stop threads
[  976.825582][   T13] vhci_hcd: release socket
[  976.827515][   T13] vhci_hcd: disconnect device
[  976.872329][  T842] usb 50-1: enqueue for inactive port 0
[  976.910175][T24682] vhci_hcd: connection reset by peer
[  976.912609][   T13] vhci_hcd: stop threads
[  976.914019][   T13] vhci_hcd: release socket
[  976.915570][   T13] vhci_hcd: disconnect device
[  976.926238][T24716] FAULT_INJECTION: forcing a failure.
[  976.926238][T24716] name failslab, interval 1, probability 0, space 0, times 0
[  976.930189][T24716] CPU: 1 UID: 0 PID: 24716 Comm: syz.3.5221 Not tainted syzkaller #0 PREEMPT(full) 
[  976.930204][T24716] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  976.930211][T24716] Call Trace:
[  976.930215][T24716]  <TASK>
[  976.930220][T24716]  dump_stack_lvl+0x16c/0x1f0
[  976.930236][T24716]  should_fail_ex+0x512/0x640
[  976.930262][T24716]  ? kmem_cache_alloc_node_noprof+0x65/0x770
[  976.930277][T24716]  should_failslab+0xc2/0x120
[  976.930292][T24716]  kmem_cache_alloc_node_noprof+0x78/0x770
[  976.930303][T24716]  ? __alloc_skb+0x2b2/0x380
[  976.930323][T24716]  ? __alloc_skb+0x2b2/0x380
[  976.930338][T24716]  ? __pfx_netlink_insert+0x10/0x10
[  976.930349][T24716]  __alloc_skb+0x2b2/0x380
[  976.930366][T24716]  ? __pfx___alloc_skb+0x10/0x10
[  976.930383][T24716]  ? netlink_autobind.isra.0+0x158/0x370
[  976.930397][T24716]  netlink_alloc_large_skb+0x69/0x140
[  976.930410][T24716]  netlink_sendmsg+0x698/0xdd0
[  976.930424][T24716]  ? __pfx_netlink_sendmsg+0x10/0x10
[  976.930436][T24716]  ? aa_sock_msg_perm.constprop.0+0x100/0x1d0
[  976.930455][T24716]  ____sys_sendmsg+0xa98/0xc70
[  976.930471][T24716]  ? __pfx_____sys_sendmsg+0x10/0x10
[  976.930484][T24716]  ? get_compat_msghdr+0x11a/0x170
[  976.930507][T24716]  ___sys_sendmsg+0x134/0x1d0
[  976.930518][T24716]  ? __pfx____sys_sendmsg+0x10/0x10
[  976.930543][T24716]  ? find_held_lock+0x2b/0x80
[  976.930563][T24716]  __sys_sendmsg+0x16d/0x220
[  976.930573][T24716]  ? __pfx___sys_sendmsg+0x10/0x10
[  976.930589][T24716]  ? rcu_is_watching+0x12/0xc0
[  976.930604][T24716]  __do_fast_syscall_32+0x7c/0x300
[  976.930619][T24716]  do_fast_syscall_32+0x32/0x80
[  976.930632][T24716]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  976.930646][T24716] RIP: 0023:0xf70ed579
[  976.930655][T24716] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  976.930666][T24716] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  976.930677][T24716] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0
[  976.930684][T24716] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000
[  976.930691][T24716] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  976.930697][T24716] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  976.930703][T24716] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  976.930721][T24716]  </TASK>
[  977.084126][T24720] mac80211_hwsim hwsim31 wlan0: entered allmulticast mode
[  977.086537][T24720] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  977.180673][T24723] xt_CT: You must specify a L4 protocol and not use inversions on it
[  977.232571][   T40] audit: type=1326 audit(1761186041.948:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24728 comm="syz.3.5226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  977.245323][   T40] audit: type=1326 audit(1761186041.948:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24728 comm="syz.3.5226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  977.251928][   T40] audit: type=1326 audit(1761186041.948:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24728 comm="syz.3.5226" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  977.254405][T24729] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5226'.
[  977.259326][   T40] audit: type=1326 audit(1761186041.948:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24728 comm="syz.3.5226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  977.269065][   T40] audit: type=1326 audit(1761186041.948:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24728 comm="syz.3.5226" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  977.275917][   T40] audit: type=1326 audit(1761186041.948:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24728 comm="syz.3.5226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  977.284221][   T40] audit: type=1326 audit(1761186041.948:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24728 comm="syz.3.5226" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  977.290858][   T40] audit: type=1326 audit(1761186041.958:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24728 comm="syz.3.5226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  977.297641][   T40] audit: type=1326 audit(1761186041.958:4958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24728 comm="syz.3.5226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  977.304337][   T40] audit: type=1326 audit(1761186041.968:4959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24728 comm="syz.3.5226" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70ed579 code=0x7ffc0000
[  977.425841][  T842] usb usb50-port1: attempt power cycle
[  977.486612][T24742] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  977.489613][T24742] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  977.493091][T24742] vhci_hcd vhci_hcd.0: Device attached
[  977.827278][T24742] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5229'.
[  977.896578][T24748] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  977.898655][T24748] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  977.901427][T24748] vhci_hcd vhci_hcd.0: Device attached
[  977.929379][T24743] vhci_hcd: connection closed
[  977.931261][   T13] vhci_hcd: stop threads
[  977.935492][   T13] vhci_hcd: release socket
[  977.938835][   T13] vhci_hcd: disconnect device
[  978.083520][  T842] usb 50-1: SetAddress Request (22) to port 0
[  978.085565][  T842] usb 50-1: new SuperSpeed USB device number 22 using vhci_hcd
[  978.303909][ T5991] usb 48-1: device descriptor read/8, error -110
[  978.317323][T24761] netlink: 'syz.4.5235': attribute type 4 has an invalid length.
[  978.323909][T24749] vhci_hcd: connection reset by peer
[  978.326483][   T60] vhci_hcd: stop threads
[  978.328393][   T60] vhci_hcd: release socket
[  978.330386][   T60] vhci_hcd: disconnect device
[  978.356091][T24763] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5236'.
[  978.484180][T21938] vhci_hcd: vhci_device speed not set
[  979.438932][T24784] xt_CT: You must specify a L4 protocol and not use inversions on it
[  979.470407][T24790] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5245'.
[  979.556412][T24794] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  979.593669][T24795] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  979.596874][T24795] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  979.599918][T24795] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  979.688188][T24799] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  979.690901][T24799] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  979.694037][T24799] vhci_hcd vhci_hcd.0: Device attached
[  979.703321][T24800] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20000
[  979.796320][T24799] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5248'.
[  979.806220][ T5991] usb usb48-port1: attempt power cycle
[  980.227047][T16419] usb 46-1: device descriptor read/8, error -110
[  980.512143][ T5991] usb usb48-port1: unable to enumerate USB device
[  980.522015][T24801] vhci_hcd: connection closed
[  980.547944][T24800] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  980.557911][T19917] vhci_hcd: stop threads
[  980.559633][T19917] vhci_hcd: release socket
[  980.561507][T19917] vhci_hcd: disconnect device
[  980.567048][   T53] usb 45-1: new low-speed USB device number 29 using vhci_hcd
[  980.570179][   T53] usb 45-1: enqueue for inactive port 0
[  980.637124][   T53] vhci_hcd: vhci_device speed not set
[  980.810180][T24830] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5256'.
[  981.062463][T24832] syzkaller1: entered promiscuous mode
[  981.064212][T24832] syzkaller1: entered allmulticast mode
[  981.081105][T24834] netlink: zone id is out of range
[  981.083641][T24834] netlink: del zone limit has 4 unknown bytes
[  981.358141][ T6530] usb 9-1: new high-speed USB device number 62 using dummy_hcd
[  981.507973][T24818] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  981.510199][T24818] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  981.513265][T24818] vhci_hcd vhci_hcd.0: Device attached
[  981.519931][ T6530] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  981.522790][ T6530] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  981.526938][ T6530] usb 9-1: config 0 descriptor??
[  981.639030][T24843] netlink: 'syz.5.5261': attribute type 4 has an invalid length.
[  981.650975][T24840] vhci_hcd: connection closed
[  981.651191][   T12] vhci_hcd: stop threads
[  981.654038][   T12] vhci_hcd: release socket
[  981.655517][   T12] vhci_hcd: disconnect device
[  981.819375][ T5941] Bluetooth: hci4: command 0x0c1a tx timeout
[  981.861016][T24849] netlink: 'syz.5.5262': attribute type 10 has an invalid length.
[  981.863564][T24849] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5262'.
[  981.867983][T24849] batman_adv: batadv0: Adding interface: virt_wifi0
[  981.870156][T24849] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  981.878003][T24849] batman_adv: batadv0: Interface activated: virt_wifi0
[  981.934028][T24836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  981.936898][T24836] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  982.000361][T24851] IPVS: Error connecting to the multicast addr
[  982.143709][ T6530] usb 9-1: Cannot set MAC address
[  982.145485][ T6530] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  982.150377][ T6530] usb 9-1: USB disconnect, device number 62
[  982.211911][T16419] usb usb46-port1: attempt power cycle
[  982.363165][T24858] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5266'.
[  982.939804][T16419] usb usb46-port1: unable to enumerate USB device
[  983.226146][T24871] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8)
[  983.228211][T24871] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  983.231378][T24871] vhci_hcd vhci_hcd.0: Device attached
[  983.340308][T24871] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5268'.
[  983.944066][  T842] usb 50-1: device descriptor read/8, error -110
[  983.991928][T24878] vhci_hcd: connection closed
[  984.049638][T19917] vhci_hcd: stop threads
[  984.052839][T19917] vhci_hcd: release socket
[  984.054322][T19917] vhci_hcd: disconnect device
[  984.062188][  T842] usb usb50-port1: unable to enumerate USB device
[  984.132683][   T10] vhci_hcd: vhci_device speed not set
[  984.237163][T24890] fuse: Unknown parameter '0x0000000000000004'
[  985.177981][T24905] netlink: 'syz.4.5278': attribute type 1 has an invalid length.
[  985.181131][T24905] netlink: 'syz.4.5278': attribute type 2 has an invalid length.
[  985.423564][T24914] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5280'.
[  986.059093][T24917] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  986.061216][T24917] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  986.063660][T24917] vhci_hcd vhci_hcd.0: Device attached
[  986.225066][T24928] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5281'.
[  986.346470][   T53] usb 43-1: new low-speed USB device number 32 using vhci_hcd
[  986.837689][T24918] vhci_hcd: connection reset by peer
[  986.839574][   T12] vhci_hcd: stop threads
[  986.840984][   T12] vhci_hcd: release socket
[  986.842479][   T12] vhci_hcd: disconnect device
[  987.178513][T24943] fuse: Unknown parameter '0x0000000000000004'
[  988.547843][T24963] fuse: Bad value for 'fd'
[  988.740119][T24973] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  988.742708][T24973] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  988.745939][T24973] vhci_hcd vhci_hcd.0: Device attached
[  988.783989][T24976] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8)
[  988.786062][T24976] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  988.788877][T24976] vhci_hcd vhci_hcd.0: Device attached
[  988.901682][T24976] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5297'.
[  988.987807][T24980] /dev/nullb0: Can't open blockdev
[  989.018033][T24974] vhci_hcd: connection closed
[  989.018304][T19917] vhci_hcd: stop threads
[  989.021783][T19917] vhci_hcd: release socket
[  989.023337][T16419] usb 46-1: SetAddress Request (31) to port 0
[  989.025318][T16419] usb 46-1: new SuperSpeed USB device number 31 using vhci_hcd
[  989.028420][T19917] vhci_hcd: disconnect device
[  989.048968][T16419] usb 46-1: enqueue for inactive port 0
[  989.313755][   T61] usb 49-1: new low-speed USB device number 29 using vhci_hcd
[  989.460061][T16419] usb usb46-port1: attempt power cycle
[  989.603687][T24978] vhci_hcd: connection closed
[  989.605955][   T60] vhci_hcd: stop threads
[  989.608898][   T60] vhci_hcd: release socket
[  989.610438][   T60] vhci_hcd: disconnect device
[  989.679908][   T61] usb 49-1: enqueue for inactive port 0
[  989.940351][   T61] vhci_hcd: vhci_device speed not set
[  990.771941][T16419] usb usb46-port1: unable to enumerate USB device
[  991.522480][   T53] vhci_hcd: vhci_device speed not set
[  991.703897][T25019] lo speed is unknown, defaulting to 1000
[  991.818417][T25021] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  991.820483][T25021] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  991.823974][T25021] vhci_hcd vhci_hcd.0: Device attached
[  991.825158][T25025] ip6t_rpfilter: unknown options
[  991.833601][T25025] netlink: 'syz.3.5310': attribute type 39 has an invalid length.
[  992.114656][T16419] usb 50-1: SetAddress Request (23) to port 0
[  992.116726][T16419] usb 50-1: new SuperSpeed USB device number 23 using vhci_hcd
[  992.380492][T25022] vhci_hcd: connection reset by peer
[  992.382477][   T72] vhci_hcd: stop threads
[  992.384088][   T72] vhci_hcd: release socket
[  992.385972][   T72] vhci_hcd: disconnect device
[  992.458754][T25039] infiniband syz1: set down
[  992.462545][T25039] infiniband syz1: added syz_tun
[  992.475891][ T1416] ieee802154 phy0 wpan0: encryption failed: -22
[  992.496108][T25039] RDS/IB: syz1: added
[  992.497510][T25039] smc: adding ib device syz1 with port count 1
[  992.499525][T25039] smc:    ib device syz1 port 1 has no pnetid
[  992.528541][T25040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5320'.
[  992.946318][T25059] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5313'.
[  993.056396][T25058] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  993.058472][T25058] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  993.061172][T25058] vhci_hcd vhci_hcd.0: Device attached
[  993.186094][T25065] lo speed is unknown, defaulting to 1000
[  993.455536][ T6530] usb 47-1: new low-speed USB device number 38 using vhci_hcd
[  993.715278][T25062] vhci_hcd: connection reset by peer
[  993.747221][   T13] vhci_hcd: stop threads
[  993.749204][   T13] vhci_hcd: release socket
[  993.752047][   T13] vhci_hcd: disconnect device
[  994.290275][T25079] lo speed is unknown, defaulting to 1000
[  994.633390][T25092] tipc: Started in network mode
[  994.635579][T25092] tipc: Node identity ac14142f, cluster identity 4711
[  994.638864][T25092] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  995.150040][T25096] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  995.152512][T25096] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  995.156169][T25096] vhci_hcd vhci_hcd.0: Device attached
[  995.443138][T25104] kvm: kvm [25103]: vcpu0, guest rIP: 0xf000 Unhandled WRMSR(0x40000074) = 0x1ff0008000000
[  995.481323][T25112] FAULT_INJECTION: forcing a failure.
[  995.481323][T25112] name failslab, interval 1, probability 0, space 0, times 0
[  995.485107][T25112] CPU: 3 UID: 0 PID: 25112 Comm: syz.3.5328 Not tainted syzkaller #0 PREEMPT(full) 
[  995.485123][T25112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  995.485130][T25112] Call Trace:
[  995.485135][T25112]  <TASK>
[  995.485139][T25112]  dump_stack_lvl+0x16c/0x1f0
[  995.485156][T25112]  should_fail_ex+0x512/0x640
[  995.485174][T25112]  ? kmem_cache_alloc_node_noprof+0x65/0x770
[  995.485187][T25112]  should_failslab+0xc2/0x120
[  995.485203][T25112]  kmem_cache_alloc_node_noprof+0x78/0x770
[  995.485214][T25112]  ? __alloc_skb+0x2b2/0x380
[  995.485235][T25112]  ? __alloc_skb+0x2b2/0x380
[  995.485251][T25112]  ? __pfx_netlink_insert+0x10/0x10
[  995.485261][T25112]  __alloc_skb+0x2b2/0x380
[  995.485278][T25112]  ? __pfx___alloc_skb+0x10/0x10
[  995.485295][T25112]  ? netlink_autobind.isra.0+0x158/0x370
[  995.485310][T25112]  netlink_alloc_large_skb+0x69/0x140
[  995.485322][T25112]  netlink_sendmsg+0x698/0xdd0
[  995.485336][T25112]  ? __pfx_netlink_sendmsg+0x10/0x10
[  995.485349][T25112]  ? aa_sock_msg_perm.constprop.0+0x100/0x1d0
[  995.485368][T25112]  ____sys_sendmsg+0xa98/0xc70
[  995.485381][T25112]  ? steal_rbio+0x610/0x680
[  995.485395][T25112]  ? __pfx_____sys_sendmsg+0x10/0x10
[  995.485408][T25112]  ? get_compat_msghdr+0x11a/0x170
[  995.485432][T25112]  ___sys_sendmsg+0x134/0x1d0
[  995.485443][T25112]  ? __pfx____sys_sendmsg+0x10/0x10
[  995.485468][T25112]  ? find_held_lock+0x2b/0x80
[  995.485489][T25112]  __sys_sendmsg+0x16d/0x220
[  995.485499][T25112]  ? __pfx___sys_sendmsg+0x10/0x10
[  995.485515][T25112]  ? rcu_is_watching+0x12/0xc0
[  995.485530][T25112]  __do_fast_syscall_32+0x7c/0x300
[  995.485545][T25112]  do_fast_syscall_32+0x32/0x80
[  995.485563][T25112]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  995.485577][T25112] RIP: 0023:0xf70ed579
[  995.485585][T25112] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  995.485596][T25112] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  995.485607][T25112] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001200
[  995.485614][T25112] RDX: 0000000004000010 RSI: 0000000000000000 RDI: 0000000000000000
[  995.485621][T25112] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  995.485627][T25112] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  995.485633][T25112] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  995.485647][T25112]  </TASK>
[  995.619818][   T10] libceph: connect (1)[c::]:6789 error -13
[  995.622193][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  995.658898][   T40] kauditd_printk_skb: 52 callbacks suppressed
[  995.658910][   T40] audit: type=1804 audit(1761186060.343:5012): pid=25123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.5333" name="/newroot/385/file0" dev="tmpfs" ino=2322 res=1 errno=0
[  995.727141][T25097] vhci_hcd: connection closed
[  995.727339][T19917] vhci_hcd: stop threads
[  995.730503][T19917] vhci_hcd: release socket
[  995.731995][T19917] vhci_hcd: disconnect device
[  995.736265][T25125] netlink: 'syz.3.5332': attribute type 1 has an invalid length.
[  995.739432][T25125] netlink: 'syz.3.5332': attribute type 2 has an invalid length.
[  996.029459][   T10] libceph: connect (1)[c::]:6789 error -13
[  996.031500][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  996.163950][T25135] rdma_rxe: rxe_newlink: failed to add syz_tun
[  996.453351][T25117] ceph: No mds server is up or the cluster is laggy
[  996.458839][T25134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5334'.
[  997.200591][T16419] usb 50-1: device descriptor read/8, error -110
[  997.344564][T25167] FAULT_INJECTION: forcing a failure.
[  997.344564][T25167] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  997.349908][T25167] CPU: 0 UID: 0 PID: 25167 Comm: syz.6.5339 Not tainted syzkaller #0 PREEMPT(full) 
[  997.349933][T25167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  997.349945][T25167] Call Trace:
[  997.349951][T25167]  <TASK>
[  997.349959][T25167]  dump_stack_lvl+0x16c/0x1f0
[  997.349984][T25167]  should_fail_ex+0x512/0x640
[  997.350014][T25167]  _copy_from_user+0x2e/0xd0
[  997.350042][T25167]  do_seccomp+0xcb9/0x2640
[  997.350066][T25167]  ? __fget_files+0x20e/0x3c0
[  997.350082][T25167]  ? handle_mm_fault+0x240/0xd10
[  997.350110][T25167]  ? __pfx_do_seccomp+0x10/0x10
[  997.350132][T25167]  ? fput+0x9b/0xd0
[  997.350155][T25167]  ? ksys_write+0x1ac/0x250
[  997.350174][T25167]  ? __pfx_ksys_write+0x10/0x10
[  997.350194][T25167]  ? rcu_is_watching+0x12/0xc0
[  997.350217][T25167]  __do_fast_syscall_32+0x7c/0x300
[  997.350241][T25167]  do_fast_syscall_32+0x32/0x80
[  997.350262][T25167]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  997.350284][T25167] RIP: 0023:0xf70ed579
[  997.350298][T25167] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  997.350314][T25167] RSP: 002b:00000000f54bc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000162
[  997.350332][T25167] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000007
[  997.350344][T25167] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000
[  997.350355][T25167] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  997.350366][T25167] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  997.350376][T25167] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  997.350401][T25167]  </TASK>
[  997.625156][T25173] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[  997.642022][T16419] usb usb50-port1: attempt power cycle
[  997.713689][T25177] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  997.715745][T25177] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  997.718178][T25177] vhci_hcd vhci_hcd.0: Device attached
[  997.752453][T25177] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5343'.
[  997.961688][   T10] usb 45-1: new low-speed USB device number 30 using vhci_hcd
[  998.222729][T16419] usb usb50-port1: unable to enumerate USB device
[  998.522533][T25178] vhci_hcd: connection reset by peer
[  998.527741][   T60] vhci_hcd: stop threads
[  998.529314][   T60] vhci_hcd: release socket
[  998.531093][   T60] vhci_hcd: disconnect device
[  998.562382][ T6530] vhci_hcd: vhci_device speed not set
[  999.657867][T25199] lo speed is unknown, defaulting to 1000
[ 1000.215398][T25206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5351'.
[ 1000.674595][T25216] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[ 1000.677464][T25216] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1000.694782][T25216] vhci_hcd vhci_hcd.0: Device attached
[ 1000.955604][T16419] usb 44-1: SetAddress Request (43) to port 0
[ 1000.958274][T16419] usb 44-1: new SuperSpeed USB device number 43 using vhci_hcd
[ 1001.816756][T25217] vhci_hcd: connection reset by peer
[ 1001.818739][   T12] vhci_hcd: stop threads
[ 1001.820115][   T12] vhci_hcd: release socket
[ 1001.821712][   T12] vhci_hcd: disconnect device
[ 1002.051564][T25236] input: syz0 as /devices/virtual/input/input69
[ 1002.085760][T25233] lo speed is unknown, defaulting to 1000
[ 1002.447494][T25242] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1002.553618][  T842] Process accounting resumed
[ 1002.688887][T25246] wireguard0: entered promiscuous mode
[ 1002.690673][T25246] wireguard0: entered allmulticast mode
[ 1003.118655][   T10] vhci_hcd: vhci_device speed not set
[ 1004.060914][T25246] Process accounting resumed
[ 1004.106493][T25256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5358'.
[ 1004.109629][T25256] Unsupported xt match
[ 1004.109639][T25256] unable to load match
[ 1004.350302][  T842] usb 10-1: new high-speed USB device number 44 using dummy_hcd
[ 1004.511925][  T842] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1004.515543][  T842] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1004.519074][  T842] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1004.527584][  T842] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1004.530605][  T842] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1004.533137][  T842] usb 10-1: Product: syz
[ 1004.534488][  T842] usb 10-1: Manufacturer: syz
[ 1004.535986][  T842] usb 10-1: SerialNumber: syz
[ 1004.538630][  T842] usb 10-1: config 0 descriptor??
[ 1004.541749][T25256] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1004.578461][T25268] FAULT_INJECTION: forcing a failure.
[ 1004.578461][T25268] name failslab, interval 1, probability 0, space 0, times 0
[ 1004.583063][T25268] CPU: 3 UID: 0 PID: 25268 Comm: syz.6.5366 Not tainted syzkaller #0 PREEMPT(full) 
[ 1004.583080][T25268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 1004.583087][T25268] Call Trace:
[ 1004.583091][T25268]  <TASK>
[ 1004.583096][T25268]  dump_stack_lvl+0x16c/0x1f0
[ 1004.583113][T25268]  should_fail_ex+0x512/0x640
[ 1004.583131][T25268]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[ 1004.583145][T25268]  should_failslab+0xc2/0x120
[ 1004.583161][T25268]  kmem_cache_alloc_noprof+0x75/0x6e0
[ 1004.583172][T25268]  ? __kernfs_new_node+0xd2/0x8e0
[ 1004.583190][T25268]  ? __kernfs_new_node+0xd2/0x8e0
[ 1004.583203][T25268]  __kernfs_new_node+0xd2/0x8e0
[ 1004.583218][T25268]  ? kernfs_add_one+0x14e/0x840
[ 1004.583234][T25268]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1004.583252][T25268]  ? find_held_lock+0x2b/0x80
[ 1004.583265][T25268]  ? kernfs_root+0xee/0x2a0
[ 1004.583282][T25268]  kernfs_new_node+0x13c/0x1e0
[ 1004.583301][T25268]  kernfs_create_link+0xcc/0x240
[ 1004.583314][T25268]  sysfs_do_create_link_sd+0x90/0x140
[ 1004.583330][T25268]  sysfs_create_link+0x61/0xc0
[ 1004.583344][T25268]  device_add+0x50a/0x1aa0
[ 1004.583363][T25268]  ? __pfx_device_add+0x10/0x10
[ 1004.583382][T25268]  ? kfree_const+0x55/0x60
[ 1004.583396][T25268]  device_create_groups_vargs+0x1f8/0x270
[ 1004.583416][T25268]  device_create+0xed/0x130
[ 1004.583438][T25268]  ? __pfx_device_create+0x10/0x10
[ 1004.583457][T25268]  ? do_init_timer+0xc9/0x110
[ 1004.583471][T25268]  ? ieee80211_roc_setup+0x136/0x270
[ 1004.583483][T25268]  ? ieee80211_alloc_hw_nm+0x231/0x22b0
[ 1004.583500][T25268]  mac80211_hwsim_new_radio+0x36a/0x50b0
[ 1004.583518][T25268]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1004.583539][T25268]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1004.583555][T25268]  hwsim_new_radio_nl+0xba2/0x1330
[ 1004.583568][T25268]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1004.583584][T25268]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[ 1004.583600][T25268]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[ 1004.583617][T25268]  genl_family_rcv_msg_doit+0x209/0x2f0
[ 1004.583632][T25268]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1004.583651][T25268]  ? bpf_lsm_capable+0x9/0x10
[ 1004.583666][T25268]  ? security_capable+0x7e/0x260
[ 1004.583682][T25268]  ? ns_capable+0xd7/0x110
[ 1004.583696][T25268]  genl_rcv_msg+0x55c/0x800
[ 1004.583711][T25268]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1004.583725][T25268]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1004.583747][T25268]  netlink_rcv_skb+0x158/0x420
[ 1004.583763][T25268]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1004.583781][T25268]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1004.583804][T25268]  ? netlink_deliver_tap+0x1ae/0xd30
[ 1004.583832][T25268]  genl_rcv+0x28/0x40
[ 1004.583850][T25268]  netlink_unicast+0x5aa/0x870
[ 1004.583870][T25268]  ? __pfx_netlink_unicast+0x10/0x10
[ 1004.583894][T25268]  netlink_sendmsg+0x8c8/0xdd0
[ 1004.583918][T25268]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1004.583938][T25268]  ? aa_sock_msg_perm.constprop.0+0x100/0x1d0
[ 1004.583958][T25268]  ____sys_sendmsg+0xa98/0xc70
[ 1004.583975][T25268]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1004.583988][T25268]  ? get_compat_msghdr+0x11a/0x170
[ 1004.584012][T25268]  ___sys_sendmsg+0x134/0x1d0
[ 1004.584024][T25268]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1004.584049][T25268]  ? find_held_lock+0x2b/0x80
[ 1004.584070][T25268]  __sys_sendmsg+0x16d/0x220
[ 1004.584081][T25268]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1004.584098][T25268]  ? rcu_is_watching+0x12/0xc0
[ 1004.584113][T25268]  __do_fast_syscall_32+0x7c/0x300
[ 1004.584128][T25268]  do_fast_syscall_32+0x32/0x80
[ 1004.584141][T25268]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1004.584156][T25268] RIP: 0023:0xf70ed579
[ 1004.584165][T25268] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 1004.584177][T25268] RSP: 002b:00000000f54bc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[ 1004.584187][T25268] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140
[ 1004.584195][T25268] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1004.584201][T25268] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1004.584208][T25268] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 1004.584214][T25268] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1004.584247][T25268]  </TASK>
[ 1004.747212][T25256] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1004.955875][T25256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5358'.
[ 1004.959483][ T6530] usb 10-1: USB disconnect, device number 44
[ 1005.008653][T25272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5367'.
[ 1005.441622][T25285] erspan0: entered promiscuous mode
[ 1005.490107][T25287] FAULT_INJECTION: forcing a failure.
[ 1005.490107][T25287] name failslab, interval 1, probability 0, space 0, times 0
[ 1005.494705][T25287] CPU: 0 UID: 0 PID: 25287 Comm: syz.6.5372 Not tainted syzkaller #0 PREEMPT(full) 
[ 1005.494722][T25287] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 1005.494729][T25287] Call Trace:
[ 1005.494733][T25287]  <TASK>
[ 1005.494738][T25287]  dump_stack_lvl+0x16c/0x1f0
[ 1005.494754][T25287]  should_fail_ex+0x512/0x640
[ 1005.494771][T25287]  ? __kvmalloc_node_noprof+0x12e/0x9c0
[ 1005.494787][T25287]  should_failslab+0xc2/0x120
[ 1005.494802][T25287]  __kvmalloc_node_noprof+0x141/0x9c0
[ 1005.494816][T25287]  ? nf_hook_entries_grow+0x28f/0x860
[ 1005.494838][T25287]  ? nf_hook_entries_grow+0x28f/0x860
[ 1005.494854][T25287]  nf_hook_entries_grow+0x28f/0x860
[ 1005.494877][T25287]  __nf_register_net_hook+0x1cd/0x730
[ 1005.494890][T25287]  nf_register_net_hook+0x109/0x160
[ 1005.494901][T25287]  nf_register_net_hooks+0x5d/0xd0
[ 1005.494913][T25287]  nf_defrag_ipv4_enable+0xb8/0x120
[ 1005.494926][T25287]  nf_ct_netns_do_get+0x31d/0x620
[ 1005.494939][T25287]  ? __pfx_nf_ct_netns_do_get+0x10/0x10
[ 1005.494950][T25287]  ? find_held_lock+0x2b/0x80
[ 1005.494963][T25287]  ? net_generic+0xea/0x2a0
[ 1005.494979][T25287]  nf_ct_netns_get+0x5b/0x150
[ 1005.494990][T25287]  nft_synproxy_do_init+0x2a5/0x5c0
[ 1005.495006][T25287]  nf_tables_newrule+0xea9/0x28f0
[ 1005.495023][T25287]  ? __pfx_nft_synproxy_init+0x10/0x10
[ 1005.495041][T25287]  ? __pfx_nf_tables_newrule+0x10/0x10
[ 1005.495063][T25287]  ? __nla_parse+0x40/0x60
[ 1005.495077][T25287]  nfnetlink_rcv_batch+0x190d/0x2350
[ 1005.495100][T25287]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[ 1005.495118][T25287]  ? __local_bh_enable_ip+0xa4/0x120
[ 1005.495131][T25287]  ? __dev_queue_xmit+0xaf1/0x4490
[ 1005.495146][T25287]  ? __dev_queue_xmit+0xb12/0x4490
[ 1005.495168][T25287]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1005.495197][T25287]  ? __nla_parse+0x40/0x60
[ 1005.495210][T25287]  nfnetlink_rcv+0x3c1/0x430
[ 1005.495225][T25287]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1005.495244][T25287]  netlink_unicast+0x5aa/0x870
[ 1005.495258][T25287]  ? __pfx_netlink_unicast+0x10/0x10
[ 1005.495275][T25287]  netlink_sendmsg+0x8c8/0xdd0
[ 1005.495288][T25287]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1005.495302][T25287]  ? aa_sock_msg_perm.constprop.0+0x100/0x1d0
[ 1005.495321][T25287]  ____sys_sendmsg+0xa98/0xc70
[ 1005.495337][T25287]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1005.495350][T25287]  ? get_compat_msghdr+0x11a/0x170
[ 1005.495378][T25287]  ___sys_sendmsg+0x134/0x1d0
[ 1005.495390][T25287]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1005.495415][T25287]  ? find_held_lock+0x2b/0x80
[ 1005.495436][T25287]  __sys_sendmsg+0x16d/0x220
[ 1005.495446][T25287]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1005.495463][T25287]  ? rcu_is_watching+0x12/0xc0
[ 1005.495477][T25287]  __do_fast_syscall_32+0x7c/0x300
[ 1005.495492][T25287]  do_fast_syscall_32+0x32/0x80
[ 1005.495505][T25287]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1005.495520][T25287] RIP: 0023:0xf70ed579
[ 1005.495529][T25287] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 1005.495540][T25287] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[ 1005.495550][T25287] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[ 1005.495558][T25287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1005.495564][T25287] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1005.495570][T25287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 1005.495577][T25287] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1005.495591][T25287]  </TASK>
[ 1005.597841][T25288] lo speed is unknown, defaulting to 1000
[ 1006.295006][T16419] usb 44-1: device descriptor read/8, error -110
[ 1006.336770][T25304] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[ 1006.339444][T25304] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1006.344560][T25304] vhci_hcd vhci_hcd.0: Device attached
[ 1006.412056][T25307] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5376'.
[ 1006.817280][T25315] netlink: set zone limit has 8 unknown bytes
[ 1006.821118][T16419] usb usb44-port1: attempt power cycle
[ 1006.824462][T25315] tipc: Started in network mode
[ 1006.826047][T25315] tipc: Node identity 1641e90da2d7, cluster identity 4711
[ 1006.828452][T25315] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1006.843065][T25315] syzkaller0: entered promiscuous mode
[ 1006.845037][T25315] syzkaller0: entered allmulticast mode
[ 1006.862124][T25315] tipc: Resetting bearer <eth:syzkaller0>
[ 1006.974174][T25314] tipc: Resetting bearer <eth:syzkaller0>
[ 1006.985273][T25314] tipc: Disabling bearer <eth:syzkaller0>
[ 1006.994020][T14567] usb 43-1: new low-speed USB device number 33 using vhci_hcd
[ 1007.081332][T25305] vhci_hcd: connection reset by peer
[ 1007.095185][ T1152] vhci_hcd: stop threads
[ 1007.097283][ T1152] vhci_hcd: release socket
[ 1007.099213][ T1152] vhci_hcd: disconnect device
[ 1007.935509][   T53] usb 8-1: new high-speed USB device number 35 using dummy_hcd
[ 1008.286857][   T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1008.290446][   T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1008.293524][   T53] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1008.297573][   T53] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1008.300834][   T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1008.307249][   T53] usb 8-1: config 0 descriptor??
[ 1008.719189][   T53] plantronics 0003:047F:FFFF.0046: reserved main item tag 0xd
[ 1008.725724][   T53] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1008.982892][   T53] usb 8-1: USB disconnect, device number 35
[ 1009.023538][T25361] FAULT_INJECTION: forcing a failure.
[ 1009.023538][T25361] name failslab, interval 1, probability 0, space 0, times 0
[ 1009.027429][T25361] CPU: 2 UID: 0 PID: 25361 Comm: syz.6.5392 Not tainted syzkaller #0 PREEMPT(full) 
[ 1009.027444][T25361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 1009.027451][T25361] Call Trace:
[ 1009.027455][T25361]  <TASK>
[ 1009.027460][T25361]  dump_stack_lvl+0x16c/0x1f0
[ 1009.027476][T25361]  should_fail_ex+0x512/0x640
[ 1009.027494][T25361]  ? fs_reclaim_acquire+0xae/0x150
[ 1009.027510][T25361]  should_failslab+0xc2/0x120
[ 1009.027526][T25361]  __kmalloc_noprof+0xdd/0x880
[ 1009.027544][T25361]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1009.027560][T25361]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1009.027573][T25361]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 1009.027587][T25361]  ? tomoyo_profile+0x47/0x60
[ 1009.027603][T25361]  tomoyo_path_number_perm+0x245/0x580
[ 1009.027620][T25361]  ? tomoyo_path_number_perm+0x237/0x580
[ 1009.027639][T25361]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1009.027671][T25361]  ? find_held_lock+0x2b/0x80
[ 1009.027683][T25361]  ? hook_file_ioctl_common+0x145/0x410
[ 1009.027698][T25361]  ? __fget_files+0x20e/0x3c0
[ 1009.027711][T25361]  security_file_ioctl_compat+0x9b/0x240
[ 1009.027724][T25361]  __ia32_compat_sys_ioctl+0xc3/0x370
[ 1009.027743][T25361]  __do_fast_syscall_32+0x7c/0x300
[ 1009.027758][T25361]  do_fast_syscall_32+0x32/0x80
[ 1009.027771][T25361]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1009.027785][T25361] RIP: 0023:0xf70ed579
[ 1009.027794][T25361] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 1009.027805][T25361] RSP: 002b:00000000f549b55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[ 1009.027815][T25361] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000008008640b
[ 1009.027823][T25361] RDX: 0000000080113800 RSI: 0000000000000000 RDI: 0000000000000000
[ 1009.027830][T25361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1009.027836][T25361] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 1009.027842][T25361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1009.027857][T25361]  </TASK>
[ 1009.027861][T25361] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1010.618829][T16292] usb 11-1: new full-speed USB device number 48 using dummy_hcd
[ 1010.771041][T16292] usb 11-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1010.771071][T16292] usb 11-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1010.771093][T16292] usb 11-1: config 0 interface 0 has no altsetting 0
[ 1010.771119][T16292] usb 11-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[ 1010.771141][T16292] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1010.775720][T16292] usb 11-1: config 0 descriptor??
[ 1011.066014][T25404] netlink: 'syz.3.5402': attribute type 28 has an invalid length.
[ 1011.085669][T25404] lo speed is unknown, defaulting to 1000
[ 1011.127306][T25405] netlink: 'syz.3.5402': attribute type 11 has an invalid length.
[ 1011.129925][T25405] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5402'.
[ 1011.138159][T25405] netlink: 'syz.3.5402': attribute type 40 has an invalid length.
[ 1011.189713][   T61] usb 10-1: new high-speed USB device number 45 using dummy_hcd
[ 1011.206827][T16292] hid-steam 0003:28DE:1102.0047: unknown main item tag 0x0
[ 1011.209090][T16292] hid-steam 0003:28DE:1102.0047: unknown main item tag 0x0
[ 1011.211939][T16292] hid-steam 0003:28DE:1102.0047: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.6-1/input0
[ 1011.270025][T16292] hid-steam 0003:28DE:1102.0047: Steam Controller 'XXXXXXXXXX' connected
[ 1011.275108][T16292] input: Steam Controller as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:28DE:1102.0047/input/input71
[ 1011.283462][T16292] hid-steam 0003:28DE:1102.0048: unknown main item tag 0x0
[ 1011.285988][T16292] hid-steam 0003:28DE:1102.0048: unknown main item tag 0x0
[ 1011.290883][T16292] hid-steam 0003:28DE:1102.0048: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.6-1/input0
[ 1011.320330][   T61] usb 10-1: device descriptor read/64, error -71
[ 1011.413046][ T6022] usb 11-1: USB disconnect, device number 48
[ 1011.451078][ T6022] hid-steam 0003:28DE:1102.0047: Steam Controller 'XXXXXXXXXX' disconnected
[ 1011.573752][T25410] syz.4.5407 (25410): drop_caches: 2
[ 1011.575815][T25410] syz.4.5407 (25410): drop_caches: 2
[ 1011.591028][   T61] usb 10-1: new high-speed USB device number 46 using dummy_hcd
[ 1011.720309][   T61] usb 10-1: device descriptor read/64, error -71
[ 1011.831356][   T61] usb usb10-port1: attempt power cycle
[ 1012.090917][T14567] vhci_hcd: vhci_device speed not set
[ 1012.171253][   T61] usb 10-1: new high-speed USB device number 47 using dummy_hcd
[ 1012.192056][   T61] usb 10-1: device descriptor read/8, error -71
[ 1012.461548][   T61] usb 10-1: new high-speed USB device number 48 using dummy_hcd
[ 1012.486367][   T61] usb 10-1: device descriptor read/8, error -71
[ 1012.593439][   T61] usb usb10-port1: unable to enumerate USB device
[ 1013.523852][T16419] usb usb44-port1: unable to enumerate USB device
[ 1013.525643][T25437] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[ 1014.112241][T25443] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[ 1014.114907][T25443] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1014.119694][T25443] vhci_hcd vhci_hcd.0: Device attached
[ 1014.224074][T25446] fuse: Bad value for 'fd'
[ 1014.506519][T16419] usb 50-1: SetAddress Request (27) to port 0
[ 1014.510798][T16419] usb 50-1: new SuperSpeed USB device number 27 using vhci_hcd
[ 1014.786882][T25456] lo speed is unknown, defaulting to 1000
[ 1014.807734][T25444] vhci_hcd: connection reset by peer
[ 1014.809775][   T60] vhci_hcd: stop threads
[ 1014.811157][   T60] vhci_hcd: release socket
[ 1014.812579][   T60] vhci_hcd: disconnect device
[ 1016.320833][T25484] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[ 1016.645499][T25489] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[ 1017.355082][T25497] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[ 1017.357169][T25497] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1017.360086][T25497] vhci_hcd vhci_hcd.0: Device attached
[ 1017.649097][   T53] usb 44-1: SetAddress Request (47) to port 0
[ 1017.651685][   T53] usb 44-1: new SuperSpeed USB device number 47 using vhci_hcd
[ 1017.965663][T25498] vhci_hcd: connection reset by peer
[ 1017.968415][T19917] vhci_hcd: stop threads
[ 1017.970213][T19917] vhci_hcd: release socket
[ 1017.972032][T19917] vhci_hcd: disconnect device
[ 1018.865474][T25525] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[ 1018.868188][T25525] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1018.955750][T25525] vhci_hcd vhci_hcd.0: Device attached
[ 1019.360818][T21938] usb 46-1: SetAddress Request (35) to port 0
[ 1019.363176][T21938] usb 46-1: new SuperSpeed USB device number 35 using vhci_hcd
[ 1019.631192][T16419] usb 50-1: device descriptor read/8, error -110
[ 1019.696960][T25527] vhci_hcd: connection reset by peer
[ 1019.699923][   T12] vhci_hcd: stop threads
[ 1019.703699][   T12] vhci_hcd: release socket
[ 1019.705347][   T12] vhci_hcd: disconnect device
[ 1020.023903][T16419] usb usb50-port1: attempt power cycle
[ 1020.688108][T16419] usb usb50-port1: unable to enumerate USB device
[ 1021.579303][T25550] 9pnet_virtio: no channels available for device syz
[ 1021.899145][T25558] lo speed is unknown, defaulting to 1000
[ 1022.488927][T25565] fuse: Bad value for 'fd'
[ 1022.610817][T25570] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[ 1022.791430][   T53] usb 44-1: device descriptor read/8, error -110
[ 1022.825869][T25575] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[ 1023.200448][   T53] usb usb44-port1: attempt power cycle
[ 1023.653339][T25582] bridge_slave_0: left allmulticast mode
[ 1023.655257][T25582] bridge_slave_0: left promiscuous mode
[ 1023.657592][T25582] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1023.694210][T25582] bridge_slave_1: left allmulticast mode
[ 1023.696253][T25582] bridge_slave_1: left promiscuous mode
[ 1023.701194][T25590] netlink: 'syz.6.5450': attribute type 10 has an invalid length.
[ 1023.703768][T25582] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1023.712138][T25582] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1023.714548][T25582] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1023.721004][T25582] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1023.723503][T25582] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1023.728303][T25582] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1023.735024][T25590] team0: Device ipvlan1 failed to register rx_handler
[ 1023.768859][   T53] usb usb44-port1: unable to enumerate USB device
[ 1023.807778][T25591] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[ 1023.810433][T25591] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1023.815567][T25591] vhci_hcd vhci_hcd.0: Device attached
[ 1024.097099][   T10] usb 48-1: SetAddress Request (42) to port 0
[ 1024.353072][   T10] usb 48-1: new SuperSpeed USB device number 42 using vhci_hcd
[ 1024.437827][T21938] usb 46-1: device descriptor read/8, error -110
[ 1024.468264][T25595] vhci_hcd: connection closed
[ 1024.469974][   T12] vhci_hcd: stop threads
[ 1024.474276][   T12] vhci_hcd: release socket
[ 1024.477090][   T12] vhci_hcd: disconnect device
[ 1024.788018][   T10] usb 48-1: enqueue for inactive port 0
[ 1024.829586][T21938] usb usb46-port1: attempt power cycle
[ 1024.970956][   T40] audit: type=1326 audit(1761186089.613:5013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25620 comm="syz.6.5456" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[ 1024.981870][   T40] audit: type=1326 audit(1761186089.613:5014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25620 comm="syz.6.5456" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[ 1024.988782][   T40] audit: type=1326 audit(1761186089.613:5015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25620 comm="syz.6.5456" exe="/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf70ed579 code=0x7ffc0000
[ 1024.995607][   T40] audit: type=1326 audit(1761186089.613:5016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25620 comm="syz.6.5456" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[ 1025.002740][   T40] audit: type=1326 audit(1761186089.613:5017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25620 comm="syz.6.5456" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[ 1025.009834][   T40] audit: type=1326 audit(1761186089.613:5018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25620 comm="syz.6.5456" exe="/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf70ed579 code=0x7ffc0000
[ 1025.023674][   T40] audit: type=1326 audit(1761186089.623:5019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25620 comm="syz.6.5456" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[ 1025.032189][   T40] audit: type=1326 audit(1761186089.633:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25620 comm="syz.6.5456" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ed579 code=0x7ffc0000
[ 1025.039644][   T40] audit: type=1326 audit(1761186089.633:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25620 comm="syz.6.5456" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[ 1025.046836][   T40] audit: type=1326 audit(1761186089.633:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25620 comm="syz.6.5456" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000
[ 1025.208191][   T10] usb usb48-port1: attempt power cycle
[ 1025.348800][   T53] usb 11-1: new high-speed USB device number 49 using dummy_hcd
[ 1025.400953][T25629] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[ 1025.403134][T25629] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1025.407710][T25629] vhci_hcd vhci_hcd.0: Device attached
[ 1025.418729][T21938] usb usb46-port1: unable to enumerate USB device
[ 1025.539139][   T53] usb 11-1: Using ep0 maxpacket: 16
[ 1025.559305][   T10] usb 48-1: SetAddress Request (44) to port 0
[ 1025.561845][   T53] usb 11-1: New USB device found, idVendor=2717, idProduct=4106, bcdDevice=28.92
[ 1025.561872][   T10] usb 48-1: new SuperSpeed USB device number 44 using vhci_hcd
[ 1025.565579][   T53] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1025.565601][   T53] usb 11-1: Product: syz
[ 1025.565615][   T53] usb 11-1: Manufacturer: syz
[ 1025.565627][   T53] usb 11-1: SerialNumber: syz
[ 1025.693534][   T53] usb 11-1: config 0 descriptor??
[ 1025.773109][T25634] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[ 1025.901148][   T53] usb 11-1: USB disconnect, device number 49
[ 1025.966306][T25638] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1026.213124][T25630] vhci_hcd: connection reset by peer
[ 1026.215622][T19917] vhci_hcd: stop threads
[ 1026.217268][T19917] vhci_hcd: release socket
[ 1026.222505][T19917] vhci_hcd: disconnect device
[ 1026.683453][T25640] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1026.689105][T25640] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1026.692663][T25640] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1027.094952][T25657] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[ 1027.096994][T25657] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1027.099581][T25657] vhci_hcd vhci_hcd.0: Device attached
[ 1027.775144][T25659] vhci_hcd: connection closed
[ 1027.775522][  T220] vhci_hcd: stop threads
[ 1027.779814][  T220] vhci_hcd: release socket
[ 1027.782137][  T220] vhci_hcd: disconnect device
[ 1027.801683][T25666] netlink: 'syz.3.5468': attribute type 4 has an invalid length.
[ 1027.805832][T25666] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5468'.
[ 1027.913855][T25670] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5467'.
[ 1027.957300][T25674] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[ 1028.348551][T25680] vlan2: entered promiscuous mode
[ 1028.350156][T25680] macvtap0: entered promiscuous mode
[ 1028.543148][T25686] bridge_slave_0: left promiscuous mode
[ 1028.547227][T25686] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1028.557978][T25686] bridge_slave_1: left allmulticast mode
[ 1028.560030][T25686] bridge_slave_1: left promiscuous mode
[ 1028.562382][T25686] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1028.568728][T25686] team0: Port device team_slave_0 removed
[ 1028.571674][T25686] team0: Port device team_slave_1 removed
[ 1028.574041][T25686] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1028.584667][T25686] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1028.591049][T25686] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1028.951184][T25700] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[ 1028.953787][T25700] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1028.956823][T25700] vhci_hcd vhci_hcd.0: Device attached
[ 1028.992301][T25700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5476'.
[ 1029.344108][T14567] usb 45-1: new low-speed USB device number 31 using vhci_hcd
[ 1029.779403][T25701] vhci_hcd: connection reset by peer
[ 1029.782597][   T60] vhci_hcd: stop threads
[ 1029.786244][   T60] vhci_hcd: release socket
[ 1029.788445][   T60] vhci_hcd: disconnect device
[ 1030.606495][   T10] usb 48-1: device descriptor read/8, error -110
[ 1031.066484][ T6530] usb 10-1: new high-speed USB device number 49 using dummy_hcd
[ 1031.216590][ T6530] usb 10-1: Using ep0 maxpacket: 8
[ 1031.219901][ T6530] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1031.223803][ T6530] usb 10-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1031.229287][ T6530] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1031.232137][ T6530] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1031.235943][ T6530] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1031.241344][ T6530] usb 10-1: config 0 descriptor??
[ 1031.246794][ T6530] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 1031.347577][   T10] usb usb48-port1: unable to enumerate USB device
[ 1031.530833][T25732] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[ 1031.532972][T25732] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1031.535921][T25732] vhci_hcd vhci_hcd.0: Device attached
[ 1031.757393][   T10] usb 8-1: new high-speed USB device number 36 using dummy_hcd
[ 1031.937702][   T10] usb 8-1: Using ep0 maxpacket: 8
[ 1031.945131][   T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1031.949466][   T10] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1031.953053][   T10] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1031.956798][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1031.962564][   T10] usb 8-1: config 0 descriptor??
[ 1032.223321][T25735] vhci_hcd: connection closed
[ 1032.226533][   T60] vhci_hcd: stop threads
[ 1032.230201][   T60] vhci_hcd: release socket
[ 1032.232371][   T60] vhci_hcd: disconnect device
[ 1033.107197][T25750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5482'.
[ 1033.852769][   T61] usb 10-1: USB disconnect, device number 49
[ 1034.007313][T25764] fuse: Unknown parameter '0x00000000000000040x0000000000000004'
[ 1034.109429][T25768] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[ 1034.111617][T25768] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1034.115119][T25768] vhci_hcd vhci_hcd.0: Device attached
[ 1034.141189][T25768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5487'.
[ 1034.839541][ T7953] usb 8-1: USB disconnect, device number 36
[ 1034.918614][T25776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5490'.
[ 1034.936514][T25769] vhci_hcd: connection reset by peer
[ 1034.939073][T25776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5490'.
[ 1034.966675][   T60] vhci_hcd: stop threads
[ 1034.968463][   T60] vhci_hcd: release socket
[ 1034.971042][   T60] vhci_hcd: disconnect device
[ 1035.012090][T25776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5490'.
[ 1035.015398][T25776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5490'.
[ 1035.023737][T25776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5490'.
[ 1035.040662][T25776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5490'.
[ 1035.044476][T25777] netlink: 'syz.3.5490': attribute type 1 has an invalid length.
[ 1035.047194][T14567] vhci_hcd: vhci_device speed not set
[ 1035.249031][T25783] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[ 1035.251065][T25783] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1035.257099][T25783] vhci_hcd vhci_hcd.0: Device attached
[ 1035.523051][ T7953] usb 48-1: SetAddress Request (46) to port 0
[ 1035.525117][ T7953] usb 48-1: new SuperSpeed USB device number 46 using vhci_hcd
[ 1035.752805][ T6022] usb 9-1: new high-speed USB device number 63 using dummy_hcd
[ 1035.830791][T25784] vhci_hcd: connection reset by peer
[ 1035.833036][   T12] vhci_hcd: stop threads
[ 1035.840525][   T12] vhci_hcd: release socket
[ 1035.842315][   T12] vhci_hcd: disconnect device
[ 1035.923287][ T6022] usb 9-1: Using ep0 maxpacket: 8
[ 1035.926152][ T6022] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1035.929644][ T6022] usb 9-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1035.934412][ T6022] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1035.936470][ T6022] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1035.939395][ T6022] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1035.943338][ T6022] usb 9-1: config 0 descriptor??
[ 1035.946790][ T6022] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1036.318992][T22451] usb usb46-port1: attempt power cycle
[ 1036.582296][T25806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5495'.
[ 1036.905161][T22451] usb usb46-port1: unable to enumerate USB device
[ 1037.715792][T25822] lo speed is unknown, defaulting to 1000
[ 1038.122762][T25832] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[ 1038.125186][T25832] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1038.128466][T25832] vhci_hcd vhci_hcd.0: Device attached
[ 1038.391794][T25837] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[ 1038.394063][T25837] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1038.396185][T21938] usb 50-1: SetAddress Request (31) to port 0
[ 1038.397089][T25837] vhci_hcd vhci_hcd.0: Device attached
[ 1038.427387][T21938] usb 50-1: new SuperSpeed USB device number 31 using vhci_hcd
[ 1038.460666][T25837] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5502'.
[ 1038.491425][T25833] vhci_hcd: connection reset by peer
[ 1038.499309][   T12] vhci_hcd: stop threads
[ 1038.500768][   T12] vhci_hcd: release socket
[ 1038.502359][   T12] vhci_hcd: disconnect device
[ 1038.529599][T16419] usb 9-1: USB disconnect, device number 63
[ 1038.657005][ T6530] usb 43-1: new low-speed USB device number 34 using vhci_hcd
[ 1038.809014][    C0] vcan0: j1939_tp_rxtimer: 0xffff888023a59400: rx timeout, send abort
[ 1039.176174][T25838] vhci_hcd: connection reset by peer
[ 1039.180098][   T12] vhci_hcd: stop threads
[ 1039.181905][   T12] vhci_hcd: release socket
[ 1039.186147][   T12] vhci_hcd: disconnect device
[ 1039.309796][    C0] vcan0: j1939_tp_rxtimer: 0xffff888023a5b000: rx timeout, send abort
[ 1039.313284][    C0] vcan0: j1939_tp_rxtimer: 0xffff888023a59400: abort rx timeout. Force session deactivation
[ 1039.715617][T25854] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10)
[ 1039.717714][T25854] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1039.720315][T25854] vhci_hcd vhci_hcd.0: Device attached
[ 1039.813942][    C0] vcan0: j1939_tp_rxtimer: 0xffff888023a5b000: abort rx timeout. Force session deactivation
[ 1040.978716][T25856] vhci_hcd: connection closed
[ 1040.978921][   T46] vhci_hcd: stop threads
[ 1040.981910][   T46] vhci_hcd: release socket
[ 1040.983325][   T46] vhci_hcd: disconnect device
[ 1041.105287][ T7953] usb 48-1: device descriptor read/8, error -110
[ 1041.510283][   T61] usb 8-1: new high-speed USB device number 37 using dummy_hcd
[ 1041.679052][ T7953] usb usb48-port1: attempt power cycle
[ 1041.714498][T25877] ------------[ cut here ]------------
[ 1041.716415][T25877] WARNING: CPU: 1 PID: 25877 at mm/page_alloc.c:4654 __alloc_frozen_pages_noprof+0x1f87/0x2470
[ 1041.720118][T25877] Modules linked in:
[ 1041.721497][T25877] CPU: 1 UID: 0 PID: 25877 Comm: syz.5.5512 Not tainted syzkaller #0 PREEMPT(full) 
[ 1041.725906][T25877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 1041.729214][T25877] RIP: 0010:__alloc_frozen_pages_noprof+0x1f87/0x2470
[ 1041.730528][   T61] usb 8-1: Using ep0 maxpacket: 8
[ 1041.731461][T25877] Code: 10 00 00 00 44 8b 7c 24 48 44 8b ac 24 94 00 00 00 41 89 c6 0f b6 c0 89 44 24 24 e9 75 f8 ff ff 90 0f 0b 90 e9 10 fb ff ff 90 <0f> 0b 90 e9 fb fa ff ff 48 89 ef e8 99 65 0d 00 e9 26 f1 ff ff 4c
[ 1041.740883][T25877] RSP: 0018:ffffc9000d4d77c0 EFLAGS: 00010202
[ 1041.743286][T25877] RAX: 0000000000008000 RBX: 0000000000000000 RCX: ffffc9000d4d78fc
[ 1041.746503][T25877] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd9b8
[ 1041.749701][T25877] RBP: 0000000000048cc0 R08: 0000000000007f8c R09: 0000000000004cc9
[ 1041.752853][T25877] R10: 0000000000000000 R11: ffffc9000d4d78f0 R12: ffff88803fffbb80
[ 1041.755988][T25877] R13: 1ffff92001a9af0e R14: 0000000000000000 R15: 0000000000000002
[ 1041.759077][T25877] FS:  0000000000000000(0000) GS:ffff888097912000(0063) knlGS:00000000f5494b40
[ 1041.762651][T25877] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 1041.765317][T25877] CR2: 00000000f73fb664 CR3: 000000006e392000 CR4: 0000000000352ef0
[ 1041.768442][T25877] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1041.771694][T25877] DR3: 00000000e08e000e DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1041.774849][T25877] Call Trace:
[ 1041.776212][T25877]  <TASK>
[ 1041.777428][T25877]  ? find_held_lock+0x2b/0x80
[ 1041.779348][T25877]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1041.782020][T25877]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1041.784521][T25877]  ? is_bpf_text_address+0x94/0x1a0
[ 1041.786702][T25877]  ? unwind_get_return_address+0x59/0xa0
[ 1041.789054][T25877]  ? arch_stack_walk+0xa6/0x100
[ 1041.791232][T25877]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1041.793638][T25877]  ? policy_nodemask+0xea/0x4e0
[ 1041.795593][T25877]  alloc_pages_mpol+0x1fb/0x550
[ 1041.797559][T25877]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1041.799687][T25877]  ? get_freelist+0x1a8/0x1e0
[ 1041.801703][T25877]  ? find_held_lock+0x2b/0x80
[ 1041.803642][T25877]  new_slab+0x268/0x360
[ 1041.805367][T25877]  ___slab_alloc+0xdc4/0x1ae0
[ 1041.807261][T25877]  ? xfs_init_fs_context+0x45/0x5e0
[ 1041.809353][T25877]  ? xfs_init_fs_context+0x45/0x5e0
[ 1041.811502][T25877]  ? __slab_alloc.constprop.0+0x63/0x110
[ 1041.813741][T25877]  __slab_alloc.constprop.0+0x63/0x110
[ 1041.815917][T25877]  __kmalloc_cache_noprof+0x477/0x780
[ 1041.818047][T25877]  ? xfs_init_fs_context+0x45/0x5e0
[ 1041.820120][T25877]  ? xfs_init_fs_context+0x45/0x5e0
[ 1041.822391][T25877]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1041.824760][T25877]  xfs_init_fs_context+0x45/0x5e0
[ 1041.826763][T25877]  ? __pfx_xfs_init_fs_context+0x10/0x10
[ 1041.829001][T25877]  alloc_fs_context+0x54d/0x9c0
[ 1041.831017][T25877]  path_mount+0xe1b/0x23a0
[ 1041.832803][T25877]  ? __pfx_path_mount+0x10/0x10
[ 1041.834753][T25877]  ? kmem_cache_free+0x2d4/0x6c0
[ 1041.836719][T25877]  ? putname+0x154/0x1a0
[ 1041.838422][T25877]  ? putname+0x154/0x1a0
[ 1041.840137][T25877]  ? __ia32_sys_mount+0x291/0x310
[ 1041.842187][T25877]  __ia32_sys_mount+0x291/0x310
[ 1041.844137][T25877]  ? __pfx___ia32_sys_mount+0x10/0x10
[ 1041.846263][T25877]  ? rcu_is_watching+0x12/0xc0
[ 1041.848221][T25877]  __do_fast_syscall_32+0x7c/0x300
[ 1041.850322][T25877]  do_fast_syscall_32+0x32/0x80
[ 1041.852403][T25877]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1041.855015][T25877] RIP: 0023:0xf7fe5579
[ 1041.856728][T25877] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 1041.864494][T25877] RSP: 002b:00000000f549455c EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[ 1041.867705][T25877] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000080000040
[ 1041.870777][T25877] RDX: 0000000080000080 RSI: 0000000002208004 RDI: 0000000000000000
[ 1041.873809][T25877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1041.876850][T25877] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[ 1041.879937][T25877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1041.883063][T25877]  </TASK>
[ 1041.884290][T25877] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1041.887052][T25877] CPU: 1 UID: 0 PID: 25877 Comm: syz.5.5512 Not tainted syzkaller #0 PREEMPT(full) 
[ 1041.890723][T25877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 1041.894810][T25877] Call Trace:
[ 1041.896118][T25877]  <TASK>
[ 1041.897252][T25877]  dump_stack_lvl+0x3d/0x1f0
[ 1041.899046][T25877]  vpanic+0x640/0x6f0
[ 1041.900655][T25877]  ? __alloc_frozen_pages_noprof+0x1f87/0x2470
[ 1041.903085][T25877]  panic+0xca/0xd0
[ 1041.904574][T25877]  ? __pfx_panic+0x10/0x10
[ 1041.906325][T25877]  check_panic_on_warn+0xab/0xb0
[ 1041.908298][T25877]  __warn+0xf6/0x3c0
[ 1041.909866][T25877]  ? __alloc_frozen_pages_noprof+0x1f87/0x2470
[ 1041.912270][T25877]  report_bug+0x3c3/0x580
[ 1041.913978][T25877]  ? __alloc_frozen_pages_noprof+0x1f87/0x2470
[ 1041.916401][T25877]  handle_bug+0x184/0x210
[ 1041.918079][T25877]  exc_invalid_op+0x17/0x50
[ 1041.919862][T25877]  asm_exc_invalid_op+0x1a/0x20
[ 1041.921804][T25877] RIP: 0010:__alloc_frozen_pages_noprof+0x1f87/0x2470
[ 1041.924400][T25877] Code: 10 00 00 00 44 8b 7c 24 48 44 8b ac 24 94 00 00 00 41 89 c6 0f b6 c0 89 44 24 24 e9 75 f8 ff ff 90 0f 0b 90 e9 10 fb ff ff 90 <0f> 0b 90 e9 fb fa ff ff 48 89 ef e8 99 65 0d 00 e9 26 f1 ff ff 4c
[ 1041.931835][T25877] RSP: 0018:ffffc9000d4d77c0 EFLAGS: 00010202
[ 1041.934150][T25877] RAX: 0000000000008000 RBX: 0000000000000000 RCX: ffffc9000d4d78fc
[ 1041.937114][T25877] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd9b8
[ 1041.940100][T25877] RBP: 0000000000048cc0 R08: 0000000000007f8c R09: 0000000000004cc9
[ 1041.943075][T25877] R10: 0000000000000000 R11: ffffc9000d4d78f0 R12: ffff88803fffbb80
[ 1041.946053][T25877] R13: 1ffff92001a9af0e R14: 0000000000000000 R15: 0000000000000002
[ 1041.949071][T25877]  ? find_held_lock+0x2b/0x80
[ 1041.950883][T25877]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1041.953128][T25877]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1041.955454][T25877]  ? is_bpf_text_address+0x94/0x1a0
[ 1041.957446][T25877]  ? unwind_get_return_address+0x59/0xa0
[ 1041.959566][T25877]  ? arch_stack_walk+0xa6/0x100
[ 1041.961367][T25877]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1041.963553][T25877]  ? policy_nodemask+0xea/0x4e0
[ 1041.965350][T25877]  alloc_pages_mpol+0x1fb/0x550
[ 1041.967174][T25877]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1041.969156][T25877]  ? get_freelist+0x1a8/0x1e0
[ 1041.970867][T25877]  ? find_held_lock+0x2b/0x80
[ 1041.972634][T25877]  new_slab+0x268/0x360
[ 1041.974161][T25877]  ___slab_alloc+0xdc4/0x1ae0
[ 1041.975923][T25877]  ? xfs_init_fs_context+0x45/0x5e0
[ 1041.977897][T25877]  ? xfs_init_fs_context+0x45/0x5e0
[ 1041.979897][T25877]  ? __slab_alloc.constprop.0+0x63/0x110
[ 1041.982029][T25877]  __slab_alloc.constprop.0+0x63/0x110
[ 1041.984117][T25877]  __kmalloc_cache_noprof+0x477/0x780
[ 1041.986154][T25877]  ? xfs_init_fs_context+0x45/0x5e0
[ 1041.988144][T25877]  ? xfs_init_fs_context+0x45/0x5e0
[ 1041.990124][T25877]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1041.992381][T25877]  xfs_init_fs_context+0x45/0x5e0
[ 1041.994290][T25877]  ? __pfx_xfs_init_fs_context+0x10/0x10
[ 1041.996416][T25877]  alloc_fs_context+0x54d/0x9c0
[ 1041.998306][T25877]  path_mount+0xe1b/0x23a0
[ 1042.000041][T25877]  ? __pfx_path_mount+0x10/0x10
[ 1042.001667][T25877]  ? kmem_cache_free+0x2d4/0x6c0
[ 1042.003358][T25877]  ? putname+0x154/0x1a0
[ 1042.004866][T25877]  ? putname+0x154/0x1a0
[ 1042.006395][T25877]  ? __ia32_sys_mount+0x291/0x310
[ 1042.008127][T25877]  __ia32_sys_mount+0x291/0x310
[ 1042.009804][T25877]  ? __pfx___ia32_sys_mount+0x10/0x10
[ 1042.011729][T25877]  ? rcu_is_watching+0x12/0xc0
[ 1042.013572][T25877]  __do_fast_syscall_32+0x7c/0x300
[ 1042.015592][T25877]  do_fast_syscall_32+0x32/0x80
[ 1042.017442][T25877]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1042.019424][T25877] RIP: 0023:0xf7fe5579
[ 1042.020708][T25877] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 1042.027228][T25877] RSP: 002b:00000000f549455c EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[ 1042.030292][T25877] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000080000040
[ 1042.033155][T25877] RDX: 0000000080000080 RSI: 0000000002208004 RDI: 0000000000000000
[ 1042.035726][T25877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1042.038197][T25877] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[ 1042.040657][T25877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1042.043124][T25877]  </TASK>
[ 1042.044801][T25877] Kernel Offset: disabled
[ 1042.046158][T25877] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:04:42  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000002 RBX=0000000000000000 RCX=ffffffff892b2853 RDX=ffff888023310000
RSI=ffffffff892b2860 RDI=0000000000000001 RBP=ffff8880138caa00 RSP=ffffc9000d8c7750
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=ffffc9000d8c7d58 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81bc6a41 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888097812000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000800da000 CR3=000000006e392000 CR4=00352ef0
DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff852661e0 RDI=ffffffff9adc0d60 RBP=ffffffff9adc0d20 RSP=ffffc9000d4d70d8
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=0000000000000020 R14=fffffbfff35b81fe R15=dffffc0000000000
RIP=ffffffff85266207 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888097912000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f73fb664 CR3=000000006e392000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000e08e000e 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=ffffffff95ac71d8 RBX=0000000000000001 RCX=00000000bcb84f2d RDX=0000000000000000
RSI=0000000039cc7c14 RDI=ffff888023205430 RBP=ffff888023204900 RSP=ffffc900036a6e58
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=ffff888023205430 R13=ffff888023205458 R14=0000000000000001 R15=0000000000000001
RIP=ffffffff81984909 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4c6bddd300 ffffffff 00c00000
GS =0000 ffff888097a12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000055f09046ff40 CR3=000000004ec89000 CR4=00352ef0
DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=b624ee063ac69be0 e33e51e64d0a2880 b624ee063ac69be0 e33e51e64d0a2880 b624ee063ac69be0 e33e51e64d0a2880 b624ee063ac69be0 e33e51e64d0a2880
ZMM18=fa27acde3880ec8e 5d5cee2796f3d3be fa27acde3880ec8e 5d5cee2796f3d3be fa27acde3880ec8e 5d5cee2796f3d3be fa27acde3880ec8e 5d5cee2796f3d3be
ZMM19=e731000000000000 0000000000000004 e731000000000000 0000000000000003 e731000000000000 0000000000000002 e731000000000000 0000000000000001
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 71a20b80020880c5 bc86080001000000 0806060129ba0008 000b88030008000b
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80030fffffffff02 2080808085bc8208 0001000000080606 013b8a0004000408
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0005800201c70800 08004bbc0074656e 2d74736f68762f76 65642f01ffffffff
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000408060288 030008000280030d 80020882c5bca208 0001000006080606
ZMM25=5d5cee275d5cee27 5d5cee275d5cee27 5d5cee275d5cee27 5d5cee275d5cee27 5d5cee275d5cee27 5d5cee275d5cee27 5d5cee275d5cee27 5d5cee275d5cee27
ZMM26=3880ec8e3880ec8e 3880ec8e3880ec8e 3880ec8e3880ec8e 3880ec8e3880ec8e 3880ec8e3880ec8e 3880ec8e3880ec8e 3880ec8e3880ec8e 3880ec8e3880ec8e
ZMM27=fa27acdefa27acde fa27acdefa27acde fa27acdefa27acde fa27acdefa27acde fa27acdefa27acde fa27acdefa27acde fa27acdefa27acde fa27acdefa27acde
ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=e4310000e4310000 e4310000e4310000 e4310000e4310000 e4310000e4310000 e4310000e4310000 e4310000e4310000 e4310000e4310000 e4310000e4310000
info registers vcpu 3

CPU#3
RAX=00000000013d3b91 RBX=0000000000000003 RCX=ffffffff8b5d12a9 RDX=0000000000000000
RSI=ffffffff8da26dd3 RDI=ffffffff8bf071c0 RBP=ffffed10037e1000 RSP=ffffc9000048fde8
R8 =0000000000000001 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000001
R12=0000000000000003 R13=ffff88801bf08000 R14=ffffffff90822ad0 R15=0000000000000000
RIP=ffffffff8b5cfd5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888097b12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7384558 CR3=000000004875f000 CR4=00352ef0
DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000